Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/572a98-3bb7-4276-9d39-dff5a09a82cb/1/LWmLr5_z7uvmYoSIn79onU5oPIE.mft
File: LWmLr5_z7uvmYoSIn79onU5oPIE.mft (raw, json)
Hash identifier: YHSXIwDLF0eVSA7fGnXvB0pl/QXQkOyNc9NXyrZH5eI=
Subject key identifier: AE:AC:AB:6D:90:64:14:F3:EF:30:3E:FE:1D:45:7F:35:03:27:5F:7E
Authority key identifier: 2D:69:8B:AF:9F:F3:EE:EB:E6:62:84:88:9F:BF:68:9D:4E:68:3C:81
Certificate issuer: /CN=2d698baf9ff3eeebe66284889fbf689d4e683c81
Certificate serial: 0194BD4E5C7B73104B22A3F93495DD7BFA49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LWmLr5_z7uvmYoSIn79onU5oPIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/572a98-3bb7-4276-9d39-dff5a09a82cb/1/LWmLr5_z7uvmYoSIn79onU5oPIE.mft
Manifest number: 0CB4
Signing time: Fri 31 Jan 2025 17:00:16 +0000
Manifest this update: Fri 31 Jan 2025 17:00:16 +0000
Manifest next update: Sat 01 Feb 2025 17:00:16 +0000
Files and hashes: 1: LWmLr5_z7uvmYoSIn79onU5oPIE.crl (hash: NGyT0c0oTQMJrADCtLbRx/BMZ5GIstR+Vv0CGdEEmEU=)
2: k4aTxBF_DmBio83fOwNHIHkeyiA.roa (hash: IVVbmDsKyhVLGaHbxiyIMsj1K/TNy+QiBpkicXXI0O8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:5c:7b:73:10:4b:22:a3:f9:34:95:dd:7b:fa:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d698baf9ff3eeebe66284889fbf689d4e683c81
Validity
Not Before: Jan 31 17:00:16 2025 GMT
Not After : Feb 1 17:00:16 2025 GMT
Subject: CN=aeacab6d906414f3ef303efe1d457f3503275f7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:36:0e:18:da:39:b7:95:11:93:67:8d:1b:b4:
10:a2:20:4a:2c:56:8a:98:3f:20:78:0b:32:bd:cc:
10:7e:ae:db:29:ed:8d:ed:79:cd:f6:e3:86:6a:d8:
11:39:0c:0e:0e:0c:83:6c:09:28:e4:f7:b4:ea:18:
9d:5c:be:7d:a3:01:8c:de:67:d0:0b:4c:14:9d:ec:
c7:0c:7c:5f:d9:39:9e:26:3e:1e:2c:14:2a:9b:f3:
65:f2:92:b0:a4:45:4f:d7:5d:bf:97:89:3d:36:7f:
d5:7e:2a:c0:78:04:b3:d8:90:69:ed:33:df:71:1e:
46:68:5b:a0:88:5f:31:65:c6:bd:3a:78:cb:48:d8:
54:54:e2:79:95:6b:41:d1:c5:f1:45:42:04:e7:7f:
d6:09:0f:76:6b:0a:c2:b5:81:01:cf:e6:c0:3a:46:
e0:2f:35:ec:5c:9e:0d:43:d6:6a:af:64:b9:ca:c5:
a4:d3:b2:45:82:0a:61:27:68:10:1c:66:64:89:c0:
44:a9:86:b8:dc:fe:39:dd:5b:ab:3c:c4:ba:f4:6a:
21:7f:7d:3c:29:2c:03:7b:bd:89:7a:1c:50:55:60:
33:8c:4b:60:49:4f:c1:9d:69:2c:b9:23:0e:ca:a8:
c4:d0:49:b6:27:d9:14:46:7b:5a:51:74:65:2e:a3:
54:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:AC:AB:6D:90:64:14:F3:EF:30:3E:FE:1D:45:7F:35:03:27:5F:7E
X509v3 Authority Key Identifier:
keyid:2D:69:8B:AF:9F:F3:EE:EB:E6:62:84:88:9F:BF:68:9D:4E:68:3C:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LWmLr5_z7uvmYoSIn79onU5oPIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/572a98-3bb7-4276-9d39-dff5a09a82cb/1/LWmLr5_z7uvmYoSIn79onU5oPIE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/572a98-3bb7-4276-9d39-dff5a09a82cb/1/LWmLr5_z7uvmYoSIn79onU5oPIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:a2:73:df:1b:4c:44:fc:a4:c9:57:28:bf:9c:53:53:b4:18:
20:64:50:0f:64:2c:86:e8:65:a9:52:a2:78:98:9e:f3:f6:57:
73:ad:ce:0c:27:ed:af:fb:ed:5c:28:21:69:81:b1:08:b9:57:
ab:62:0f:15:89:7d:5e:17:3f:e0:d0:c4:5d:1a:c2:14:a7:a7:
b2:4f:c8:11:ee:a5:a1:ea:86:3f:9f:1f:4a:4e:a7:8b:09:de:
e0:6f:ed:e5:2e:f3:c1:3a:3d:52:a3:7d:c3:00:1a:cb:b1:b1:
9c:81:b8:11:3c:c4:09:62:98:46:3c:71:0d:48:0e:e0:1d:ff:
1d:09:3d:bb:12:ab:e7:0c:cb:74:9f:ba:14:1a:2d:30:98:80:
2f:ff:91:ea:36:e0:7d:8c:cf:e8:cb:05:78:9f:9d:e9:21:d5:
f7:ba:b6:f8:4f:1f:cb:b6:05:61:34:55:85:62:4e:a4:f5:b8:
5d:9e:a7:ec:5d:d3:42:c0:b0:f2:2c:98:da:2c:85:b9:1c:30:
54:8b:75:36:21:5f:8f:61:7a:3e:30:24:4f:06:ce:5c:eb:57:
bf:ed:6e:c3:8f:cb:1d:89:69:a4:85:1b:16:dc:bf:05:02:db:
73:ae:bb:ec:fa:65:3f:dc:c2:a9:de:98:a6:8b:e6:00:2a:36:
82:18:c0:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:38:22 2025 by rpki-client