Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/363ecc-2aa1-4281-95b1-8b0fc07858d6/1/LdWWwep-y7G-F3f8DTjtBspA6r4.mft
File: LdWWwep-y7G-F3f8DTjtBspA6r4.mft (raw, json)
Hash identifier: 8OlmB9+3a8sOGXy4BT3WT09lvBmvnK02XFbAK1XtPpg=
Subject key identifier: B9:2A:E4:A4:0F:4A:DC:24:BD:99:3E:8C:C2:4E:D8:F3:34:BB:94:D0
Authority key identifier: 2D:D5:96:C1:EA:7E:CB:B1:BE:17:77:FC:0D:38:ED:06:CA:40:EA:BE
Certificate issuer: /CN=2dd596c1ea7ecbb1be1777fc0d38ed06ca40eabe
Certificate serial: 0194BBCDC098071D1730F5E7AC9B87406B25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LdWWwep-y7G-F3f8DTjtBspA6r4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/363ecc-2aa1-4281-95b1-8b0fc07858d6/1/LdWWwep-y7G-F3f8DTjtBspA6r4.mft
Manifest number: 0DE8
Signing time: Fri 31 Jan 2025 10:00:11 +0000
Manifest this update: Fri 31 Jan 2025 10:00:11 +0000
Manifest next update: Sat 01 Feb 2025 10:00:11 +0000
Files and hashes: 1: LdWWwep-y7G-F3f8DTjtBspA6r4.crl (hash: vq2OYI822TgoA+PRZU2O2NGveEWZg/ggZxfm1Rf2Qjs=)
2: OMnZiNHbw7E-f80Ik0oReEwyFs8.roa (hash: J4ZRlc9ZTuyWB+1e21hJBQgTzJ68vGeASJd7wVF5XJs=)
3: lPP1CTZE_I869rs5FvdeSS4FA3k.roa (hash: qLXwzivmvmSSh7sbcIlPZozy/8eLL4zZEt9Q9nGGudc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:c0:98:07:1d:17:30:f5:e7:ac:9b:87:40:6b:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2dd596c1ea7ecbb1be1777fc0d38ed06ca40eabe
Validity
Not Before: Jan 31 10:00:11 2025 GMT
Not After : Feb 1 10:00:11 2025 GMT
Subject: CN=b92ae4a40f4adc24bd993e8cc24ed8f334bb94d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:4c:2e:c7:7e:87:71:8b:90:f0:07:9b:f4:ed:
a0:6a:01:df:d4:91:74:bc:20:30:df:42:66:73:95:
9f:87:53:43:67:15:24:89:90:0b:96:a5:4d:99:0d:
c8:c4:c4:a8:db:ad:76:c2:9b:1d:2d:bf:08:22:ec:
6b:26:63:27:0e:69:7b:7e:f6:ae:b2:88:79:27:08:
a0:12:34:36:40:12:84:24:d0:db:0f:82:9e:09:ca:
40:b2:cd:1b:bc:99:3b:9f:2c:c7:6c:2a:59:ee:2e:
df:9e:51:7f:bf:7e:b9:d4:fa:98:e3:f7:e3:f2:44:
9a:77:e3:03:ea:4f:a3:5b:b1:be:22:86:43:ad:8a:
2e:2a:15:5d:88:af:0f:fd:53:70:75:53:24:88:e9:
be:30:55:92:2e:d9:22:36:f9:ec:10:2b:d5:1c:07:
3b:8d:9c:35:e0:35:0e:cb:3c:9a:20:94:0d:90:24:
bc:94:b5:0b:9c:6b:5e:b9:9e:72:6f:54:e6:62:fc:
fe:6a:70:1d:6f:ab:35:bb:d5:39:fe:70:a0:03:56:
f3:ae:9f:0f:33:69:bc:5b:71:5c:d5:48:44:29:a2:
d6:24:16:8f:95:fc:d7:0d:ed:72:bd:8b:5e:7a:15:
70:85:d6:e2:f4:89:64:a5:17:47:34:ec:a8:d0:6c:
93:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:2A:E4:A4:0F:4A:DC:24:BD:99:3E:8C:C2:4E:D8:F3:34:BB:94:D0
X509v3 Authority Key Identifier:
keyid:2D:D5:96:C1:EA:7E:CB:B1:BE:17:77:FC:0D:38:ED:06:CA:40:EA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LdWWwep-y7G-F3f8DTjtBspA6r4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/363ecc-2aa1-4281-95b1-8b0fc07858d6/1/LdWWwep-y7G-F3f8DTjtBspA6r4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/363ecc-2aa1-4281-95b1-8b0fc07858d6/1/LdWWwep-y7G-F3f8DTjtBspA6r4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:6a:4b:64:10:7f:1f:82:ec:df:e0:e3:0a:26:6b:46:91:08:
62:8c:53:c4:50:92:7d:5b:51:28:9e:b5:b6:ef:1e:61:ad:93:
10:f9:62:9c:cd:51:22:41:51:34:1c:12:4e:6c:9c:57:81:d9:
9c:c6:55:ae:6f:7c:07:53:b4:98:68:51:95:e1:49:45:12:5e:
90:0e:2d:f4:5f:3e:c3:62:ea:85:74:37:c8:b2:cb:88:02:01:
a2:1c:97:8e:40:ff:92:93:4c:85:fb:2d:d9:a1:0e:a6:83:74:
06:84:ad:65:0b:68:51:91:97:33:05:53:1a:c0:c5:a7:b5:8c:
a1:f6:77:45:a0:7e:d9:7f:9e:5a:41:6b:a8:78:30:1e:4e:74:
f2:99:e7:c4:1c:e0:fd:81:93:10:e8:3b:b8:7c:23:d3:f6:a3:
ee:22:29:0e:e1:5c:a6:5b:24:96:ef:8d:9b:15:49:ca:ce:36:
fb:f4:0e:df:67:64:5d:82:76:5f:88:29:e1:f9:b8:5c:53:f6:
23:88:1e:85:54:37:de:16:ff:0e:61:52:e9:6d:94:bc:11:44:
98:89:77:7c:3a:e9:49:f3:1d:c6:26:4d:0c:df:42:1d:f7:25:
21:e3:8c:cf:3b:11:40:ba:7d:a4:0b:03:b8:69:84:b0:14:82:
80:53:42:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 07:08:24 2025 by rpki-client