Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/e7d3de-1845-41f3-907a-9e96af6d6a8f/1/LI-oUz3MgguhrW-ysvAWEBBTHbk.mft
File: LI-oUz3MgguhrW-ysvAWEBBTHbk.mft (raw, json)
Hash identifier: mXUZyas8+Ns0IJfoqqecl1EVGIMB0aCldmOziY+TGtQ=
Subject key identifier: BC:DB:A2:A6:FC:5F:DE:C3:32:12:2A:89:1B:C3:F7:1A:6A:44:35:EA
Authority key identifier: 2C:8F:A8:53:3D:CC:82:0B:A1:AD:6F:B2:B2:F0:16:10:10:53:1D:B9
Certificate issuer: /CN=2c8fa8533dcc820ba1ad6fb2b2f0161010531db9
Certificate serial: 0194BCA9C8FDD50B342562E668274929218C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LI-oUz3MgguhrW-ysvAWEBBTHbk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/e7d3de-1845-41f3-907a-9e96af6d6a8f/1/LI-oUz3MgguhrW-ysvAWEBBTHbk.mft
Manifest number: 062B
Signing time: Fri 31 Jan 2025 14:00:31 +0000
Manifest this update: Fri 31 Jan 2025 14:00:31 +0000
Manifest next update: Sat 01 Feb 2025 14:00:31 +0000
Files and hashes: 1: LI-oUz3MgguhrW-ysvAWEBBTHbk.crl (hash: O4tVeHC5E/p6CSALxNVNLb/j/sqq1/0hQiDIDPMlBUs=)
2: LoUtlaJ5mypaBQZ7Vl2VxjfI8z8.roa (hash: mjZMaLb9m8sq6wgkMHrxy81dzJq4evg/mUOP+NJvNIc=)
3: hwLQQhvfkTPO9tfiU3xWDktqf98.roa (hash: ARLJwTBnOck1jpPDB5YSuCoDfjoyKgo2AkGDb71eUiI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:c8:fd:d5:0b:34:25:62:e6:68:27:49:29:21:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c8fa8533dcc820ba1ad6fb2b2f0161010531db9
Validity
Not Before: Jan 31 14:00:31 2025 GMT
Not After : Feb 1 14:00:31 2025 GMT
Subject: CN=bcdba2a6fc5fdec332122a891bc3f71a6a4435ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:4b:0e:11:c7:30:44:ec:0e:48:73:2c:3e:f4:
ad:c2:12:d3:44:d1:dd:4d:41:a2:90:db:a2:96:85:
86:ee:cb:5a:c7:d6:fc:31:b2:6e:bc:57:7d:59:40:
8d:20:ce:42:b7:01:58:cc:ad:c2:c9:01:66:b6:c1:
e3:2d:60:1a:fb:72:93:e0:9b:cb:25:89:d8:af:ca:
fa:ec:24:19:12:78:dd:4b:df:1f:57:fe:c6:bd:a7:
b6:a2:6f:a7:e7:60:1e:17:48:29:94:88:6b:a2:6f:
65:f3:2b:73:b4:53:fa:88:0c:68:f0:42:fc:a8:34:
cf:60:12:fc:b8:e1:d9:35:c6:c5:57:88:e0:ca:de:
1e:5e:e4:97:31:93:fc:5c:9d:19:17:39:7e:94:32:
19:ee:7c:43:df:51:d7:ea:90:40:99:d4:94:5c:a0:
7d:70:ec:7c:fc:3c:bf:0a:4d:54:ca:53:59:e0:f7:
3b:03:8d:33:ac:62:2a:38:6e:c9:09:b6:03:5a:57:
df:dc:d3:03:c7:25:be:9e:96:28:5b:aa:97:78:51:
f5:32:ec:39:b2:e0:cb:ef:bc:e5:2d:64:1c:2e:32:
8f:c9:a5:04:93:68:23:24:e8:6b:3b:64:24:d8:19:
b6:bc:00:41:a1:83:0a:6d:9a:41:df:4d:4c:39:42:
25:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:DB:A2:A6:FC:5F:DE:C3:32:12:2A:89:1B:C3:F7:1A:6A:44:35:EA
X509v3 Authority Key Identifier:
keyid:2C:8F:A8:53:3D:CC:82:0B:A1:AD:6F:B2:B2:F0:16:10:10:53:1D:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LI-oUz3MgguhrW-ysvAWEBBTHbk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/e7d3de-1845-41f3-907a-9e96af6d6a8f/1/LI-oUz3MgguhrW-ysvAWEBBTHbk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/e7d3de-1845-41f3-907a-9e96af6d6a8f/1/LI-oUz3MgguhrW-ysvAWEBBTHbk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:d7:bc:27:15:c4:49:a2:12:2b:a3:0d:36:8f:33:ca:a0:d2:
2a:7d:c1:b6:d7:fc:44:7e:2a:60:a4:28:5d:4a:68:81:f1:c2:
57:80:6d:34:36:f8:6b:16:31:cd:7d:69:08:bf:ea:cb:98:9c:
9f:f0:fe:d1:e7:f4:e8:cd:4a:9d:a6:8c:f6:64:12:62:b8:8b:
0c:6d:a8:f7:88:d2:b5:b8:a8:15:60:71:5a:79:a4:13:00:f2:
65:ca:3f:d8:3c:f0:fd:f6:74:86:07:f5:92:df:6f:77:9a:c3:
70:47:d1:89:a8:8b:26:77:af:0a:fb:e8:ea:c0:38:c8:55:00:
6e:52:f6:09:52:2b:c7:c0:90:1e:eb:b8:97:47:08:72:8b:57:
7f:ce:31:82:3a:eb:84:54:e4:60:2f:7b:97:ad:08:ee:83:09:
04:76:33:99:a6:d6:ce:4f:24:c9:82:ad:c6:bb:66:2c:ee:7b:
3e:ba:05:9a:d5:88:a3:54:3b:57:27:fd:ba:b6:42:9c:39:d4:
17:9b:a6:fd:fe:e1:f7:d2:ff:f0:f1:7b:52:dc:53:3b:d3:b1:
6c:02:30:a9:ea:ec:01:95:22:5b:c8:a2:42:13:c3:f8:57:25:
85:a7:b7:42:da:01:d7:60:e5:27:fd:ab:be:bf:42:9f:46:7e:
9c:52:38:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:47:55 2025 by rpki-client