Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/b5ba29-b29f-4065-98fb-b529b0cf5411/1/LMV0mVRsTv1zD_hx3zvRr787nwE.mft
File: LMV0mVRsTv1zD_hx3zvRr787nwE.mft (raw, json)
Hash identifier: LSLaM/tCqEfvM0v+CHwZuTfrwgpxDYXXEMgRDRrsIZM=
Subject key identifier: 8B:4D:37:89:26:96:19:E6:6B:35:33:EF:D4:78:94:E3:8C:1E:7D:F9
Authority key identifier: 2C:C5:74:99:54:6C:4E:FD:73:0F:F8:71:DF:3B:D1:AF:BF:3B:9F:01
Certificate issuer: /CN=2cc57499546c4efd730ff871df3bd1afbf3b9f01
Certificate serial: 0194BC050AEF125CCBDCB65203E59AF4F37E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LMV0mVRsTv1zD_hx3zvRr787nwE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/b5ba29-b29f-4065-98fb-b529b0cf5411/1/LMV0mVRsTv1zD_hx3zvRr787nwE.mft
Manifest number: 0BDC
Signing time: Fri 31 Jan 2025 11:00:34 +0000
Manifest this update: Fri 31 Jan 2025 11:00:34 +0000
Manifest next update: Sat 01 Feb 2025 11:00:34 +0000
Files and hashes: 1: 57uU1mBBwf2NTWvRUYQ88syCG_0.roa (hash: 29c5vB9J3vlsLvhEYhn9hPcXbpkgWlHiPuRjoYcpg3A=)
2: LMV0mVRsTv1zD_hx3zvRr787nwE.crl (hash: oOTe9dV7sHMaEtwsb6xkt/U4ZDdNmlZtUuat3GjGNdU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:0a:ef:12:5c:cb:dc:b6:52:03:e5:9a:f4:f3:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cc57499546c4efd730ff871df3bd1afbf3b9f01
Validity
Not Before: Jan 31 11:00:34 2025 GMT
Not After : Feb 1 11:00:34 2025 GMT
Subject: CN=8b4d3789269619e66b3533efd47894e38c1e7df9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:1f:f7:01:c8:b2:1f:67:e9:96:41:6b:70:8f:
cc:5e:87:0b:97:26:d7:38:b7:91:a1:3c:50:3c:80:
c2:99:a7:fe:e7:2f:3c:ba:62:fa:47:cd:44:19:3a:
ca:e3:0a:89:ba:72:4a:1f:d3:7a:67:9a:35:94:1b:
30:5d:27:44:45:93:3d:d4:83:32:c1:1c:bc:e0:ea:
b0:d0:b6:42:33:c9:4d:ba:b2:7c:2d:4e:e6:d8:4c:
b6:c8:8b:38:20:57:5d:90:6f:d2:c7:31:9a:64:47:
9c:6a:95:2d:a0:89:27:51:9c:e1:9d:65:5b:c3:b8:
5d:5b:e8:0c:27:d0:0c:d0:43:2d:d8:d0:63:af:83:
6a:20:61:6c:85:0a:7f:cc:5b:c5:fa:91:0d:04:f2:
f2:da:a3:ee:ca:4c:6c:8f:15:fe:ec:ca:a8:85:93:
f4:36:8e:47:36:f7:20:bd:7f:e3:b4:8a:88:e2:38:
ac:1b:e0:54:16:2a:83:2b:b5:0f:bf:76:10:f1:fc:
9e:b9:3f:ca:17:11:6b:c3:30:c3:e0:97:f1:12:bc:
9a:b5:6d:f8:93:bd:49:99:ae:e1:0c:23:82:9c:a9:
78:fb:a6:f6:00:94:c0:a8:4e:33:09:9a:19:69:e8:
a1:70:cd:8c:ab:2d:03:06:a1:6d:60:c9:ff:49:b6:
5c:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:4D:37:89:26:96:19:E6:6B:35:33:EF:D4:78:94:E3:8C:1E:7D:F9
X509v3 Authority Key Identifier:
keyid:2C:C5:74:99:54:6C:4E:FD:73:0F:F8:71:DF:3B:D1:AF:BF:3B:9F:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LMV0mVRsTv1zD_hx3zvRr787nwE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b5ba29-b29f-4065-98fb-b529b0cf5411/1/LMV0mVRsTv1zD_hx3zvRr787nwE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b5ba29-b29f-4065-98fb-b529b0cf5411/1/LMV0mVRsTv1zD_hx3zvRr787nwE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:e5:33:7a:89:bb:fb:83:ee:5b:64:33:ec:eb:27:5c:53:7c:
e4:e4:b6:ee:41:8b:21:94:e4:bd:9d:09:fc:34:30:42:2f:41:
5d:1a:62:69:74:7b:76:0f:dc:34:46:09:ec:3e:7c:d5:3f:8b:
9c:96:cd:3f:39:e2:b9:80:c4:ca:f0:7a:7b:4e:08:e3:cb:2f:
6d:04:55:8a:0c:82:14:65:9a:2f:8a:70:61:c7:e0:0b:7b:d2:
cf:d2:f2:6b:fc:8f:52:1e:7b:88:91:a1:1a:06:9f:c4:d5:5b:
5e:b0:00:20:31:e6:d2:52:4e:ae:fd:1e:5e:f2:a8:c0:70:7f:
4d:51:af:f2:6f:ed:e7:96:3a:62:02:02:6c:14:e8:c0:72:aa:
d6:db:bd:bf:a6:ae:df:97:43:26:cd:f6:71:21:26:8f:05:ad:
5e:0f:7c:b0:fa:42:04:d0:53:da:c5:4d:35:e3:42:4c:de:a3:
3f:5a:25:56:86:4d:be:4a:43:b6:ba:ea:dc:bf:4b:43:8a:ea:
5d:d2:a5:4e:fe:0d:36:95:c1:79:07:51:8e:77:21:ae:51:15:
e9:14:8b:c1:e6:48:ef:b1:50:57:f2:d4:d8:35:e5:b6:b1:6a:
fd:05:41:a8:51:16:43:cd:fe:68:f0:88:bb:a7:4d:a6:3d:26:
15:35:fc:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:24:20 2025 by rpki-client