Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/b47217-3d58-4109-9a18-347b3052b3cc/1/lopFBwJlXLHBL1GJM9k877nt4j4.mft
File: lopFBwJlXLHBL1GJM9k877nt4j4.mft (raw, json)
Hash identifier: +IxCDxTgLueTcH9regvy+lDUSLLhI4aAFWnuhS/ptKc=
Subject key identifier: 80:6F:3C:FA:29:CD:11:E7:D3:68:5F:55:05:DD:D3:4E:48:16:74:E1
Authority key identifier: 96:8A:45:07:02:65:5C:B1:C1:2F:51:89:33:D9:3C:EF:B9:ED:E2:3E
Certificate issuer: /CN=968a450702655cb1c12f518933d93cefb9ede23e
Certificate serial: 01962E2B1F5459E0D5E86C24487D6EB07F2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lopFBwJlXLHBL1GJM9k877nt4j4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/b47217-3d58-4109-9a18-347b3052b3cc/1/lopFBwJlXLHBL1GJM9k877nt4j4.mft
Manifest number: 01BC
Signing time: Sun 13 Apr 2025 08:01:40 +0000
Manifest this update: Sun 13 Apr 2025 08:01:40 +0000
Manifest next update: Mon 14 Apr 2025 08:01:40 +0000
Files and hashes: 1: lopFBwJlXLHBL1GJM9k877nt4j4.crl (hash: NI9WD7s04LSYG9cVbkRdBeR8mtDVI6s6UXL04B0UTf8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2e:2b:1f:54:59:e0:d5:e8:6c:24:48:7d:6e:b0:7f:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=968a450702655cb1c12f518933d93cefb9ede23e
Validity
Not Before: Apr 13 08:01:40 2025 GMT
Not After : Apr 14 08:01:40 2025 GMT
Subject: CN=806f3cfa29cd11e7d3685f5505ddd34e481674e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:4e:79:8f:3b:14:25:43:ee:83:8f:cb:b6:92:
1e:22:de:19:e6:6a:d9:ce:8e:31:25:87:ab:71:0d:
05:7d:e4:22:25:5b:8a:d4:11:e7:f3:d5:63:f1:02:
a6:ef:5c:78:3f:27:ab:88:a9:71:5a:90:7a:78:00:
9a:62:f9:a0:2e:6f:12:b4:4f:83:ea:aa:21:50:3e:
07:6e:ac:6d:47:11:e9:dc:61:54:74:b4:93:fc:04:
23:ff:54:87:d7:ce:ad:02:1f:4e:f6:33:c8:aa:b8:
5c:1c:a0:de:0b:3d:c4:18:39:f5:60:ce:8d:16:6f:
33:30:f4:b9:7f:f9:fa:59:c7:28:34:2d:b3:70:d0:
98:ee:b8:70:91:89:c9:d4:a4:0d:32:d2:86:d1:14:
ca:42:09:3a:33:48:19:b3:f2:83:c5:45:91:1f:91:
85:1f:2f:23:c2:e2:bb:86:86:ed:1a:a7:03:32:ed:
c8:1a:2c:91:58:64:30:31:57:d2:cd:e1:6f:6d:3d:
f1:f0:18:5c:31:bb:1c:a4:29:9d:f9:d2:a2:e0:36:
61:06:3a:0a:92:23:a1:9a:7b:30:0f:78:a4:eb:c8:
70:3c:67:cb:f5:81:13:4d:ea:16:d6:ec:71:d2:6c:
8e:32:a5:1d:28:86:a5:98:83:56:d5:e0:ec:57:41:
58:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:6F:3C:FA:29:CD:11:E7:D3:68:5F:55:05:DD:D3:4E:48:16:74:E1
X509v3 Authority Key Identifier:
keyid:96:8A:45:07:02:65:5C:B1:C1:2F:51:89:33:D9:3C:EF:B9:ED:E2:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lopFBwJlXLHBL1GJM9k877nt4j4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b47217-3d58-4109-9a18-347b3052b3cc/1/lopFBwJlXLHBL1GJM9k877nt4j4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b47217-3d58-4109-9a18-347b3052b3cc/1/lopFBwJlXLHBL1GJM9k877nt4j4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:33:c8:c2:3d:92:b5:f3:c2:70:f7:8f:0b:0e:9a:74:b2:b7:
10:db:a4:6a:46:c0:c4:a8:bc:e6:e8:df:cd:f2:61:f5:e8:79:
1f:60:63:bc:39:d1:dd:bf:33:1f:b6:68:cf:27:6c:55:82:22:
d9:53:6a:2c:b7:66:e7:c3:ca:b8:18:dd:3a:8e:80:61:c9:b4:
d0:27:b4:7a:7b:65:23:00:1f:0a:e1:61:d6:21:b4:6d:01:07:
77:51:9c:4e:f6:7b:d8:31:bb:07:8d:f9:c1:c5:53:b8:56:2e:
c7:81:98:bb:bf:f7:0c:06:c2:46:c0:7b:84:83:0c:f9:e3:a4:
44:f2:61:d2:c5:e3:d0:83:45:44:db:f7:c9:b0:9d:55:d3:3b:
5c:7f:0d:a4:ec:ef:dc:50:f8:0a:0d:03:80:3d:29:0a:02:3e:
07:db:3a:c2:bb:af:6e:04:26:8b:57:2a:a0:6a:68:1e:af:35:
fc:57:31:42:2d:83:ff:5e:34:21:ab:24:d4:fe:58:2f:69:fb:
81:42:02:a0:fe:57:0b:43:77:3b:4d:1c:d4:d0:4c:ef:48:58:
ed:a9:be:a4:1b:62:67:45:b6:dd:1f:78:2b:45:39:c1:32:eb:
bc:33:70:79:d3:52:87:ea:90:c3:5d:dd:bb:85:64:0e:5b:e1:
c8:9c:f4:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----