Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/054a71-8253-4089-b962-cbbf76f3533a/1/L2ANKR1II4Na8QOq057eBb0SybY.mft
File: L2ANKR1II4Na8QOq057eBb0SybY.mft (raw, json)
Hash identifier: HCuBsKxCDoE6AaefY0lTtIuxZXp7agTO0aN+BAsRcHI=
Subject key identifier: 8A:90:A5:EE:30:5C:84:9E:32:5F:E1:C9:92:9F:89:07:FE:3A:3C:A7
Authority key identifier: 2F:60:0D:29:1D:48:23:83:5A:F1:03:AA:D3:9E:DE:05:BD:12:C9:B6
Certificate issuer: /CN=2f600d291d4823835af103aad39ede05bd12c9b6
Certificate serial: 0195E0B4448D21C04CEBF40D27E2FADBDCBE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L2ANKR1II4Na8QOq057eBb0SybY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/054a71-8253-4089-b962-cbbf76f3533a/1/L2ANKR1II4Na8QOq057eBb0SybY.mft
Manifest number: 14C0
Signing time: Sat 29 Mar 2025 07:01:05 +0000
Manifest this update: Sat 29 Mar 2025 07:01:05 +0000
Manifest next update: Sun 30 Mar 2025 07:01:05 +0000
Files and hashes: 1: L2ANKR1II4Na8QOq057eBb0SybY.crl (hash: x54E0I0EmFgKIIkU2wzjnFlm9Bw0gk2kBAD5s0rXg7o=)
2: pqKGvQcYODMxijEGtk7mPTU_Tr0.roa (hash: ZlDmL3k6HQGAT39givBrII+8Db8zx8Fa+aDyGXQWZzc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:b4:44:8d:21:c0:4c:eb:f4:0d:27:e2:fa:db:dc:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f600d291d4823835af103aad39ede05bd12c9b6
Validity
Not Before: Mar 29 07:01:05 2025 GMT
Not After : Mar 30 07:01:05 2025 GMT
Subject: CN=8a90a5ee305c849e325fe1c9929f8907fe3a3ca7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:8f:c7:d8:cf:c5:b0:88:27:35:d8:13:a9:6c:
c0:fb:d9:3a:36:ae:8b:f4:c3:95:92:05:9e:51:49:
01:bb:fe:52:77:cd:59:ed:7e:3b:d8:f6:eb:b6:01:
d3:4d:bd:b7:7f:e1:45:87:ab:30:31:13:af:1d:ea:
22:20:d7:1a:89:b8:93:ff:4d:c0:0f:6e:21:37:04:
5f:1d:30:ac:23:40:7f:bd:29:42:3b:c3:c5:86:eb:
7c:9c:c3:32:97:86:cd:a4:cc:5a:49:44:57:ae:57:
51:86:2f:42:ad:75:a9:6c:e5:8a:1f:96:c2:df:6f:
a2:e1:0e:e6:b5:1a:23:b1:5a:42:fe:06:ce:60:1b:
34:cd:a1:10:9c:a4:d2:d3:93:ad:17:b5:3a:3b:0f:
25:1f:d1:d3:48:94:71:ca:95:fd:56:9f:2b:95:67:
10:ef:9a:26:37:ea:00:6e:52:6d:45:17:e9:fc:63:
0a:28:74:3b:7b:e8:53:ed:d4:dd:3d:68:f3:d3:fa:
0b:1d:4e:d5:49:12:9e:3c:7a:59:a7:bc:36:32:4c:
c0:50:9c:1b:36:3f:82:06:54:be:62:35:2b:f6:b7:
1a:04:26:e0:32:99:d3:2e:4b:22:80:13:f3:bc:21:
8e:63:d5:b7:a2:ac:5e:eb:50:c5:59:2f:90:cd:17:
fc:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:90:A5:EE:30:5C:84:9E:32:5F:E1:C9:92:9F:89:07:FE:3A:3C:A7
X509v3 Authority Key Identifier:
keyid:2F:60:0D:29:1D:48:23:83:5A:F1:03:AA:D3:9E:DE:05:BD:12:C9:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L2ANKR1II4Na8QOq057eBb0SybY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/054a71-8253-4089-b962-cbbf76f3533a/1/L2ANKR1II4Na8QOq057eBb0SybY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/054a71-8253-4089-b962-cbbf76f3533a/1/L2ANKR1II4Na8QOq057eBb0SybY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:f6:d6:04:2d:4a:39:75:8f:37:21:9b:61:df:cc:4c:ae:85:
17:3b:f0:5f:b1:78:29:37:38:95:67:a2:9c:d7:40:51:a1:6f:
a3:32:bf:c3:17:2f:5b:7e:ad:b5:42:9c:ed:1c:46:10:9b:61:
e5:b8:7d:07:e7:88:9f:f3:53:bd:50:a0:80:5e:ad:c1:1b:84:
cd:52:d1:54:93:d7:3e:43:0a:52:2d:97:88:bd:83:04:d3:09:
b8:84:db:58:f2:d0:a4:6f:b8:2f:9f:11:79:3b:37:30:44:8b:
99:2b:4f:20:4f:8a:2f:c2:b8:a3:b0:1a:ed:e6:bc:91:51:c8:
a0:5d:89:a0:27:71:86:57:81:1d:68:ef:4b:69:31:4c:50:6f:
aa:6d:a4:7f:62:53:53:b2:c7:1c:68:54:55:f4:b0:60:18:86:
c9:20:b3:6a:81:27:c1:ed:33:66:2b:33:9a:5a:17:8a:55:f8:
cd:c8:32:96:b8:de:31:0e:aa:e2:12:cf:67:27:39:9a:e1:9e:
05:e8:db:86:08:d3:82:c4:ba:30:e8:67:a2:1c:5f:b6:10:79:
6c:22:6a:fa:a4:23:38:d6:aa:34:b8:e9:bf:ae:2c:2e:a4:be:
48:5b:50:08:b0:08:02:c1:95:6e:42:8f:b8:09:bc:36:69:87:
e6:43:f9:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 20:03:05 2025 by rpki-client