Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/73f739-81b8-4511-81a1-b3a1680320ad/1/LwvxBgr5ORfa-1aagMzsnbCKdsU.mft
File: LwvxBgr5ORfa-1aagMzsnbCKdsU.mft (raw, json)
Hash identifier: sA1hJ+Fr1qQu6HEmHSInj0R/ltiB/cidPJask2c1u00=
Subject key identifier: 46:C8:67:A8:60:C2:A6:DE:BB:0D:61:3D:4C:71:A8:C4:4E:16:B7:8B
Authority key identifier: 2F:0B:F1:06:0A:F9:39:17:DA:FB:56:9A:80:CC:EC:9D:B0:8A:76:C5
Certificate issuer: /CN=2f0bf1060af93917dafb569a80ccec9db08a76c5
Certificate serial: 0194BC0500853C4692AF3EC98434AF50C161
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LwvxBgr5ORfa-1aagMzsnbCKdsU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/73f739-81b8-4511-81a1-b3a1680320ad/1/LwvxBgr5ORfa-1aagMzsnbCKdsU.mft
Manifest number: 0F65
Signing time: Fri 31 Jan 2025 11:00:31 +0000
Manifest this update: Fri 31 Jan 2025 11:00:31 +0000
Manifest next update: Sat 01 Feb 2025 11:00:31 +0000
Files and hashes: 1: LwvxBgr5ORfa-1aagMzsnbCKdsU.crl (hash: dxZPssCgvHfFXyaDxHQa/ROzdu0DuG7U/rdqYtudLac=)
2: gtQV_zwRPLHuRPfREjsm-_muUpg.roa (hash: a0Tj7X+5b5MFb1rO/5kUp09wUYkeR9dP9zow62nRTzU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:00:85:3c:46:92:af:3e:c9:84:34:af:50:c1:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f0bf1060af93917dafb569a80ccec9db08a76c5
Validity
Not Before: Jan 31 11:00:31 2025 GMT
Not After : Feb 1 11:00:31 2025 GMT
Subject: CN=46c867a860c2a6debb0d613d4c71a8c44e16b78b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:d6:20:9c:3f:2b:85:7b:69:72:8b:7f:0b:96:
27:a5:84:8b:9d:bb:c4:47:df:02:70:ac:6f:af:dc:
14:a2:7f:24:d1:7a:e3:ed:3e:78:2a:c3:fb:83:b1:
ae:17:3c:75:df:60:64:77:06:5e:49:ba:f1:ad:68:
ce:15:db:3b:3b:d4:cc:ef:65:6e:f6:ed:1c:ed:8f:
20:51:36:39:0b:90:40:00:d9:ea:7a:a7:26:dc:8e:
c0:24:e0:03:cf:87:60:b7:47:65:7d:82:80:c4:27:
60:df:9d:4a:35:85:ec:f0:f0:3c:05:0f:68:b9:fe:
45:c3:39:c7:e5:dd:bc:9e:cb:28:5c:46:b2:93:37:
02:88:55:06:e4:45:a4:88:e0:57:9e:eb:97:cd:5a:
6b:3f:8a:a0:8c:0e:34:f7:32:4c:22:e5:f3:1a:df:
13:c0:a8:33:80:89:3d:b2:4a:46:54:e6:64:21:cc:
d4:dd:2f:a4:02:b0:01:33:c6:3d:9b:a2:4d:b4:2d:
79:c5:2a:c0:c9:fd:24:4b:59:1e:8e:91:5c:1c:01:
88:27:1f:a6:e5:26:9d:2a:9f:7c:0a:91:03:8a:ff:
99:09:c7:4a:33:30:89:b6:84:8e:2b:97:45:e1:eb:
2a:b0:c2:3d:24:7f:00:e9:1c:41:0c:28:22:3d:5b:
d0:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:C8:67:A8:60:C2:A6:DE:BB:0D:61:3D:4C:71:A8:C4:4E:16:B7:8B
X509v3 Authority Key Identifier:
keyid:2F:0B:F1:06:0A:F9:39:17:DA:FB:56:9A:80:CC:EC:9D:B0:8A:76:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LwvxBgr5ORfa-1aagMzsnbCKdsU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/73f739-81b8-4511-81a1-b3a1680320ad/1/LwvxBgr5ORfa-1aagMzsnbCKdsU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/73f739-81b8-4511-81a1-b3a1680320ad/1/LwvxBgr5ORfa-1aagMzsnbCKdsU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:51:30:95:66:f9:68:d4:c9:f2:da:cb:62:19:2a:67:a9:b9:
97:8f:a1:be:94:01:73:e0:b7:20:21:70:2b:89:7f:f7:b0:e3:
84:27:f9:be:75:eb:b6:17:b3:86:23:bf:c1:2c:60:1f:1f:20:
56:a9:25:1a:c5:03:53:4c:03:f6:13:4b:96:25:ae:9e:95:18:
bc:8f:90:f6:fd:f6:3a:ea:e0:b0:a9:95:51:f3:87:56:2a:03:
06:e2:8c:a7:ca:c0:77:d7:9d:69:3c:7a:3e:4f:8a:f6:3c:7a:
ce:e6:0b:d9:35:ef:c2:78:a9:ab:9d:ed:5c:4c:8f:52:0b:7c:
3d:86:f2:de:21:31:be:16:b3:b2:b2:c9:11:73:dc:20:06:2e:
67:0d:90:25:27:72:8f:1e:86:22:85:11:ae:77:cb:92:cd:2e:
00:13:71:79:e0:00:7a:18:c2:9e:f7:ae:58:d9:70:ec:33:32:
6f:c8:7b:d1:02:fe:40:9f:08:bf:e2:74:3a:9d:06:f2:9e:62:
b5:06:44:25:61:bc:8d:7f:77:e2:c8:16:bf:80:96:05:76:e6:
2e:99:e5:54:db:c8:a4:bb:a0:93:a8:bc:eb:92:b3:64:88:5a:
e3:1e:db:7f:85:64:24:6f:58:ce:d7:b4:57:28:6a:db:40:b2:
c5:87:7a:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:49:39 2025 by rpki-client