Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/dcbd3a-7528-499e-a3bd-bf28875ab261/1/LD4cA--i8tn_-dvsMyW8bDdpQlA.mft
File: LD4cA--i8tn_-dvsMyW8bDdpQlA.mft (raw, json)
Hash identifier: 9VoTueL6UpIYQL7yJueqG/wbFri29Kv++HYcQsaIQ1I=
Subject key identifier: EB:A7:AD:31:F6:4B:94:14:26:0F:45:1B:4D:68:E9:05:79:DA:B4:06
Authority key identifier: 2C:3E:1C:03:EF:A2:F2:D9:FF:F9:DB:EC:33:25:BC:6C:37:69:42:50
Certificate issuer: /CN=2c3e1c03efa2f2d9fff9dbec3325bc6c37694250
Certificate serial: 0194BCA9AAE1EBBFDFB1E1CD34252B0AA02A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LD4cA--i8tn_-dvsMyW8bDdpQlA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/dcbd3a-7528-499e-a3bd-bf28875ab261/1/LD4cA--i8tn_-dvsMyW8bDdpQlA.mft
Manifest number: 1175
Signing time: Fri 31 Jan 2025 14:00:23 +0000
Manifest this update: Fri 31 Jan 2025 14:00:23 +0000
Manifest next update: Sat 01 Feb 2025 14:00:23 +0000
Files and hashes: 1: LD4cA--i8tn_-dvsMyW8bDdpQlA.crl (hash: /NvD1e9a6WfetdvqdgBpk8+r+6l2zkFtqdqsqCZHSSY=)
2: P00v87nrou1jHf3IyWsCvn49wIw.roa (hash: 7G/m2+VXvGbn3QbXJwae3mt6bGUijMD8TCCAhr6uALc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:aa:e1:eb:bf:df:b1:e1:cd:34:25:2b:0a:a0:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c3e1c03efa2f2d9fff9dbec3325bc6c37694250
Validity
Not Before: Jan 31 14:00:23 2025 GMT
Not After : Feb 1 14:00:23 2025 GMT
Subject: CN=eba7ad31f64b9414260f451b4d68e90579dab406
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:18:95:3a:39:f0:7b:23:76:c0:76:c7:84:41:
3e:20:96:b4:b3:47:8c:0b:b6:b1:ec:cd:b4:eb:fa:
f6:36:71:0a:79:94:cc:b1:87:82:b4:99:0b:ed:05:
42:a6:ce:80:41:3e:c4:8d:c0:25:c4:f0:ab:7b:39:
0b:de:87:95:ae:87:15:ee:f6:2e:a3:13:13:26:de:
87:53:08:ce:00:68:d0:71:6f:ef:55:95:20:53:8f:
06:8e:d0:b1:4d:ce:ed:64:62:70:89:75:19:5a:d0:
04:dd:a7:f5:19:c4:50:d0:56:a6:6a:8b:d9:d9:78:
54:19:75:6d:d4:78:42:80:c4:c4:0a:37:39:3d:77:
92:69:d6:f8:62:db:a1:d8:3d:0b:7a:a3:0d:15:fd:
5a:7b:f1:d0:df:a4:96:fa:5e:ff:4b:18:2f:91:96:
76:12:e6:89:9a:03:74:f2:f2:6f:d4:1a:16:6e:13:
03:a2:c2:58:80:8a:ce:0a:00:de:98:f4:58:eb:c1:
a4:ed:5c:50:d2:7d:3f:1a:08:62:a7:95:de:69:c4:
7a:5e:c9:f7:77:de:60:13:ba:41:3f:42:d1:76:b1:
51:c3:c7:3e:9d:9f:4e:15:b6:3c:f9:77:78:c1:05:
48:4f:1f:2a:d0:de:57:d5:e1:36:7b:e5:57:53:d2:
5c:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:A7:AD:31:F6:4B:94:14:26:0F:45:1B:4D:68:E9:05:79:DA:B4:06
X509v3 Authority Key Identifier:
keyid:2C:3E:1C:03:EF:A2:F2:D9:FF:F9:DB:EC:33:25:BC:6C:37:69:42:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LD4cA--i8tn_-dvsMyW8bDdpQlA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/dcbd3a-7528-499e-a3bd-bf28875ab261/1/LD4cA--i8tn_-dvsMyW8bDdpQlA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/dcbd3a-7528-499e-a3bd-bf28875ab261/1/LD4cA--i8tn_-dvsMyW8bDdpQlA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:26:71:4b:7c:c1:6b:0e:3a:70:bc:e9:e5:de:29:2a:6c:bf:
f6:52:c4:6b:0b:1a:5f:9a:66:65:0d:c4:6a:1f:cb:ac:75:4a:
86:80:69:a0:e8:b0:61:1f:d3:d9:8b:99:3b:76:cd:f7:31:aa:
cb:6d:03:38:1b:9b:07:63:a4:24:c9:4b:32:87:05:18:af:1c:
61:6e:dc:27:ad:f4:b3:f6:94:f6:e5:41:9d:d1:6e:d0:ba:f9:
81:9e:91:e8:24:c6:bc:65:0a:97:1b:85:ba:83:e4:05:61:71:
c3:f5:5b:89:b6:16:1f:3b:a1:83:bd:d4:5e:2e:9d:c8:fc:4f:
51:49:12:c1:56:5a:e2:ea:b4:df:0c:71:f3:41:5c:09:b3:b2:
0a:34:43:ca:86:dc:cd:fc:1d:d8:2c:2c:92:8b:49:31:45:c3:
6a:e1:a1:76:9f:77:c0:3b:5f:89:de:1c:02:33:5c:d4:5c:e4:
da:80:4e:58:cb:92:8f:4f:67:6f:b6:bc:75:97:01:9b:86:19:
be:15:d1:86:0c:39:ea:46:82:9f:ae:a9:63:55:c0:cb:1f:77:
19:d3:15:35:84:19:eb:2f:b4:7c:32:27:d1:9c:8b:86:23:c3:
f1:8d:43:2f:c3:f9:e9:24:10:49:37:d2:a4:48:f6:e0:34:14:
d3:c8:a6:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:26:48 2025 by rpki-client