Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/50ac12-fd93-4939-a2ef-41ca2d3aae71/1/LJgiAI2cxwEtYDBCmyjYWNu6ykM.mft
File: LJgiAI2cxwEtYDBCmyjYWNu6ykM.mft (raw, json)
Hash identifier: Rej5zXMY96sPjdp8vEnjTckLmdCjzE5BPH/wIPGfEgw=
Subject key identifier: 1D:07:02:CD:FD:98:A7:9F:10:61:6F:1B:58:11:BE:CF:6D:00:43:81
Authority key identifier: 2C:98:22:00:8D:9C:C7:01:2D:60:30:42:9B:28:D8:58:DB:BA:CA:43
Certificate issuer: /CN=2c9822008d9cc7012d6030429b28d858dbbaca43
Certificate serial: 0194BBCE7CD7B1EF0E845BFCDB40708572C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LJgiAI2cxwEtYDBCmyjYWNu6ykM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/50ac12-fd93-4939-a2ef-41ca2d3aae71/1/LJgiAI2cxwEtYDBCmyjYWNu6ykM.mft
Manifest number: 0B8A
Signing time: Fri 31 Jan 2025 10:00:59 +0000
Manifest this update: Fri 31 Jan 2025 10:00:59 +0000
Manifest next update: Sat 01 Feb 2025 10:00:59 +0000
Files and hashes: 1: LJgiAI2cxwEtYDBCmyjYWNu6ykM.crl (hash: RajAeNqr0K7z4f7mE6QxUs3SdpYss/Rdn3FghXBVsQw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:7c:d7:b1:ef:0e:84:5b:fc:db:40:70:85:72:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c9822008d9cc7012d6030429b28d858dbbaca43
Validity
Not Before: Jan 31 10:00:59 2025 GMT
Not After : Feb 1 10:00:59 2025 GMT
Subject: CN=1d0702cdfd98a79f10616f1b5811becf6d004381
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:83:40:e2:e7:e7:9b:5f:80:12:52:30:81:c3:
f2:84:68:69:1a:04:2d:73:60:7c:df:16:58:8b:51:
de:a1:80:2a:4a:fd:f6:03:f5:8f:96:37:41:17:a8:
d9:d0:03:de:92:45:ea:aa:6f:3e:f7:03:19:32:4a:
4e:5a:2c:1c:79:0c:1e:99:88:95:24:dc:79:bc:53:
54:3a:d6:66:27:78:f3:1e:e5:f7:10:e4:37:01:df:
33:32:53:5f:fc:74:d1:90:a3:dc:71:c9:b9:88:f4:
d4:4c:3e:4e:b4:8e:2c:40:e4:24:56:f0:ec:50:69:
2f:5e:50:63:45:06:85:90:86:33:01:d6:f0:b1:4c:
85:8d:be:62:65:ad:90:f2:de:ec:f7:34:0d:8e:53:
de:49:12:b2:cf:b6:6d:ab:bc:dd:b9:87:d4:48:3f:
b4:0a:72:91:37:91:06:87:80:e2:0d:52:a3:e8:d4:
86:01:99:59:3f:9a:ae:7c:87:3a:32:7f:e1:2e:a2:
b6:70:86:83:db:ae:82:9a:a3:73:3c:69:58:7c:15:
85:7a:17:7c:47:2c:a8:5b:0b:64:ed:45:9b:b0:e3:
0b:7e:b3:a3:9a:ca:8a:8c:44:af:21:1c:16:72:09:
8b:ee:73:74:55:db:9b:cd:7d:07:ae:0e:52:68:d4:
17:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:07:02:CD:FD:98:A7:9F:10:61:6F:1B:58:11:BE:CF:6D:00:43:81
X509v3 Authority Key Identifier:
keyid:2C:98:22:00:8D:9C:C7:01:2D:60:30:42:9B:28:D8:58:DB:BA:CA:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LJgiAI2cxwEtYDBCmyjYWNu6ykM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/50ac12-fd93-4939-a2ef-41ca2d3aae71/1/LJgiAI2cxwEtYDBCmyjYWNu6ykM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/50ac12-fd93-4939-a2ef-41ca2d3aae71/1/LJgiAI2cxwEtYDBCmyjYWNu6ykM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:7f:0c:eb:f1:dc:bb:05:96:ed:ba:9b:d3:42:a7:aa:5f:a0:
ec:bd:b0:bc:e8:f5:f6:cb:10:1d:40:fd:b3:2f:29:70:18:28:
9e:5e:be:60:58:64:c5:22:47:ef:84:47:5b:39:6b:7e:46:58:
21:65:2e:6f:8b:c5:51:9d:f5:85:63:dd:a8:d5:bb:c3:98:47:
ed:0a:64:ca:b8:7c:65:c0:0a:c0:03:18:ba:c6:01:2d:d7:13:
05:b5:9a:ef:a5:89:db:77:39:c2:fd:b0:f9:df:2a:40:36:0a:
5b:a5:c4:03:04:1f:65:4e:cd:3c:81:1f:a7:4c:18:cf:36:4b:
9b:51:8b:23:86:31:96:66:ff:7d:5a:df:de:31:5b:e8:b5:d4:
71:e0:d3:0b:8a:b4:e7:4b:d6:b5:be:0c:18:d0:37:6e:23:7c:
06:9a:08:f4:1b:15:7f:bf:6c:66:db:ef:2a:1e:21:36:48:ea:
e4:16:c5:7b:2f:c9:6f:69:a9:91:a9:0f:5f:13:e1:15:59:63:
fa:de:58:ce:f7:28:78:0f:2d:33:e1:ff:5a:83:30:bd:6f:4f:
23:51:ea:be:b2:1d:2b:8a:e8:9b:2a:d7:00:47:5e:2c:ca:18:
96:f5:8e:e0:34:0a:1c:e2:49:c7:8a:99:79:39:30:6b:1a:97:
85:23:2d:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:27:43 2025 by rpki-client