Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/04d348-75b9-48d2-be10-91190a02db70/1/Loskx2rYemwf7f-vCNmxe0UkmZE.mft
File: Loskx2rYemwf7f-vCNmxe0UkmZE.mft (raw, json)
Hash identifier: UV2mn9z1vOLBnb0KI4FavNH1cvBmF0nTt96+vl+pvgM=
Subject key identifier: 9D:22:50:CD:B1:13:30:7C:BE:F0:A8:E9:0B:04:0A:98:5A:7D:71:2D
Authority key identifier: 2E:8B:24:C7:6A:D8:7A:6C:1F:ED:FF:AF:08:D9:B1:7B:45:24:99:91
Certificate issuer: /CN=2e8b24c76ad87a6c1fedffaf08d9b17b45249991
Certificate serial: 0194BC72C126D3D8FE52E6BFB43DEBC722B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Loskx2rYemwf7f-vCNmxe0UkmZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/04d348-75b9-48d2-be10-91190a02db70/1/Loskx2rYemwf7f-vCNmxe0UkmZE.mft
Manifest number: 1439
Signing time: Fri 31 Jan 2025 13:00:24 +0000
Manifest this update: Fri 31 Jan 2025 13:00:24 +0000
Manifest next update: Sat 01 Feb 2025 13:00:24 +0000
Files and hashes: 1: Loskx2rYemwf7f-vCNmxe0UkmZE.crl (hash: bOL9z3ATzZS7VRL90TX2HnAozbxa+7Na44r7D625Sa0=)
2: U7x9NHrOtVwpLBD4RJMdKYPQ-Mo.roa (hash: COXA0MHjLmP0wp5vDjDiQUXIbxhZE0gntg3Uospeavg=)
3: qBk8yEy6XQzjJQM_m4xKxUxOGWY.roa (hash: MrQEI7rx7w7zwtpbP6zhx6P3UqAEniYO/sUrOOmnWv0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:c1:26:d3:d8:fe:52:e6:bf:b4:3d:eb:c7:22:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e8b24c76ad87a6c1fedffaf08d9b17b45249991
Validity
Not Before: Jan 31 13:00:24 2025 GMT
Not After : Feb 1 13:00:24 2025 GMT
Subject: CN=9d2250cdb113307cbef0a8e90b040a985a7d712d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:38:20:e8:f2:76:19:a5:0a:67:53:02:e9:81:
d6:a6:c1:92:d2:71:d4:36:83:1e:1c:f8:db:59:7e:
e8:cd:36:b1:39:fb:1b:9c:08:95:4f:fb:8c:fe:6d:
c6:f5:67:34:26:3a:ef:b4:5f:e7:1c:a8:0a:74:32:
10:4b:e8:a5:b9:ab:24:d9:37:cf:e8:d7:15:9b:de:
40:57:32:1c:43:36:36:6c:0b:64:10:ac:15:7f:60:
04:e0:bc:5a:6a:d3:79:d5:0d:74:8d:11:19:95:d9:
49:e4:d6:2d:43:78:d9:25:f9:bc:e4:fc:30:5c:8a:
38:d9:01:97:43:b4:48:4c:30:ba:df:74:88:d1:a3:
13:63:1e:5a:dc:2a:ad:35:cc:79:0d:1f:4a:da:c5:
e6:c0:9d:72:13:2c:4b:bf:6c:d7:f3:e3:cb:0c:a5:
f4:50:7a:c5:1a:8f:25:a7:94:e8:0d:bd:3d:24:48:
eb:83:46:7d:72:1b:6c:53:5b:ef:ce:12:a1:62:4a:
6e:75:d2:5a:d2:07:eb:05:08:78:2f:1d:20:2b:c7:
51:fd:df:20:9a:c5:cf:47:82:ca:98:72:c6:c2:fc:
39:f5:8e:ff:71:4d:78:0d:c2:a1:ad:24:c9:21:ab:
6b:dc:ca:c1:e7:74:d8:57:1e:b3:da:d2:69:fe:db:
5c:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:22:50:CD:B1:13:30:7C:BE:F0:A8:E9:0B:04:0A:98:5A:7D:71:2D
X509v3 Authority Key Identifier:
keyid:2E:8B:24:C7:6A:D8:7A:6C:1F:ED:FF:AF:08:D9:B1:7B:45:24:99:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Loskx2rYemwf7f-vCNmxe0UkmZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/04d348-75b9-48d2-be10-91190a02db70/1/Loskx2rYemwf7f-vCNmxe0UkmZE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/04d348-75b9-48d2-be10-91190a02db70/1/Loskx2rYemwf7f-vCNmxe0UkmZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:fa:8c:72:d4:ee:4d:35:d7:86:fc:0a:3d:70:28:4c:60:5d:
09:f5:a1:24:ce:7e:00:ff:71:10:e4:20:f4:53:dd:de:ca:5e:
2c:dd:a3:74:1d:9e:62:68:ba:83:e5:63:fc:9c:bf:f9:22:2d:
2a:41:19:37:e4:bc:12:53:35:7e:3b:59:e3:64:23:da:f7:85:
bc:1e:7c:e1:b3:cf:dc:f9:73:f6:62:77:51:e5:26:9a:7e:44:
33:84:80:39:ff:30:e4:77:2e:66:7c:1f:95:76:35:28:92:b4:
b0:1a:1e:e7:8d:ea:1d:5a:53:3d:c6:c9:46:00:60:ca:27:3d:
75:3d:5d:5f:2c:2d:de:5d:1a:05:5a:0e:87:bd:0d:de:64:b8:
e9:6d:4a:ea:da:1a:d6:95:1e:a5:14:a1:33:84:a4:f3:de:e7:
d0:17:39:b0:87:fb:8e:9d:9b:4b:1e:49:3f:ca:2a:4d:14:b2:
5b:2a:30:6d:5c:d8:fb:5c:e2:71:2b:b6:c3:e2:3c:3b:63:f1:
c8:d8:3c:a5:5f:b7:35:0c:1f:a4:b9:93:37:5c:0d:a9:c2:d3:
3b:f6:db:77:e7:57:a9:23:74:77:14:1e:32:a1:51:62:9c:f8:
4d:77:92:92:97:e8:3e:74:23:e9:15:1a:9f:c5:80:60:c4:30:
04:a5:46:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:47:01 2025 by rpki-client