Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/709fc9-68ef-411e-a1cc-e1e807ecd4df/1/LED81TmHsgn4rznKEhHycGCokC4.mft
File: LED81TmHsgn4rznKEhHycGCokC4.mft (raw, json)
Hash identifier: 4Q9Rti8NFl7d+prddLF+UI4Wbi3EfD8bv+Hx8XLCw9I=
Subject key identifier: 63:EF:22:37:27:F1:C7:F1:FB:07:93:89:09:3D:32:6D:9D:F8:B8:C8
Authority key identifier: 2C:40:FC:D5:39:87:B2:09:F8:AF:39:CA:12:11:F2:70:60:A8:90:2E
Certificate issuer: /CN=2c40fcd53987b209f8af39ca1211f27060a8902e
Certificate serial: 0194BC3C7FDCBE3158EEFB545A2D50AC4CC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LED81TmHsgn4rznKEhHycGCokC4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/709fc9-68ef-411e-a1cc-e1e807ecd4df/1/LED81TmHsgn4rznKEhHycGCokC4.mft
Manifest number: 0EFC
Signing time: Fri 31 Jan 2025 12:01:08 +0000
Manifest this update: Fri 31 Jan 2025 12:01:08 +0000
Manifest next update: Sat 01 Feb 2025 12:01:08 +0000
Files and hashes: 1: LED81TmHsgn4rznKEhHycGCokC4.crl (hash: d23N15Oq1/M1v3p683m5G0tHgBS+C+xpttDCxxmNJqk=)
2: dxYsy90KXOXYJr1C_txNtkhoQyI.roa (hash: ki8NvWzR6fAVOnACkZG0hx623eUXEmIvNGBU1taAI6I=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:7f:dc:be:31:58:ee:fb:54:5a:2d:50:ac:4c:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c40fcd53987b209f8af39ca1211f27060a8902e
Validity
Not Before: Jan 31 12:01:08 2025 GMT
Not After : Feb 1 12:01:08 2025 GMT
Subject: CN=63ef223727f1c7f1fb079389093d326d9df8b8c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:88:90:7b:20:44:0a:d4:9a:ee:2e:17:23:51:
cf:f4:9c:ce:d9:41:75:e1:c3:03:da:41:bc:b3:e1:
ea:3a:1f:42:ba:e0:69:ea:f3:7d:82:de:b5:59:e3:
7c:be:19:9f:bc:c6:1d:74:a1:ec:0f:b2:96:d6:cb:
b5:e1:5f:06:49:4a:d1:a6:ba:ac:4e:d9:50:2f:31:
7f:e6:88:9e:f2:b3:91:21:75:a9:0a:f1:3c:9e:ac:
5d:f1:14:f5:c3:60:1e:05:c3:08:2d:15:1d:f2:77:
ba:46:b8:ba:df:7f:0b:1f:88:3a:4a:14:3c:3f:7e:
15:6e:49:12:4c:62:39:fa:e5:49:bb:d7:e7:4e:8b:
96:a4:f7:47:03:c1:ee:48:33:27:8e:27:ce:d5:1f:
2e:9b:29:73:58:30:17:c0:50:90:64:a0:36:09:db:
c2:f5:e7:dd:96:9e:d5:e5:f9:46:a9:c4:cd:46:80:
96:ac:c5:6a:1f:f2:79:08:7f:47:36:16:d4:ac:82:
b5:64:c8:11:7b:e2:87:a5:66:e2:89:31:76:92:aa:
37:12:33:80:36:e0:65:21:a7:bf:4a:03:7e:5e:ea:
91:0b:72:f7:84:9e:9b:ee:12:ac:ae:71:e1:a1:3b:
03:37:6d:98:da:21:40:3c:28:ed:57:92:61:6f:5c:
a0:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:EF:22:37:27:F1:C7:F1:FB:07:93:89:09:3D:32:6D:9D:F8:B8:C8
X509v3 Authority Key Identifier:
keyid:2C:40:FC:D5:39:87:B2:09:F8:AF:39:CA:12:11:F2:70:60:A8:90:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LED81TmHsgn4rznKEhHycGCokC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/709fc9-68ef-411e-a1cc-e1e807ecd4df/1/LED81TmHsgn4rznKEhHycGCokC4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/709fc9-68ef-411e-a1cc-e1e807ecd4df/1/LED81TmHsgn4rznKEhHycGCokC4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:9b:f1:16:a4:89:96:48:e7:6f:9a:f8:04:7c:42:94:9d:60:
1e:2c:80:73:86:03:45:24:c6:79:1b:2d:13:64:58:7b:06:2e:
f2:c1:03:ed:e1:97:e5:2d:64:bf:b4:34:77:a7:db:1e:4f:cb:
74:b1:63:f7:b3:8f:8e:8e:0f:af:28:96:43:9c:49:5b:4e:7c:
26:1d:26:2a:46:73:82:ab:17:ee:e1:f8:9b:5a:14:ec:15:75:
bb:e7:0c:21:f4:eb:c1:f7:c1:20:21:5d:2a:8f:0d:13:9f:0c:
b3:95:92:5b:72:93:18:7a:15:6d:97:f4:5a:63:af:3f:19:ad:
12:90:fa:1c:a0:e6:d1:05:aa:6b:ea:0f:e0:9c:02:64:b0:00:
0b:ee:2c:6a:d0:7b:d0:b6:e3:81:68:e8:6a:a8:84:b9:74:c4:
9a:44:89:83:66:28:e0:56:0f:9d:f3:29:3c:56:a1:5e:c3:aa:
ee:0d:c5:f9:1e:92:cc:3a:4e:29:3f:99:38:12:b8:b6:9e:5c:
3c:87:65:2b:43:af:43:fc:2f:85:9a:01:de:be:21:01:e4:8c:
0e:ff:34:91:14:50:e7:31:99:27:11:27:c2:b5:a9:a8:01:e7:
bb:d4:5e:9c:1b:10:80:7a:8d:dc:bd:76:42:94:b9:14:07:69:
98:11:bc:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:46:00 2025 by rpki-client