
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/c78df3-fc47-4edb-a9a0-94fd9e2969af/1/Lh0kV-C-VNx4_B9mh9s-lLBorJs.mft
File: Lh0kV-C-VNx4_B9mh9s-lLBorJs.mft (raw, json)
Hash identifier: Ax6tJf/ABVafygmZ7lenYHtnF9Jzvc395pj2PvjQ1QY=
Subject key identifier: 70:AB:32:45:87:54:5C:E9:0D:BC:67:8D:62:9B:DF:9C:9B:BA:50:00
Authority key identifier: 2E:1D:24:57:E0:BE:54:DC:78:FC:1F:66:87:DB:3E:94:B0:68:AC:9B
Certificate issuer: /CN=2e1d2457e0be54dc78fc1f6687db3e94b068ac9b
Certificate serial: 0194BD1777459875E47AFD727D46D93C5875
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lh0kV-C-VNx4_B9mh9s-lLBorJs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/c78df3-fc47-4edb-a9a0-94fd9e2969af/1/Lh0kV-C-VNx4_B9mh9s-lLBorJs.mft
Manifest number: 0E36
Signing time: Fri 31 Jan 2025 16:00:19 +0000
Manifest this update: Fri 31 Jan 2025 16:00:19 +0000
Manifest next update: Sat 01 Feb 2025 16:00:19 +0000
Files and hashes: 1: B3anwTfv9G1rVUQa6NJWLwdwXYI.roa (hash: mmLvT4hHYo/WnQMssEwo9M27udmQqtzbwXP4LSX1FYM=)
2: Lh0kV-C-VNx4_B9mh9s-lLBorJs.crl (hash: nY22/MNLIhKdMCnwWGvFam0S3Nt+fznlBYnGXqwUyrQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:77:45:98:75:e4:7a:fd:72:7d:46:d9:3c:58:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e1d2457e0be54dc78fc1f6687db3e94b068ac9b
Validity
Not Before: Jan 31 16:00:19 2025 GMT
Not After : Feb 1 16:00:19 2025 GMT
Subject: CN=70ab324587545ce90dbc678d629bdf9c9bba5000
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:8b:fd:f8:d7:8a:54:2c:70:ed:ca:b6:96:23:
2d:c1:92:6b:3c:27:63:f7:9c:49:bd:15:23:3d:2a:
60:cd:cc:66:f1:6b:82:e9:ac:ef:1d:33:42:a7:38:
ff:35:09:5a:f0:e7:40:61:87:70:38:44:61:db:a7:
92:72:db:0d:ec:38:fd:c3:21:67:6b:25:ea:68:fc:
87:9b:57:f5:ef:e0:23:54:eb:3a:5f:4d:1e:c2:5f:
0d:41:6e:d2:2a:fb:58:79:00:90:b6:f0:75:38:80:
e8:c6:81:97:bc:5a:a3:89:68:37:ed:7e:40:94:0c:
98:56:66:6b:27:90:a2:4d:57:32:ac:4b:89:44:1c:
8e:7c:0f:a0:ba:f8:a3:cd:bd:89:31:01:6f:c6:bb:
f8:d0:e0:c3:88:b1:d3:50:12:24:ef:ea:f5:0c:5c:
57:dd:db:6a:94:cd:92:49:bc:94:4a:bf:24:36:2f:
07:4f:ec:7d:c7:ad:e9:2c:72:c0:4e:a1:51:1c:9f:
69:86:f1:95:c2:9c:57:78:3d:90:3d:24:85:c8:55:
29:82:d8:16:d8:a8:a5:07:4d:46:5b:e9:3a:2b:0e:
c0:1a:54:0e:66:fa:77:60:fe:20:c4:66:c9:40:0f:
9c:f2:2e:d7:6f:d5:b1:eb:c5:4d:9b:55:e3:7b:e9:
70:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:AB:32:45:87:54:5C:E9:0D:BC:67:8D:62:9B:DF:9C:9B:BA:50:00
X509v3 Authority Key Identifier:
keyid:2E:1D:24:57:E0:BE:54:DC:78:FC:1F:66:87:DB:3E:94:B0:68:AC:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lh0kV-C-VNx4_B9mh9s-lLBorJs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/c78df3-fc47-4edb-a9a0-94fd9e2969af/1/Lh0kV-C-VNx4_B9mh9s-lLBorJs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/c78df3-fc47-4edb-a9a0-94fd9e2969af/1/Lh0kV-C-VNx4_B9mh9s-lLBorJs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:39:95:05:78:49:47:07:ec:7a:5a:58:1c:92:aa:58:cb:9c:
92:3d:b7:9b:17:42:b6:c5:81:c3:be:93:da:fd:f6:f2:bf:bc:
fe:d3:bc:27:8b:fa:a4:56:ba:3e:d3:22:0a:4a:1c:2b:ff:5b:
a8:0c:70:4f:e3:b9:8d:40:8b:01:fb:fc:c1:31:2b:89:54:13:
cf:4e:e4:03:8b:14:25:f3:5c:27:38:2e:16:43:a8:73:46:c7:
ce:9b:25:c6:9e:be:42:18:68:d5:5a:f5:7b:ee:e0:94:db:07:
77:5d:cb:22:a6:ef:5d:1f:2f:41:5d:d3:8e:3b:af:35:3e:b8:
67:fa:e3:07:e6:6f:ef:cd:8c:a9:6d:fd:8b:ea:d9:2c:0b:57:
57:b6:c8:88:b9:7a:e0:f4:5f:85:90:54:fd:42:39:55:c6:af:
7c:98:68:eb:39:cf:af:07:d6:d3:0d:09:a2:d7:16:e2:c2:5a:
d0:2e:7a:0b:c0:76:72:1c:8d:6e:40:1e:d6:73:94:51:5c:58:
c5:ec:ae:1c:91:4a:d0:3b:2d:76:22:b2:1e:0e:35:65:ae:78:
cd:ef:bc:a7:bc:f0:39:f0:94:ea:d4:b4:a1:e5:b2:75:87:32:
b7:00:99:53:6d:2e:88:41:7c:b9:c2:70:c5:b7:24:17:f0:26:
49:a4:52:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:13:16 2025 by rpki-client