Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/7c2e84-e6cc-4751-887b-bc7a24c2e219/1/LOre5Y-GT0cutCKwuVSXuFB1oSs.mft
File: LOre5Y-GT0cutCKwuVSXuFB1oSs.mft (raw, json)
Hash identifier: +/8K/Sfruz/bCdPSONlBA1K6kdYBxTpvR7Dz6Ezf4Uk=
Subject key identifier: 26:30:39:FA:8E:AC:11:32:B7:4A:B5:38:FB:CD:85:27:4A:AB:71:3D
Authority key identifier: 2C:EA:DE:E5:8F:86:4F:47:2E:B4:22:B0:B9:54:97:B8:50:75:A1:2B
Certificate issuer: /CN=2ceadee58f864f472eb422b0b95497b85075a12b
Certificate serial: 0194BD4E728682B9D9D83FA602FE2B435EAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LOre5Y-GT0cutCKwuVSXuFB1oSs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/7c2e84-e6cc-4751-887b-bc7a24c2e219/1/LOre5Y-GT0cutCKwuVSXuFB1oSs.mft
Manifest number: 1279
Signing time: Fri 31 Jan 2025 17:00:22 +0000
Manifest this update: Fri 31 Jan 2025 17:00:22 +0000
Manifest next update: Sat 01 Feb 2025 17:00:22 +0000
Files and hashes: 1: FBdl7VOodLJhSXYfDoAofAIRhnA.roa (hash: I3zrIjexf9/s3BfDjPpCzKMEPfl4E3s1P3fqPquhjIg=)
2: LOre5Y-GT0cutCKwuVSXuFB1oSs.crl (hash: FNSJCPRjQyMDNVDc6uEQ0TPabBAI2J8zi3h9blK4ApU=)
3: ZBji9OX_VotOWmsBmNsHM021d9w.roa (hash: VbyaXchd5eBQYGJ65pdgdekBYkxDCu5DrAnwaoKvIrc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:72:86:82:b9:d9:d8:3f:a6:02:fe:2b:43:5e:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ceadee58f864f472eb422b0b95497b85075a12b
Validity
Not Before: Jan 31 17:00:22 2025 GMT
Not After : Feb 1 17:00:22 2025 GMT
Subject: CN=263039fa8eac1132b74ab538fbcd85274aab713d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:fc:d8:0d:be:fc:e1:9a:fb:ac:5f:cc:3c:3a:
4f:e0:30:58:db:e3:fd:c0:50:d0:f8:52:b2:3e:2f:
e9:3f:c9:47:29:75:e3:ae:40:88:6b:c7:2e:80:a9:
dc:92:5a:57:e7:84:eb:b9:b6:d9:2f:54:44:3f:84:
5a:63:c4:97:37:9c:1b:e2:99:22:ee:f9:e5:90:fa:
8f:2a:17:df:8b:bd:b8:92:23:00:31:48:de:be:62:
4c:34:3d:ba:a7:af:84:fb:ae:4e:b8:f8:bb:05:c0:
6c:5f:c0:7f:8c:09:f3:da:f2:78:8d:62:b8:96:8d:
54:53:ca:87:4e:49:a2:75:73:91:fd:aa:57:9b:e0:
5c:bf:24:88:4b:b2:2b:97:be:5f:ed:d3:bb:6a:03:
87:98:f4:fa:dc:f7:17:20:1c:70:15:e2:7e:7f:82:
a5:ca:95:81:18:01:b5:04:e7:72:6d:8e:a4:75:d7:
d3:cc:f3:26:47:22:92:75:45:87:f3:4f:90:3c:c8:
40:8a:dc:d3:3b:2f:6b:7b:6a:fc:49:90:55:37:62:
a7:7b:ea:48:52:da:29:2b:fe:dd:b7:36:63:5b:ab:
58:f4:dc:19:d6:c5:f2:0b:df:80:1c:0e:3c:ab:33:
88:b9:66:d9:8d:bb:42:3b:0e:0d:dc:45:ed:ef:be:
b5:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:30:39:FA:8E:AC:11:32:B7:4A:B5:38:FB:CD:85:27:4A:AB:71:3D
X509v3 Authority Key Identifier:
keyid:2C:EA:DE:E5:8F:86:4F:47:2E:B4:22:B0:B9:54:97:B8:50:75:A1:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LOre5Y-GT0cutCKwuVSXuFB1oSs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/7c2e84-e6cc-4751-887b-bc7a24c2e219/1/LOre5Y-GT0cutCKwuVSXuFB1oSs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/7c2e84-e6cc-4751-887b-bc7a24c2e219/1/LOre5Y-GT0cutCKwuVSXuFB1oSs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:32:01:89:25:60:11:e6:56:8d:35:28:07:a1:22:6f:36:52:
37:2c:21:69:2c:74:7b:8c:17:24:78:b0:66:e2:e4:e1:0a:ef:
63:01:eb:cf:3d:9e:71:bd:a7:2f:64:5d:6b:1a:03:5e:be:75:
c3:62:ef:d7:42:6d:5f:f9:e9:9c:d5:c1:26:cb:47:a0:8c:70:
c7:31:55:63:39:b6:b3:02:26:13:d0:98:e8:b4:aa:5c:9a:2d:
39:41:74:5e:66:61:70:e6:7e:c8:19:29:df:77:cb:13:6b:bf:
d0:3d:84:73:f5:60:f9:76:e5:fb:05:28:56:ad:1f:af:6c:7d:
50:3d:da:16:a5:d3:ac:20:70:5c:60:ad:27:51:94:42:4c:48:
80:0d:81:3e:14:73:04:ce:b9:1a:3b:bc:7d:14:84:bc:d0:fd:
e7:b4:e0:a2:99:ce:c3:d5:5c:00:98:e9:ec:2d:af:b4:03:24:
99:7b:ba:47:33:8e:a5:c7:bb:2e:b5:dc:14:f7:4d:97:21:da:
0e:61:4d:69:ee:c8:88:13:f8:0c:05:7b:b5:54:25:e2:e6:51:
a4:b6:b3:97:dc:53:00:0c:59:70:a0:8c:85:91:83:42:97:90:
33:2a:7b:83:be:3c:1f:25:b3:5b:71:24:85:f3:5c:c4:e6:8d:
f1:23:34:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:33:34 2025 by rpki-client