Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/8c1323-afcc-4b44-9881-06308a44856d/1/LLA1cHIC1AE6RHm-URLX-iJ7cnU.mft
File: LLA1cHIC1AE6RHm-URLX-iJ7cnU.mft (raw, json)
Hash identifier: uQ0Xem5Z6BuAz6AB+KhiI5Y99ZhetCiQa1ij/Hwmqnc=
Subject key identifier: 06:1A:CF:E7:B3:B3:A9:C5:5A:C3:38:EB:5E:60:5F:AE:D0:B9:99:84
Authority key identifier: 2C:B0:35:70:72:02:D4:01:3A:44:79:BE:51:12:D7:FA:22:7B:72:75
Certificate issuer: /CN=2cb035707202d4013a4479be5112d7fa227b7275
Certificate serial: 0194BD854DEE5FFB13E6FEFEA27768811108
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LLA1cHIC1AE6RHm-URLX-iJ7cnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/8c1323-afcc-4b44-9881-06308a44856d/1/LLA1cHIC1AE6RHm-URLX-iJ7cnU.mft
Manifest number: 1391
Signing time: Fri 31 Jan 2025 18:00:17 +0000
Manifest this update: Fri 31 Jan 2025 18:00:17 +0000
Manifest next update: Sat 01 Feb 2025 18:00:17 +0000
Files and hashes: 1: LLA1cHIC1AE6RHm-URLX-iJ7cnU.crl (hash: 1BnFfg6c8tMbN+VUeSOmcyXrWrbsqY4imQP/c8HabPo=)
2: aMqTYIPJtRefR0bitojO91iFNhw.roa (hash: OsvcsotFS3YcVfF2tEICtxMnztWh2PTqW1dy/KMi8wk=)
3: i_35ud5OERiEDAx-BasHnsgHc48.roa (hash: mSZd0LC2OMh83YslBHZYulpSTQBAbQlb9kFIbiISICE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:4d:ee:5f:fb:13:e6:fe:fe:a2:77:68:81:11:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cb035707202d4013a4479be5112d7fa227b7275
Validity
Not Before: Jan 31 18:00:17 2025 GMT
Not After : Feb 1 18:00:17 2025 GMT
Subject: CN=061acfe7b3b3a9c55ac338eb5e605faed0b99984
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:3b:19:e0:7d:b9:09:8b:64:97:a3:53:45:89:
c6:3e:79:90:d0:6e:b2:5a:ea:86:bd:b4:25:42:64:
52:be:23:a1:80:15:8f:76:89:06:83:50:ce:2c:65:
6b:73:78:71:cd:c1:6c:d8:da:18:e7:bd:1f:41:8f:
3c:e9:69:52:a3:b8:d9:45:aa:a0:be:ed:b9:48:08:
17:55:88:31:a3:f2:a0:6b:91:5b:69:3a:04:74:32:
c4:92:2e:17:59:19:c0:dc:c3:18:01:e2:02:c3:2b:
30:e5:3a:14:e2:d7:68:3b:49:7f:22:6c:e6:7d:d5:
be:9b:c9:4b:f1:bf:ff:ce:c8:7b:15:99:61:13:5a:
18:79:93:af:c0:91:57:1c:ff:cf:44:d1:2f:d3:01:
5d:ca:71:85:e7:94:99:59:f2:0c:b7:9b:f9:3b:88:
46:55:55:f0:47:d0:9c:c3:f3:53:b4:ee:d5:33:23:
7d:dc:5f:c1:a9:da:e6:80:2d:be:b7:e9:0c:f4:43:
40:9a:a5:59:cf:9f:1e:3f:6e:bc:d6:b6:4a:2e:9d:
09:20:58:6d:ab:11:fd:7d:5d:f9:c6:7b:28:bb:28:
a6:08:96:20:16:68:fe:bc:5e:48:2a:c5:9b:4d:a9:
ce:90:b6:63:91:06:78:46:9a:eb:ea:35:00:c1:6c:
af:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:1A:CF:E7:B3:B3:A9:C5:5A:C3:38:EB:5E:60:5F:AE:D0:B9:99:84
X509v3 Authority Key Identifier:
keyid:2C:B0:35:70:72:02:D4:01:3A:44:79:BE:51:12:D7:FA:22:7B:72:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LLA1cHIC1AE6RHm-URLX-iJ7cnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/8c1323-afcc-4b44-9881-06308a44856d/1/LLA1cHIC1AE6RHm-URLX-iJ7cnU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/8c1323-afcc-4b44-9881-06308a44856d/1/LLA1cHIC1AE6RHm-URLX-iJ7cnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:90:63:56:42:66:40:95:57:2d:d0:eb:7b:3e:82:00:c9:a9:
0d:11:12:f3:35:91:d5:95:39:8d:75:26:e4:99:0a:3b:9b:5e:
42:f5:cb:86:fb:81:d4:cd:d7:82:be:c6:db:b9:4c:7a:d8:f0:
aa:d4:fc:c9:39:20:95:9b:27:0e:23:53:36:8d:f7:53:1c:fc:
a0:26:e5:cf:7b:25:2d:42:95:a9:56:b1:f9:51:4c:77:65:72:
a3:0f:67:d1:eb:ae:a5:90:b3:25:8e:06:f3:74:7e:ef:77:7a:
ca:2c:59:2c:b6:c3:4d:86:b8:d7:0a:b1:4b:58:b3:b1:1a:f7:
43:f3:7b:d3:5b:03:7f:57:0d:01:34:1a:ac:11:a8:bc:ae:9d:
86:76:b9:7c:a6:7f:d7:22:e6:e7:5c:87:db:33:1e:36:3b:36:
af:07:a1:1f:f7:76:0b:c1:f6:30:5d:a2:e5:c4:60:23:71:c1:
82:cb:1e:10:43:ad:8c:01:3c:9e:e1:d7:81:16:c4:fa:95:14:
18:63:44:c0:54:64:49:5b:2d:8a:7b:31:37:ee:ac:51:3a:ea:
8d:00:f0:5e:43:d8:5d:c0:91:6f:54:47:a4:7c:82:22:98:0c:
51:e6:b0:cd:fb:fb:4a:35:0b:37:05:d5:70:f5:fc:f2:dc:7b:
67:97:ba:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:42:54 2025 by rpki-client