Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/ee00f0-4584-44a0-bf5a-03c56b60fc28/1/lefcaIWMBglOD0Moi0hlibSD4_M.mft
File: lefcaIWMBglOD0Moi0hlibSD4_M.mft (raw, json)
Hash identifier: 8xNbd2t9rk7erLXd3k6QWRqYjv4/mYYiz5pUbcJEMHc=
Subject key identifier: EF:34:8D:03:A9:87:2D:EF:8C:70:FA:C2:01:1B:11:C2:91:D4:B5:7D
Authority key identifier: 95:E7:DC:68:85:8C:06:09:4E:0F:43:28:8B:48:65:89:B4:83:E3:F3
Certificate issuer: /CN=95e7dc68858c06094e0f43288b486589b483e3f3
Certificate serial: 0194BBCE074E4C2B5E3C48C313DEB762623E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lefcaIWMBglOD0Moi0hlibSD4_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/ee00f0-4584-44a0-bf5a-03c56b60fc28/1/lefcaIWMBglOD0Moi0hlibSD4_M.mft
Manifest number: 0B45
Signing time: Fri 31 Jan 2025 10:00:29 +0000
Manifest this update: Fri 31 Jan 2025 10:00:29 +0000
Manifest next update: Sat 01 Feb 2025 10:00:29 +0000
Files and hashes: 1: lefcaIWMBglOD0Moi0hlibSD4_M.crl (hash: yCgEsyr60L+xnExDvyOww9ra8Mn5Ufx89Cz75/18RFA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:07:4e:4c:2b:5e:3c:48:c3:13:de:b7:62:62:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95e7dc68858c06094e0f43288b486589b483e3f3
Validity
Not Before: Jan 31 10:00:29 2025 GMT
Not After : Feb 1 10:00:29 2025 GMT
Subject: CN=ef348d03a9872def8c70fac2011b11c291d4b57d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:6f:0b:43:90:b2:53:34:69:28:6a:ed:3b:12:
23:25:c2:b2:a9:43:85:0d:98:61:2f:95:cb:7a:87:
b8:2d:1b:d2:1c:1b:51:89:e3:e6:9a:6e:53:f5:7a:
1c:81:65:31:fa:ba:25:af:df:a2:eb:a0:2d:14:47:
ff:d9:bc:86:26:69:e1:f3:f3:50:53:5a:c2:f2:5c:
05:2a:31:0a:8b:15:e4:f5:3f:1e:63:93:87:ae:d7:
ce:a9:a2:60:0b:46:cb:60:e8:60:42:f4:8f:07:db:
f3:b5:da:35:00:c8:33:32:73:f0:22:39:0d:69:d3:
45:f8:0f:0a:2b:a9:d1:d4:91:15:24:ab:18:5a:92:
26:85:a3:b2:91:0f:96:1a:b9:1c:e4:9e:4c:9e:9c:
2f:3a:2d:24:89:cd:2d:54:e2:93:67:a5:39:8f:89:
b5:d6:53:fc:b8:0f:51:74:56:b0:fb:78:9a:07:6d:
71:a5:60:04:cf:4f:7a:01:8c:82:d6:68:72:04:e9:
d6:61:b5:ad:2e:de:2c:f5:b1:ad:a7:7e:25:60:09:
8d:2d:de:2c:3c:5c:81:9b:20:2c:3a:8c:da:0b:c8:
4b:64:9c:60:f6:e1:aa:a1:b3:17:6d:8d:a2:43:38:
1b:44:3b:d9:0c:28:fe:7f:15:3c:2e:35:f4:c1:42:
62:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:34:8D:03:A9:87:2D:EF:8C:70:FA:C2:01:1B:11:C2:91:D4:B5:7D
X509v3 Authority Key Identifier:
keyid:95:E7:DC:68:85:8C:06:09:4E:0F:43:28:8B:48:65:89:B4:83:E3:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lefcaIWMBglOD0Moi0hlibSD4_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/ee00f0-4584-44a0-bf5a-03c56b60fc28/1/lefcaIWMBglOD0Moi0hlibSD4_M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/ee00f0-4584-44a0-bf5a-03c56b60fc28/1/lefcaIWMBglOD0Moi0hlibSD4_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:09:ef:02:27:5c:d3:2f:e0:fe:04:f9:15:6d:85:78:93:4a:
87:a7:10:f6:49:a1:48:95:25:f1:62:9f:af:6e:cd:50:11:63:
dd:b5:e2:aa:75:aa:46:94:e0:99:98:21:5d:32:24:99:80:a7:
c1:ce:54:c3:c7:ca:1a:db:1f:f0:04:d4:1f:f9:fe:29:6a:21:
1f:83:03:2d:92:22:9a:06:52:96:c0:8a:ac:4e:00:b7:78:14:
1e:a1:25:1e:90:75:7a:05:24:0f:c5:ad:e4:5d:ff:a1:aa:03:
cd:2b:50:03:b2:11:0b:11:49:bf:7f:cb:35:b5:7b:ab:4e:e2:
a5:09:7c:5b:fb:14:e1:2d:ab:af:af:a1:b8:3a:f6:6f:5c:d4:
2a:ad:99:99:5e:7d:9a:a1:f8:12:ce:4f:bb:4b:97:b3:66:b2:
32:0d:42:19:00:c9:c9:78:26:1b:1a:84:02:2e:a3:7e:03:89:
89:d5:38:b4:10:00:20:4c:d2:12:da:93:a5:bd:37:cb:b8:1e:
b4:6b:8e:b7:6d:57:f9:0f:f7:b0:3f:06:1c:b4:10:96:da:81:
45:fc:79:25:11:ae:c9:20:4f:1d:15:66:be:f4:e8:6f:81:1b:
e8:b7:0e:c4:07:83:f0:99:6a:4a:36:48:73:1c:26:09:27:be:
7a:de:f0:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:49:14 2025 by rpki-client