Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/2dafbc-52ee-4c7b-b006-a786cebe20d3/1/Lr_2z7gya0RylaEbEHhoIS5mX90.mft
File: Lr_2z7gya0RylaEbEHhoIS5mX90.mft (raw, json)
Hash identifier: bePaixKuqRGzgYV+rDRNBBZxV8RSkTgQdyZJ1CfCK3I=
Subject key identifier: 1E:60:45:8E:C3:5C:AE:B2:61:5F:E5:99:14:8B:C0:DD:7D:6C:59:45
Authority key identifier: 2E:BF:F6:CF:B8:32:6B:44:72:95:A1:1B:10:78:68:21:2E:66:5F:DD
Certificate issuer: /CN=2ebff6cfb8326b447295a11b107868212e665fdd
Certificate serial: 0194BCE095929D376DA263AF8BB8A996C9B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lr_2z7gya0RylaEbEHhoIS5mX90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/2dafbc-52ee-4c7b-b006-a786cebe20d3/1/Lr_2z7gya0RylaEbEHhoIS5mX90.mft
Manifest number: 050A
Signing time: Fri 31 Jan 2025 15:00:22 +0000
Manifest this update: Fri 31 Jan 2025 15:00:22 +0000
Manifest next update: Sat 01 Feb 2025 15:00:22 +0000
Files and hashes: 1: 2EHY0ANqI6GjPJ3q8F_H43sabIk.roa (hash: 6KKbNu6n/lBjRM28xxVSQgucF7edE6uzeJUy5fL1Psg=)
2: Lr_2z7gya0RylaEbEHhoIS5mX90.crl (hash: J4Nf4y38ewWBp2gU1Km7KU7/pyTCQdYG16vsDtYZCJg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:95:92:9d:37:6d:a2:63:af:8b:b8:a9:96:c9:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ebff6cfb8326b447295a11b107868212e665fdd
Validity
Not Before: Jan 31 15:00:22 2025 GMT
Not After : Feb 1 15:00:22 2025 GMT
Subject: CN=1e60458ec35caeb2615fe599148bc0dd7d6c5945
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:20:8e:be:df:65:a0:62:35:98:d1:7a:c6:3e:
54:92:b1:ed:76:ac:00:0e:b2:23:f5:ee:11:fa:9c:
31:be:59:f4:38:ae:e1:f3:71:32:fc:c6:cc:fe:32:
10:a0:50:23:4b:c2:28:b5:24:a5:a7:47:a4:f7:78:
1c:da:75:40:6d:da:94:bc:ec:67:d6:6b:3f:d4:4d:
9a:8d:9c:fe:7f:3b:a9:c7:2f:36:75:b3:5a:9e:77:
e1:5d:a0:32:4e:76:43:1f:bf:9f:9a:39:6a:d2:b2:
7e:85:ff:c7:2e:c5:4f:af:ff:d3:55:3b:a9:32:c0:
71:fa:15:d9:a7:7e:8d:ce:3d:95:6c:f8:7a:4b:32:
89:d5:c6:b6:97:f9:94:f6:ee:db:10:b6:72:4e:2d:
9f:09:2a:96:ab:46:4a:7f:1e:c3:c0:0f:a8:1c:fc:
fa:40:80:93:fc:9b:c0:3f:84:9f:3b:8d:ff:90:36:
5b:42:8c:b6:ab:05:c0:c2:3f:9a:9f:f6:80:be:9f:
3d:1e:3b:73:04:14:f0:9c:06:ec:3f:13:93:ff:ff:
3f:64:d9:56:4c:e2:ff:1f:88:89:08:ba:7d:a5:9c:
15:a5:4f:b9:24:75:9c:0c:c0:95:3b:1d:ca:6b:35:
4a:88:58:be:65:a3:2c:f4:0b:f8:72:4b:fe:9a:fe:
ec:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:60:45:8E:C3:5C:AE:B2:61:5F:E5:99:14:8B:C0:DD:7D:6C:59:45
X509v3 Authority Key Identifier:
keyid:2E:BF:F6:CF:B8:32:6B:44:72:95:A1:1B:10:78:68:21:2E:66:5F:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lr_2z7gya0RylaEbEHhoIS5mX90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/2dafbc-52ee-4c7b-b006-a786cebe20d3/1/Lr_2z7gya0RylaEbEHhoIS5mX90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/2dafbc-52ee-4c7b-b006-a786cebe20d3/1/Lr_2z7gya0RylaEbEHhoIS5mX90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:24:e6:bd:8d:05:cf:db:2a:98:6c:b5:c6:a9:46:6f:a8:76:
12:0c:69:c8:1d:3f:00:53:7d:03:3c:db:c0:38:d5:7b:43:8a:
48:61:0a:c9:5b:b1:82:04:04:88:7f:01:42:a4:80:d8:d2:7a:
46:28:9f:b6:56:26:e5:b3:21:15:58:08:3a:8a:bb:ef:6f:fc:
cf:6a:cc:a2:53:fe:ff:ee:17:11:c3:25:79:73:c2:4c:a8:f0:
a9:bb:0c:f5:d2:d2:29:2b:d7:13:88:ce:f6:9b:6c:91:db:65:
76:2a:bf:7f:6c:9e:09:e2:4b:bc:cc:0b:59:43:40:fe:a1:15:
fd:ee:03:7d:00:02:0b:db:ba:88:b9:55:b6:d8:f9:ce:dc:2a:
90:c6:12:b6:bb:6d:d9:3c:fd:bb:44:34:24:fd:fa:d3:0a:b2:
b5:48:18:a7:91:e9:14:ac:95:e5:14:af:4e:4d:45:1e:70:22:
bd:90:b9:f7:8f:b2:c8:d5:7e:60:7f:e1:02:8f:c6:c0:41:a2:
72:e5:8b:fa:2a:ae:6e:fe:5f:e7:8e:fd:05:85:68:fc:80:0f:
06:97:b8:a0:2d:d9:e5:c4:2f:37:2f:cd:6f:16:35:94:c2:6c:
61:3d:85:e0:c2:c1:81:0d:63:57:bd:a7:ca:8f:05:d0:7f:ff:
65:53:96:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:11:05 2025 by rpki-client