
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/62641f-cf99-4514-b7d7-b2a23246e614/1/L28OoBJ6bjkhlWljgL5bsEdLAd8.mft
File: L28OoBJ6bjkhlWljgL5bsEdLAd8.mft (raw, json)
Hash identifier: wkx5unGro39+cr+uSs0uil3949HMIiI4xVJy9O0xcTk=
Subject key identifier: 30:5F:8B:35:99:AB:EB:B8:E5:A7:22:D1:E0:5D:84:30:14:E3:7F:85
Authority key identifier: 2F:6F:0E:A0:12:7A:6E:39:21:95:69:63:80:BE:5B:B0:47:4B:01:DF
Certificate issuer: /CN=2f6f0ea0127a6e392195696380be5bb0474b01df
Certificate serial: 0194BC7304C1E2A90E2A065F7D7A35B7137B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L28OoBJ6bjkhlWljgL5bsEdLAd8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/62641f-cf99-4514-b7d7-b2a23246e614/1/L28OoBJ6bjkhlWljgL5bsEdLAd8.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 13:00:41 +0000
Manifest this update: Fri 31 Jan 2025 13:00:41 +0000
Manifest next update: Sat 01 Feb 2025 13:00:41 +0000
Files and hashes: 1: L28OoBJ6bjkhlWljgL5bsEdLAd8.crl (hash: vn+OCGCdDdndOtDalg+Cd30oeJgy2gZcACzzeFNVkvk=)
2: vqiF7KHwgC4hKANJve3WilTtCaA.roa (hash: ViWg/cb4ZOWXmU8DGPzhe6lMZyYPSAoJx2DnUl9cMUQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:04:c1:e2:a9:0e:2a:06:5f:7d:7a:35:b7:13:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f6f0ea0127a6e392195696380be5bb0474b01df
Validity
Not Before: Jan 31 13:00:41 2025 GMT
Not After : Feb 1 13:00:41 2025 GMT
Subject: CN=305f8b3599abebb8e5a722d1e05d843014e37f85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:77:55:88:34:2b:16:78:c8:97:f0:b2:51:2c:
41:8d:3b:57:93:c3:d4:08:3b:05:80:75:58:29:43:
36:d1:0c:fe:e0:c9:6c:dd:9f:22:99:fa:d3:5b:bd:
e4:9a:73:ac:e3:03:d6:4a:2d:45:42:ec:96:5f:73:
02:5b:93:68:15:66:8f:e1:15:44:94:d8:a5:4d:57:
7b:08:51:f4:67:6b:36:8f:87:06:16:ae:47:dc:9b:
1c:68:35:96:74:1f:36:e8:68:fa:bc:da:d4:8a:ba:
b9:5f:bb:74:2b:1a:b1:30:03:6d:f0:ec:a7:4a:9a:
64:6f:0e:2d:34:40:b3:11:85:f0:59:a9:6a:f7:4e:
e5:e0:d1:47:ea:78:ad:95:4d:36:47:27:e5:d8:5f:
8b:41:bc:29:f3:d2:8d:b5:6c:e7:98:c0:77:b4:1a:
59:78:2c:ac:c9:3b:a4:c0:18:ad:e1:50:d4:49:85:
8c:d5:24:1e:0b:8f:93:ec:af:7f:ce:f9:83:6b:56:
7f:86:5c:a1:bb:6b:91:79:5d:da:84:c3:62:8a:74:
37:4b:dd:6e:cb:c5:d5:c2:e8:6b:b8:e4:d6:2d:e1:
3d:2c:92:28:43:ee:49:6e:ef:bc:70:d5:30:37:b8:
b3:c8:44:cb:c2:b1:b9:5f:80:5e:24:2e:e5:9a:75:
f5:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:5F:8B:35:99:AB:EB:B8:E5:A7:22:D1:E0:5D:84:30:14:E3:7F:85
X509v3 Authority Key Identifier:
keyid:2F:6F:0E:A0:12:7A:6E:39:21:95:69:63:80:BE:5B:B0:47:4B:01:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L28OoBJ6bjkhlWljgL5bsEdLAd8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/62641f-cf99-4514-b7d7-b2a23246e614/1/L28OoBJ6bjkhlWljgL5bsEdLAd8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/62641f-cf99-4514-b7d7-b2a23246e614/1/L28OoBJ6bjkhlWljgL5bsEdLAd8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:77:00:b5:ee:e5:5b:e7:ce:eb:89:86:8c:88:8b:d1:b4:3d:
ba:68:ea:5c:a8:7e:a4:96:86:19:ac:33:37:b0:7d:04:e7:08:
4f:2e:2b:46:2b:22:17:cf:65:1d:65:b7:0e:4b:f3:11:24:85:
f6:58:83:dc:3c:a0:1d:ec:cd:0e:3c:cb:0e:a0:cd:7b:ee:6a:
7b:e0:f2:32:db:f9:34:de:36:fb:58:76:7d:72:c1:54:f0:1d:
90:cd:ab:a4:37:73:97:76:bb:77:7c:07:9e:00:cf:b1:20:38:
3f:84:ec:f5:e2:ac:ae:6d:7a:45:22:04:c9:a4:c6:4b:54:5b:
06:e9:0a:51:d2:35:4d:1e:6a:a7:ba:3f:c9:66:44:fc:10:9b:
a7:b4:12:eb:0f:8e:5f:00:2f:bc:d1:b8:0a:a4:20:90:47:c8:
3d:ac:3c:38:f1:25:49:e9:ee:a2:f9:58:ca:c0:04:ed:2a:5f:
7e:63:59:77:b5:be:8a:a3:38:f9:e2:b1:b2:04:5d:26:c9:50:
23:c0:10:44:d4:1a:1d:35:3c:ae:ea:52:4c:ca:2b:95:a9:0e:
da:e1:5e:65:a5:f2:cc:f2:12:82:be:1f:04:c7:50:7d:af:19:
f5:dd:23:8a:3d:9c:82:e9:34:82:c0:49:96:95:1f:01:97:bd:
2f:df:80:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:47:20 2025 by rpki-client