Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/327742-8156-4fa4-9bd5-2120fd0575ff/1/LkX41ix0LqB9y_jFfVjM9dKOPrk.mft
File: LkX41ix0LqB9y_jFfVjM9dKOPrk.mft (raw, json)
Hash identifier: 1ZUbXSQPshW00I0ySQsJxzBBIujyfS8cRwRwj4zdsAU=
Subject key identifier: 04:4C:88:84:73:43:FB:FC:21:FC:AF:94:24:91:6F:57:ED:50:F3:B6
Authority key identifier: 2E:45:F8:D6:2C:74:2E:A0:7D:CB:F8:C5:7D:58:CC:F5:D2:8E:3E:B9
Certificate issuer: /CN=2e45f8d62c742ea07dcbf8c57d58ccf5d28e3eb9
Certificate serial: 0194BD4E97DFF381AA70FBC6EF9477FD8703
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LkX41ix0LqB9y_jFfVjM9dKOPrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/327742-8156-4fa4-9bd5-2120fd0575ff/1/LkX41ix0LqB9y_jFfVjM9dKOPrk.mft
Manifest number: 13BC
Signing time: Fri 31 Jan 2025 17:00:31 +0000
Manifest this update: Fri 31 Jan 2025 17:00:31 +0000
Manifest next update: Sat 01 Feb 2025 17:00:31 +0000
Files and hashes: 1: LkX41ix0LqB9y_jFfVjM9dKOPrk.crl (hash: kevx/8sMC9/IMnpHxp0yDoz7Qd3gqvNntYsYCVcGjdg=)
2: g57J2wTboU7Sc-wb_fSQn-nhvgM.roa (hash: gpxpAfVwTKloyzHbHsjEDT6k1QWLxENbpf0N5D9dxr8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:97:df:f3:81:aa:70:fb:c6:ef:94:77:fd:87:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e45f8d62c742ea07dcbf8c57d58ccf5d28e3eb9
Validity
Not Before: Jan 31 17:00:31 2025 GMT
Not After : Feb 1 17:00:31 2025 GMT
Subject: CN=044c88847343fbfc21fcaf9424916f57ed50f3b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c8:89:6e:7f:7b:d1:58:a6:9c:cc:c9:8f:80:
c2:5c:91:e7:b6:e3:d7:95:c9:56:de:26:7f:56:6c:
09:7d:b6:c5:68:49:a3:4b:da:b7:64:8b:24:c8:35:
e4:b2:75:ef:c3:21:77:96:70:90:90:26:c8:a5:1e:
a1:da:ed:83:f4:42:1e:97:78:f9:b5:65:8e:4f:58:
d2:5a:60:e8:88:ab:8f:8e:52:7c:16:7a:2e:61:c1:
ea:79:54:b9:ed:29:1b:d2:3a:89:c0:25:82:ec:01:
72:39:62:b0:cc:22:ae:60:aa:73:64:bf:f8:c4:75:
0e:82:d9:95:61:7c:e7:81:5b:80:ca:72:e5:c1:e5:
12:f0:f2:a6:6d:f3:9f:81:74:32:13:0b:ab:9a:ba:
cf:a2:57:8b:74:3b:50:c5:0b:a7:cc:27:c4:ef:eb:
61:ed:78:4d:38:11:b6:f9:06:58:5d:a6:45:58:46:
44:07:c1:aa:a1:1b:dd:04:e7:14:89:38:4d:78:c8:
da:68:87:df:1f:e9:36:14:1f:2c:b6:63:6b:4d:49:
58:67:b8:ad:e4:21:81:48:1e:c2:15:f0:11:c2:a8:
60:ff:00:76:92:38:7b:f5:30:5a:d5:1b:f4:ec:99:
9d:87:f8:f3:94:31:37:3a:50:e3:12:5b:f2:85:90:
44:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:4C:88:84:73:43:FB:FC:21:FC:AF:94:24:91:6F:57:ED:50:F3:B6
X509v3 Authority Key Identifier:
keyid:2E:45:F8:D6:2C:74:2E:A0:7D:CB:F8:C5:7D:58:CC:F5:D2:8E:3E:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LkX41ix0LqB9y_jFfVjM9dKOPrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/327742-8156-4fa4-9bd5-2120fd0575ff/1/LkX41ix0LqB9y_jFfVjM9dKOPrk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/327742-8156-4fa4-9bd5-2120fd0575ff/1/LkX41ix0LqB9y_jFfVjM9dKOPrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:89:6b:17:3f:88:52:69:40:1d:05:77:4d:a9:a2:e5:56:e7:
af:8e:19:f7:66:ff:8f:e6:22:ee:71:ab:36:79:17:17:89:1a:
a2:83:ce:b7:cd:3b:25:84:d4:17:41:32:15:46:c2:e6:8a:ea:
c3:8a:79:d8:0c:1e:11:40:1d:1c:11:f0:81:64:0a:0e:90:4d:
13:f9:1f:cc:9a:c8:1c:c5:17:54:1a:37:bf:1e:9a:e3:9a:c6:
9a:99:db:48:75:95:26:ef:6e:1a:03:d3:31:98:ce:ac:85:54:
6e:31:63:b7:17:e6:bb:52:07:7e:c9:d1:e0:1a:25:5a:11:01:
75:8c:cc:3f:77:3f:11:36:2b:57:10:38:97:84:a4:bc:38:81:
33:72:ce:72:dd:2b:23:c2:2e:aa:3e:50:ba:55:52:09:ff:4e:
a0:ec:c1:29:c1:be:38:d6:19:b5:7d:d1:69:0c:b3:67:ec:0e:
06:71:0f:c7:69:3c:a3:77:9c:bf:5e:7b:cd:b6:1f:73:21:49:
9e:13:25:4a:c4:cd:ae:7e:e3:72:b8:55:ef:9a:15:a9:99:9b:
d4:cc:81:1c:8b:f8:4c:26:d5:c4:06:2c:4e:8e:b2:34:2c:f0:
45:d1:a4:73:d8:c0:e3:b7:ca:c0:85:81:5e:46:85:d2:c0:a9:
fb:e4:aa:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:51:38 2025 by rpki-client