Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/61f826-2e60-4494-b190-365d86838b36/1/LqKRWNQ666uQMx4xe7DLNfpN_Y8.mft
File: LqKRWNQ666uQMx4xe7DLNfpN_Y8.mft (raw, json)
Hash identifier: adAJdWRmQSg/VUGoWUMgtF8qH5mE7AYxX0heiHKeWm8=
Subject key identifier: 3D:B0:07:22:CD:71:57:6E:DF:1D:7E:0B:63:FB:C5:29:C6:BA:BA:24
Authority key identifier: 2E:A2:91:58:D4:3A:EB:AB:90:33:1E:31:7B:B0:CB:35:FA:4D:FD:8F
Certificate issuer: /CN=2ea29158d43aebab90331e317bb0cb35fa4dfd8f
Certificate serial: 0193E2027A86FBED22377C7196981BA1AB95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LqKRWNQ666uQMx4xe7DLNfpN_Y8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/61f826-2e60-4494-b190-365d86838b36/1/LqKRWNQ666uQMx4xe7DLNfpN_Y8.mft
Manifest number: 13B9
Signing time: Fri 20 Dec 2024 03:00:33 +0000
Manifest this update: Fri 20 Dec 2024 03:00:33 +0000
Manifest next update: Sat 21 Dec 2024 03:00:33 +0000
Files and hashes: 1: 1-dqFh1YsaZPjNe0IOZh3u6nVC8U.roa (hash: 1rcAoJcK4+eGde30IVdRHKUhsjNnMerIkEnXW6S3+CQ=)
2: LqKRWNQ666uQMx4xe7DLNfpN_Y8.crl (hash: +z8X4rQ2xhJ9p/6DuH+1eG4uUqfd6lBWuRWE7PY4bgg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:e2:02:7a:86:fb:ed:22:37:7c:71:96:98:1b:a1:ab:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ea29158d43aebab90331e317bb0cb35fa4dfd8f
Validity
Not Before: Dec 20 03:00:33 2024 GMT
Not After : Dec 21 03:00:33 2024 GMT
Subject: CN=3db00722cd71576edf1d7e0b63fbc529c6baba24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:4a:a1:89:e6:10:78:27:25:f0:ec:c1:22:79:
f5:64:56:52:14:04:ab:df:c2:ee:ec:ca:d6:5d:23:
bd:77:fa:60:6d:ae:20:d0:a5:e9:2e:a2:fc:8d:02:
ef:28:6a:66:ce:59:66:bd:8a:81:c1:ec:cb:6d:65:
0f:c7:70:86:2b:37:48:1c:04:7a:8a:ea:98:fb:21:
c0:90:0e:62:b0:3c:91:5f:ff:0e:58:ed:12:b9:12:
36:3f:0e:2c:df:d9:90:e5:27:05:2f:70:ef:22:b3:
e4:93:7e:39:ef:52:25:51:c9:01:f3:07:27:20:55:
10:65:a8:e0:cf:3f:e8:ea:30:aa:d0:a8:bb:2c:b4:
69:c9:36:50:15:2c:a6:ca:a2:03:95:85:ff:25:1f:
35:11:47:3a:ff:b7:b3:15:d0:4e:cb:23:8f:bb:35:
6a:a7:39:86:64:c6:e9:38:7d:35:0f:35:e0:aa:b4:
93:62:e5:64:2f:6e:fc:89:6a:b2:23:2f:4c:ff:f0:
9c:c6:09:b2:97:b2:ed:22:0c:98:74:5f:a9:c5:77:
85:a7:a0:e2:51:c4:65:7b:7c:58:f4:fd:76:ae:55:
ff:e4:78:6e:7e:68:6a:90:e2:01:5d:88:88:80:62:
7b:1d:1b:f3:d7:e6:65:a4:d2:a8:71:9c:60:84:08:
77:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:B0:07:22:CD:71:57:6E:DF:1D:7E:0B:63:FB:C5:29:C6:BA:BA:24
X509v3 Authority Key Identifier:
keyid:2E:A2:91:58:D4:3A:EB:AB:90:33:1E:31:7B:B0:CB:35:FA:4D:FD:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LqKRWNQ666uQMx4xe7DLNfpN_Y8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/61f826-2e60-4494-b190-365d86838b36/1/LqKRWNQ666uQMx4xe7DLNfpN_Y8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/61f826-2e60-4494-b190-365d86838b36/1/LqKRWNQ666uQMx4xe7DLNfpN_Y8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:74:4b:5c:d1:4c:02:53:ca:8b:20:8e:6b:ab:48:cd:ca:ab:
8c:6e:c3:5a:3d:78:e5:40:7e:79:8f:c9:1f:89:2e:d8:1a:59:
1c:f5:a9:93:db:70:12:79:44:ad:67:5e:fb:77:72:c4:e0:77:
ff:e1:43:8e:16:15:c3:60:27:a7:ae:d9:2d:58:80:7b:5c:54:
c7:14:1d:00:1e:f8:e3:04:8c:bb:3c:0e:f0:3e:b7:2c:2c:fc:
d4:a8:f8:76:9e:62:40:59:63:5d:59:ea:bd:3c:68:3f:ce:3f:
4a:4a:fe:7d:0f:d2:c8:1e:10:d4:1a:10:e6:43:1c:87:2e:69:
84:7f:e5:84:47:47:39:fe:87:ea:4d:89:cd:0b:ae:b0:af:b3:
bd:40:42:84:3a:ba:48:87:51:79:34:59:62:b4:f1:43:8e:79:
c0:a1:46:36:c4:ee:db:de:a3:f6:15:43:20:22:6b:95:4f:9c:
eb:24:eb:2f:23:e0:a1:d4:cd:99:14:0e:38:19:e1:ff:95:96:
b7:21:73:e7:ac:76:b0:76:d8:ae:f6:9e:c5:55:05:cf:60:75:
29:ce:91:d9:64:41:7d:6a:e1:07:0e:87:7d:d5:b1:8b:da:66:
74:0d:6b:aa:a7:02:af:1d:cd:1a:a1:9c:41:e9:30:6a:f4:b9:
7c:ef:6b:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 02:28:31 2025 by rpki-client