Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/1ad9bf-0322-4534-b009-e6e91bf052fe/1/LNQbzDzXPg3H9-lbXQ3KbWhXvtw.mft
File: LNQbzDzXPg3H9-lbXQ3KbWhXvtw.mft (raw, json)
Hash identifier: h3EpKFsIXyC8vx0ncdOgVhi/OEoCaKAtoAiQtxRo12Q=
Subject key identifier: E0:63:25:4A:A2:BC:A2:78:75:F9:57:F9:D4:7C:58:3E:3D:E4:7D:DB
Authority key identifier: 2C:D4:1B:CC:3C:D7:3E:0D:C7:F7:E9:5B:5D:0D:CA:6D:68:57:BE:DC
Certificate issuer: /CN=2cd41bcc3cd73e0dc7f7e95b5d0dca6d6857bedc
Certificate serial: 0194BCA99E703867009CA675306AD4C2817A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LNQbzDzXPg3H9-lbXQ3KbWhXvtw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/1ad9bf-0322-4534-b009-e6e91bf052fe/1/LNQbzDzXPg3H9-lbXQ3KbWhXvtw.mft
Manifest number: 1424
Signing time: Fri 31 Jan 2025 14:00:20 +0000
Manifest this update: Fri 31 Jan 2025 14:00:20 +0000
Manifest next update: Sat 01 Feb 2025 14:00:20 +0000
Files and hashes: 1: LNQbzDzXPg3H9-lbXQ3KbWhXvtw.crl (hash: xLe5FKIj5liHU6f62ZfXaA5bsY6LBKquutvXcALz8d4=)
2: k9ESiOC05FAL5OZXSx8n68sQwKU.roa (hash: x3z9I2/sycjs0uOQJeLYl+8lQLkZ9uNIg5/ImA60dEQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:9e:70:38:67:00:9c:a6:75:30:6a:d4:c2:81:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cd41bcc3cd73e0dc7f7e95b5d0dca6d6857bedc
Validity
Not Before: Jan 31 14:00:20 2025 GMT
Not After : Feb 1 14:00:20 2025 GMT
Subject: CN=e063254aa2bca27875f957f9d47c583e3de47ddb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:b6:40:aa:4a:13:70:cb:dd:ea:b0:7c:6c:c0:
38:aa:2b:7b:f5:ac:10:87:e3:cc:4f:3a:91:fc:6f:
18:eb:58:40:73:d3:14:08:93:dc:ba:ab:50:40:e6:
dc:9c:4b:b4:64:47:26:54:e0:93:2a:a2:33:3f:6c:
ed:d9:f5:9a:ae:0b:fe:7f:66:4f:98:58:e3:c2:84:
8f:d5:d7:c1:c8:50:de:02:90:6a:0b:3a:81:b6:27:
b7:d2:db:a0:48:91:e4:5a:0e:2f:f0:4b:ac:22:a8:
0a:20:69:2c:54:11:cf:02:d7:6d:b3:e5:60:d1:0b:
b9:d4:fa:4d:e0:e4:0b:52:43:28:c5:a4:d3:95:f6:
e2:b1:46:cf:ca:72:8f:6f:40:86:67:be:e1:77:37:
35:1d:9e:b8:8d:34:70:ab:07:83:53:d2:74:8c:7e:
10:21:a5:50:d4:bb:7a:3e:bb:62:5c:4d:5b:61:69:
10:5a:f3:96:9b:72:f0:8e:e1:28:73:a4:16:28:13:
b4:e1:17:b6:53:fb:92:2c:03:f0:0b:dc:29:57:b0:
34:7c:f0:92:72:4f:04:96:18:f7:c4:ec:86:37:fa:
6b:f6:98:d3:1c:40:87:39:3c:13:1d:da:0d:88:88:
df:e7:3b:4d:af:8a:07:bc:27:37:6a:36:7f:f9:6f:
a4:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:63:25:4A:A2:BC:A2:78:75:F9:57:F9:D4:7C:58:3E:3D:E4:7D:DB
X509v3 Authority Key Identifier:
keyid:2C:D4:1B:CC:3C:D7:3E:0D:C7:F7:E9:5B:5D:0D:CA:6D:68:57:BE:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LNQbzDzXPg3H9-lbXQ3KbWhXvtw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/1ad9bf-0322-4534-b009-e6e91bf052fe/1/LNQbzDzXPg3H9-lbXQ3KbWhXvtw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/1ad9bf-0322-4534-b009-e6e91bf052fe/1/LNQbzDzXPg3H9-lbXQ3KbWhXvtw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:0b:1d:82:8d:1f:a3:bf:2a:45:9e:e4:cc:ef:80:73:e4:29:
27:19:65:c0:80:3a:f7:f3:fa:b6:73:f9:7a:ef:4c:d2:ad:92:
82:58:4e:4c:c7:61:de:5e:22:4c:fd:f1:17:1c:27:e2:9d:d2:
df:25:0d:c5:d8:05:61:e5:3a:99:a2:8d:84:89:36:0b:4c:4e:
a9:a8:7d:a5:07:18:06:2c:72:a5:55:d9:77:a3:45:bc:92:ff:
b6:86:0d:46:38:db:78:25:88:07:b9:9b:02:7c:54:e1:c3:6e:
df:ec:80:b2:7d:04:e2:d9:79:c5:b9:4a:97:0e:45:b7:c0:dd:
c3:34:81:33:9c:5b:1a:b6:40:be:db:8a:cf:f6:4b:38:7f:72:
fd:50:4c:8e:47:f7:ef:84:31:1e:94:7d:c3:c1:1c:fb:8c:76:
b2:ef:06:66:0d:28:66:bc:7b:b3:32:2d:ea:01:dc:dc:e0:cf:
23:f3:3c:2b:aa:a0:15:ab:92:08:a6:72:87:db:16:de:b3:5d:
6b:9f:fb:ac:26:8a:30:d8:c0:27:df:26:3d:39:1d:5e:5d:b2:
d4:e0:0d:df:03:ff:c2:a9:83:ad:22:ed:4e:5d:7c:c9:b3:fb:
a4:d0:12:a1:b7:7a:45:db:62:09:a2:0b:04:0f:b4:e9:cf:fe:
29:56:e7:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:07:09 2025 by rpki-client