Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/776552-e0c2-4b7c-9891-21cd290c03f3/1/LJ5JliBz-e-2akswNQbaY0FWdFA.mft
File: LJ5JliBz-e-2akswNQbaY0FWdFA.mft (raw, json)
Hash identifier: wEoblzOvRV8K6IAF3oKrEgFwzcDUjUhJ6yfdoMvxTsk=
Subject key identifier: 02:3B:3C:EF:26:D6:0A:B2:07:B7:F4:94:C2:00:55:B6:2C:19:1C:FE
Authority key identifier: 2C:9E:49:96:20:73:F9:EF:B6:6A:4B:30:35:06:DA:63:41:56:74:50
Certificate issuer: /CN=2c9e49962073f9efb66a4b303506da6341567450
Certificate serial: 0194BCE05D0FFEC04C2CF33B9F84BC9C9906
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LJ5JliBz-e-2akswNQbaY0FWdFA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/776552-e0c2-4b7c-9891-21cd290c03f3/1/LJ5JliBz-e-2akswNQbaY0FWdFA.mft
Manifest number: 03B0
Signing time: Fri 31 Jan 2025 15:00:07 +0000
Manifest this update: Fri 31 Jan 2025 15:00:07 +0000
Manifest next update: Sat 01 Feb 2025 15:00:07 +0000
Files and hashes: 1: LJ5JliBz-e-2akswNQbaY0FWdFA.crl (hash: jA8Qxxc5z8oyf4lf47RHXfnJ98laGCX/pQTu2lArseE=)
2: mYh-qCmaZDKpRaEP5mJEDlY8uOo.roa (hash: n/GDBDbA1t8MPsRWLpJVKlD7pNNzCkXSyPdnuFSxeus=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:5d:0f:fe:c0:4c:2c:f3:3b:9f:84:bc:9c:99:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c9e49962073f9efb66a4b303506da6341567450
Validity
Not Before: Jan 31 15:00:07 2025 GMT
Not After : Feb 1 15:00:07 2025 GMT
Subject: CN=023b3cef26d60ab207b7f494c20055b62c191cfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:01:14:80:a4:91:b5:a6:d6:ff:73:07:b9:de:
f0:4e:a6:20:a1:88:e1:6f:92:3e:98:61:0e:69:72:
66:95:45:12:c4:9c:1b:2c:c9:f2:dc:1c:d1:60:c3:
db:8f:4d:c0:06:e5:53:5a:30:d0:52:02:56:bf:0a:
44:38:0e:4e:ce:19:75:c8:ce:0f:a5:ad:98:2c:77:
fc:08:e4:bc:3c:ae:c6:9c:5e:e2:2e:d8:3f:50:9b:
a4:59:47:af:64:89:95:0a:6d:36:39:b1:cd:8c:e2:
9d:27:f7:47:ef:25:28:1a:82:eb:23:66:a8:b6:a6:
f1:2d:c5:7c:87:8c:0e:c7:5e:e8:e2:32:2a:92:2f:
05:db:25:37:93:c5:bb:19:2c:d4:26:16:a3:72:74:
43:a9:83:e3:c4:7b:e6:94:cd:dc:da:69:98:43:22:
9d:f7:80:c2:6d:8e:83:ed:2a:e0:d7:7b:5e:cd:eb:
52:6e:ad:f4:85:a8:37:5f:96:b1:0e:31:8a:52:25:
45:89:93:a4:8c:a9:30:fb:cc:28:a0:9b:2a:2f:14:
a6:e2:99:a5:3a:34:df:ea:78:aa:c6:d1:dd:e6:d1:
53:66:20:ae:72:da:91:a8:e2:13:4e:6f:a5:c8:31:
4a:cf:e6:08:d0:84:d1:41:c3:0d:0f:30:8e:51:7f:
a7:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:3B:3C:EF:26:D6:0A:B2:07:B7:F4:94:C2:00:55:B6:2C:19:1C:FE
X509v3 Authority Key Identifier:
keyid:2C:9E:49:96:20:73:F9:EF:B6:6A:4B:30:35:06:DA:63:41:56:74:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LJ5JliBz-e-2akswNQbaY0FWdFA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/776552-e0c2-4b7c-9891-21cd290c03f3/1/LJ5JliBz-e-2akswNQbaY0FWdFA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/776552-e0c2-4b7c-9891-21cd290c03f3/1/LJ5JliBz-e-2akswNQbaY0FWdFA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:1a:a1:37:5c:be:3b:87:cb:e8:83:b7:72:41:05:4d:e6:19:
2d:7a:28:6c:92:d8:96:f8:2a:2c:03:aa:fb:75:ff:e5:18:d4:
64:c2:17:0b:6f:99:bb:b9:3f:ce:6f:90:35:4d:8b:22:e3:8a:
3b:d5:18:9a:ab:15:3d:08:4f:f1:35:4a:a1:43:a7:73:6d:87:
a4:42:22:4c:e6:13:a8:d5:67:7d:22:6d:0f:ae:b8:6f:a8:15:
b5:33:12:0c:c5:e0:e0:68:2b:3e:7b:d2:9c:ba:44:39:17:c5:
e8:ee:56:38:d0:d7:db:b2:bf:27:e4:72:e2:02:93:d2:5d:7a:
67:16:74:a5:3c:6c:19:32:db:5c:4c:c5:c1:8e:31:af:58:80:
61:a4:28:6c:97:cc:d0:97:10:e0:db:b1:fc:53:a6:49:c6:27:
4d:20:a8:05:61:36:08:7f:11:fb:b2:19:af:d8:12:a2:06:8a:
e4:fa:0b:81:0a:71:d6:62:7f:f1:2f:1b:15:b0:87:40:9c:a7:
7d:18:3e:c8:62:2c:16:25:15:c5:59:f2:dd:d9:1f:1c:46:fd:
ab:ed:6a:d2:db:29:8f:7f:38:7e:d9:e8:0b:a7:3c:45:eb:3c:
0e:ab:5b:ae:e8:f4:9f:97:5a:f0:23:aa:e6:24:a4:a2:55:72:
5e:36:bf:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 12:28:03 2025 by rpki-client