Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/0771e1-39af-4353-947f-01facc747c24/1/LRGXVPwU_-eWimUWvUm9slYzuIc.mft
File: LRGXVPwU_-eWimUWvUm9slYzuIc.mft (raw, json)
Hash identifier: kjvn2ft9dd69yw+ay7rBObb5Tl1sXKf2UCnLvae614c=
Subject key identifier: FF:38:77:F1:C0:D3:B7:F9:07:28:FC:66:12:6F:42:1D:9B:F5:D0:26
Authority key identifier: 2D:11:97:54:FC:14:FF:E7:96:8A:65:16:BD:49:BD:B2:56:33:B8:87
Certificate issuer: /CN=2d119754fc14ffe7968a6516bd49bdb25633b887
Certificate serial: 0194BBCE10FA641512B5ABB9D9676702828B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LRGXVPwU_-eWimUWvUm9slYzuIc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/0771e1-39af-4353-947f-01facc747c24/1/LRGXVPwU_-eWimUWvUm9slYzuIc.mft
Manifest number: 0DE5
Signing time: Fri 31 Jan 2025 10:00:31 +0000
Manifest this update: Fri 31 Jan 2025 10:00:31 +0000
Manifest next update: Sat 01 Feb 2025 10:00:31 +0000
Files and hashes: 1: LRGXVPwU_-eWimUWvUm9slYzuIc.crl (hash: edxcOHe1598lfduqjHOo/7M+RLSr76d9iQ+loUnvGf4=)
2: Yq8p-Zl2UZI4Tb-nuCgzMSOT2M4.roa (hash: nZW2inX60+r3Vn2H9HqAa0liDQDWLVr6X/Z09+vg9g4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:10:fa:64:15:12:b5:ab:b9:d9:67:67:02:82:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d119754fc14ffe7968a6516bd49bdb25633b887
Validity
Not Before: Jan 31 10:00:31 2025 GMT
Not After : Feb 1 10:00:31 2025 GMT
Subject: CN=ff3877f1c0d3b7f90728fc66126f421d9bf5d026
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:4b:cd:09:a9:25:b3:c0:65:2f:d1:06:0c:5c:
a8:24:2b:20:c8:87:c0:c5:42:69:ab:e5:c5:85:02:
fc:3f:85:34:cc:20:41:96:44:56:d6:92:19:71:cc:
84:98:f4:72:86:e9:34:f0:af:68:2e:b6:46:17:e6:
1e:6e:47:f2:c5:fd:52:04:d3:ee:e0:de:cd:ce:5e:
6d:10:f4:36:cb:ce:e7:60:74:0b:f4:eb:2c:db:4b:
de:a4:fe:d0:cc:ee:fe:ac:f4:9d:3d:26:0b:3c:19:
b4:36:17:79:b5:e7:4e:55:2d:ed:d6:97:b2:64:79:
00:bf:05:31:fa:5f:c1:73:b2:af:65:e1:c9:06:08:
42:84:ca:ad:d0:b7:cd:89:a4:87:50:d4:17:20:3a:
1d:53:cd:2e:28:16:60:ee:9e:d3:73:ae:f9:b4:5f:
c9:33:1a:ae:4d:b9:2c:55:7c:91:86:44:7b:fe:78:
d7:5d:0c:bb:ae:6e:a7:f0:d9:e1:d5:5d:da:36:70:
f4:0e:bc:03:93:ce:01:f4:6d:77:c1:6a:ed:87:24:
85:5b:c5:81:99:5b:20:cf:c8:ac:7e:20:47:d2:10:
da:e2:5c:06:6b:ce:43:b7:3e:40:fc:79:c4:35:6d:
0c:c0:80:23:33:2d:94:dc:05:2f:b7:97:b3:dc:87:
43:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:38:77:F1:C0:D3:B7:F9:07:28:FC:66:12:6F:42:1D:9B:F5:D0:26
X509v3 Authority Key Identifier:
keyid:2D:11:97:54:FC:14:FF:E7:96:8A:65:16:BD:49:BD:B2:56:33:B8:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRGXVPwU_-eWimUWvUm9slYzuIc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/0771e1-39af-4353-947f-01facc747c24/1/LRGXVPwU_-eWimUWvUm9slYzuIc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/0771e1-39af-4353-947f-01facc747c24/1/LRGXVPwU_-eWimUWvUm9slYzuIc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:2a:24:5d:1b:c3:87:a2:44:a3:5c:65:bc:3a:8d:ef:5b:68:
ac:0e:74:29:e6:59:da:9e:c7:1b:3a:cd:61:9d:18:a4:c7:61:
90:e3:bd:f6:c9:76:9a:c6:54:e1:25:a4:ad:7b:41:69:74:5e:
83:94:f6:76:7a:40:21:a4:ba:f5:ce:ea:74:d5:0a:97:61:e2:
bb:d7:b6:0a:9c:92:60:9b:a2:a5:bb:26:21:96:4c:a4:50:eb:
8e:1d:6a:87:ef:6d:e2:10:b9:64:96:31:24:98:52:c4:d9:ff:
cb:9c:d6:19:af:bb:bf:2d:24:71:8a:25:4d:77:ed:84:4e:51:
30:3b:dd:17:06:fc:4c:58:3d:ff:cd:88:26:3a:7d:04:b4:05:
bc:c3:44:66:73:9b:98:76:24:60:3f:34:80:86:2e:52:e1:0d:
5d:aa:be:f3:36:1b:a7:ce:c6:90:06:4d:6a:64:03:11:d9:91:
28:a0:87:0f:82:f2:b8:40:54:62:40:02:ec:9c:b5:c3:df:0f:
3a:ce:19:c7:bf:4c:0f:ed:c7:7b:45:b3:ae:b2:c9:78:c9:54:
2f:74:c7:62:53:43:60:ed:d0:68:e2:d7:55:f3:3d:50:48:8b:
6e:dd:46:75:86:16:76:23:49:3d:22:6a:0f:09:5c:5d:73:3b:
0d:1a:4f:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:12:50 2025 by rpki-client