Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/2c054e-cef0-4af6-980e-8babac8a465a/1/LOlVOpsse8oStoG8CmMF4z-2QMg.mft
File: LOlVOpsse8oStoG8CmMF4z-2QMg.mft (raw, json)
Hash identifier: sEXQ/lW58cY5Cyu5TG4fLDeaoVt7hyKYrdwGx+8jBPM=
Subject key identifier: 13:EE:D7:DB:73:87:63:05:9C:E9:A4:BE:80:00:25:F3:52:CB:06:0B
Authority key identifier: 2C:E9:55:3A:9B:2C:7B:CA:12:B6:81:BC:0A:63:05:E3:3F:B6:40:C8
Certificate issuer: /CN=2ce9553a9b2c7bca12b681bc0a6305e33fb640c8
Certificate serial: 0194BD179AF3127A208DF68DAA741CB824D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LOlVOpsse8oStoG8CmMF4z-2QMg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/2c054e-cef0-4af6-980e-8babac8a465a/1/LOlVOpsse8oStoG8CmMF4z-2QMg.mft
Manifest number: 0BA6
Signing time: Fri 31 Jan 2025 16:00:28 +0000
Manifest this update: Fri 31 Jan 2025 16:00:28 +0000
Manifest next update: Sat 01 Feb 2025 16:00:28 +0000
Files and hashes: 1: LOlVOpsse8oStoG8CmMF4z-2QMg.crl (hash: FP5WIOjc0bK8jbXBEvZuHyPfm2kVWKsLuxcPgUsUKTA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:9a:f3:12:7a:20:8d:f6:8d:aa:74:1c:b8:24:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ce9553a9b2c7bca12b681bc0a6305e33fb640c8
Validity
Not Before: Jan 31 16:00:28 2025 GMT
Not After : Feb 1 16:00:28 2025 GMT
Subject: CN=13eed7db738763059ce9a4be800025f352cb060b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:4e:64:25:90:9b:cc:12:0b:d3:39:23:3d:8d:
43:40:f9:d4:56:55:7e:a4:d5:c0:1d:7f:9b:63:64:
31:7a:c4:67:60:88:81:7b:23:d3:53:e2:f6:2d:29:
bc:20:ca:5e:54:71:7c:73:12:75:0e:ea:01:e8:c4:
73:40:c6:aa:7d:c4:08:22:0e:5a:95:6f:89:40:4a:
f1:79:a4:db:43:b6:d2:7f:95:27:fc:e6:a8:f2:18:
eb:87:fd:20:70:a1:5b:83:6e:06:5c:26:aa:4a:d8:
9e:4c:d4:4e:35:1b:eb:09:a1:42:81:e5:87:06:1f:
73:ab:58:2c:a7:80:21:22:24:e0:24:54:09:08:0d:
5a:a4:ec:b0:6b:60:36:23:51:21:f7:e8:84:78:3e:
1f:54:4d:79:d2:31:20:b2:91:4d:b5:8b:30:a4:34:
68:88:4b:45:2f:00:a0:d4:79:25:66:7a:72:b7:7c:
c2:99:93:e5:ed:7a:81:d4:b3:48:53:bc:83:35:e0:
4b:cf:3e:b4:56:a7:e0:95:b1:2c:28:15:26:fa:7f:
2e:32:31:da:6a:e2:b5:a8:d6:5f:b9:1c:75:37:f4:
c5:6b:1a:2a:e1:72:08:d5:42:48:b9:61:46:5c:c3:
71:69:9a:fd:a8:4b:6c:b2:7e:bc:cd:07:e2:b8:4f:
c3:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:EE:D7:DB:73:87:63:05:9C:E9:A4:BE:80:00:25:F3:52:CB:06:0B
X509v3 Authority Key Identifier:
keyid:2C:E9:55:3A:9B:2C:7B:CA:12:B6:81:BC:0A:63:05:E3:3F:B6:40:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LOlVOpsse8oStoG8CmMF4z-2QMg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/2c054e-cef0-4af6-980e-8babac8a465a/1/LOlVOpsse8oStoG8CmMF4z-2QMg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/2c054e-cef0-4af6-980e-8babac8a465a/1/LOlVOpsse8oStoG8CmMF4z-2QMg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:fa:96:df:1a:3d:55:b0:50:27:a7:8f:fa:fc:1b:af:d9:81:
0d:e9:c9:a0:25:11:42:1b:76:65:52:69:66:e4:54:2c:a7:3a:
53:b6:b1:d7:53:56:f2:a2:de:aa:c5:cb:78:b8:94:59:9f:4f:
77:ac:8e:1b:8f:af:ee:b6:6d:47:0f:ea:b9:85:59:87:a0:9b:
83:44:8f:66:4e:4b:61:a6:f2:cd:9b:63:a3:dd:b1:08:09:59:
39:b0:6e:76:e7:d2:86:49:3a:fc:30:d8:4a:ce:7f:b6:16:fb:
48:7d:29:8b:d3:a2:42:6b:f1:cd:99:42:8a:d0:5b:85:05:d3:
9a:d1:08:ec:f2:ce:8d:ea:18:46:e4:b8:16:83:ab:bb:ad:79:
3b:5d:b6:08:f7:d0:65:ba:a3:42:fc:94:d0:eb:b1:99:38:0a:
9d:bd:f0:a5:1e:b3:67:42:06:1c:4b:bf:b8:42:91:57:bd:12:
18:6c:5d:9a:11:63:14:e1:d4:c6:4c:ee:24:3d:4b:9f:2b:89:
65:78:61:37:1a:2a:01:21:03:d7:fd:75:dd:60:6e:5b:17:49:
a3:87:1e:77:43:26:70:36:dc:0b:59:9a:b1:24:b1:9a:83:d8:
80:fe:76:76:63:f0:a3:6f:a5:f4:23:1a:66:dc:f0:eb:f2:ca:
32:33:12:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:39:23 2025 by rpki-client