Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/248e6f-b1fb-4da7-97dd-954372965c5e/1/Li-E9VWmZqoMBKj759wZEAdfVlg.mft
File: Li-E9VWmZqoMBKj759wZEAdfVlg.mft (raw, json)
Hash identifier: YJOdL54CqaX6PYQC4z5ObsK3plKEwN937tNy0KqGoCM=
Subject key identifier: 1D:08:A3:F0:8F:52:23:5C:5F:A4:FE:49:D8:A9:44:A7:AB:2B:A8:C0
Authority key identifier: 2E:2F:84:F5:55:A6:66:AA:0C:04:A8:FB:E7:DC:19:10:07:5F:56:58
Certificate issuer: /CN=2e2f84f555a666aa0c04a8fbe7dc1910075f5658
Certificate serial: 0194BCE0EAC109919A34DCAF9BBD6CC41CBB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Li-E9VWmZqoMBKj759wZEAdfVlg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/248e6f-b1fb-4da7-97dd-954372965c5e/1/Li-E9VWmZqoMBKj759wZEAdfVlg.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 15:00:44 +0000
Manifest this update: Fri 31 Jan 2025 15:00:44 +0000
Manifest next update: Sat 01 Feb 2025 15:00:44 +0000
Files and hashes: 1: Li-E9VWmZqoMBKj759wZEAdfVlg.crl (hash: WFlgKa4sZvedKjzu+k4AwBXcH7eFtIG1VG5pta/5zEM=)
2: pFH6DHW2s5KsXhoSMia6hZQZzt0.roa (hash: eNJrzW8rXB10B8GQwblM7wVFPW8bxQ19CVHU34yh2No=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:ea:c1:09:91:9a:34:dc:af:9b:bd:6c:c4:1c:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e2f84f555a666aa0c04a8fbe7dc1910075f5658
Validity
Not Before: Jan 31 15:00:44 2025 GMT
Not After : Feb 1 15:00:44 2025 GMT
Subject: CN=1d08a3f08f52235c5fa4fe49d8a944a7ab2ba8c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:fb:f7:08:8f:5d:d0:6c:62:cc:58:61:e7:b4:
2c:3c:dd:d5:3e:a9:08:d3:9b:f3:12:be:98:84:a5:
ba:a2:09:6c:d9:26:af:79:10:e1:96:53:65:1d:a8:
ab:0e:e7:29:09:aa:e0:4b:25:78:1d:0b:b5:3f:9b:
07:01:93:81:bb:fd:b1:e4:39:82:7e:ed:da:c7:cd:
6d:c0:e7:4d:7f:80:8f:d9:e1:3b:23:36:84:ea:f4:
bd:be:1c:f8:18:4e:7f:ad:1f:b7:5f:c9:c5:df:65:
a2:6b:e4:23:1e:82:eb:10:53:54:b6:6d:82:a8:38:
f5:79:e3:89:bb:45:26:46:37:0a:a4:f6:77:c3:f4:
41:5f:62:4e:81:d4:56:01:f8:11:c4:d1:ba:eb:50:
6f:a3:b9:fa:2c:30:b0:18:c2:f0:b0:52:fc:f9:42:
04:fd:16:be:e9:90:26:9a:a1:06:20:dd:1e:d4:2b:
55:3c:45:21:33:e2:42:67:96:f3:5a:41:df:bc:43:
70:5b:2d:25:95:4d:f1:76:bf:94:73:90:84:8b:77:
4d:60:e3:d9:ad:3b:b8:3e:d3:8b:4b:5c:25:f7:81:
1d:14:04:fa:a9:96:de:9c:d2:ed:33:19:5d:22:36:
fa:30:f4:da:99:5a:57:cf:76:78:c5:e1:fa:19:36:
2c:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:08:A3:F0:8F:52:23:5C:5F:A4:FE:49:D8:A9:44:A7:AB:2B:A8:C0
X509v3 Authority Key Identifier:
keyid:2E:2F:84:F5:55:A6:66:AA:0C:04:A8:FB:E7:DC:19:10:07:5F:56:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Li-E9VWmZqoMBKj759wZEAdfVlg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/248e6f-b1fb-4da7-97dd-954372965c5e/1/Li-E9VWmZqoMBKj759wZEAdfVlg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/248e6f-b1fb-4da7-97dd-954372965c5e/1/Li-E9VWmZqoMBKj759wZEAdfVlg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:14:34:ae:86:e6:2f:d2:91:43:76:67:bb:2e:2b:3c:57:c7:
cf:c4:c1:ec:28:a7:be:4a:c6:dc:f9:de:54:80:8d:4f:59:01:
79:7a:9e:cc:ac:28:ab:97:1d:6f:b8:cf:3a:88:c4:7c:cc:d0:
6f:ba:05:eb:0d:bc:46:79:a2:89:93:97:32:eb:0c:21:83:ce:
85:e9:20:cf:b6:47:6b:7b:4d:fa:87:4e:a6:fc:e2:cb:90:d0:
09:b6:0d:21:20:1c:94:81:54:8a:6e:ef:2e:56:13:2f:85:07:
b8:ea:cd:e0:9a:dc:85:1c:b6:8e:3c:b0:b7:e9:aa:32:a9:45:
60:37:3f:1d:4d:ab:7c:13:cd:3a:14:a0:38:52:57:00:4a:ff:
fb:1a:2e:b5:00:2a:77:9a:30:96:5e:ce:1c:ef:59:ec:f5:8d:
21:fc:67:6a:4d:58:58:60:5e:5e:12:af:81:b4:df:1b:b6:cc:
71:38:11:59:e7:77:56:49:b4:33:93:70:4a:d6:5c:09:6e:9a:
db:c0:ab:ed:9f:f1:c8:06:c5:d3:d7:3d:f8:35:76:fb:e7:4f:
43:3c:08:35:3e:f2:0a:60:fe:70:09:12:11:56:25:99:49:8c:
62:14:53:33:69:65:e9:a8:b3:ec:2e:bc:6b:09:f9:79:fa:9b:
c7:49:a8:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:19:12 2025 by rpki-client