Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/8efd2e-692c-4f47-b749-4f36c6a20c0e/1/LArI02kFESA6Me94Xm0cRDksoos.mft
File: LArI02kFESA6Me94Xm0cRDksoos.mft (raw, json)
Hash identifier: NqmMCEiHz+73q6mD1PrMsiYqMIcIp1DlpM6+qCLWrkg=
Subject key identifier: 7D:62:C3:44:66:BF:87:78:39:FE:86:85:65:03:87:C1:CA:1A:D7:68
Authority key identifier: 2C:0A:C8:D3:69:05:11:20:3A:31:EF:78:5E:6D:1C:44:39:2C:A2:8B
Certificate issuer: /CN=2c0ac8d3690511203a31ef785e6d1c44392ca28b
Certificate serial: 0194BD4EA298DD8733792477DA67D2920ADB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LArI02kFESA6Me94Xm0cRDksoos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/8efd2e-692c-4f47-b749-4f36c6a20c0e/1/LArI02kFESA6Me94Xm0cRDksoos.mft
Manifest number: 11D2
Signing time: Fri 31 Jan 2025 17:00:34 +0000
Manifest this update: Fri 31 Jan 2025 17:00:34 +0000
Manifest next update: Sat 01 Feb 2025 17:00:34 +0000
Files and hashes: 1: GB5yxI4ByHznh8BVy7-0wKqCL9o.roa (hash: uNiZ21GMmhqlbkGeCw3XR4SWt0bm2+3p2g+5iqS1414=)
2: LArI02kFESA6Me94Xm0cRDksoos.crl (hash: fwShz50muu3wCEZnMglx4JGnNkK7EzEpmVBnKR+hhZY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:a2:98:dd:87:33:79:24:77:da:67:d2:92:0a:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c0ac8d3690511203a31ef785e6d1c44392ca28b
Validity
Not Before: Jan 31 17:00:34 2025 GMT
Not After : Feb 1 17:00:34 2025 GMT
Subject: CN=7d62c34466bf877839fe8685650387c1ca1ad768
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:1b:6d:5e:df:6d:52:16:3d:d7:c1:77:47:04:
31:5c:63:33:63:37:16:3a:b6:be:ee:36:b2:9f:2e:
02:f3:7c:cd:79:36:29:1f:c8:9e:e9:90:30:39:44:
9d:e7:3a:66:7a:10:c7:42:b2:36:6c:c9:f2:6d:b8:
72:e3:a4:47:e9:c8:e1:3d:c1:9a:f5:a0:3e:1e:04:
da:a3:fa:ae:2d:a2:14:a5:27:1d:a7:e2:3d:aa:8a:
f2:11:f2:4e:b8:69:80:a7:a4:5d:38:1e:5d:94:91:
33:00:d4:63:ef:8c:a1:7f:5f:c9:83:dc:40:e9:47:
4f:82:f9:80:4f:66:e0:a3:ae:a0:f7:b2:1d:c9:f5:
8a:2c:bc:e4:c1:93:af:57:2b:41:2e:64:6f:57:77:
c8:0f:4f:29:8b:ef:56:1b:3c:83:d4:06:24:ee:8c:
f7:e2:b5:a9:40:d4:57:56:b3:4e:8d:04:64:0f:2a:
74:92:74:07:fc:54:fa:ea:4f:46:62:a8:86:5e:ef:
5d:6d:8a:60:97:46:00:10:c3:ce:f4:40:4b:c0:42:
62:30:d1:cd:f5:8c:7f:bb:ae:ea:bc:45:d6:ef:b1:
94:31:09:52:25:f9:26:ca:14:a9:9b:ee:99:bc:7d:
1e:5f:e9:59:6c:a9:39:c2:98:bb:2c:69:1f:f9:48:
cd:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:62:C3:44:66:BF:87:78:39:FE:86:85:65:03:87:C1:CA:1A:D7:68
X509v3 Authority Key Identifier:
keyid:2C:0A:C8:D3:69:05:11:20:3A:31:EF:78:5E:6D:1C:44:39:2C:A2:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LArI02kFESA6Me94Xm0cRDksoos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/8efd2e-692c-4f47-b749-4f36c6a20c0e/1/LArI02kFESA6Me94Xm0cRDksoos.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/8efd2e-692c-4f47-b749-4f36c6a20c0e/1/LArI02kFESA6Me94Xm0cRDksoos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:7b:91:08:a5:d2:29:ba:a1:8f:12:3c:e4:6f:e9:51:c0:00:
08:8e:b1:15:05:36:70:97:2b:88:64:bf:45:61:e1:47:bb:f5:
37:25:c9:af:c2:4d:94:91:d9:5f:1c:8d:c9:54:52:71:47:cf:
0c:c1:ed:fa:44:6e:ff:7a:6b:be:0a:31:4f:09:9c:fc:0c:f1:
cb:ba:2b:ed:3a:de:75:60:32:e4:a0:bb:4f:ce:7c:27:56:bc:
b3:1b:b1:38:a1:6c:ca:4f:f2:4b:6a:ff:60:55:09:ff:77:ce:
bf:b4:67:1b:33:5c:7c:db:b9:e7:6b:3e:78:08:e6:d9:dc:ed:
40:41:44:54:4f:84:4c:64:a1:f4:1c:bd:8c:0b:05:8f:1f:50:
1a:b8:b4:b3:f6:f8:0b:b2:ab:8b:28:ca:17:bd:01:5b:e9:1c:
3c:96:d2:f2:36:9a:36:26:af:b4:0f:bc:72:10:53:40:99:40:
fe:76:44:71:d2:98:5b:0e:d0:65:55:57:7d:3e:a3:c1:ba:e0:
2c:36:a4:1a:e7:a0:da:0d:4e:5b:72:ad:60:2e:92:15:98:88:
f3:0d:40:10:1a:50:f7:b2:94:ff:73:97:e8:37:26:4c:c3:1d:
af:7a:2f:6f:f4:6e:82:33:a1:7a:54:c2:72:1c:78:43:22:fb:
53:4e:9c:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:32:33 2025 by rpki-client