Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/130d95-5641-4ada-80c0-da3e1192cdf6/1/Luu2kbJPKHklPjpqReC1xSZzsJ0.mft
File: Luu2kbJPKHklPjpqReC1xSZzsJ0.mft (raw, json)
Hash identifier: MogY8lTkO4kIAEq2afMhZQ/+xOjFF0XMBj5qgucQWfE=
Subject key identifier: 7A:A0:A2:5A:00:65:A7:E5:54:5E:2D:61:A3:B4:C9:71:79:DB:30:71
Authority key identifier: 2E:EB:B6:91:B2:4F:28:79:25:3E:3A:6A:45:E0:B5:C5:26:73:B0:9D
Certificate issuer: /CN=2eebb691b24f2879253e3a6a45e0b5c52673b09d
Certificate serial: 0194BC7319DF9EA244C0D708B9E237B0D770
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Luu2kbJPKHklPjpqReC1xSZzsJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/130d95-5641-4ada-80c0-da3e1192cdf6/1/Luu2kbJPKHklPjpqReC1xSZzsJ0.mft
Manifest number: 048D
Signing time: Fri 31 Jan 2025 13:00:47 +0000
Manifest this update: Fri 31 Jan 2025 13:00:47 +0000
Manifest next update: Sat 01 Feb 2025 13:00:47 +0000
Files and hashes: 1: 1-wMS9vZvBAuCKDz03PRK_gSnUfI.roa (hash: 4UrgxrRXQe+UtWoEsv9eaDsHmSudcco9i9klqNnetCQ=)
2: 20NLCG2yB3P_lJPfZuVuzFu-TU4.roa (hash: m9SiJ2stUV8q1CVCQ7Ha/GjMgmYPtHRZSUs0RL8C5GE=)
3: Luu2kbJPKHklPjpqReC1xSZzsJ0.crl (hash: gbJKHMrL1uEIE694RyoqsPSfamYty8PyjuLxO3ykrnM=)
4: TEEAzNoMda-D3tOKgf4SY7IimUo.roa (hash: tTg9Xq6WVgT6MoT3R5W+XtjoYKjmYdxhDyD+zIhktKI=)
5: wiDHcS0iTsfwm6c97RKRXwFMQDU.roa (hash: 9nPfgHjI+btRAVI2Wt5za4YufA+AcNW7aC+26eTYpiY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:19:df:9e:a2:44:c0:d7:08:b9:e2:37:b0:d7:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2eebb691b24f2879253e3a6a45e0b5c52673b09d
Validity
Not Before: Jan 31 13:00:47 2025 GMT
Not After : Feb 1 13:00:47 2025 GMT
Subject: CN=7aa0a25a0065a7e5545e2d61a3b4c97179db3071
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b4:71:f1:2d:8b:1c:63:ec:be:4c:41:91:17:
ea:f3:73:27:95:e3:9e:7f:03:7f:05:e2:c3:c7:77:
aa:3b:5b:df:e3:ec:e5:d1:34:98:77:fd:b1:95:e3:
98:35:75:68:da:7c:08:b1:8f:f2:1c:45:e7:ab:de:
b6:af:aa:6e:0c:e8:2b:05:de:ed:1e:c4:4c:10:4f:
18:a3:d8:19:a4:fc:89:3d:b8:5b:b3:6e:17:db:9a:
d8:e5:9a:2c:5f:35:63:7d:70:41:b6:66:e8:b1:e4:
e3:ce:40:62:6e:d4:36:03:2d:0c:b8:5c:11:30:d8:
19:68:ba:20:7d:31:22:32:a4:c5:49:93:73:40:0d:
85:a8:1e:9e:df:d7:9a:3b:7a:0a:9e:70:e5:59:fd:
da:4c:22:50:d1:15:63:bf:4d:39:f1:8a:54:72:cd:
17:bd:53:58:17:de:c3:0c:5b:66:f4:38:e6:b9:a9:
85:7e:75:53:15:4d:fe:13:4a:88:4b:a7:7b:21:9a:
21:41:81:8b:ba:31:52:c9:b8:02:ee:4b:a0:5c:bb:
54:e2:89:9d:fe:9a:8e:1f:6a:99:69:b0:0b:4f:a1:
01:09:07:4e:5d:74:76:e2:bb:6c:1e:2c:e5:05:75:
5f:31:db:be:f3:b2:cf:7d:ae:9a:40:3a:1c:64:34:
ca:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:A0:A2:5A:00:65:A7:E5:54:5E:2D:61:A3:B4:C9:71:79:DB:30:71
X509v3 Authority Key Identifier:
keyid:2E:EB:B6:91:B2:4F:28:79:25:3E:3A:6A:45:E0:B5:C5:26:73:B0:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Luu2kbJPKHklPjpqReC1xSZzsJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/130d95-5641-4ada-80c0-da3e1192cdf6/1/Luu2kbJPKHklPjpqReC1xSZzsJ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/130d95-5641-4ada-80c0-da3e1192cdf6/1/Luu2kbJPKHklPjpqReC1xSZzsJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:cc:68:3f:87:6c:32:73:fc:d9:68:47:d2:ef:02:b0:d7:e2:
3a:99:d6:62:a3:aa:e4:7f:a6:21:3b:8d:f4:a4:11:52:a9:88:
44:36:d5:bd:6d:a5:a1:7c:c2:42:48:6f:d9:61:05:8a:e2:07:
af:a1:7f:7e:0b:b2:85:dc:67:87:9f:7f:f3:73:a2:3c:53:5c:
60:38:08:38:b9:a6:e8:e7:8a:ea:1d:84:0e:95:f2:f6:28:c5:
c9:8f:9d:61:31:c6:39:2a:ea:8c:ad:85:5d:41:cd:61:f7:33:
c6:43:02:9b:f4:47:c4:7f:14:58:d8:96:a0:56:b8:1c:1b:00:
5b:26:b7:2a:9e:19:97:c2:9e:ea:2a:12:af:4a:ce:b8:c5:af:
a4:9c:62:5a:7f:e5:2b:c1:b5:c8:cc:c0:0d:a6:05:0d:19:72:
e9:d0:38:c0:2e:71:3c:84:e7:ca:8d:49:b1:48:f0:68:32:94:
2f:be:97:66:45:e3:37:a5:ee:84:a8:61:11:34:45:28:bc:40:
0f:7c:e2:8c:a1:9e:6b:f1:40:10:63:19:3e:51:71:da:2b:3d:
c0:d4:d7:01:fd:52:7e:21:45:6a:7c:c7:20:e2:7d:4f:34:a6:
48:10:05:44:d1:2f:9e:25:a2:2f:04:f9:f4:1e:6f:50:b0:02:
f4:0e:bf:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:37:42 2025 by rpki-client