
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/650436-5498-44db-a89a-cfe397dfb5c4/1/LoXNafYRaXriRpasdl1Wt13406E.mft
File: LoXNafYRaXriRpasdl1Wt13406E.mft (raw, json)
Hash identifier: WWUwonqBph6LI+QTfaKZNvosh2LOfX2x+EEUDkBy9kU=
Subject key identifier: 22:B1:47:41:9F:BC:46:58:43:E9:20:05:87:B9:26:69:85:3A:2A:F2
Authority key identifier: 2E:85:CD:69:F6:11:69:7A:E2:46:96:AC:76:5D:56:B7:5D:F8:D3:A1
Certificate issuer: /CN=2e85cd69f611697ae24696ac765d56b75df8d3a1
Certificate serial: 0194BD17C2FA20A6561FCF9C6B2A9343967B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LoXNafYRaXriRpasdl1Wt13406E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/650436-5498-44db-a89a-cfe397dfb5c4/1/LoXNafYRaXriRpasdl1Wt13406E.mft
Manifest number: 0340
Signing time: Fri 31 Jan 2025 16:00:38 +0000
Manifest this update: Fri 31 Jan 2025 16:00:38 +0000
Manifest next update: Sat 01 Feb 2025 16:00:38 +0000
Files and hashes: 1: LoXNafYRaXriRpasdl1Wt13406E.crl (hash: GoY9NdvSlxr9XK2bpVdbUkQiTq81n2aBI7oikvTRSRI=)
2: V4UHEu5lFuhdZwHH6lxxX4Rsnp4.roa (hash: QxXsgkZ9Y9z5B4JIZIQ9pTgrtbYM89E088MqJxxgyOE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:c2:fa:20:a6:56:1f:cf:9c:6b:2a:93:43:96:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e85cd69f611697ae24696ac765d56b75df8d3a1
Validity
Not Before: Jan 31 16:00:38 2025 GMT
Not After : Feb 1 16:00:38 2025 GMT
Subject: CN=22b147419fbc465843e9200587b92669853a2af2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:18:78:50:16:9a:b6:2b:10:69:7e:90:33:12:
2e:a8:b6:7a:95:d4:1d:7b:1b:e1:d6:64:6f:34:36:
b4:c8:0f:b4:09:4c:7e:2e:da:e1:3c:dc:90:e3:a3:
b0:30:d4:00:c6:44:3c:9f:24:6c:41:e7:27:69:9a:
0f:e8:c3:cf:33:57:37:4a:d4:65:65:0d:54:68:54:
d8:3a:43:11:c3:f7:b1:c2:de:30:34:fe:82:a4:db:
25:38:0b:d1:9b:41:b0:c8:11:5c:39:f5:ba:9b:62:
5b:30:92:62:6b:72:4f:e1:fa:e1:a7:03:a8:90:ae:
e1:78:d2:05:39:e7:4e:7e:e6:eb:46:32:d7:51:62:
6f:8f:be:ab:4e:24:ad:cb:06:88:f7:2c:5e:75:3a:
8c:70:fa:78:f2:e8:83:e4:c2:48:92:87:01:13:ad:
3f:a3:9b:9e:8d:ee:92:74:43:31:0a:7e:95:38:ef:
8f:25:48:86:78:35:fd:67:75:83:fd:78:bb:17:a9:
d5:32:31:c4:4d:65:00:7e:09:1d:bc:8e:85:4e:d5:
2a:8d:a4:ba:f0:6e:09:10:e2:3c:78:04:97:5b:12:
ff:15:6a:79:9f:4c:4b:6f:14:28:81:69:7e:8a:75:
a3:1e:1e:4a:40:3b:11:29:ce:12:39:bc:f6:76:73:
f7:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:B1:47:41:9F:BC:46:58:43:E9:20:05:87:B9:26:69:85:3A:2A:F2
X509v3 Authority Key Identifier:
keyid:2E:85:CD:69:F6:11:69:7A:E2:46:96:AC:76:5D:56:B7:5D:F8:D3:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LoXNafYRaXriRpasdl1Wt13406E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/650436-5498-44db-a89a-cfe397dfb5c4/1/LoXNafYRaXriRpasdl1Wt13406E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/650436-5498-44db-a89a-cfe397dfb5c4/1/LoXNafYRaXriRpasdl1Wt13406E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:18:92:58:11:d6:ac:84:25:03:56:34:33:59:1f:70:5a:d5:
0d:b6:b4:1a:57:bf:55:34:86:a5:51:62:4b:fe:34:f7:4e:0a:
19:9c:58:1c:9d:b8:8f:80:27:a5:fe:71:bc:7c:7d:3b:60:bc:
33:d7:9a:00:ea:24:cb:e1:c5:28:44:36:30:ff:ee:23:76:b8:
b9:4b:56:2c:41:fa:6f:f4:8d:00:83:67:51:c0:ba:a4:23:bd:
7c:44:6a:02:a5:b8:2f:f2:d8:a3:5e:e5:8d:12:c3:19:b4:2e:
5e:77:e0:62:20:38:12:08:b4:4f:9c:c1:b8:5e:60:d5:4d:61:
43:97:ac:6a:b1:31:d8:7a:e2:77:47:d1:3c:c4:57:cd:e0:ce:
ce:33:2b:6d:e7:5f:12:45:b6:6d:30:4a:15:c6:55:31:20:23:
3a:2b:92:4e:53:b3:aa:0f:47:5d:78:1e:42:99:5d:1d:39:3c:
20:d5:d5:bd:53:8b:4c:8c:51:74:d9:d8:71:04:45:52:be:ef:
50:56:4d:87:b5:92:ff:60:2e:23:b8:ca:9d:cb:d4:4a:a1:26:
ad:7d:74:7e:28:37:44:dc:8e:d0:da:51:de:1c:f0:40:b2:26:
d6:ae:f6:6c:77:06:61:7f:3d:ed:11:c0:bc:b6:fb:6e:dd:55:
10:e7:7b:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:45:28 2025 by rpki-client