Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/060f7e-8cf0-4ec2-af7a-1daea4bc94b3/1/LQ1iEp0CBj1Anr-wHGSNRvNIieA.mft
File: LQ1iEp0CBj1Anr-wHGSNRvNIieA.mft (raw, json)
Hash identifier: x7AMMD8hBFVsZq+4iNzBiZ/OK1bu7EAm4XZ8mu1MmHI=
Subject key identifier: 37:15:05:EF:9D:D6:07:A5:C8:06:E1:A1:8A:97:54:26:F7:72:5A:CD
Authority key identifier: 2D:0D:62:12:9D:02:06:3D:40:9E:BF:B0:1C:64:8D:46:F3:48:89:E0
Certificate issuer: /CN=2d0d62129d02063d409ebfb01c648d46f34889e0
Certificate serial: 0195E07DA7BA83FD9A763E805A5B9B7A3E33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LQ1iEp0CBj1Anr-wHGSNRvNIieA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/060f7e-8cf0-4ec2-af7a-1daea4bc94b3/1/LQ1iEp0CBj1Anr-wHGSNRvNIieA.mft
Manifest number: 04B3
Signing time: Sat 29 Mar 2025 06:01:26 +0000
Manifest this update: Sat 29 Mar 2025 06:01:26 +0000
Manifest next update: Sun 30 Mar 2025 06:01:26 +0000
Files and hashes: 1: CW_LnyX1zugkzNOIUd8XzpBN5Bw.roa (hash: fnDAooAgubqCaqW4AjdSJ+J1ErpgOuY9lVFJ+sN2CYg=)
2: LQ1iEp0CBj1Anr-wHGSNRvNIieA.crl (hash: HiCXHbnMXCiHLyC70TGyh/rybO+OPVEjd+UPz5Po9ps=)
3: eQf0fzT1TpCrCtQpX64ANEQyzhI.roa (hash: HlHU7MK+aLw3ArQHYGvb135KcLlwl9X+zO2+NofGyyk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:7d:a7:ba:83:fd:9a:76:3e:80:5a:5b:9b:7a:3e:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d0d62129d02063d409ebfb01c648d46f34889e0
Validity
Not Before: Mar 29 06:01:26 2025 GMT
Not After : Mar 30 06:01:26 2025 GMT
Subject: CN=371505ef9dd607a5c806e1a18a975426f7725acd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:34:54:94:83:c1:38:1a:7a:90:cc:9b:31:74:
7d:41:87:7d:07:d8:71:8c:fa:74:01:06:8a:4d:c5:
65:91:2f:14:3b:84:41:67:33:38:c3:2b:19:30:77:
be:60:49:f0:82:a0:9f:5a:02:1c:95:72:4f:2d:6c:
ed:fd:db:bb:2a:c0:6d:38:27:d7:95:61:92:94:c4:
fb:f4:4b:e1:2f:04:33:e4:ca:b5:04:3b:7c:2e:86:
70:59:dc:6d:1d:fe:ee:b8:29:98:5e:48:31:16:35:
c9:d4:32:84:08:00:8e:f8:9a:ae:7b:a0:cd:09:06:
5d:fc:6e:85:ce:12:c2:a5:1e:5e:b8:8a:48:cb:82:
23:da:07:bf:3e:a0:da:da:02:af:6a:7b:c9:43:ee:
c5:66:15:ed:65:b9:dd:5b:ff:fe:6c:6a:1c:95:95:
db:f1:31:2b:66:9c:0b:74:5b:c7:97:77:a8:21:c4:
15:71:82:35:76:b1:e2:53:46:95:9e:75:9c:74:41:
bf:14:f1:ce:89:6d:33:fe:1e:6a:67:08:97:34:e4:
5c:02:65:05:bc:db:b4:79:20:67:08:ea:81:db:8f:
e2:59:02:d1:05:26:2c:91:34:fa:2a:53:d7:0c:36:
72:51:50:d0:cb:24:21:ec:14:78:a7:9a:b4:e9:9f:
3f:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:15:05:EF:9D:D6:07:A5:C8:06:E1:A1:8A:97:54:26:F7:72:5A:CD
X509v3 Authority Key Identifier:
keyid:2D:0D:62:12:9D:02:06:3D:40:9E:BF:B0:1C:64:8D:46:F3:48:89:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LQ1iEp0CBj1Anr-wHGSNRvNIieA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/060f7e-8cf0-4ec2-af7a-1daea4bc94b3/1/LQ1iEp0CBj1Anr-wHGSNRvNIieA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/060f7e-8cf0-4ec2-af7a-1daea4bc94b3/1/LQ1iEp0CBj1Anr-wHGSNRvNIieA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:61:0c:d4:f7:cb:44:71:08:91:68:3f:ba:62:cf:10:3c:40:
b3:12:b1:a0:83:17:26:95:f1:0e:39:9f:6c:f9:11:b5:e9:84:
dd:b9:1c:16:23:a9:a1:ac:c3:84:71:f2:11:17:d2:2e:c0:36:
97:28:13:54:64:cf:35:79:3e:31:57:5c:82:df:48:d2:67:a6:
bd:b9:e8:1d:40:3d:d7:a8:0b:78:06:14:80:9a:e2:f1:4f:1b:
ff:1b:5b:48:e0:5d:9e:9a:3f:c8:d9:f8:69:20:dd:f7:31:1b:
c0:46:28:db:bf:8d:29:17:d2:74:e2:94:6e:ed:93:c1:40:23:
21:de:52:6f:cf:47:06:e3:53:06:65:b4:43:8b:46:e1:a9:8a:
73:df:31:d3:74:70:38:6c:d4:48:5e:47:48:89:1a:b3:36:fe:
98:f4:d0:7c:48:08:83:3c:80:88:ee:0b:2a:61:76:f3:35:0f:
1f:2a:4a:be:86:7c:cb:ce:a8:43:67:c3:6a:fe:12:6e:e1:65:
47:82:d3:ad:37:c3:a6:e4:09:f0:d8:bc:74:dd:65:57:d5:36:
4e:f8:85:73:76:4c:2f:ef:57:23:f9:a9:25:fe:2c:1a:c0:fd:
df:73:bc:af:f0:d2:f5:d3:41:0e:91:9b:9e:ee:22:3f:79:da:
eb:96:9d:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:58:23 2025 by rpki-client