Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/435a3b-0b05-4571-bd2d-f03ce824c76d/1/LfqfBo7bn8Q2NU0abZu0Ib_2MNU.mft
File: LfqfBo7bn8Q2NU0abZu0Ib_2MNU.mft (raw, json)
Hash identifier: f+JfZmEHdtc1o9vnOcl/fAukHS6QWMBC3qmwCQ4tk0k=
Subject key identifier: A7:65:08:DF:46:CF:9E:7E:AA:FC:C6:73:82:0D:98:97:FD:16:5B:CD
Authority key identifier: 2D:FA:9F:06:8E:DB:9F:C4:36:35:4D:1A:6D:9B:B4:21:BF:F6:30:D5
Certificate issuer: /CN=2dfa9f068edb9fc436354d1a6d9bb421bff630d5
Certificate serial: 0194BC72AE721F3E092E735C0C84B00F08A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LfqfBo7bn8Q2NU0abZu0Ib_2MNU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/435a3b-0b05-4571-bd2d-f03ce824c76d/1/LfqfBo7bn8Q2NU0abZu0Ib_2MNU.mft
Manifest number: 047B
Signing time: Fri 31 Jan 2025 13:00:19 +0000
Manifest this update: Fri 31 Jan 2025 13:00:19 +0000
Manifest next update: Sat 01 Feb 2025 13:00:19 +0000
Files and hashes: 1: HK2Vi8L-VSUrFJS43CFHzQJcbz8.roa (hash: E5YSpnMWbKYKY1PUN7i5gprBfIcHK0dY28fjbucPCYI=)
2: LfqfBo7bn8Q2NU0abZu0Ib_2MNU.crl (hash: kIjDyKqjnJdaDRBMkXsHjrso4gVrfHBXok2ndCXP4KI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:ae:72:1f:3e:09:2e:73:5c:0c:84:b0:0f:08:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2dfa9f068edb9fc436354d1a6d9bb421bff630d5
Validity
Not Before: Jan 31 13:00:19 2025 GMT
Not After : Feb 1 13:00:19 2025 GMT
Subject: CN=a76508df46cf9e7eaafcc673820d9897fd165bcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:df:f5:00:c2:89:6b:3c:74:b9:0b:35:75:da:
32:8d:7e:54:76:a3:76:13:29:4c:dd:cd:b8:76:5a:
ba:43:00:3a:58:cf:a3:f0:99:96:44:11:ce:62:45:
1a:fe:e3:71:6e:c4:ab:e5:cf:cc:a7:2b:36:38:85:
e4:6e:9a:28:f6:ed:a3:9a:f5:58:ca:c2:59:5d:6e:
ae:ac:05:8b:1c:4f:aa:0f:95:2a:56:3f:d9:be:1a:
a2:88:2a:e9:a6:ae:4e:15:92:80:5c:9b:2a:33:7d:
87:f1:3f:6c:63:44:7a:ef:70:91:ac:c2:9e:22:6e:
cb:16:96:b4:f2:e6:82:cb:e9:9e:85:9b:e8:f5:c0:
1c:9d:1e:d9:d7:44:34:a0:f2:a2:7d:8d:eb:40:25:
53:3b:20:34:b8:7a:be:cc:59:1a:8d:9f:48:6d:71:
29:f7:2d:a2:7c:ce:87:76:8b:06:fb:03:5c:33:8d:
24:a4:32:73:87:55:a6:a2:2f:ab:89:80:3e:b1:3c:
d2:37:0a:1b:6a:c2:58:7a:26:e2:a0:1d:e7:35:1a:
a0:80:0b:b3:47:93:1a:91:ca:4f:ed:18:d2:e1:2a:
1f:76:d3:d9:5a:75:dd:92:34:5b:78:10:82:42:68:
7d:91:e2:3e:eb:49:ef:f8:28:f2:56:71:67:89:f6:
76:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:65:08:DF:46:CF:9E:7E:AA:FC:C6:73:82:0D:98:97:FD:16:5B:CD
X509v3 Authority Key Identifier:
keyid:2D:FA:9F:06:8E:DB:9F:C4:36:35:4D:1A:6D:9B:B4:21:BF:F6:30:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LfqfBo7bn8Q2NU0abZu0Ib_2MNU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/435a3b-0b05-4571-bd2d-f03ce824c76d/1/LfqfBo7bn8Q2NU0abZu0Ib_2MNU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/435a3b-0b05-4571-bd2d-f03ce824c76d/1/LfqfBo7bn8Q2NU0abZu0Ib_2MNU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:f6:92:7e:f1:0a:65:e0:56:e0:cd:c9:66:1d:09:b6:cc:52:
bf:54:c5:65:53:ef:b1:51:e1:72:aa:39:b7:43:5d:14:7f:09:
b9:92:6b:1a:f0:cd:89:d0:06:71:19:dd:98:9c:7f:08:f9:7d:
0a:0e:37:f5:82:98:5f:cd:22:c0:ab:c0:14:ce:80:32:b7:ed:
1b:07:1f:cf:9b:5f:d2:86:78:5f:2d:78:0c:0a:1b:7c:e0:be:
e0:be:ae:49:ba:c5:7d:7e:dd:b7:ad:f7:23:e9:17:56:53:74:
2c:eb:d5:7b:d0:30:6a:70:d2:61:f6:74:59:4b:19:78:0c:50:
74:50:40:1c:67:ca:31:cd:1f:8c:fc:2b:7c:e5:42:b4:4b:24:
12:0a:c9:e6:d2:bb:8c:f3:af:03:bc:b8:86:18:37:96:c7:40:
b5:fa:84:b0:b7:01:fb:5b:3b:5b:ac:00:06:3f:c8:b4:a6:73:
1e:4f:e4:d0:8d:39:77:36:76:52:bc:dc:7e:8f:65:ee:14:c0:
c0:b0:04:21:f2:3f:0b:61:69:ca:a0:0d:60:db:6c:95:f4:2a:
a2:c9:67:dd:a7:b5:c9:5b:d9:39:43:1d:22:08:e5:66:04:64:
c0:12:ef:1b:66:61:ba:7a:9f:f9:ec:17:32:0a:f8:94:9d:33:
c7:8e:a4:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:52:01 2025 by rpki-client