Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/9a60cf-9d94-4585-a25b-5e7f95811562/1/LnOtRfij6-Znq7GWoonWcZvruC0.mft
File: LnOtRfij6-Znq7GWoonWcZvruC0.mft (raw, json)
Hash identifier: Bl5zrlmdl9oiXYJJUAW0Jw3vM9XDimnb5G8amoUMII8=
Subject key identifier: 57:38:FB:19:C5:BB:FC:34:28:B8:2F:6E:AD:14:23:2C:0F:D5:5A:87
Authority key identifier: 2E:73:AD:45:F8:A3:EB:E6:67:AB:B1:96:A2:89:D6:71:9B:EB:B8:2D
Certificate issuer: /CN=2e73ad45f8a3ebe667abb196a289d6719bebb82d
Certificate serial: 0194BD855D6EF41AC281A656D04C50CBCE70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LnOtRfij6-Znq7GWoonWcZvruC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/9a60cf-9d94-4585-a25b-5e7f95811562/1/LnOtRfij6-Znq7GWoonWcZvruC0.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 18:00:21 +0000
Manifest this update: Fri 31 Jan 2025 18:00:21 +0000
Manifest next update: Sat 01 Feb 2025 18:00:21 +0000
Files and hashes: 1: LnOtRfij6-Znq7GWoonWcZvruC0.crl (hash: iTOXuf5Ml4MomZTud0TAcLhoYTcYGpYfiyF5J2D+t+w=)
2: xBYzLNgtWEdItwv5XiwC0f2BVHs.roa (hash: M4igOLaB0nj0vGEKkqVeIm87sQmGzEgR39n8QW/vxOA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:5d:6e:f4:1a:c2:81:a6:56:d0:4c:50:cb:ce:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e73ad45f8a3ebe667abb196a289d6719bebb82d
Validity
Not Before: Jan 31 18:00:21 2025 GMT
Not After : Feb 1 18:00:21 2025 GMT
Subject: CN=5738fb19c5bbfc3428b82f6ead14232c0fd55a87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c8:77:5b:75:87:0c:88:e5:a4:48:99:fd:6b:
78:a8:25:2d:6c:67:7e:49:ac:81:28:f2:5e:4e:e9:
c3:e2:9e:0e:ce:de:b5:c6:09:96:8a:dd:2c:4e:1e:
0d:d7:3c:ac:49:36:5b:26:60:dc:02:0f:79:02:ab:
61:35:73:93:e0:b4:c2:d0:9f:af:be:e8:4f:f5:38:
e6:19:42:5b:47:ba:3d:d1:32:04:b7:09:17:99:cf:
f2:1f:00:d4:eb:12:8a:9b:c6:b2:45:f4:c5:01:af:
d5:d5:1f:8c:44:94:b8:ec:28:f2:f1:a7:53:c4:29:
f9:d6:82:cd:c9:36:f8:61:79:2c:3f:74:f3:1a:90:
73:c5:c7:6f:7b:9d:b6:bf:18:b8:d9:dd:05:57:c8:
40:bc:86:4f:de:e7:d6:3a:38:a6:83:4d:fa:ce:81:
42:49:39:ed:79:88:67:eb:88:7d:1c:a0:bf:0c:a1:
17:70:ec:d6:f8:cd:57:ed:f0:07:c3:0b:38:df:9c:
8f:f8:cf:fc:08:36:fe:f7:98:07:eb:59:0c:5b:d7:
09:f5:5e:9f:aa:34:d6:c1:5f:b1:30:24:4c:60:a7:
9d:d0:6b:98:0e:f1:88:60:04:90:dc:3e:22:13:fa:
6d:69:f5:b3:fd:42:da:37:fc:15:e5:3a:c3:2e:41:
61:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:38:FB:19:C5:BB:FC:34:28:B8:2F:6E:AD:14:23:2C:0F:D5:5A:87
X509v3 Authority Key Identifier:
keyid:2E:73:AD:45:F8:A3:EB:E6:67:AB:B1:96:A2:89:D6:71:9B:EB:B8:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LnOtRfij6-Znq7GWoonWcZvruC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/9a60cf-9d94-4585-a25b-5e7f95811562/1/LnOtRfij6-Znq7GWoonWcZvruC0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/9a60cf-9d94-4585-a25b-5e7f95811562/1/LnOtRfij6-Znq7GWoonWcZvruC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:e6:41:65:54:7e:04:ff:2e:3b:56:63:61:3f:43:b2:cb:1b:
43:b7:44:e9:48:ea:59:7f:37:23:cb:6d:eb:01:0f:8c:6b:a9:
7e:99:06:af:6c:2a:63:32:bc:de:38:8e:62:95:3d:6b:bd:6d:
9b:02:e8:8b:c4:18:36:b2:00:5f:72:7a:ef:69:2a:3f:a4:e8:
f1:de:8c:70:63:d7:27:77:6c:be:84:51:05:94:3e:f0:6a:c9:
b5:76:98:bc:d1:3b:b8:3b:9c:38:3a:37:a3:5e:13:33:03:d9:
8b:f0:d0:ef:fd:c8:e8:8a:74:18:a4:09:9d:0a:41:b5:9d:37:
db:ee:6f:0c:6e:3c:51:53:26:a0:05:fc:7b:8c:86:cd:47:f2:
d0:d5:13:e7:75:28:5b:72:64:80:eb:31:e9:c3:67:4b:63:6a:
ed:92:be:37:bf:fd:f0:6d:3b:ca:aa:c5:18:95:6f:99:b7:4d:
db:12:13:d9:e7:75:04:e8:27:a4:50:83:77:3c:83:97:14:a5:
b0:73:3e:d0:e6:77:3e:73:4e:e0:9b:40:98:7c:0e:28:46:e9:
b1:91:63:4f:e6:67:3d:0b:07:f0:41:48:09:18:99:69:4a:8f:
72:92:46:c6:94:ea:d9:51:13:f2:f0:43:5d:3e:0c:7f:c1:64:
2b:85:0d:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:01:14 2025 by rpki-client