Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/ec85f5-7f65-49f2-98b9-cf0907133241/1/LRjYfouf6XS-3wl_iJSDmIYaxH4.mft
File: LRjYfouf6XS-3wl_iJSDmIYaxH4.mft (raw, json)
Hash identifier: lsGO+rlK1eVH4ibeBw7XxT1nzi6fodlfF4FZ6zNMhVc=
Subject key identifier: E0:B4:BA:40:20:B2:C2:D1:1C:EB:11:72:9E:A4:B0:8B:12:97:38:35
Authority key identifier: 2D:18:D8:7E:8B:9F:E9:74:BE:DF:09:7F:88:94:83:98:86:1A:C4:7E
Certificate issuer: /CN=2d18d87e8b9fe974bedf097f88948398861ac47e
Certificate serial: 0194BC04B5C03B260F55D78900E045208918
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LRjYfouf6XS-3wl_iJSDmIYaxH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/ec85f5-7f65-49f2-98b9-cf0907133241/1/LRjYfouf6XS-3wl_iJSDmIYaxH4.mft
Manifest number: 0CD8
Signing time: Fri 31 Jan 2025 11:00:12 +0000
Manifest this update: Fri 31 Jan 2025 11:00:12 +0000
Manifest next update: Sat 01 Feb 2025 11:00:12 +0000
Files and hashes: 1: D0SM7svQIwgtTWtBXQRfVaYEWCM.roa (hash: 0gzyVGki8KAciWCmOf7f1a5tlOgoH/nOkPBzCHojuSo=)
2: LRjYfouf6XS-3wl_iJSDmIYaxH4.crl (hash: /CzZRsscAUa6vVg+AYSwMyqJBJGDuPQedv3O6lB7tEk=)
3: _IXLnCzw_zVB3dV_MJacG4jX80Y.roa (hash: Gt8+0DW6xRdgGsnmBSXKglilyEwDNEUME1kVSSFIiv8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:b5:c0:3b:26:0f:55:d7:89:00:e0:45:20:89:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d18d87e8b9fe974bedf097f88948398861ac47e
Validity
Not Before: Jan 31 11:00:12 2025 GMT
Not After : Feb 1 11:00:12 2025 GMT
Subject: CN=e0b4ba4020b2c2d11ceb11729ea4b08b12973835
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:29:aa:f2:70:6a:ea:1d:b5:ac:61:9b:ab:f9:
cb:93:45:fc:df:f9:83:c6:2a:ff:41:db:9b:a1:3f:
7e:42:0f:00:6b:02:7d:1f:1f:0f:b4:ce:81:5a:2b:
82:a2:26:50:c7:cf:b1:95:32:26:ec:d7:d6:fe:e6:
96:a6:95:f6:6f:6d:70:13:39:c5:54:a2:9b:63:8a:
b6:34:50:cd:f7:81:10:ae:dd:cb:92:57:a2:d6:82:
99:17:3d:21:56:74:de:61:d0:df:1f:be:b5:94:f2:
86:f7:78:42:7e:a2:b2:0e:47:c1:b9:05:93:ed:88:
18:8b:10:48:e3:5e:b4:c3:fd:0a:6f:b9:7b:b2:57:
67:21:1f:8c:89:f1:17:ce:05:31:fb:92:bf:bc:17:
78:c2:b4:bd:ff:04:52:6b:ea:a6:4b:be:ba:f9:c7:
2d:f7:fb:e3:1a:89:d4:c4:c7:56:70:15:db:0a:c3:
ac:63:75:08:d7:f8:f0:eb:d8:a8:1a:90:fb:9a:2a:
ff:8d:4b:10:1c:30:37:8e:dd:6d:05:50:6c:e3:b8:
c6:e5:32:04:90:02:92:07:51:d6:d1:99:7e:33:ec:
f6:72:f4:81:94:df:50:5b:ca:ab:47:7a:02:de:12:
6c:73:28:c7:d4:d6:c5:ad:06:ac:01:5d:b5:e0:17:
90:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:B4:BA:40:20:B2:C2:D1:1C:EB:11:72:9E:A4:B0:8B:12:97:38:35
X509v3 Authority Key Identifier:
keyid:2D:18:D8:7E:8B:9F:E9:74:BE:DF:09:7F:88:94:83:98:86:1A:C4:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRjYfouf6XS-3wl_iJSDmIYaxH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/ec85f5-7f65-49f2-98b9-cf0907133241/1/LRjYfouf6XS-3wl_iJSDmIYaxH4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/ec85f5-7f65-49f2-98b9-cf0907133241/1/LRjYfouf6XS-3wl_iJSDmIYaxH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:5f:99:99:e5:2d:0a:a6:a0:8b:2c:bf:da:29:28:c1:27:ec:
3a:7d:e1:6f:f6:cd:85:d2:5e:6d:cf:f5:76:cd:f9:1a:ba:a6:
6c:fa:70:17:4a:0a:99:2e:10:fd:0c:7a:7b:28:4b:c8:fb:8b:
dc:1c:88:11:2d:3c:35:34:30:4b:df:f5:e6:4e:c0:cd:de:28:
eb:e1:b1:08:83:00:b2:e3:88:61:71:e2:3d:c0:21:44:ca:93:
3d:99:1e:cd:0e:57:fc:47:97:50:ae:30:89:e7:d7:cb:f1:24:
9e:ed:1a:8d:53:fa:85:f7:83:fd:04:80:a4:eb:55:fb:a1:47:
54:49:0a:d8:77:ed:63:fb:4d:f1:1d:4b:da:ad:09:8f:18:06:
a7:f8:00:d4:b9:7d:13:e6:00:3a:7e:30:72:ff:00:f8:8c:5d:
61:f8:4a:33:f7:a7:11:b8:4b:7a:b2:4f:0b:bf:d8:c5:b6:5c:
9c:dd:81:f2:cc:d6:34:d2:cf:c5:29:00:92:14:28:8b:29:ad:
21:90:67:94:22:e5:ef:c1:60:83:64:c6:38:f2:6c:03:de:22:
60:0c:94:a9:34:44:a7:e8:81:ce:b5:f8:b3:b9:e0:13:0d:4b:
cb:0a:80:6e:b6:29:02:f6:92:aa:99:e6:78:d9:b1:61:4c:dc:
bf:da:90:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:07:09 2025 by rpki-client