Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/e7d3de-1845-41f3-907a-9e96af6d6a8f/1/LI-oUz3MgguhrW-ysvAWEBBTHbk.mft
File: LI-oUz3MgguhrW-ysvAWEBBTHbk.mft (raw, json)
Hash identifier: 0esh3vKV7AvZGGrf3OMfcDlB/cG9lyudz/TAQFBoOCw=
Subject key identifier: 39:3E:8C:D2:5C:B5:8D:25:55:5B:03:81:37:AF:97:A1:9D:61:66:75
Authority key identifier: 2C:8F:A8:53:3D:CC:82:0B:A1:AD:6F:B2:B2:F0:16:10:10:53:1D:B9
Certificate issuer: /CN=2c8fa8533dcc820ba1ad6fb2b2f0161010531db9
Certificate serial: 0195E04687EBBA0E1240EA5B1490C8B691D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LI-oUz3MgguhrW-ysvAWEBBTHbk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/e7d3de-1845-41f3-907a-9e96af6d6a8f/1/LI-oUz3MgguhrW-ysvAWEBBTHbk.mft
Manifest number: 06C2
Signing time: Sat 29 Mar 2025 05:01:13 +0000
Manifest this update: Sat 29 Mar 2025 05:01:13 +0000
Manifest next update: Sun 30 Mar 2025 05:01:13 +0000
Files and hashes: 1: LI-oUz3MgguhrW-ysvAWEBBTHbk.crl (hash: IS2ZcsZnWL4YJN9mbHlarUx44IQly1/2AfGGbu4DxKg=)
2: LoUtlaJ5mypaBQZ7Vl2VxjfI8z8.roa (hash: mjZMaLb9m8sq6wgkMHrxy81dzJq4evg/mUOP+NJvNIc=)
3: hwLQQhvfkTPO9tfiU3xWDktqf98.roa (hash: ARLJwTBnOck1jpPDB5YSuCoDfjoyKgo2AkGDb71eUiI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:46:87:eb:ba:0e:12:40:ea:5b:14:90:c8:b6:91:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c8fa8533dcc820ba1ad6fb2b2f0161010531db9
Validity
Not Before: Mar 29 05:01:13 2025 GMT
Not After : Mar 30 05:01:13 2025 GMT
Subject: CN=393e8cd25cb58d25555b038137af97a19d616675
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:16:bc:4c:d1:24:b2:e3:1a:00:8d:bb:35:83:
bf:11:06:78:4c:21:3a:b6:6e:88:bf:0d:ca:5e:48:
a6:8a:dc:31:a7:2f:9a:55:b1:d5:66:5d:c0:b2:df:
34:1b:56:96:2b:61:54:65:78:ee:27:21:d2:30:24:
e8:01:ef:2c:26:1a:08:ec:5b:71:0c:01:12:bc:51:
f3:b7:12:91:62:2d:59:66:15:a2:30:fe:c3:ac:e1:
83:0a:ae:bb:05:81:89:01:62:6f:de:0d:56:85:4a:
c0:3c:91:9c:a5:cb:53:c3:84:c6:48:2c:ba:d8:f2:
51:d5:f5:9a:e4:81:69:cb:45:49:dc:08:fe:d4:d9:
54:58:3b:31:34:0a:88:bd:08:b4:91:bb:62:66:09:
c9:7f:1c:12:8c:e7:af:9e:f8:81:76:e0:45:53:c4:
e8:ab:f4:f8:02:3f:7b:85:a3:ee:b7:fc:94:0c:b7:
76:7a:66:05:6a:a0:2b:c4:a5:1f:1e:0e:f1:89:74:
d3:7c:b2:43:f7:a6:1d:6d:71:e1:fa:00:d2:5e:9e:
a1:3f:64:f3:28:79:ed:c8:3c:f1:d8:49:e7:a6:96:
ff:cf:bb:88:d6:89:63:42:4a:55:e3:68:25:46:12:
3b:ae:9f:ee:cb:4d:ce:80:2c:49:06:a7:d7:4e:6d:
1b:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:3E:8C:D2:5C:B5:8D:25:55:5B:03:81:37:AF:97:A1:9D:61:66:75
X509v3 Authority Key Identifier:
keyid:2C:8F:A8:53:3D:CC:82:0B:A1:AD:6F:B2:B2:F0:16:10:10:53:1D:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LI-oUz3MgguhrW-ysvAWEBBTHbk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/e7d3de-1845-41f3-907a-9e96af6d6a8f/1/LI-oUz3MgguhrW-ysvAWEBBTHbk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/e7d3de-1845-41f3-907a-9e96af6d6a8f/1/LI-oUz3MgguhrW-ysvAWEBBTHbk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:fb:63:59:22:bd:85:af:5a:56:a6:68:78:11:f1:25:00:26:
6d:c6:5d:d7:df:f7:05:96:50:a1:9d:63:c9:44:3f:7c:85:c6:
35:b0:ae:59:76:15:27:15:28:d0:e8:a5:bc:eb:a9:bd:d1:8d:
a4:3b:7d:47:1a:8e:26:bd:c9:03:ee:7a:c2:73:6e:e6:c7:e9:
40:9b:5a:ed:b5:9c:d1:3c:f3:65:64:26:58:99:88:3c:1e:c1:
5a:94:5c:2a:dd:f6:05:e8:38:25:eb:e4:df:84:5d:66:d1:14:
a3:a9:e1:25:82:c2:aa:34:e7:0d:e0:3f:47:ec:fc:b5:bd:68:
20:3c:e1:6f:b5:c5:9e:92:c8:09:fe:da:bd:a7:99:ad:00:68:
88:25:a2:d7:2b:ec:8f:b7:9b:8c:19:c9:93:48:1d:c3:6a:ba:
3b:7d:83:36:90:58:36:40:62:22:4f:67:49:6f:43:b8:64:da:
06:ea:3c:27:60:c5:90:2c:59:d2:e2:ef:8c:7f:41:3a:2b:10:
e1:bf:13:0c:76:94:f6:3e:bf:0f:ba:df:fa:3a:f1:49:9b:ba:
0a:42:d7:22:62:17:27:1e:db:c8:49:55:93:02:8f:08:34:30:
77:ce:bf:58:b0:a1:dd:31:3b:8a:3e:15:4e:66:39:17:73:c9:
2c:c8:19:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:04:43 2025 by rpki-client