Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/850af8-48d5-4297-9dbe-8e633e0f079d/1/LWX13HhD9bdmifNquRag2ZS5l5w.mft
File: LWX13HhD9bdmifNquRag2ZS5l5w.mft (raw, json)
Hash identifier: 9A6yQzN+LI8dQ6G8B9+6MCb+jfBnJLWdp3Wv/F11FwY=
Subject key identifier: EB:32:99:80:AE:2C:5C:E6:41:13:B5:FB:0E:D9:2F:65:B5:AC:F5:53
Authority key identifier: 2D:65:F5:DC:78:43:F5:B7:66:89:F3:6A:B9:16:A0:D9:94:B9:97:9C
Certificate issuer: /CN=2d65f5dc7843f5b76689f36ab916a0d994b9979c
Certificate serial: 0194BCA9C2FFF5DA220E99DA303BB7D8B562
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LWX13HhD9bdmifNquRag2ZS5l5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/850af8-48d5-4297-9dbe-8e633e0f079d/1/LWX13HhD9bdmifNquRag2ZS5l5w.mft
Manifest number: 022F
Signing time: Fri 31 Jan 2025 14:00:29 +0000
Manifest this update: Fri 31 Jan 2025 14:00:29 +0000
Manifest next update: Sat 01 Feb 2025 14:00:29 +0000
Files and hashes: 1: LWX13HhD9bdmifNquRag2ZS5l5w.crl (hash: c2XDOI7SbHeOHUXklwPI3iJGGnko1LUsF/Cr4AoNMI8=)
2: XEqexKJb2LrlBy7JmazWnnfRrCw.roa (hash: dfO0SxZnhpUVd2vYpZFuzNRZkTkzryjnbxAehzWWsGM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:c2:ff:f5:da:22:0e:99:da:30:3b:b7:d8:b5:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d65f5dc7843f5b76689f36ab916a0d994b9979c
Validity
Not Before: Jan 31 14:00:29 2025 GMT
Not After : Feb 1 14:00:29 2025 GMT
Subject: CN=eb329980ae2c5ce64113b5fb0ed92f65b5acf553
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:10:e3:49:3c:78:b3:f5:2c:db:c9:d7:c9:c5:
46:70:4b:24:cd:eb:ad:2d:7c:c6:bc:40:ae:4b:35:
3d:c8:c0:92:d7:52:4b:3f:31:44:fc:07:73:40:c8:
3a:c5:97:0e:5a:9f:9a:1c:16:4c:33:dd:82:43:b9:
54:80:59:a3:4a:53:87:a0:9e:90:ca:79:3b:c4:f1:
b9:b3:4f:d9:39:05:e8:16:a7:93:27:92:b1:96:5c:
65:a0:de:48:96:41:30:09:81:4a:8b:85:2b:a3:8f:
15:7c:a8:62:8d:d7:75:d8:e7:e5:2e:0f:dd:2b:01:
ee:2c:c0:a4:0e:66:05:47:e1:3d:df:3a:5d:94:e1:
4b:6c:f1:42:2a:5a:a0:a4:34:46:1b:c4:6f:e6:3c:
95:84:24:b2:4e:1c:6f:5b:9f:1c:02:a6:6b:5a:e4:
44:af:64:86:7d:a6:f1:33:39:1b:5a:70:13:f3:6c:
22:d2:45:71:8f:fb:59:d6:99:ad:08:63:1a:3c:ae:
81:c6:35:9d:81:e2:73:07:46:25:0d:5f:ad:91:75:
98:77:01:0d:41:e2:cc:40:c6:c8:72:a7:78:d6:8b:
93:93:18:33:5a:db:15:8e:84:33:69:d4:b8:b4:aa:
e5:6d:ee:d9:29:98:e8:ee:a1:8d:1b:dc:02:88:c3:
d2:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:32:99:80:AE:2C:5C:E6:41:13:B5:FB:0E:D9:2F:65:B5:AC:F5:53
X509v3 Authority Key Identifier:
keyid:2D:65:F5:DC:78:43:F5:B7:66:89:F3:6A:B9:16:A0:D9:94:B9:97:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LWX13HhD9bdmifNquRag2ZS5l5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/850af8-48d5-4297-9dbe-8e633e0f079d/1/LWX13HhD9bdmifNquRag2ZS5l5w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/850af8-48d5-4297-9dbe-8e633e0f079d/1/LWX13HhD9bdmifNquRag2ZS5l5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:7d:96:8c:55:04:fa:ff:af:8c:b1:47:5d:38:70:98:29:a2:
8b:f6:aa:87:42:95:0f:86:c0:59:d9:a8:69:e8:d9:fe:9d:a2:
bd:92:ff:04:d7:4f:8e:b6:88:7a:27:86:d7:ad:7b:5c:85:33:
56:ef:7c:05:1d:18:04:5f:b2:61:6d:2d:57:ec:8c:61:58:5f:
56:b4:25:11:34:f7:05:c9:79:7c:25:a6:fc:fc:83:3b:b9:22:
08:2e:56:83:c3:a8:99:e0:b0:60:1b:55:e0:00:84:1d:d6:29:
55:5a:5e:5b:0f:26:fe:7f:bb:32:e8:46:47:51:c3:dc:61:7f:
bc:17:14:47:2c:fb:56:ff:29:34:4a:7d:0a:95:f7:3f:f1:6b:
c8:0d:ff:80:c7:2f:e2:f0:bd:77:f6:d5:1f:26:f9:e2:4c:2f:
23:e6:43:e5:8a:27:2a:0e:dd:b1:4f:c2:0c:30:86:68:1e:f3:
ef:db:3f:ac:17:3f:8d:4e:05:54:e3:d9:8c:be:78:66:43:e8:
41:a2:2e:8b:90:5f:f9:21:b6:5e:f8:c9:19:0e:8a:93:f8:33:
96:21:2c:4c:3f:cd:ce:bc:fe:86:77:65:25:b7:fd:cb:bb:18:
d2:0c:47:4b:b0:12:35:79:d3:ad:e9:f2:fe:3a:9c:51:3c:52:
ac:55:cd:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:39:34 2025 by rpki-client