Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/2a4bfe-7688-46a1-9aff-ceb0710a0751/1/L821BdHaE20AniDvGzY7AuMyUZ8.mft
File: L821BdHaE20AniDvGzY7AuMyUZ8.mft (raw, json)
Hash identifier: 13tLSSW2qx0vn41/Uz7HU8Ik/WF1W0rHwxXbIQtdjhE=
Subject key identifier: 52:23:95:49:29:A2:1C:C0:DB:1C:A6:29:3D:CD:54:A9:E8:8A:F2:86
Authority key identifier: 2F:CD:B5:05:D1:DA:13:6D:00:9E:20:EF:1B:36:3B:02:E3:32:51:9F
Certificate issuer: /CN=2fcdb505d1da136d009e20ef1b363b02e332519f
Certificate serial: 0194BC04FBB55C78EE0CBED3F35AD1DDC4A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L821BdHaE20AniDvGzY7AuMyUZ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/2a4bfe-7688-46a1-9aff-ceb0710a0751/1/L821BdHaE20AniDvGzY7AuMyUZ8.mft
Manifest number: 0C36
Signing time: Fri 31 Jan 2025 11:00:30 +0000
Manifest this update: Fri 31 Jan 2025 11:00:30 +0000
Manifest next update: Sat 01 Feb 2025 11:00:30 +0000
Files and hashes: 1: L821BdHaE20AniDvGzY7AuMyUZ8.crl (hash: xhBeTUtpJ14daF+TniJ6rI/OO0H0CFulopDAbyrQN98=)
2: vQoI-4y6Tfml573DLn2pCriBNl4.roa (hash: 3W+CArLvUD2GX28NdlGoBAxxfe8EMtX22dfil51a9Bk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:fb:b5:5c:78:ee:0c:be:d3:f3:5a:d1:dd:c4:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fcdb505d1da136d009e20ef1b363b02e332519f
Validity
Not Before: Jan 31 11:00:30 2025 GMT
Not After : Feb 1 11:00:30 2025 GMT
Subject: CN=5223954929a21cc0db1ca6293dcd54a9e88af286
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:b1:48:e4:6d:8e:d0:ba:bf:28:f6:59:2c:14:
e7:01:6f:fa:ee:9e:e6:0a:f3:3b:e8:c9:4c:5e:23:
18:17:e2:89:84:85:4d:28:42:a9:b4:7f:4c:db:ee:
dd:77:32:4f:33:aa:fe:a7:54:0e:16:c0:a7:19:5d:
e6:4a:7f:13:79:c7:8a:31:2d:13:41:a5:fd:c5:4b:
ff:38:49:75:7d:01:8a:66:10:e1:73:83:77:d7:ca:
8d:ec:f6:07:97:8f:67:00:6b:8d:7d:1e:c2:0d:36:
56:c3:3d:01:74:45:32:3b:e2:8e:13:c9:49:22:f1:
27:83:64:36:77:34:88:3c:6e:64:27:41:68:a0:d1:
0d:6a:d6:cf:c2:47:b3:3a:c1:55:0b:3b:e9:c9:b1:
fb:77:13:53:a0:ce:ce:d6:b5:f8:4b:87:aa:3e:d3:
a5:7a:e0:9c:8d:47:9f:57:6e:82:c8:85:71:1b:d0:
36:af:f2:0c:40:65:31:4c:fc:d0:ec:77:9b:31:ca:
f0:56:4a:0c:42:83:f7:7c:b8:23:65:82:0e:46:f1:
7e:0a:55:ec:58:ab:1c:14:08:7d:7c:ff:e5:f4:3c:
24:e9:5e:8d:18:07:db:c6:6e:e8:ed:d5:bd:55:48:
7a:47:b2:92:6d:2d:80:66:f7:97:da:bc:02:78:ac:
25:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:23:95:49:29:A2:1C:C0:DB:1C:A6:29:3D:CD:54:A9:E8:8A:F2:86
X509v3 Authority Key Identifier:
keyid:2F:CD:B5:05:D1:DA:13:6D:00:9E:20:EF:1B:36:3B:02:E3:32:51:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L821BdHaE20AniDvGzY7AuMyUZ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/2a4bfe-7688-46a1-9aff-ceb0710a0751/1/L821BdHaE20AniDvGzY7AuMyUZ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/2a4bfe-7688-46a1-9aff-ceb0710a0751/1/L821BdHaE20AniDvGzY7AuMyUZ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:7e:4d:bc:62:15:87:d5:51:c9:99:ac:b2:1d:3f:69:41:53:
5d:82:20:b0:a9:2b:db:4a:41:b0:f6:bd:12:b4:30:06:44:4a:
8a:7a:68:b9:0c:c0:ca:4f:4a:ed:f1:fd:51:70:4d:9b:4c:42:
cd:29:86:5d:25:99:76:bb:bd:29:5d:65:6a:2e:fe:6b:2d:84:
12:36:f1:f9:77:ee:39:6e:f9:42:d5:49:7d:79:47:d7:db:98:
41:cd:d3:84:35:23:6d:f5:73:e4:96:bb:e8:87:f8:ee:93:d5:
be:11:be:1b:ad:f9:48:5e:eb:79:3c:f8:87:a1:91:b0:88:b8:
8a:0c:d9:e9:7c:4f:3c:aa:1a:a0:e8:67:30:ec:a1:bc:01:95:
c6:11:35:c3:7e:38:e0:14:1f:f5:ec:2a:dd:4f:5a:d0:50:6b:
a5:fc:27:63:0d:4b:80:28:e3:c7:3b:86:79:89:16:66:23:22:
dd:a0:95:ec:ec:aa:fb:fd:7c:ca:e2:96:d7:b4:e0:c1:69:2f:
0d:85:f8:d7:27:44:5f:29:3c:75:07:30:ec:c9:55:9c:ca:bd:
97:d6:10:a3:33:9e:86:b8:fb:f1:48:69:08:39:35:31:34:5b:
6c:10:79:d7:18:7a:f5:a8:d0:7d:45:99:b0:16:f0:c4:bb:87:
c3:1d:bd:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:46:58 2025 by rpki-client