Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/b12604-b481-416d-b088-210767bd0ba2/1/LDe0vsl9YIq-I7xXujmCRszFd2A.mft
File: LDe0vsl9YIq-I7xXujmCRszFd2A.mft (raw, json)
Hash identifier: l0McKUauNWNOsG1eT0mEvNMl1UYX2uf19UqU9HshuP4=
Subject key identifier: C8:C1:9E:BE:E7:16:81:E5:09:48:89:49:CE:6A:83:64:73:B2:6D:38
Authority key identifier: 2C:37:B4:BE:C9:7D:60:8A:BE:23:BC:57:BA:39:82:46:CC:C5:77:60
Certificate issuer: /CN=2c37b4bec97d608abe23bc57ba398246ccc57760
Certificate serial: 0194BD4EB3B22AB3DAD5D8C6AD611D23FDB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LDe0vsl9YIq-I7xXujmCRszFd2A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/b12604-b481-416d-b088-210767bd0ba2/1/LDe0vsl9YIq-I7xXujmCRszFd2A.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 17:00:39 +0000
Manifest this update: Fri 31 Jan 2025 17:00:39 +0000
Manifest next update: Sat 01 Feb 2025 17:00:39 +0000
Files and hashes: 1: 7BY_kFwL8OEGCGg4fffLBCGfbIk.roa (hash: wPQVbJEzFYU2FTuvcz3iiUbD5hpnYkEGB5yumpXFpQo=)
2: LDe0vsl9YIq-I7xXujmCRszFd2A.crl (hash: 1yWkO57p4fBEYoB2Zl5Nhqs927+s4hkLY/rAI20KoKM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:b3:b2:2a:b3:da:d5:d8:c6:ad:61:1d:23:fd:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c37b4bec97d608abe23bc57ba398246ccc57760
Validity
Not Before: Jan 31 17:00:39 2025 GMT
Not After : Feb 1 17:00:39 2025 GMT
Subject: CN=c8c19ebee71681e509488949ce6a836473b26d38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:7b:c6:95:2c:cb:33:6b:8e:17:97:da:ea:f3:
a7:92:7e:73:23:10:e8:d9:14:fa:cb:0b:3d:d6:95:
2d:0c:07:7d:d5:0d:5d:df:dc:7a:27:d4:4e:ec:55:
27:d2:eb:61:96:17:73:01:66:6f:b6:08:ff:54:f8:
ed:19:dd:7c:a3:78:e3:96:68:24:7f:60:a0:7f:70:
7d:a8:06:22:30:1f:e9:06:f3:20:41:a9:8d:b6:ee:
da:19:09:96:59:bd:7b:a9:d1:98:ee:3c:d8:5a:ec:
2c:a2:dd:5a:e5:ce:72:20:53:45:28:c1:09:39:51:
62:03:97:e3:28:4d:60:11:4e:e7:96:8a:d6:d7:c4:
3d:84:8f:38:5b:48:1c:3c:1c:d0:f5:a6:f0:54:50:
f4:d6:f0:11:96:f6:2f:e6:a5:69:33:8f:b6:d1:c4:
81:53:4f:74:76:97:af:5e:c3:9f:e3:36:a1:3f:26:
09:74:02:cc:02:bc:23:c8:34:81:17:08:0e:1e:3c:
d9:20:78:a7:10:8b:53:8b:e7:0f:79:5f:9a:4d:cf:
18:00:91:d6:12:da:3b:c9:cf:4c:2a:f6:8c:3a:fe:
fe:e1:da:79:ff:19:24:a7:43:c1:a8:d2:cc:50:1d:
4c:24:dd:99:ef:c6:d5:8f:f1:84:30:1f:9e:a8:70:
34:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:C1:9E:BE:E7:16:81:E5:09:48:89:49:CE:6A:83:64:73:B2:6D:38
X509v3 Authority Key Identifier:
keyid:2C:37:B4:BE:C9:7D:60:8A:BE:23:BC:57:BA:39:82:46:CC:C5:77:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LDe0vsl9YIq-I7xXujmCRszFd2A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/b12604-b481-416d-b088-210767bd0ba2/1/LDe0vsl9YIq-I7xXujmCRszFd2A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/b12604-b481-416d-b088-210767bd0ba2/1/LDe0vsl9YIq-I7xXujmCRszFd2A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:b3:82:04:b1:40:d1:ce:39:09:86:37:46:f9:cf:4e:49:df:
ce:7b:86:c7:56:7a:16:c7:28:6c:ff:d1:ca:74:b1:34:57:f5:
58:bb:ff:91:eb:3b:d9:8c:47:ee:de:f2:23:11:61:cd:f3:02:
9a:a5:fc:c5:de:1f:d4:a3:37:0f:98:64:97:1b:e0:7d:43:38:
79:8e:86:a7:7c:3e:13:4b:10:1e:11:ca:e2:8f:96:0d:8d:73:
0c:05:df:ba:73:ec:48:60:b3:aa:0d:10:6c:dc:22:81:12:e3:
de:fc:66:44:0b:f2:79:d6:ac:77:a0:f9:2b:dc:81:50:99:a4:
8b:7f:e5:1a:59:d9:6c:22:e3:34:d6:b1:98:13:85:39:89:6c:
fa:27:fe:de:51:a5:0a:bc:d3:95:98:51:d2:8a:97:12:63:59:
48:df:22:5d:74:90:a8:f1:cb:5a:8f:19:24:6f:2a:03:02:8a:
1a:ac:db:61:04:41:24:90:4a:f1:71:8f:5e:f3:8d:0a:c0:4e:
8e:d7:74:b9:a4:70:ec:18:95:d7:da:b1:f1:1f:8f:71:39:19:
e2:3c:f8:85:70:09:f7:45:21:36:e5:0d:82:ae:d5:97:c0:52:
14:2f:43:84:e7:08:19:e5:ec:01:e5:9b:97:a8:51:8a:9b:b6:
8c:17:79:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 09:14:37 2025 by rpki-client