Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/ba1987-522e-498c-a359-76a0f7b841dc/1/LWNPtoGAIUTwZMGxnxH2qudZbc8.mft
File: LWNPtoGAIUTwZMGxnxH2qudZbc8.mft (raw, json)
Hash identifier: lR7iqLAAipMZeVL+YcQQRBAek7SDyaWERf3qVerV99Y=
Subject key identifier: 80:AA:D2:B0:BD:53:04:FD:5A:A2:3E:27:1A:50:D9:F0:D8:D3:64:03
Authority key identifier: 2D:63:4F:B6:81:80:21:44:F0:64:C1:B1:9F:11:F6:AA:E7:59:6D:CF
Certificate issuer: /CN=2d634fb681802144f064c1b19f11f6aae7596dcf
Certificate serial: 0194BC72C3E511B9519AD3BC2868297E509D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LWNPtoGAIUTwZMGxnxH2qudZbc8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/ba1987-522e-498c-a359-76a0f7b841dc/1/LWNPtoGAIUTwZMGxnxH2qudZbc8.mft
Manifest number: 0720
Signing time: Fri 31 Jan 2025 13:00:25 +0000
Manifest this update: Fri 31 Jan 2025 13:00:25 +0000
Manifest next update: Sat 01 Feb 2025 13:00:25 +0000
Files and hashes: 1: LWNPtoGAIUTwZMGxnxH2qudZbc8.crl (hash: HhsHhWKeXOzhz2QIs+JSJphJaRFqkFv4/cK1YGSp9gE=)
2: VLvU695jlmxr_Aa_-diXqvNVQGY.roa (hash: /bKiG14xP3FUaKqcC1XqqIaBQA/QOWOmJHyp9J37dmY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:c3:e5:11:b9:51:9a:d3:bc:28:68:29:7e:50:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d634fb681802144f064c1b19f11f6aae7596dcf
Validity
Not Before: Jan 31 13:00:25 2025 GMT
Not After : Feb 1 13:00:25 2025 GMT
Subject: CN=80aad2b0bd5304fd5aa23e271a50d9f0d8d36403
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:eb:af:df:72:c1:59:5d:18:56:8e:e8:6d:85:
d5:f4:b2:5f:b5:57:98:66:5e:ba:d5:a3:31:f8:5e:
48:c9:aa:82:ef:c4:18:5c:0e:e1:3a:cc:5b:cb:98:
7c:62:92:18:7d:a9:e2:66:c6:07:8e:ad:fc:93:e9:
91:76:68:be:4f:77:31:76:b0:bf:cd:66:63:71:e8:
8b:9a:7f:ab:e6:1a:4b:b0:63:b0:96:e6:4f:84:24:
7a:b5:19:45:59:09:d6:b1:75:a7:56:fc:c3:16:c5:
6b:e9:a9:b4:20:ac:bb:e5:43:95:62:f7:68:7d:62:
9f:3c:3f:98:71:bb:f3:83:a9:74:a9:2e:5d:8b:84:
8c:f5:5d:20:10:a2:9a:c8:b5:cd:e2:92:8e:44:47:
e0:12:1d:aa:01:1a:db:5f:92:2c:6a:f3:35:b3:ee:
8b:88:21:50:0d:8e:4f:55:9f:01:4b:fc:2c:d0:2c:
2f:8b:4a:80:29:5b:1c:d8:24:ea:47:2a:a5:51:f1:
63:b6:97:e4:8a:a4:71:15:52:6f:a0:52:22:65:26:
53:12:4a:fb:79:d1:89:e7:41:30:60:60:6e:66:d7:
0c:6c:20:05:d9:ea:2b:db:dc:72:3e:8d:83:cb:f4:
fd:c2:d0:60:54:da:d3:f6:56:49:0c:8b:7c:b3:ce:
71:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:AA:D2:B0:BD:53:04:FD:5A:A2:3E:27:1A:50:D9:F0:D8:D3:64:03
X509v3 Authority Key Identifier:
keyid:2D:63:4F:B6:81:80:21:44:F0:64:C1:B1:9F:11:F6:AA:E7:59:6D:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LWNPtoGAIUTwZMGxnxH2qudZbc8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/ba1987-522e-498c-a359-76a0f7b841dc/1/LWNPtoGAIUTwZMGxnxH2qudZbc8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/ba1987-522e-498c-a359-76a0f7b841dc/1/LWNPtoGAIUTwZMGxnxH2qudZbc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:1f:6a:bc:a8:c3:05:46:75:f8:c3:78:03:70:e2:4f:e6:c6:
52:4e:a7:1d:81:df:50:b8:f4:f3:b2:24:0e:7a:75:d9:7a:61:
72:e8:dc:16:be:56:af:0a:94:a4:83:41:48:89:d3:1e:a3:20:
53:6d:25:71:df:44:24:48:36:30:a4:5d:a7:2f:39:44:12:79:
84:a9:a0:5f:77:eb:7b:59:79:36:c9:39:65:3e:96:db:61:f2:
bd:5a:32:0c:28:84:39:24:f6:86:90:86:0f:5e:ba:0d:bc:27:
aa:8e:3f:df:f2:89:5d:e6:ce:2d:91:26:9e:61:52:75:c3:ac:
e4:5c:11:1d:1e:81:77:e4:56:d8:e3:7c:08:75:b0:16:bb:5a:
75:3a:1d:34:cf:6f:be:db:31:ae:d3:24:f1:56:0f:3d:54:eb:
8a:6d:cd:1f:4a:6b:2c:4c:01:09:cd:71:72:dc:83:7c:8a:66:
e1:3a:f6:f8:e9:04:cf:b7:98:6b:12:04:66:4b:08:d4:6d:dd:
59:60:c5:25:81:b0:c2:db:17:09:ad:c9:7a:b0:06:87:c8:0e:
dc:13:97:0c:b3:79:f7:33:65:69:1e:03:8d:74:49:da:c6:01:
97:73:ea:78:07:46:ab:85:70:6e:08:fe:3d:22:db:ba:24:bf:
81:81:d4:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:54 2025 by rpki-client