Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/c45811-75ba-4dd7-a421-f36d9ee346d4/1/LgojFvTptYqlLe7lx9H0uER27IY.mft
File: LgojFvTptYqlLe7lx9H0uER27IY.mft (raw, json)
Hash identifier: zhqYFX71ynIOqm5Nj2mltZYsO+mtukOLvsYPoD+Iy1g=
Subject key identifier: DD:7C:AF:CD:46:33:A9:4B:86:AD:C5:23:21:E1:2A:E7:7F:A4:E8:80
Authority key identifier: 2E:0A:23:16:F4:E9:B5:8A:A5:2D:EE:E5:C7:D1:F4:B8:44:76:EC:86
Certificate issuer: /CN=2e0a2316f4e9b58aa52deee5c7d1f4b84476ec86
Certificate serial: 0194BBCDFA292657E91DFB7DD64CD5D67967
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LgojFvTptYqlLe7lx9H0uER27IY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/c45811-75ba-4dd7-a421-f36d9ee346d4/1/LgojFvTptYqlLe7lx9H0uER27IY.mft
Manifest number: 030B
Signing time: Fri 31 Jan 2025 10:00:25 +0000
Manifest this update: Fri 31 Jan 2025 10:00:25 +0000
Manifest next update: Sat 01 Feb 2025 10:00:25 +0000
Files and hashes: 1: LgojFvTptYqlLe7lx9H0uER27IY.crl (hash: WDYxcTmSvQ1c9SarcROAwlV2mia+RODRCHF57WwUAes=)
2: vD_wlkgUOjWQBEijGo7zeI_oZVI.roa (hash: IGyJ6LlIsYwYqLNNokHWFdPflPgBGjUNsyBItLlUI9k=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:fa:29:26:57:e9:1d:fb:7d:d6:4c:d5:d6:79:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e0a2316f4e9b58aa52deee5c7d1f4b84476ec86
Validity
Not Before: Jan 31 10:00:25 2025 GMT
Not After : Feb 1 10:00:25 2025 GMT
Subject: CN=dd7cafcd4633a94b86adc52321e12ae77fa4e880
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:e5:31:d4:e1:80:96:85:ac:49:bd:c3:97:3c:
2a:d4:50:1a:15:90:07:3a:f7:39:20:7b:5a:2d:6c:
26:16:a6:20:52:ef:07:cb:f0:c4:0f:ab:06:0b:b6:
c9:37:ba:7b:98:90:0f:60:15:f3:53:de:e9:e9:d1:
32:7e:1a:25:3b:15:6f:98:eb:40:c9:05:45:2f:1a:
f4:1d:73:b7:6a:50:de:af:0a:aa:71:ac:7b:41:bf:
b0:28:46:83:26:91:0e:7a:87:c5:51:f2:73:2d:cf:
dd:d0:f9:65:b6:2c:80:2f:30:45:b3:f9:24:f5:9e:
03:24:0f:45:fb:9e:9d:c4:72:9d:3a:39:e5:7d:f3:
7e:fe:8f:77:80:6e:01:00:20:8c:9b:1a:4d:30:90:
37:e5:5b:f0:44:39:11:c7:dd:ae:1d:12:f9:0b:00:
a5:45:b1:4b:d5:22:1b:e8:e1:f6:12:71:2c:bc:fb:
a8:bf:19:46:8b:24:25:fa:d5:51:70:cb:9b:0b:26:
8a:a3:ef:15:b5:93:8e:0e:c9:0e:9d:41:81:b9:48:
32:58:c3:cf:d2:01:09:91:d9:99:58:5a:23:55:89:
b9:1c:ce:01:fe:1b:ce:59:60:97:bf:11:5b:e8:5e:
ca:ce:8f:2e:13:14:ff:2a:b7:ca:13:44:18:94:43:
f9:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:7C:AF:CD:46:33:A9:4B:86:AD:C5:23:21:E1:2A:E7:7F:A4:E8:80
X509v3 Authority Key Identifier:
keyid:2E:0A:23:16:F4:E9:B5:8A:A5:2D:EE:E5:C7:D1:F4:B8:44:76:EC:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LgojFvTptYqlLe7lx9H0uER27IY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/c45811-75ba-4dd7-a421-f36d9ee346d4/1/LgojFvTptYqlLe7lx9H0uER27IY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/c45811-75ba-4dd7-a421-f36d9ee346d4/1/LgojFvTptYqlLe7lx9H0uER27IY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:08:31:14:d2:1b:a8:04:8a:a1:1b:cb:d7:bd:be:5d:86:74:
da:d6:6a:a7:c0:1b:2a:bb:58:30:cb:cd:d8:ca:37:73:20:6d:
b0:81:ac:83:a7:0e:f0:5b:18:65:9a:96:32:3a:f1:03:2b:b5:
14:e3:ba:9d:33:6e:6a:a4:7f:0b:cf:c8:e8:ab:44:b9:e6:af:
04:f2:bf:7e:92:cc:11:11:58:10:29:f6:a9:f6:ff:dc:b8:4f:
e6:55:33:5e:ea:5e:d6:2c:03:76:ee:06:c4:73:75:83:6d:61:
6a:33:09:aa:1d:5f:e7:05:35:25:1d:5f:0c:55:a9:5a:0a:37:
ce:19:32:5b:df:9b:0c:ea:c2:6f:90:d4:a1:4c:77:e2:74:4e:
65:0e:d6:d0:f5:f2:df:a9:1c:84:51:31:81:6c:d7:45:f1:87:
38:a9:58:d5:68:93:f4:8b:8b:67:1f:7a:67:2f:d6:cb:94:cd:
9d:42:5e:72:17:b7:97:f4:70:e0:19:93:28:0b:27:38:88:9b:
36:7a:b5:bc:3a:df:bd:74:99:f1:8d:ea:81:b4:5d:f4:68:46:
50:a2:8b:8f:7b:6c:3c:d1:37:7f:43:fe:33:40:35:28:77:b3:
3c:c0:1c:cc:d3:0d:f3:be:45:83:56:03:b3:b1:1f:fe:3e:1f:
ef:27:5a:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:47:15 2025 by rpki-client