Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/e477bd-ac8b-455d-bc7f-eddac0c7a1f2/1/LtxXg3JdWVAZYqostbWQxCtX314.mft
File: LtxXg3JdWVAZYqostbWQxCtX314.mft (raw, json)
Hash identifier: 2I2RkiAlGRPRyW9vgVQW5LncTY8akt5KMnj9BF1t2NI=
Subject key identifier: 80:87:DC:56:F9:C4:F1:8B:F1:59:4C:5B:FB:84:61:39:57:AD:1E:2A
Authority key identifier: 2E:DC:57:83:72:5D:59:50:19:62:AA:2C:B5:B5:90:C4:2B:57:DF:5E
Certificate issuer: /CN=2edc5783725d59501962aa2cb5b590c42b57df5e
Certificate serial: 0194BD1782EF3B4125C79771674487E2CE1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LtxXg3JdWVAZYqostbWQxCtX314.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/e477bd-ac8b-455d-bc7f-eddac0c7a1f2/1/LtxXg3JdWVAZYqostbWQxCtX314.mft
Manifest number: 1175
Signing time: Fri 31 Jan 2025 16:00:22 +0000
Manifest this update: Fri 31 Jan 2025 16:00:22 +0000
Manifest next update: Sat 01 Feb 2025 16:00:22 +0000
Files and hashes: 1: LtxXg3JdWVAZYqostbWQxCtX314.crl (hash: O5AlrESrPinbtN98Tqf8QwMTJVJPE9OPdPOXwsEiD78=)
2: r9FlEVdK2kxGPhNPo_-PFZXz5Hg.roa (hash: /9b7HSJW7nIal7/NVxztFoZrvte6gjhfTeD0u5Uqs6c=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:82:ef:3b:41:25:c7:97:71:67:44:87:e2:ce:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2edc5783725d59501962aa2cb5b590c42b57df5e
Validity
Not Before: Jan 31 16:00:22 2025 GMT
Not After : Feb 1 16:00:22 2025 GMT
Subject: CN=8087dc56f9c4f18bf1594c5bfb84613957ad1e2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:78:23:f1:ce:5b:8f:12:60:ab:b3:94:df:ac:
9f:cb:34:6e:1d:f1:2b:f9:0a:07:5a:fa:a8:7c:92:
e5:fc:34:9f:0c:10:d6:f8:27:1b:d9:0e:f9:20:45:
a4:bf:20:44:dd:55:db:97:e8:0e:ab:64:39:72:37:
6f:fa:82:b2:76:3a:70:18:50:03:26:0f:2a:51:ab:
44:6a:d4:7e:8b:f5:b6:ee:10:6c:d5:7b:71:f4:4f:
07:d5:7b:e9:22:87:7c:da:c1:aa:0b:65:4b:ea:2a:
94:7f:7d:14:02:1a:77:30:10:01:51:81:71:bd:38:
8c:5c:a4:e3:b1:39:5e:9f:d3:28:fa:6c:7a:70:02:
12:a5:b9:e6:94:e3:cb:44:42:fd:03:79:e9:f8:e6:
f6:67:10:7c:16:be:e7:01:96:aa:76:45:9f:70:fe:
6b:db:e9:d2:b5:f6:f9:90:cd:af:39:5c:1c:4e:9f:
cf:28:e2:43:a4:18:02:d9:b3:8f:d6:f5:35:f7:3c:
45:5a:b8:f7:ca:cc:83:0c:24:a6:de:63:04:a2:fd:
67:b3:f3:ba:a9:c2:54:ef:c6:b5:13:1a:32:0e:8e:
a6:e3:7f:f6:e4:7a:a4:86:b7:bf:75:35:1f:85:df:
8d:d0:90:ed:a3:ab:92:36:c7:90:53:1f:16:16:d2:
4e:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:87:DC:56:F9:C4:F1:8B:F1:59:4C:5B:FB:84:61:39:57:AD:1E:2A
X509v3 Authority Key Identifier:
keyid:2E:DC:57:83:72:5D:59:50:19:62:AA:2C:B5:B5:90:C4:2B:57:DF:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LtxXg3JdWVAZYqostbWQxCtX314.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/e477bd-ac8b-455d-bc7f-eddac0c7a1f2/1/LtxXg3JdWVAZYqostbWQxCtX314.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/e477bd-ac8b-455d-bc7f-eddac0c7a1f2/1/LtxXg3JdWVAZYqostbWQxCtX314.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:49:28:a1:ff:72:8a:5f:fd:a7:28:08:cb:44:67:8c:ad:78:
17:47:c3:9a:e1:8a:24:84:ac:9d:ee:bf:ad:2e:e1:92:75:2f:
e9:c8:da:19:14:f0:b4:86:23:41:72:c2:4e:1d:e7:bd:2d:1e:
80:bf:1a:96:7d:07:9e:17:48:af:50:1d:24:12:5c:3c:31:f6:
b4:c6:44:fb:b7:53:34:37:c3:89:81:a3:cd:0b:ff:f9:81:84:
64:4b:2f:14:78:c4:33:c0:bd:a9:9a:8b:ec:3f:df:39:39:bb:
d3:0b:0a:1e:d4:0f:84:06:df:2f:8e:7f:09:93:f5:23:3e:fb:
7b:67:ac:e7:44:8f:5e:db:bc:df:6b:d6:44:c5:e7:15:ed:95:
5c:f3:ea:17:01:58:39:d6:20:41:14:18:1c:35:e4:1b:29:99:
34:2d:22:f8:22:a1:da:56:76:58:b0:5a:0c:04:a1:31:68:84:
24:e6:c9:97:fa:64:86:e7:e9:16:21:4a:58:ee:02:25:47:1c:
b7:db:ad:cf:3b:3e:61:c5:35:04:99:0f:a6:af:e4:71:0f:ce:
d0:f5:fe:59:31:38:5b:a3:3d:97:7d:4c:d8:71:37:a2:9c:13:
7e:29:e8:98:e4:0b:d2:e2:4e:2a:fc:5d:6c:ca:28:8a:cc:70:
4b:c1:20:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:29:41 2025 by rpki-client