Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/0d6b47-8191-41e2-8113-6e56212cdf5c/1/LqdibWANr3WTdqZQfh1oQ4aZLTE.mft
File: LqdibWANr3WTdqZQfh1oQ4aZLTE.mft (raw, json)
Hash identifier: i0AHPStiNAK61rDSMJ2JKGox2A2FxOOS6goRqBEQJ9E=
Subject key identifier: 6E:12:7B:74:A0:1E:6F:0B:70:35:79:B7:52:77:64:8F:B9:F4:11:C9
Authority key identifier: 2E:A7:62:6D:60:0D:AF:75:93:76:A6:50:7E:1D:68:43:86:99:2D:31
Certificate issuer: /CN=2ea7626d600daf759376a6507e1d684386992d31
Certificate serial: 0194BC3CBB3CAEE7B9588C7F6C129C5DCB4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LqdibWANr3WTdqZQfh1oQ4aZLTE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/0d6b47-8191-41e2-8113-6e56212cdf5c/1/LqdibWANr3WTdqZQfh1oQ4aZLTE.mft
Manifest number: 0A46
Signing time: Fri 31 Jan 2025 12:01:24 +0000
Manifest this update: Fri 31 Jan 2025 12:01:24 +0000
Manifest next update: Sat 01 Feb 2025 12:01:24 +0000
Files and hashes: 1: LqdibWANr3WTdqZQfh1oQ4aZLTE.crl (hash: CxY1yweAUzTiGTJNVU8JcJtrR4N2jQG0jIeYweiNKdw=)
2: RnQqeSwt7hN3ORL3uVQS5JgLuZs.roa (hash: PSsACPr2ZZlu/VcCkGWefI0lMsTEK4kuZI31GIxteCE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:bb:3c:ae:e7:b9:58:8c:7f:6c:12:9c:5d:cb:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ea7626d600daf759376a6507e1d684386992d31
Validity
Not Before: Jan 31 12:01:24 2025 GMT
Not After : Feb 1 12:01:24 2025 GMT
Subject: CN=6e127b74a01e6f0b703579b75277648fb9f411c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:e8:49:b4:50:40:14:43:f2:11:13:66:36:01:
d4:09:2b:4a:52:01:2c:93:4b:a5:5c:27:fe:69:3c:
d6:c0:30:4a:f6:c0:7f:b6:3c:09:5d:ac:d4:98:18:
cb:20:36:ef:a4:eb:af:c8:51:ab:0b:de:3c:a7:b5:
da:7d:07:a6:05:83:c9:81:6b:b6:a6:c0:f1:f1:5d:
13:c2:65:3a:6e:ee:5c:eb:d9:38:dc:08:93:41:6e:
1c:1c:fe:64:51:a3:11:6e:31:6a:5b:ff:cb:5b:b4:
a3:3d:af:7b:1a:1b:04:4a:1b:6f:df:e1:d9:d7:7b:
90:14:a1:df:97:16:4a:ba:22:26:a0:76:1c:14:ee:
de:50:02:f7:8d:f3:3a:22:e6:e0:72:cd:61:c3:2d:
d4:fa:27:ab:82:10:dd:83:a8:d5:a1:f0:4a:e2:b4:
16:f9:c7:fd:9d:d9:10:02:83:a4:83:f0:a0:3a:7c:
83:e2:cd:3c:bb:c5:33:dd:6b:80:82:3b:b3:94:9c:
b7:d2:f2:5e:4a:a2:dc:c2:45:05:97:91:e9:e2:65:
1f:92:82:8d:bd:f3:ef:9c:0c:af:a3:94:e9:a7:37:
47:4f:42:95:06:4a:3b:e2:1a:2e:b1:27:73:a3:f0:
73:93:78:1b:9d:ad:12:29:cd:af:c6:71:75:a2:cc:
3b:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:12:7B:74:A0:1E:6F:0B:70:35:79:B7:52:77:64:8F:B9:F4:11:C9
X509v3 Authority Key Identifier:
keyid:2E:A7:62:6D:60:0D:AF:75:93:76:A6:50:7E:1D:68:43:86:99:2D:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LqdibWANr3WTdqZQfh1oQ4aZLTE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/0d6b47-8191-41e2-8113-6e56212cdf5c/1/LqdibWANr3WTdqZQfh1oQ4aZLTE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/0d6b47-8191-41e2-8113-6e56212cdf5c/1/LqdibWANr3WTdqZQfh1oQ4aZLTE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:3d:1c:6f:e1:be:72:61:77:91:97:b3:43:3f:6f:df:72:85:
98:1f:b7:4b:c7:e4:ac:44:7c:06:1c:11:e7:bf:5f:ab:8b:c4:
d7:06:92:f3:ea:2d:6c:14:44:3e:f7:15:44:f3:34:ff:02:5f:
fc:9b:aa:ae:2e:5d:7b:01:00:8b:19:8d:5a:2b:02:0c:32:3e:
b5:2a:23:31:17:ff:34:e8:34:a7:51:cf:36:7f:41:ef:8f:9e:
78:15:ec:16:88:d6:66:1c:3d:aa:38:0e:51:ce:de:95:21:c8:
09:43:ca:a3:d8:34:cb:1c:ea:a7:7a:b1:62:b6:7a:48:9a:0c:
8a:f2:b8:f0:0e:15:ed:ce:e5:21:6e:c6:40:24:f3:fc:6a:13:
85:ca:8a:ae:8a:22:2b:c2:ff:ba:9e:42:52:11:fa:c3:7b:01:
50:3f:8b:32:f3:19:b5:66:d9:9a:62:f5:8a:ca:08:68:43:f3:
2a:f7:ad:ec:21:0d:4e:a6:70:8e:78:13:d5:51:97:f9:d6:c0:
59:fa:28:11:8a:24:ba:19:98:7e:4d:3e:17:35:1a:2a:f1:ee:
14:41:18:a7:5f:3b:a9:38:a1:01:83:90:29:e1:ef:1d:8b:0a:
57:35:34:a3:8a:8b:ef:4a:d1:60:45:4c:58:73:4d:9d:04:74:
80:2d:94:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:48:21 2025 by rpki-client