Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/73f5b5-293d-4035-92ac-a87e2872ad8a/1/lrvRv8ovihV4-qtbEMD8NVVhzGU.mft
File: lrvRv8ovihV4-qtbEMD8NVVhzGU.mft (raw, json)
Hash identifier: vU5mDruxmLeGlGfpsNK4AIOM+IeuEYnhAbFukgayits=
Subject key identifier: 6B:3B:EA:75:7B:D8:60:D4:6B:7C:93:65:85:76:97:4A:DB:A1:60:EF
Authority key identifier: 96:BB:D1:BF:CA:2F:8A:15:78:FA:AB:5B:10:C0:FC:35:55:61:CC:65
Certificate issuer: /CN=96bbd1bfca2f8a1578faab5b10c0fc355561cc65
Certificate serial: 0194BD4EB21675AC7E95AC0B154BDBF08759
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lrvRv8ovihV4-qtbEMD8NVVhzGU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/73f5b5-293d-4035-92ac-a87e2872ad8a/1/lrvRv8ovihV4-qtbEMD8NVVhzGU.mft
Manifest number: 03C2
Signing time: Fri 31 Jan 2025 17:00:38 +0000
Manifest this update: Fri 31 Jan 2025 17:00:38 +0000
Manifest next update: Sat 01 Feb 2025 17:00:38 +0000
Files and hashes: 1: lrvRv8ovihV4-qtbEMD8NVVhzGU.crl (hash: dHmL0hzlgxoO9QjrD19f5yte2h3Bgc2NesFPPaZcWII=)
2: t9Y7BeYu12mZq7yxIRtEySM1Rtc.roa (hash: pHqieJKSJe/cYuypW4oPbapHkZUvdCP0qK0tLzbxp4k=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:b2:16:75:ac:7e:95:ac:0b:15:4b:db:f0:87:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96bbd1bfca2f8a1578faab5b10c0fc355561cc65
Validity
Not Before: Jan 31 17:00:38 2025 GMT
Not After : Feb 1 17:00:38 2025 GMT
Subject: CN=6b3bea757bd860d46b7c93658576974adba160ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:83:aa:5e:c4:0f:97:34:fb:10:b6:8d:14:34:
44:c4:e7:2e:5a:19:c8:32:8e:f7:d6:2f:ee:36:26:
b0:8e:7b:6e:52:a5:b4:06:6e:41:db:8f:ee:ec:20:
9f:d7:f2:5f:6c:fe:51:32:69:62:a9:21:4f:e1:34:
55:b0:01:3d:ae:ce:26:13:46:7f:38:37:aa:5e:50:
1d:b5:a4:55:23:8f:4b:fd:0a:f8:2d:ad:e1:db:27:
c4:a6:ce:9e:bf:40:23:f1:f3:18:f9:67:90:61:a4:
99:d6:73:0c:3d:b0:e8:61:d6:e8:67:48:67:d3:70:
0c:38:88:1e:98:5f:84:50:9f:3b:f5:67:2c:32:ca:
93:2c:4f:ab:57:5e:65:38:2c:44:52:93:cd:b8:15:
59:2e:36:d4:91:5a:be:bb:b2:9b:30:54:0c:4b:9f:
51:71:06:6b:2b:f7:37:8d:ea:a1:0f:95:38:fe:a0:
ab:b8:dd:c4:15:59:83:78:4b:ae:7e:8e:2a:36:cb:
0d:59:78:d1:99:7d:f7:3f:fa:1a:38:85:dc:f9:91:
68:89:91:28:77:24:85:63:63:7e:3e:1c:81:f3:75:
46:da:49:e7:27:e2:8b:c4:c4:d0:74:60:dd:71:e1:
9c:96:c1:bd:07:da:7e:54:09:16:92:c6:df:9d:3d:
26:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:3B:EA:75:7B:D8:60:D4:6B:7C:93:65:85:76:97:4A:DB:A1:60:EF
X509v3 Authority Key Identifier:
keyid:96:BB:D1:BF:CA:2F:8A:15:78:FA:AB:5B:10:C0:FC:35:55:61:CC:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lrvRv8ovihV4-qtbEMD8NVVhzGU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/73f5b5-293d-4035-92ac-a87e2872ad8a/1/lrvRv8ovihV4-qtbEMD8NVVhzGU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/73f5b5-293d-4035-92ac-a87e2872ad8a/1/lrvRv8ovihV4-qtbEMD8NVVhzGU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:b4:dc:b4:a9:01:6f:eb:42:21:96:98:ff:2f:db:f5:4d:16:
9f:f3:a1:01:3c:9e:fc:93:67:fe:49:5e:58:13:17:45:89:e4:
3c:53:a0:e9:05:97:9e:d9:71:1d:b7:5b:0f:9b:1b:8d:3f:dd:
70:16:96:3e:3f:ad:bf:2f:db:0d:d7:56:80:d1:9c:3e:c2:7b:
69:8f:f8:02:21:25:bb:97:b4:ed:3a:94:8d:0e:21:4d:d6:d1:
d0:b4:b6:4e:d9:7a:96:9c:7d:16:c9:05:14:55:83:3f:d2:d9:
22:98:a6:ec:e7:1d:2c:7f:b0:b4:0d:89:c9:41:ca:72:20:e3:
5b:bc:62:68:13:8f:80:ec:bf:ef:10:01:57:17:70:0f:ff:f3:
e2:f9:03:bf:64:cd:08:0e:a6:2e:cc:32:08:f8:55:f8:7b:8f:
ee:7c:91:31:5c:4a:54:1f:b6:5c:19:bd:70:ee:dc:7c:ba:63:
cc:1c:91:4e:76:0e:8e:a5:09:49:b6:21:12:dd:8b:13:6c:97:
93:4e:80:5c:23:50:da:db:b8:3f:b2:31:2a:e5:8a:24:00:63:
67:36:e6:98:23:9b:76:70:56:a2:44:3e:15:f8:37:50:47:12:
6b:46:a2:52:38:2d:d2:36:95:45:c2:3b:ea:7c:d9:ec:4c:bc:
14:75:91:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 11:25:44 2025 by rpki-client