Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/f00ccc-ec3f-40df-a9fc-7cc79917300a/1/Lb24n7QRj_pV-v2_ReGSgr4Oes8.mft
File: Lb24n7QRj_pV-v2_ReGSgr4Oes8.mft (raw, json)
Hash identifier: yz8EK/uQ+WoC83D4TDltv4EQaa/IKi0PutrAH/XDMRs=
Subject key identifier: F0:0A:60:65:65:24:01:79:CA:7D:DD:5D:23:FE:45:30:87:CE:E8:02
Authority key identifier: 2D:BD:B8:9F:B4:11:8F:FA:55:FA:FD:BF:45:E1:92:82:BE:0E:7A:CF
Certificate issuer: /CN=2dbdb89fb4118ffa55fafdbf45e19282be0e7acf
Certificate serial: 0194BC72B2A597E649D6EA27078BC7AE1466
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lb24n7QRj_pV-v2_ReGSgr4Oes8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/f00ccc-ec3f-40df-a9fc-7cc79917300a/1/Lb24n7QRj_pV-v2_ReGSgr4Oes8.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 13:00:20 +0000
Manifest this update: Fri 31 Jan 2025 13:00:20 +0000
Manifest next update: Sat 01 Feb 2025 13:00:20 +0000
Files and hashes: 1: Lb24n7QRj_pV-v2_ReGSgr4Oes8.crl (hash: //r8jbMo0Fs/Q3koj5mc+pv5AyTiqPoQuJrzsKJMYq0=)
2: jV6ZfPR6YwqVEX_jWrfo-E3Ut1A.roa (hash: aKYc4lH7d/oqBFxJQA9n8W63icM0UlQYroSqqHHtI28=)
3: k7qFEm5kHWmp_1OkZQDDPeiAcj8.roa (hash: pgYIATSAFcigSwt5VrNilgNnNXeZU4RFSisJNFfoRp4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:b2:a5:97:e6:49:d6:ea:27:07:8b:c7:ae:14:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2dbdb89fb4118ffa55fafdbf45e19282be0e7acf
Validity
Not Before: Jan 31 13:00:20 2025 GMT
Not After : Feb 1 13:00:20 2025 GMT
Subject: CN=f00a606565240179ca7ddd5d23fe453087cee802
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:dd:97:0c:b6:8e:a1:78:00:3e:fd:8d:47:86:
7e:42:70:b5:d0:7b:8a:36:6b:ed:86:ed:70:ee:67:
91:08:16:2b:6d:2e:5f:36:ae:64:c7:c2:f3:49:d9:
9c:28:a2:8b:18:64:a0:47:0e:fd:bf:4b:e7:28:a6:
83:42:c8:b6:42:07:93:ac:81:24:d1:f4:06:2c:4f:
d8:aa:ce:5c:e4:6f:9d:13:2a:3f:62:53:05:16:f8:
c7:d6:2c:02:18:7e:21:1d:06:58:b7:af:52:89:c5:
63:15:4d:2b:a6:4d:a7:20:f7:72:b9:84:5a:13:66:
6d:90:ab:da:40:73:4e:0f:3c:eb:fb:e5:b8:bd:fe:
7b:ea:ef:8a:7d:8c:4c:29:13:c4:9d:ea:d6:0c:53:
06:76:d1:59:a7:04:0c:cb:9e:db:05:85:47:b6:e2:
c8:89:85:a6:96:d4:54:9b:4a:26:7e:3c:06:cb:5d:
5d:43:db:a6:d2:64:64:7e:d4:f3:ae:a3:1c:da:7c:
57:40:42:9f:5c:b0:e1:06:0c:c3:60:07:fd:78:de:
03:05:a0:c8:3c:44:ac:0d:05:85:c1:68:fe:45:3c:
0e:c9:ce:39:a1:9b:6a:61:0f:fc:98:0c:c6:db:21:
ac:55:f1:d9:e3:88:3c:33:ac:af:38:c0:62:89:cb:
34:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:0A:60:65:65:24:01:79:CA:7D:DD:5D:23:FE:45:30:87:CE:E8:02
X509v3 Authority Key Identifier:
keyid:2D:BD:B8:9F:B4:11:8F:FA:55:FA:FD:BF:45:E1:92:82:BE:0E:7A:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lb24n7QRj_pV-v2_ReGSgr4Oes8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f00ccc-ec3f-40df-a9fc-7cc79917300a/1/Lb24n7QRj_pV-v2_ReGSgr4Oes8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f00ccc-ec3f-40df-a9fc-7cc79917300a/1/Lb24n7QRj_pV-v2_ReGSgr4Oes8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:0a:81:67:c7:40:d9:37:39:dd:96:8e:74:65:17:0e:13:15:
1c:11:19:31:c8:21:bc:e4:c0:f7:a5:f9:db:2b:da:d4:36:62:
c1:7d:6d:62:27:7a:e8:94:97:55:d2:32:fd:95:4c:bf:3b:4a:
7e:51:0a:5b:73:8a:8e:32:29:c6:22:b3:11:f6:93:86:e1:d7:
6b:81:8b:bb:01:17:37:0e:85:2e:5f:1b:f0:a9:13:8f:92:94:
db:a0:dd:a3:ba:60:ea:66:f6:24:81:c2:c9:90:93:e0:f7:fc:
37:f9:2c:8a:5a:fe:85:86:35:18:b0:52:ba:fb:45:c1:07:a1:
96:c5:42:ef:bf:d7:08:72:5a:53:6f:f5:6a:1a:a4:71:9c:bc:
35:80:f6:72:ab:65:10:ef:cf:96:1b:e2:e1:49:d2:96:32:43:
2a:b8:66:38:bf:6e:2a:3d:79:a2:dd:bc:2c:72:9b:e0:64:3e:
e1:ab:c1:57:2e:75:8e:40:f5:34:6f:1e:28:87:da:22:38:70:
65:c7:f3:fa:9c:d0:ac:bf:ed:07:fb:d0:ac:2d:c4:db:ce:92:
16:e0:a0:42:0a:fe:6e:ac:93:6a:9a:4e:bb:c1:9c:e1:e9:4a:
0a:22:12:d1:e7:ce:b0:37:69:ea:bb:80:3f:50:b0:5c:98:76:
5f:0f:f8:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:43:17 2025 by rpki-client