
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/054a71-8253-4089-b962-cbbf76f3533a/1/L2ANKR1II4Na8QOq057eBb0SybY.mft
File: L2ANKR1II4Na8QOq057eBb0SybY.mft (raw, json)
Hash identifier: Tt7VH2Erk0Z0S4YUVZ399vfbTSQr2hBsLHUo7kJgvWY=
Subject key identifier: D1:E9:38:A2:F5:99:CF:2E:DE:D6:04:00:B7:1A:DF:8E:0A:58:64:49
Authority key identifier: 2F:60:0D:29:1D:48:23:83:5A:F1:03:AA:D3:9E:DE:05:BD:12:C9:B6
Certificate issuer: /CN=2f600d291d4823835af103aad39ede05bd12c9b6
Certificate serial: 0194BD176A83DA50843AA09E10C3EE3A4C4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L2ANKR1II4Na8QOq057eBb0SybY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/054a71-8253-4089-b962-cbbf76f3533a/1/L2ANKR1II4Na8QOq057eBb0SybY.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 16:00:15 +0000
Manifest this update: Fri 31 Jan 2025 16:00:15 +0000
Manifest next update: Sat 01 Feb 2025 16:00:15 +0000
Files and hashes: 1: L2ANKR1II4Na8QOq057eBb0SybY.crl (hash: W3TZwVfRkDPCCEfRWEuZHOVaYbleCstvVr4aq66Sv0I=)
2: pqKGvQcYODMxijEGtk7mPTU_Tr0.roa (hash: ZlDmL3k6HQGAT39givBrII+8Db8zx8Fa+aDyGXQWZzc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:6a:83:da:50:84:3a:a0:9e:10:c3:ee:3a:4c:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f600d291d4823835af103aad39ede05bd12c9b6
Validity
Not Before: Jan 31 16:00:15 2025 GMT
Not After : Feb 1 16:00:15 2025 GMT
Subject: CN=d1e938a2f599cf2eded60400b71adf8e0a586449
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:8c:07:56:5a:61:00:4d:83:0b:fe:7e:21:c2:
47:55:c5:77:cc:a2:84:8f:42:eb:05:c1:07:2e:a5:
64:05:cc:2c:f4:de:76:ba:b6:f3:33:e9:35:80:52:
66:b5:39:fb:b0:b3:cf:ef:4d:80:ed:d1:1a:18:60:
d5:4f:b2:e0:6e:e5:66:03:bf:b7:cf:ee:fe:db:7f:
53:b0:2a:71:77:68:d2:90:ab:a5:44:b9:70:00:44:
0e:dd:5a:47:d2:53:ce:4f:19:7e:76:96:1d:58:4e:
34:6c:a2:be:68:f9:9a:0c:4a:8e:08:f5:50:f5:d4:
ed:30:1d:9c:02:92:1d:b7:99:b4:bb:6e:47:a6:66:
b7:a2:1f:91:aa:b1:2a:22:61:1e:0c:2c:5f:37:77:
b3:cf:cb:87:60:58:a5:1c:1f:c3:33:f8:2c:83:c8:
a4:f4:a5:32:f4:58:fe:a7:65:dd:7d:55:52:a9:23:
ab:f3:84:21:f2:aa:78:0d:41:db:4e:be:c5:b2:4f:
fd:27:77:dd:6a:a0:0a:42:1a:e3:46:14:c0:7f:8f:
ad:20:b5:71:92:dc:f1:28:f4:e3:19:c9:77:3d:06:
70:66:4e:76:7c:85:78:29:39:5e:f1:bc:f9:c1:32:
a5:08:86:3e:f1:46:53:01:39:2a:06:30:c5:19:bf:
9e:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:E9:38:A2:F5:99:CF:2E:DE:D6:04:00:B7:1A:DF:8E:0A:58:64:49
X509v3 Authority Key Identifier:
keyid:2F:60:0D:29:1D:48:23:83:5A:F1:03:AA:D3:9E:DE:05:BD:12:C9:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L2ANKR1II4Na8QOq057eBb0SybY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/054a71-8253-4089-b962-cbbf76f3533a/1/L2ANKR1II4Na8QOq057eBb0SybY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/054a71-8253-4089-b962-cbbf76f3533a/1/L2ANKR1II4Na8QOq057eBb0SybY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:e1:c2:e3:f8:67:99:8b:27:dd:b3:33:7d:3d:5a:22:e4:e7:
33:20:93:75:ad:aa:5b:ab:ca:a3:01:74:f9:0e:92:f3:b1:60:
1e:5e:90:c6:24:ec:e6:e7:90:7e:8d:91:27:62:96:40:d7:04:
2c:99:a2:3c:e1:cc:27:4c:09:c5:68:f5:f1:01:f8:78:f0:63:
49:ea:b8:86:f5:e6:65:21:5b:bd:4c:04:82:91:4e:ed:02:95:
dd:ee:02:5f:65:67:ff:3d:f7:2a:53:6e:55:46:5a:b9:dc:2c:
17:6c:5a:08:77:93:2b:68:74:63:01:78:cd:0b:be:91:6e:86:
60:7d:85:96:e1:3e:c3:77:63:59:23:83:44:5f:d8:63:76:56:
12:2c:2c:23:63:db:17:73:f9:ed:ba:69:49:d4:09:31:75:e3:
29:ff:c1:d1:27:d9:f6:ba:37:7c:37:25:d8:c5:d8:be:38:d5:
8e:62:cc:26:11:94:6c:94:b5:57:b9:14:70:a4:9b:e2:46:63:
bd:c9:ac:81:17:95:6f:ec:bb:69:a8:45:27:fa:47:cf:06:2e:
60:77:22:03:04:2b:dc:4c:24:ae:14:47:5f:70:9b:c1:e9:2c:
b4:ce:3a:48:f0:9c:ad:b3:df:10:7a:f9:e7:8c:9b:4e:3b:c8:
d1:ba:ee:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:41:45 2025 by rpki-client