Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/7a6381-8ca4-4045-b837-301fdf114840/1/LTOrAnhiOJzMHx_IsKVkpuvXy40.mft
File: LTOrAnhiOJzMHx_IsKVkpuvXy40.mft (raw, json)
Hash identifier: NTAtuxfGA2VfqTE2/EUhwmQI1L5uSD73juuiyZcSk6Q=
Subject key identifier: 38:2A:E5:A1:5A:BB:A7:42:20:1B:6F:F2:3B:B3:91:E5:DC:34:0C:D7
Authority key identifier: 2D:33:AB:02:78:62:38:9C:CC:1F:1F:C8:B0:A5:64:A6:EB:D7:CB:8D
Certificate issuer: /CN=2d33ab027862389ccc1f1fc8b0a564a6ebd7cb8d
Certificate serial: 0194BD181738DFF7113C2229B102BE2132F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LTOrAnhiOJzMHx_IsKVkpuvXy40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/7a6381-8ca4-4045-b837-301fdf114840/1/LTOrAnhiOJzMHx_IsKVkpuvXy40.mft
Manifest number: 06C3
Signing time: Fri 31 Jan 2025 16:01:00 +0000
Manifest this update: Fri 31 Jan 2025 16:01:00 +0000
Manifest next update: Sat 01 Feb 2025 16:01:00 +0000
Files and hashes: 1: LTOrAnhiOJzMHx_IsKVkpuvXy40.crl (hash: crup3izTC5Ev5DLfzfuyJTEloo/ZdPbcYpTXOLN0ag4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:18:17:38:df:f7:11:3c:22:29:b1:02:be:21:32:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d33ab027862389ccc1f1fc8b0a564a6ebd7cb8d
Validity
Not Before: Jan 31 16:01:00 2025 GMT
Not After : Feb 1 16:01:00 2025 GMT
Subject: CN=382ae5a15abba742201b6ff23bb391e5dc340cd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:cf:05:e2:c4:3e:d4:e1:b6:cf:fe:8c:4a:58:
02:4e:69:f8:dd:66:77:fc:60:cc:ce:bc:3b:8e:98:
f2:d4:ed:1b:3f:61:76:eb:b9:5b:f4:fb:93:0d:00:
71:1f:02:dc:cb:cb:89:d3:cc:43:95:cd:c7:80:bf:
66:61:5e:ae:32:4c:30:c6:85:3c:0d:d7:78:f8:90:
a4:3f:3c:84:2b:7b:33:eb:3e:0e:ef:04:a0:5c:ae:
c6:06:7e:e9:79:cb:c1:6b:d7:4c:25:b1:7b:03:be:
b2:aa:d2:00:14:ec:a1:cf:0d:48:84:47:10:ed:b8:
95:65:da:65:ca:f1:ed:73:74:88:13:cc:e3:cd:d6:
76:78:f6:e4:18:5e:e7:f9:cf:d5:c0:8b:75:19:2e:
e7:a0:c5:0f:6d:09:f5:73:43:f9:cb:e4:fc:3c:13:
fa:f8:c9:78:4b:e1:d1:88:6a:2d:90:6b:66:7f:aa:
04:1c:a0:fb:03:a9:78:1a:d5:b6:78:00:a5:79:ef:
ff:5e:f1:02:f6:06:f3:d9:d1:af:67:33:7a:9f:ad:
ec:8c:f2:71:1e:fc:d4:b9:16:25:a2:96:94:58:82:
20:23:01:1e:5e:bd:5f:53:7d:c2:9b:cb:28:d7:f2:
53:71:38:5e:ff:00:19:d0:c5:47:31:c1:ea:a9:9c:
e0:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:2A:E5:A1:5A:BB:A7:42:20:1B:6F:F2:3B:B3:91:E5:DC:34:0C:D7
X509v3 Authority Key Identifier:
keyid:2D:33:AB:02:78:62:38:9C:CC:1F:1F:C8:B0:A5:64:A6:EB:D7:CB:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LTOrAnhiOJzMHx_IsKVkpuvXy40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/7a6381-8ca4-4045-b837-301fdf114840/1/LTOrAnhiOJzMHx_IsKVkpuvXy40.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/7a6381-8ca4-4045-b837-301fdf114840/1/LTOrAnhiOJzMHx_IsKVkpuvXy40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:49:0a:94:b0:62:80:85:5a:1b:5c:0f:24:d7:00:ae:89:5e:
e0:e6:71:66:ff:67:b1:d3:03:10:56:03:2e:de:eb:2f:bd:13:
28:41:61:e9:df:98:53:74:fe:18:9e:22:7b:73:6f:fc:eb:e2:
cf:89:7e:47:6d:b2:17:73:72:31:ae:08:30:20:ba:fe:62:5c:
62:d7:62:93:d3:ab:42:4f:c1:55:8d:72:ac:f1:73:d7:f2:40:
16:11:37:ac:e4:53:86:46:00:cf:2d:13:bd:e5:4a:fa:42:41:
7b:9f:26:96:3c:17:e1:12:a6:60:00:de:bd:b6:2f:5a:ac:bc:
a7:62:a0:23:7c:a4:b5:13:a4:44:0a:b3:18:a8:4a:bb:6b:2f:
37:68:76:67:c1:59:83:6c:fd:4d:ca:2b:54:5f:78:32:89:42:
b0:56:95:d4:10:80:21:b9:52:b3:4e:1d:e4:dd:d4:b6:99:10:
0b:00:58:19:41:e2:35:ca:d4:9d:94:dc:fd:92:29:c8:fd:d3:
39:58:e2:b3:79:3f:79:6b:fd:14:75:64:8b:b4:35:3f:2b:60:
7d:12:a9:fc:90:99:84:39:e3:12:45:e2:11:7a:20:9e:b8:65:
e2:75:21:1c:e3:47:de:b0:e0:cd:c8:b5:52:d5:ab:a6:f8:fe:
13:90:1a:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:52:30 2025 by rpki-client