Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/bbf75d-c1dd-44b0-a5e0-cdcc704b38a7/1/LQwhz_qAtaHly9Yxkw5_xV_d_Eg.mft
File: LQwhz_qAtaHly9Yxkw5_xV_d_Eg.mft (raw, json)
Hash identifier: Ns+oHladllHInRH/rbSrl5thzuwDFXSfTyhHLOOCgPc=
Subject key identifier: 49:42:06:B9:BC:2B:78:56:E7:0E:48:6F:47:9C:DE:C8:4A:51:F8:13
Authority key identifier: 2D:0C:21:CF:FA:80:B5:A1:E5:CB:D6:31:93:0E:7F:C5:5F:DD:FC:48
Certificate issuer: /CN=2d0c21cffa80b5a1e5cbd631930e7fc55fddfc48
Certificate serial: 0194BC3C01858548B9D026B7F7F114CCC2CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LQwhz_qAtaHly9Yxkw5_xV_d_Eg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/bbf75d-c1dd-44b0-a5e0-cdcc704b38a7/1/LQwhz_qAtaHly9Yxkw5_xV_d_Eg.mft
Manifest number: 12BE
Signing time: Fri 31 Jan 2025 12:00:36 +0000
Manifest this update: Fri 31 Jan 2025 12:00:36 +0000
Manifest next update: Sat 01 Feb 2025 12:00:36 +0000
Files and hashes: 1: LQwhz_qAtaHly9Yxkw5_xV_d_Eg.crl (hash: 63tpUNaH8Fl2b9e+CLi2eezR+FmackPFyqYTlxsBr14=)
2: WnteyksBXxvh50Fr3JRktkxQELU.roa (hash: VZ2ULNlKhReA1wdNSeA4G9O7QzDbzJEXTzE8wy4jEPM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:01:85:85:48:b9:d0:26:b7:f7:f1:14:cc:c2:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d0c21cffa80b5a1e5cbd631930e7fc55fddfc48
Validity
Not Before: Jan 31 12:00:36 2025 GMT
Not After : Feb 1 12:00:36 2025 GMT
Subject: CN=494206b9bc2b7856e70e486f479cdec84a51f813
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:ff:74:53:46:47:ce:d2:91:ba:55:06:aa:53:
ff:cd:66:b8:9b:af:6b:b4:34:98:e9:fd:55:9d:53:
b1:8e:1d:76:77:02:ac:57:15:7d:ff:96:47:c1:f1:
26:e1:c4:19:96:e2:33:53:7f:7d:6e:1f:64:ce:54:
3f:f7:55:16:a5:e8:46:eb:52:ff:25:91:3c:0f:c2:
a6:ad:ad:fa:dc:e6:e2:23:65:52:25:9c:16:38:3c:
93:8b:73:35:2a:70:b9:f5:ed:a2:d1:5c:05:e0:ac:
e0:20:80:95:e4:95:20:36:d2:6f:64:74:e0:a0:b4:
81:57:ad:63:54:02:33:71:a9:64:29:b7:8c:54:c8:
d7:37:58:f9:0f:e3:23:aa:6d:59:e3:78:68:4c:cd:
c2:5b:cf:7d:52:24:ac:54:6c:02:27:be:f8:07:ed:
b2:83:3d:43:de:5f:aa:52:1b:45:9d:01:c6:14:d9:
56:97:bb:08:fd:5a:c7:a5:44:47:b8:54:46:a5:4e:
62:40:f4:bb:46:2b:b1:94:78:20:49:af:c8:32:30:
de:12:78:a0:3b:9b:9c:f7:c7:64:2b:54:8d:d3:c2:
05:ac:e1:d9:83:f7:99:95:06:e6:63:fc:5b:56:fd:
d1:4d:4c:83:00:42:35:a9:7a:60:9d:f6:e7:3d:d3:
d6:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:42:06:B9:BC:2B:78:56:E7:0E:48:6F:47:9C:DE:C8:4A:51:F8:13
X509v3 Authority Key Identifier:
keyid:2D:0C:21:CF:FA:80:B5:A1:E5:CB:D6:31:93:0E:7F:C5:5F:DD:FC:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LQwhz_qAtaHly9Yxkw5_xV_d_Eg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/bbf75d-c1dd-44b0-a5e0-cdcc704b38a7/1/LQwhz_qAtaHly9Yxkw5_xV_d_Eg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/bbf75d-c1dd-44b0-a5e0-cdcc704b38a7/1/LQwhz_qAtaHly9Yxkw5_xV_d_Eg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:87:e2:36:95:b4:58:b3:52:c1:55:c5:aa:3e:76:9d:48:26:
fc:ba:80:08:61:b7:57:31:cd:97:48:35:95:94:ac:9b:d7:fc:
b6:3e:2e:86:a7:f5:65:c2:2d:97:d5:e4:eb:a0:d1:98:05:39:
9e:70:c0:07:4a:d4:22:eb:21:9e:6d:9a:3f:f3:28:9f:07:01:
2d:11:ca:41:1b:cf:4e:46:64:55:97:16:6f:f3:1d:68:37:c3:
be:fe:bf:6a:08:a0:55:a2:d8:ee:33:d3:5f:26:bf:6a:3a:7c:
e6:39:c0:3e:39:4b:9e:9e:e7:bf:a1:57:12:91:53:e9:81:b3:
96:a7:b2:e1:f3:81:16:2b:c1:ff:e6:4b:7f:4a:b6:4b:d8:65:
91:7a:76:b0:fb:eb:ec:43:48:d0:50:69:47:81:b4:9d:0d:09:
b4:ac:56:20:b5:95:7f:98:d2:ac:02:d6:8d:3c:fd:31:ca:54:
50:1f:2a:0e:c8:e8:09:5f:ed:da:69:ef:23:ce:99:0f:bf:29:
a8:ce:5e:db:0f:a1:b4:b5:09:81:d7:41:4c:41:ff:04:62:25:
70:ec:9f:bf:79:40:5e:02:88:81:ad:6b:db:6d:a5:6b:10:b4:
7a:68:c7:46:3a:0e:45:9a:d0:8f:36:fa:74:fe:09:ce:d9:fd:
17:ae:cb:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:47 2025 by rpki-client