Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/0395ca-94db-4c2c-a6bd-1fd363fe7c72/1/L_Dh2XgPySLrwiWQOA8oBwfdz7s.mft
File: L_Dh2XgPySLrwiWQOA8oBwfdz7s.mft (raw, json)
Hash identifier: h+pFoCW1dvBInaEw15Wv+W7mLJa3gOmW3ahwpKs9o4s=
Subject key identifier: 3D:32:4F:C5:41:6D:52:10:AC:59:87:B0:7B:52:5B:9C:25:24:9A:A2
Authority key identifier: 2F:F0:E1:D9:78:0F:C9:22:EB:C2:25:90:38:0F:28:07:07:DD:CF:BB
Certificate issuer: /CN=2ff0e1d9780fc922ebc22590380f280707ddcfbb
Certificate serial: 0193CE475571365B47356AA09F1B96DEFA04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L_Dh2XgPySLrwiWQOA8oBwfdz7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/0395ca-94db-4c2c-a6bd-1fd363fe7c72/1/L_Dh2XgPySLrwiWQOA8oBwfdz7s.mft
Manifest number: 0307
Signing time: Mon 16 Dec 2024 07:03:21 +0000
Manifest this update: Mon 16 Dec 2024 07:03:21 +0000
Manifest next update: Tue 17 Dec 2024 07:03:21 +0000
Files and hashes: 1: L_Dh2XgPySLrwiWQOA8oBwfdz7s.crl (hash: Bzx425YCS0W5zsK+4hWBaGroBZX/wRg15+HxsQv10ZA=)
2: pTTXmjRmjQvvYJ5mgf7-KuTgpCc.roa (hash: zxaJVXwD3IYH+EmaTEeDHSSO56WWcVfs/JBiIzGvMn0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:ce:47:55:71:36:5b:47:35:6a:a0:9f:1b:96:de:fa:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ff0e1d9780fc922ebc22590380f280707ddcfbb
Validity
Not Before: Dec 16 07:03:21 2024 GMT
Not After : Dec 17 07:03:21 2024 GMT
Subject: CN=3d324fc5416d5210ac5987b07b525b9c25249aa2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:17:d5:b3:71:cd:90:b7:b8:62:02:53:b4:ba:
2e:3a:24:14:4f:71:59:4f:8e:45:da:3d:64:bc:a2:
1c:9f:af:5d:5b:22:d5:0b:c6:ae:ff:d9:f3:99:7d:
c7:6b:32:3e:35:23:d8:bc:ae:01:51:57:0e:f7:55:
b0:54:a4:53:5a:a7:b8:71:b4:c6:ec:d6:34:2c:de:
4c:9f:24:73:53:09:b2:19:ed:0c:6f:be:af:9b:92:
72:75:99:2f:e4:88:8f:0b:69:cb:28:99:8a:8a:e3:
69:c8:46:c9:5d:f4:1a:fb:6c:3e:15:12:c3:97:3a:
c5:90:a6:d2:d3:6f:2e:59:37:00:b8:2f:44:b9:e8:
21:ae:d5:d5:1a:ac:c8:a8:81:a3:8a:d5:96:e4:ff:
fb:f9:33:d0:3c:3d:e8:d8:1e:e4:bb:70:91:ca:06:
96:b5:bc:8b:fc:2e:d8:0e:f2:39:0e:99:a3:2d:b3:
8d:61:a1:d6:16:30:fd:02:fc:c5:b3:7b:ec:bb:c6:
54:a2:a2:a7:49:3d:07:14:1a:b1:63:35:e1:55:4a:
cb:ff:77:a5:e9:7c:4e:e7:9a:61:37:27:d8:38:74:
aa:97:3c:36:26:cb:d9:c6:fa:7b:55:47:f7:4b:ce:
3f:bd:28:66:6e:f7:96:4d:46:ac:63:44:b0:94:fa:
6f:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:32:4F:C5:41:6D:52:10:AC:59:87:B0:7B:52:5B:9C:25:24:9A:A2
X509v3 Authority Key Identifier:
keyid:2F:F0:E1:D9:78:0F:C9:22:EB:C2:25:90:38:0F:28:07:07:DD:CF:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L_Dh2XgPySLrwiWQOA8oBwfdz7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/0395ca-94db-4c2c-a6bd-1fd363fe7c72/1/L_Dh2XgPySLrwiWQOA8oBwfdz7s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/0395ca-94db-4c2c-a6bd-1fd363fe7c72/1/L_Dh2XgPySLrwiWQOA8oBwfdz7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:76:ac:1a:a4:08:20:aa:47:9c:09:b5:51:68:d2:53:16:52:
47:6c:82:ed:ad:c8:22:14:14:bb:62:3e:ce:3a:45:17:52:89:
57:1b:e6:d2:e1:93:39:b5:ce:07:4f:35:34:ca:be:d5:43:14:
42:7d:8c:b1:56:5d:39:d6:64:01:4f:5e:59:55:88:38:92:56:
9f:06:a1:fd:03:24:9f:77:87:d2:b0:eb:a1:02:d2:3b:12:dc:
19:3c:c2:70:56:97:cc:ae:2f:d7:80:4e:a2:25:e3:6e:85:60:
74:f7:7f:a5:5a:e3:32:35:ec:40:c1:bd:eb:e4:0c:1c:0f:9e:
4c:03:8e:ba:83:b6:2f:5f:c6:e1:ad:48:31:de:60:3a:82:6d:
d3:1b:dd:f1:60:b0:d2:5e:d6:21:17:4e:34:03:aa:5d:61:90:
12:65:f8:6d:af:95:36:77:e4:84:9d:f8:2b:fd:e7:ad:d1:07:
bd:f7:ad:b1:15:9f:3d:18:8f:88:9e:4b:5b:97:97:f3:19:62:
e5:f3:48:b0:84:46:79:23:04:20:bf:c2:c1:42:7f:41:84:a7:
ff:46:cf:c1:5e:95:89:3f:c6:e9:ee:b8:2a:ab:42:a6:5a:12:
aa:2a:f1:1d:24:a5:e1:3c:ad:43:28:f6:4b:1c:0a:69:08:84:
5b:ba:9d:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 19:04:54 2025 by rpki-client