Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/2b0e11-f18d-4757-9011-6678eb81b8b0/1/ldcL-AoHyf_L7wzYRltFjWE9zIU.mft
File: ldcL-AoHyf_L7wzYRltFjWE9zIU.mft (raw, json)
Hash identifier: XoZshM0JM7A2+1jW4NwsKaYiKefq0pg5S9YjBdY0zgs=
Subject key identifier: 67:15:37:BC:B7:13:D7:3F:E5:B6:75:D1:FC:02:38:D3:59:5A:85:9C
Authority key identifier: 95:D7:0B:F8:0A:07:C9:FF:CB:EF:0C:D8:46:5B:45:8D:61:3D:CC:85
Certificate issuer: /CN=95d70bf80a07c9ffcbef0cd8465b458d613dcc85
Certificate serial: 0194BBCE601BD998AC98CEEB259C8ED5D3EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ldcL-AoHyf_L7wzYRltFjWE9zIU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/2b0e11-f18d-4757-9011-6678eb81b8b0/1/ldcL-AoHyf_L7wzYRltFjWE9zIU.mft
Manifest number: 0709
Signing time: Fri 31 Jan 2025 10:00:51 +0000
Manifest this update: Fri 31 Jan 2025 10:00:51 +0000
Manifest next update: Sat 01 Feb 2025 10:00:51 +0000
Files and hashes: 1: Li8wKnrdmOXpX94BLLLbjVutDVE.roa (hash: B7wnEDA93LjWijQLqvYkWeQvccIg2ujkRKA0vpbO5ig=)
2: ldcL-AoHyf_L7wzYRltFjWE9zIU.crl (hash: uScMsiZd3z6TT/jjHBJPvrHmzH7cscuqnoCIm6qe6Tg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:60:1b:d9:98:ac:98:ce:eb:25:9c:8e:d5:d3:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95d70bf80a07c9ffcbef0cd8465b458d613dcc85
Validity
Not Before: Jan 31 10:00:51 2025 GMT
Not After : Feb 1 10:00:51 2025 GMT
Subject: CN=671537bcb713d73fe5b675d1fc0238d3595a859c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:50:3b:2b:1c:b7:a4:5f:c3:f5:f5:d5:a1:3d:
c3:c3:7c:4d:43:0f:03:2c:56:bd:c1:6a:2a:51:94:
da:9c:f2:a8:3f:b6:1d:b5:86:f5:b9:f7:9b:ac:1f:
52:6b:29:f0:5c:8a:df:9b:44:92:30:b9:a7:7c:de:
10:7a:e1:f7:8c:f3:aa:5c:b4:f1:10:b9:d3:54:1a:
06:8c:bb:52:75:a7:cc:7c:e6:27:95:46:f4:a8:eb:
8f:5d:62:33:c9:3f:2f:22:10:4b:e6:e8:6b:d8:ea:
d1:1d:e8:be:3a:33:01:4a:2a:21:f0:61:19:11:5d:
97:3b:cd:56:e0:eb:d6:a2:4d:e2:50:52:f4:b1:45:
81:f9:bb:32:55:0d:f3:35:25:1c:34:27:6a:7d:cf:
e5:a9:69:1e:e7:3c:17:89:56:8a:07:e9:7f:9b:49:
c5:0c:09:a2:d2:27:d5:f1:8c:3a:d6:29:ae:78:00:
24:d3:0d:01:10:1f:75:07:ff:b7:e4:25:ff:60:55:
5a:99:86:c7:a3:0d:4c:69:e7:17:df:7e:71:ec:b1:
f0:0e:85:9e:27:d0:41:73:f8:27:ac:ab:5a:52:be:
54:6e:11:0a:b2:0f:79:9c:06:b3:c9:d1:29:76:1e:
3f:e0:75:bb:b8:da:a2:a1:98:9e:47:e8:47:6f:08:
5b:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:15:37:BC:B7:13:D7:3F:E5:B6:75:D1:FC:02:38:D3:59:5A:85:9C
X509v3 Authority Key Identifier:
keyid:95:D7:0B:F8:0A:07:C9:FF:CB:EF:0C:D8:46:5B:45:8D:61:3D:CC:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ldcL-AoHyf_L7wzYRltFjWE9zIU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/2b0e11-f18d-4757-9011-6678eb81b8b0/1/ldcL-AoHyf_L7wzYRltFjWE9zIU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/2b0e11-f18d-4757-9011-6678eb81b8b0/1/ldcL-AoHyf_L7wzYRltFjWE9zIU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:bd:43:fb:33:ff:cc:7f:73:33:a6:5b:51:0a:2e:aa:ee:b0:
b3:89:7e:c7:cb:5a:0c:ba:6d:9a:f2:26:44:a2:32:65:fa:20:
63:0d:07:a2:cc:3e:bf:7a:7f:f1:8f:1c:8b:f9:7d:9f:14:e9:
31:2a:9a:3c:d9:5a:b7:a2:98:a1:2e:be:1d:f2:e6:66:d9:72:
eb:a5:12:25:cc:b6:b7:f8:8f:57:cb:32:e9:88:bc:da:31:de:
22:a5:9c:dd:f0:4a:9b:6b:be:dc:b4:44:da:77:03:1d:9d:cb:
15:0c:a0:b4:36:34:26:83:f8:19:38:a7:df:bc:e2:d7:b6:bf:
79:49:77:70:fd:3b:fb:90:ae:ff:0f:c3:e6:68:b4:f6:a2:14:
c3:6c:ee:36:9d:98:13:3b:51:2a:bc:1a:43:cb:6e:35:c1:96:
9a:e7:93:15:82:53:40:58:4e:6f:8a:0c:4c:4f:60:65:3b:b4:
fe:a2:37:0e:46:c9:c2:01:15:92:26:33:63:f8:93:7a:72:d1:
e9:94:c4:bc:94:eb:2d:d4:81:31:a7:d4:1f:b0:77:74:23:81:
c0:0a:d0:db:c7:e5:37:75:d3:3b:bd:37:04:01:de:8e:71:ad:
e3:65:1e:67:7f:57:ae:da:66:f2:ce:c1:ae:dc:eb:6b:37:54:
8d:8d:c8:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:09:07 2025 by rpki-client