Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/7cfc68-47b8-4628-b42f-9529bccbbb14/1/LrTU3kCE88jhpPbU01U5B6sMgIo.mft
File: LrTU3kCE88jhpPbU01U5B6sMgIo.mft (raw, json)
Hash identifier: JWv/X87WWSGbt28aYvJuyg370b68ggEbuwXRJHJaTNk=
Subject key identifier: 13:0F:70:5B:16:F9:C3:29:C6:D2:41:4B:6E:F9:B8:AD:76:15:55:41
Authority key identifier: 2E:B4:D4:DE:40:84:F3:C8:E1:A4:F6:D4:D3:55:39:07:AB:0C:80:8A
Certificate issuer: /CN=2eb4d4de4084f3c8e1a4f6d4d3553907ab0c808a
Certificate serial: 0194BC3C1EDCF8BDC0B9B6302BB977CCE588
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LrTU3kCE88jhpPbU01U5B6sMgIo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/7cfc68-47b8-4628-b42f-9529bccbbb14/1/LrTU3kCE88jhpPbU01U5B6sMgIo.mft
Manifest number: 0F1D
Signing time: Fri 31 Jan 2025 12:00:44 +0000
Manifest this update: Fri 31 Jan 2025 12:00:44 +0000
Manifest next update: Sat 01 Feb 2025 12:00:44 +0000
Files and hashes: 1: LGVpAvXVwr_XUuW1Ewf10IhBxfc.roa (hash: 3OZo0AzihAddNAANHnnyFlR5uDQooXnrMnBJf8bFoKs=)
2: LrTU3kCE88jhpPbU01U5B6sMgIo.crl (hash: cPAztfvlCQ/gm2Y2LVxDrnCLqvZGkCoPBf9A2COSVtQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:1e:dc:f8:bd:c0:b9:b6:30:2b:b9:77:cc:e5:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2eb4d4de4084f3c8e1a4f6d4d3553907ab0c808a
Validity
Not Before: Jan 31 12:00:44 2025 GMT
Not After : Feb 1 12:00:44 2025 GMT
Subject: CN=130f705b16f9c329c6d2414b6ef9b8ad76155541
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:17:f7:b7:93:9f:d7:21:ac:b3:7e:4a:96:7d:
56:35:1e:70:fa:78:e1:a7:56:f8:91:85:ea:22:3a:
6f:c5:0f:28:c2:21:05:83:f0:25:e6:06:71:1c:ce:
0e:5d:28:ed:fa:a3:ac:5c:a9:f5:9f:d4:f4:98:9e:
e5:fb:dd:57:40:bc:8e:ac:0b:b4:01:f6:ba:5f:41:
fb:e7:ef:db:cc:07:8d:2f:91:23:f3:d7:dd:c3:15:
c9:42:bd:58:3d:18:9a:85:61:ba:0c:8b:2b:77:05:
a8:28:6a:25:bd:e2:f7:7e:80:94:08:45:35:82:0d:
ca:59:89:83:23:30:5e:7c:94:39:be:9b:66:bf:18:
44:85:73:41:c3:82:32:64:e9:2f:c1:ce:40:45:a3:
52:44:6c:74:64:c6:7b:4c:16:eb:4e:88:e7:e3:f3:
be:b6:07:f2:3e:89:07:c8:fd:1e:b8:1c:0a:1c:66:
71:77:09:16:82:49:66:e8:4b:cd:c2:6c:d5:58:8a:
ab:09:72:9b:93:46:15:14:da:e6:bf:dc:57:58:c4:
e5:57:4a:f1:79:31:a2:57:f5:11:f7:88:43:86:bf:
b4:82:47:7a:1b:a9:6d:d2:88:53:c6:8d:fd:c5:b8:
b2:83:78:c3:84:55:a2:0e:11:3b:a8:1a:93:7b:4a:
83:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:0F:70:5B:16:F9:C3:29:C6:D2:41:4B:6E:F9:B8:AD:76:15:55:41
X509v3 Authority Key Identifier:
keyid:2E:B4:D4:DE:40:84:F3:C8:E1:A4:F6:D4:D3:55:39:07:AB:0C:80:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LrTU3kCE88jhpPbU01U5B6sMgIo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/7cfc68-47b8-4628-b42f-9529bccbbb14/1/LrTU3kCE88jhpPbU01U5B6sMgIo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/7cfc68-47b8-4628-b42f-9529bccbbb14/1/LrTU3kCE88jhpPbU01U5B6sMgIo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:50:be:12:84:7a:e1:f5:27:80:df:d2:cb:06:20:32:1a:75:
1a:04:e7:bb:a1:00:71:33:67:6f:f0:94:27:e2:44:3a:62:0f:
2d:3f:f2:69:7f:a5:d7:d3:ff:e8:5a:61:ee:11:45:64:0b:d4:
a4:b2:72:2f:9f:85:9b:fc:6a:b5:9b:e6:fc:d5:66:af:b5:ac:
0e:12:a5:c2:68:95:ce:3c:91:15:cd:dd:12:25:1c:a9:a2:fd:
e1:1c:08:76:24:08:df:a2:72:5f:0f:ab:b1:d1:ca:a8:9e:fc:
30:ad:71:bd:e3:df:2b:f6:e1:50:b2:0a:44:e0:47:16:2a:65:
8f:ec:c9:e2:64:9e:c3:b6:b9:10:41:eb:0d:dc:0a:9e:44:6e:
6d:3d:6e:61:81:ac:44:30:2d:91:62:36:d0:2c:d4:76:e4:2a:
7c:98:8c:c0:b4:b9:da:54:22:8d:12:1e:67:15:bf:d7:95:f1:
b7:25:fd:24:12:02:d9:5d:cf:81:c4:e6:d3:79:8c:45:df:0f:
18:fa:47:19:b2:a7:14:5e:62:30:99:b5:50:6b:74:c6:79:e3:
a9:83:f5:2c:0d:4c:22:ed:af:8d:53:34:57:d6:89:ef:9e:29:
a3:1f:ef:c7:89:44:91:0a:e7:5f:fb:7b:ee:12:c6:fa:1a:51:
ba:e8:4e:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:39:18 2025 by rpki-client