Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/a4cd0d-af14-49c3-9481-35479c54dcbd/1/L-QXNib0YCZA6NTpa1ShoJar54s.mft
File: L-QXNib0YCZA6NTpa1ShoJar54s.mft (raw, json)
Hash identifier: wwbVa0JXobr1ZK1jPts+tHuQU6c+vW9OcBucKyuVEoY=
Subject key identifier: AA:0C:D5:D9:03:CC:2D:0B:66:DD:84:30:14:E0:CD:0F:3E:8A:1A:32
Authority key identifier: 2F:E4:17:36:26:F4:60:26:40:E8:D4:E9:6B:54:A1:A0:96:AB:E7:8B
Certificate issuer: /CN=2fe4173626f4602640e8d4e96b54a1a096abe78b
Certificate serial: 01962F748C5658213B6A3B7083213AAAA343
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L-QXNib0YCZA6NTpa1ShoJar54s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/a4cd0d-af14-49c3-9481-35479c54dcbd/1/L-QXNib0YCZA6NTpa1ShoJar54s.mft
Manifest number: 0FD8
Signing time: Sun 13 Apr 2025 14:01:29 +0000
Manifest this update: Sun 13 Apr 2025 14:01:29 +0000
Manifest next update: Mon 14 Apr 2025 14:01:29 +0000
Files and hashes: 1: 8PzBSdujNIrE9ZxwXkq7Jh0bBAs.roa (hash: 4Awpnumk+tPfHQxPVq+VsOA860hCJdP+GfTQ/2K+zcA=)
2: L-QXNib0YCZA6NTpa1ShoJar54s.crl (hash: SG792cb8/tVTeuqianWXQxOm2eF+DaPnRWlE779sFdA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2f:74:8c:56:58:21:3b:6a:3b:70:83:21:3a:aa:a3:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fe4173626f4602640e8d4e96b54a1a096abe78b
Validity
Not Before: Apr 13 14:01:29 2025 GMT
Not After : Apr 14 14:01:29 2025 GMT
Subject: CN=aa0cd5d903cc2d0b66dd843014e0cd0f3e8a1a32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:f0:d9:fa:b5:92:4f:24:7e:cd:4d:38:19:0e:
a4:4c:7f:23:36:dd:c9:5d:22:ee:21:e3:52:61:88:
be:55:71:8d:d3:75:be:62:83:4c:08:3e:77:15:34:
a9:e5:8b:0f:af:72:79:2d:42:7d:98:06:a1:af:00:
90:02:6f:63:f2:7a:bd:87:be:62:97:e3:f3:8d:a0:
6a:ab:eb:65:d7:20:a0:47:69:16:63:cf:94:b4:a0:
d6:e1:e9:ec:d3:b2:af:52:80:16:09:21:7e:55:72:
e9:4d:a3:1f:ff:7d:d2:8f:65:35:9d:7a:12:60:23:
65:94:b9:9a:c1:f4:4a:d1:0c:16:1d:11:c5:8c:a0:
32:c9:56:ba:d6:07:f9:e6:ad:54:b0:17:5c:2f:6b:
f5:da:bf:9e:e5:cd:50:4a:4e:08:b7:92:02:fe:4b:
8d:e8:3c:68:c9:81:a1:b6:22:84:d5:ab:3f:af:dc:
6f:6d:ae:a9:da:09:2a:5f:89:ef:5f:fc:7f:df:b8:
2e:11:c1:6e:77:d9:2b:fc:e0:64:19:7f:89:96:84:
16:c4:83:03:ec:f0:1a:b0:3c:7d:52:12:4a:65:13:
bc:98:80:6f:3c:c0:01:99:0c:16:63:80:36:1f:16:
eb:06:73:6e:06:a5:29:0b:93:d8:e2:58:a4:60:92:
d2:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:0C:D5:D9:03:CC:2D:0B:66:DD:84:30:14:E0:CD:0F:3E:8A:1A:32
X509v3 Authority Key Identifier:
keyid:2F:E4:17:36:26:F4:60:26:40:E8:D4:E9:6B:54:A1:A0:96:AB:E7:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L-QXNib0YCZA6NTpa1ShoJar54s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/a4cd0d-af14-49c3-9481-35479c54dcbd/1/L-QXNib0YCZA6NTpa1ShoJar54s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/a4cd0d-af14-49c3-9481-35479c54dcbd/1/L-QXNib0YCZA6NTpa1ShoJar54s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:b4:d0:8f:2e:b0:c1:b2:36:fe:64:46:f9:0e:a3:07:16:2b:
d2:73:07:2e:54:14:b3:a7:18:79:e8:f0:a0:39:0c:13:ca:6b:
00:f5:4d:92:b6:a1:a5:31:3f:79:b4:15:b0:7e:f5:d5:f1:c7:
07:a7:cc:b8:83:07:08:b0:a7:ff:44:83:d1:f4:74:0b:37:9a:
c5:12:56:74:19:3b:ae:f5:a9:18:c4:46:af:79:90:35:b5:7f:
d6:f4:12:b1:b2:3c:67:4a:4b:82:87:66:d5:0d:f5:4e:02:b6:
4e:00:f2:2a:3a:ac:36:c6:54:78:32:e3:8e:72:59:a5:e9:1d:
50:2e:88:ee:ca:89:6d:4b:0f:fc:af:61:e6:9a:c3:d7:be:8c:
54:5d:55:97:a6:d0:88:a1:a3:cf:a1:cc:85:da:52:b3:c2:52:
80:32:70:76:d9:d5:29:87:17:66:26:4b:86:5f:dc:0e:1e:1a:
3b:3d:3e:a1:61:19:b0:13:68:2f:1b:9e:a5:ae:fa:cb:85:04:
67:88:60:f3:16:40:dd:63:a0:15:12:e1:49:63:b0:76:bf:81:
fc:b8:a7:79:59:e9:02:d3:46:76:01:7b:85:45:c4:55:3c:d7:
7c:be:ad:af:58:b0:62:47:90:90:61:3e:9c:ba:da:1f:43:ab:
1d:8f:4c:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:40 2025 by rpki-client on console.sobornost.net