Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/2ab0d0-8e44-4294-9030-145867e63c36/1/LLgBbb2leHbjyclfdS51ZrJaGE8.mft
File: LLgBbb2leHbjyclfdS51ZrJaGE8.mft (raw, json)
Hash identifier: KluUk9TWZfuRBse5W8PHtPNUpk0NDhDVXR0vt63EUqU=
Subject key identifier: CE:B7:23:BA:2B:0A:A8:27:EB:92:44:EE:71:C1:26:D8:A6:9F:DB:B7
Authority key identifier: 2C:B8:01:6D:BD:A5:78:76:E3:C9:C9:5F:75:2E:75:66:B2:5A:18:4F
Certificate issuer: /CN=2cb8016dbda57876e3c9c95f752e7566b25a184f
Certificate serial: 018B8D8C554910749B6289D3C769E7E55B72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LLgBbb2leHbjyclfdS51ZrJaGE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/2ab0d0-8e44-4294-9030-145867e63c36/1/LLgBbb2leHbjyclfdS51ZrJaGE8.mft
Manifest number: 0831
Signing time: Thu 02 Nov 2023 01:01:06 +0000
Manifest this update: Thu 02 Nov 2023 01:01:06 +0000
Manifest next update: Fri 03 Nov 2023 01:01:06 +0000
Files and hashes: 1: CPReP6KUHFjI-G_LF9f3e6Eb5ek.roa (hash: tzJbSvqS0VX//xlzuLKLcr1YZThbLwcLRDfpdw5boCM=)
2: LLgBbb2leHbjyclfdS51ZrJaGE8.crl (hash: v4pJKyFod5gqXH3D6m317ftc3ywZGTZA/kM5XCzDDO8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:8d:8c:55:49:10:74:9b:62:89:d3:c7:69:e7:e5:5b:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cb8016dbda57876e3c9c95f752e7566b25a184f
Validity
Not Before: Nov 2 01:01:06 2023 GMT
Not After : Nov 3 01:01:06 2023 GMT
Subject: CN=ceb723ba2b0aa827eb9244ee71c126d8a69fdbb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:cc:c3:68:5f:3c:65:5d:eb:b2:72:8a:22:87:
37:e0:d7:22:8e:aa:ca:1a:64:56:b3:7c:1f:77:52:
c3:3e:15:d7:6c:26:c1:36:c4:03:6d:89:d2:81:fd:
d0:d2:8c:d9:a1:32:1d:9c:39:df:ed:01:09:6a:ac:
b4:9c:4d:90:a6:26:e1:2b:d5:c1:58:f7:3d:da:ee:
54:13:a6:3b:7a:59:c5:2d:85:80:7b:02:8f:97:48:
ee:10:7e:d6:c4:2c:51:2f:a6:bf:de:6c:97:11:ba:
e2:03:8e:63:8f:c8:44:68:e4:1c:39:0b:4d:f4:fc:
a0:35:37:80:d2:8e:26:35:22:86:eb:b5:00:c0:de:
4a:e4:0e:1d:3f:8a:3f:99:f8:61:96:59:69:a3:20:
5f:8b:45:72:cc:ff:a8:fa:f6:4e:9d:59:48:82:47:
78:4e:a4:f7:cb:b4:5b:97:6b:8d:b6:ef:a2:be:3d:
4d:9d:09:db:22:55:09:0c:70:bd:54:73:c5:03:52:
6c:22:5b:b5:3f:57:0f:4b:cf:1f:c3:1e:54:b9:76:
26:b6:e8:26:38:9c:35:1f:32:30:be:a8:19:e0:0f:
ea:f9:63:f9:34:bc:63:48:e4:ce:27:ca:7e:19:6b:
9d:c2:81:5d:7a:ce:74:ca:1b:bb:d6:73:b5:6b:2a:
ac:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:B7:23:BA:2B:0A:A8:27:EB:92:44:EE:71:C1:26:D8:A6:9F:DB:B7
X509v3 Authority Key Identifier:
keyid:2C:B8:01:6D:BD:A5:78:76:E3:C9:C9:5F:75:2E:75:66:B2:5A:18:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LLgBbb2leHbjyclfdS51ZrJaGE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/2ab0d0-8e44-4294-9030-145867e63c36/1/LLgBbb2leHbjyclfdS51ZrJaGE8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/2ab0d0-8e44-4294-9030-145867e63c36/1/LLgBbb2leHbjyclfdS51ZrJaGE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:19:8d:2b:06:b4:04:f6:bb:23:cd:0d:44:13:a2:6f:60:4a:
83:d3:15:5d:be:ac:d9:c6:38:bb:39:4f:e5:9a:30:d0:a5:4b:
f1:8d:c4:fc:fe:4d:5e:9f:dd:96:a8:93:7e:74:8e:93:95:56:
8c:f6:8d:e5:c3:33:18:b9:0b:cd:8a:ff:75:60:60:d5:42:bc:
a4:fd:bc:71:ba:cd:35:46:ee:cc:26:69:51:cb:22:0d:35:b2:
83:ec:95:57:9a:e6:76:3d:f7:97:56:84:29:1d:ea:23:03:f0:
89:d8:95:93:a0:63:ff:9f:92:e9:fb:d8:d0:f4:c9:03:b6:b0:
92:a3:92:b4:98:48:59:cb:d9:83:9c:e2:53:58:7e:64:85:8a:
e4:74:18:d5:a0:98:08:db:ec:7b:85:7f:5d:02:79:95:31:41:
ae:0d:d9:10:5a:c2:8e:68:97:1e:cd:48:ba:8f:be:c5:ff:f8:
bb:8d:13:de:ee:53:cd:01:7a:f4:a5:b6:b0:4c:cd:45:2a:3e:
47:a8:8b:77:d5:f9:99:bc:25:4f:6b:68:66:35:25:b5:45:87:
93:26:b4:26:99:79:04:44:f6:2b:5e:f8:09:ba:80:f5:08:cd:
d0:2c:0f:1c:83:1f:19:db:ab:b7:4d:1c:c6:07:70:08:da:00:
12:a8:7f:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:48:03 2025 by rpki-client