Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/96faed-87c0-4b00-8178-a1dcc3fb9a4f/1/Lep4sS1DW5fe-_ksdCZcNDO70Ck.mft
File: Lep4sS1DW5fe-_ksdCZcNDO70Ck.mft (raw, json)
Hash identifier: pIFX8EUoRDpY3BdC8oiEoFcWhf+l6Znh+Nf5//MOd08=
Subject key identifier: DD:30:26:0E:78:E3:84:A8:66:05:23:1B:43:8C:6C:81:2D:E7:58:7D
Authority key identifier: 2D:EA:78:B1:2D:43:5B:97:DE:FB:F9:2C:74:26:5C:34:33:BB:D0:29
Certificate issuer: /CN=2dea78b12d435b97defbf92c74265c3433bbd029
Certificate serial: 0194BC72B81B6568546539CC5C427B7CDC26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lep4sS1DW5fe-_ksdCZcNDO70Ck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/96faed-87c0-4b00-8178-a1dcc3fb9a4f/1/Lep4sS1DW5fe-_ksdCZcNDO70Ck.mft
Manifest number: 087E
Signing time: Fri 31 Jan 2025 13:00:22 +0000
Manifest this update: Fri 31 Jan 2025 13:00:22 +0000
Manifest next update: Sat 01 Feb 2025 13:00:22 +0000
Files and hashes: 1: Lep4sS1DW5fe-_ksdCZcNDO70Ck.crl (hash: rX4gz+n6pXRFykjmRKwQkwojLKK2IPj1InzJUVuGK/s=)
2: qHOxf7Ag_8u24Noxu2kog83ptRg.roa (hash: oxynD/JaNR7ZZdHYCXCJyIHb4WE74vGw/oNyjiWqUm4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:b8:1b:65:68:54:65:39:cc:5c:42:7b:7c:dc:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2dea78b12d435b97defbf92c74265c3433bbd029
Validity
Not Before: Jan 31 13:00:22 2025 GMT
Not After : Feb 1 13:00:22 2025 GMT
Subject: CN=dd30260e78e384a86605231b438c6c812de7587d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:bb:25:66:39:a7:a6:c1:fc:71:77:eb:76:17:
2b:aa:78:bb:1c:c6:45:bd:08:43:15:08:ee:72:0f:
c9:50:94:0e:8a:8b:4e:02:90:dc:88:a9:5a:89:8e:
07:54:b2:cd:a3:d7:29:69:7e:93:df:72:84:12:3c:
ab:5a:39:66:a4:a6:37:b1:03:e4:f1:ed:58:e2:43:
7b:4b:8b:0d:0b:93:08:85:bf:74:aa:e6:66:f4:57:
e4:dd:33:90:1a:04:f6:e7:9b:08:9c:a4:99:06:ff:
cf:76:a6:79:a2:7f:bb:97:d3:a6:47:86:74:e2:95:
88:c0:fa:92:c9:11:e4:c2:13:fd:51:8c:00:17:de:
bf:9b:aa:19:e9:ff:dc:8e:4b:b8:1a:b4:13:59:a1:
3d:1f:35:a1:42:45:5e:8d:82:8f:1b:84:25:9f:26:
35:ae:8a:a6:f5:f4:18:d0:ad:a5:30:7b:08:a4:85:
97:a6:9d:f3:57:8d:cf:95:81:57:f1:b3:87:67:d0:
e3:00:57:78:34:e2:71:d7:6b:41:ad:58:41:b2:30:
8c:b4:de:fd:75:87:68:99:4a:d7:d7:fa:da:4d:be:
50:7e:1e:ae:a6:2f:1e:06:53:e9:e8:9c:e4:b8:e6:
32:ed:5b:31:00:72:0b:85:f6:08:e5:78:46:23:93:
bb:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:30:26:0E:78:E3:84:A8:66:05:23:1B:43:8C:6C:81:2D:E7:58:7D
X509v3 Authority Key Identifier:
keyid:2D:EA:78:B1:2D:43:5B:97:DE:FB:F9:2C:74:26:5C:34:33:BB:D0:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lep4sS1DW5fe-_ksdCZcNDO70Ck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/96faed-87c0-4b00-8178-a1dcc3fb9a4f/1/Lep4sS1DW5fe-_ksdCZcNDO70Ck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/96faed-87c0-4b00-8178-a1dcc3fb9a4f/1/Lep4sS1DW5fe-_ksdCZcNDO70Ck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:fa:c6:39:c9:2b:fd:10:d6:6c:67:fb:b1:70:e6:59:cb:06:
92:eb:78:2c:ef:b8:ef:da:4b:36:36:80:b7:5a:6c:21:18:6d:
ed:9e:69:7f:45:ca:7f:31:2d:dc:31:0c:04:b7:cc:e6:35:e8:
76:96:4f:c9:bc:c6:fd:7c:fb:3f:91:ec:79:40:95:65:37:e5:
a6:fe:d7:8e:1c:b9:df:ee:0f:05:ec:31:86:9b:18:a7:48:94:
49:a0:b2:69:5e:8e:f5:41:74:64:a6:81:f9:3b:76:ce:fd:f8:
35:7d:95:fd:fb:bc:4b:ed:24:0d:d7:ab:90:e7:8a:c4:c4:86:
e7:fe:ad:2c:08:90:ff:df:e0:68:de:ba:c0:e0:f6:5a:a3:53:
23:e0:8d:7a:b7:a9:4e:97:6b:a7:1c:2a:37:02:2a:f9:07:66:
61:b6:c1:67:50:5d:ce:72:9b:67:46:d4:72:ba:7f:8e:76:e4:
c7:02:a3:4a:8f:32:24:9d:ce:33:d0:23:84:91:d5:a6:93:49:
13:fc:9a:fe:9d:f7:fe:89:b3:7c:de:58:f3:d4:68:a3:e0:2c:
77:76:15:d3:be:8e:da:90:ac:db:fe:e6:1d:36:12:5e:e6:27:
a0:59:6f:96:50:73:b7:47:e1:98:63:38:97:72:94:96:cf:0c:
d9:f7:b9:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:39:29 2025 by rpki-client