Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/2a226d-c72c-4c12-bbba-a4b55a71c228/1/LbYW860DY-cmnMLrWNG8CGzJdfI.mft
File: LbYW860DY-cmnMLrWNG8CGzJdfI.mft (raw, json)
Hash identifier: 9kW0XYcQBopLEtcZzQYh5UZXxRgtPNzPnfQ9x1lRT90=
Subject key identifier: 92:C8:BA:54:00:1E:79:8D:A9:E4:AF:8A:E3:87:B0:2E:E8:CD:0A:6B
Authority key identifier: 2D:B6:16:F3:AD:03:63:E7:26:9C:C2:EB:58:D1:BC:08:6C:C9:75:F2
Certificate issuer: /CN=2db616f3ad0363e7269cc2eb58d1bc086cc975f2
Certificate serial: 0194BBCDCCD7A9567A41D3DF58296EFB1A33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LbYW860DY-cmnMLrWNG8CGzJdfI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/2a226d-c72c-4c12-bbba-a4b55a71c228/1/LbYW860DY-cmnMLrWNG8CGzJdfI.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 10:00:14 +0000
Manifest this update: Fri 31 Jan 2025 10:00:14 +0000
Manifest next update: Sat 01 Feb 2025 10:00:14 +0000
Files and hashes: 1: LbYW860DY-cmnMLrWNG8CGzJdfI.crl (hash: h/GXEv9PqGTSEfz4qatYRG3jS+mFs3Qr4CRrN7Bxca4=)
2: TtiFva0B7nBQnunu1qXuQVvAjRk.roa (hash: BCLtQWteuqq7HD+J7kkS4GO2lBhow7GRQ0k6IwJXdnM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:cc:d7:a9:56:7a:41:d3:df:58:29:6e:fb:1a:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2db616f3ad0363e7269cc2eb58d1bc086cc975f2
Validity
Not Before: Jan 31 10:00:14 2025 GMT
Not After : Feb 1 10:00:14 2025 GMT
Subject: CN=92c8ba54001e798da9e4af8ae387b02ee8cd0a6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:98:e5:2f:26:1e:e2:2e:e4:ba:6b:25:4c:2c:
b6:82:87:64:55:20:8a:5b:76:b3:78:5d:67:2a:63:
1c:a5:2f:be:74:0b:95:e8:06:bb:f8:89:28:8e:d3:
3e:ac:70:76:0d:72:30:24:fe:7e:03:39:87:99:24:
fd:64:0a:bc:60:09:68:c6:60:f9:89:eb:27:d2:89:
cc:be:e6:46:4f:84:a5:e5:fb:c3:1d:ac:21:17:b3:
61:f1:a8:38:6a:43:71:1e:9b:bd:fa:cc:cb:dc:3c:
67:8d:7c:92:a1:93:35:d9:f1:9a:e6:c3:b1:5e:0b:
ba:b9:9c:f0:8c:b2:92:a9:7f:4e:bf:f6:bb:55:5c:
b6:e7:2f:dd:f4:aa:f6:8d:c8:99:6a:4c:03:fe:87:
3f:38:15:0d:f2:71:55:ef:48:c2:ab:fb:e5:04:cb:
06:18:f6:44:d6:1f:90:80:af:5f:5a:fa:c2:cc:ca:
a5:27:17:e7:99:13:21:8d:89:7d:7d:fa:3b:ab:31:
42:af:fe:6e:4e:49:6f:63:9a:4d:c1:20:e2:15:98:
32:65:a3:65:d6:ba:ae:ba:43:64:8e:a9:e7:c8:58:
7c:b5:99:53:c3:83:bd:ea:d6:d5:60:92:df:40:b2:
55:e1:a5:c7:c1:82:e7:ee:1c:7b:a2:a3:8c:1c:02:
68:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:C8:BA:54:00:1E:79:8D:A9:E4:AF:8A:E3:87:B0:2E:E8:CD:0A:6B
X509v3 Authority Key Identifier:
keyid:2D:B6:16:F3:AD:03:63:E7:26:9C:C2:EB:58:D1:BC:08:6C:C9:75:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LbYW860DY-cmnMLrWNG8CGzJdfI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/2a226d-c72c-4c12-bbba-a4b55a71c228/1/LbYW860DY-cmnMLrWNG8CGzJdfI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/2a226d-c72c-4c12-bbba-a4b55a71c228/1/LbYW860DY-cmnMLrWNG8CGzJdfI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:7e:18:a0:a2:76:c0:da:1d:dd:38:28:49:9b:41:1e:b4:4d:
ef:c3:2c:b8:b0:39:1e:c3:fb:1d:1c:72:49:36:cd:9a:90:ad:
14:d6:4c:8f:13:96:95:a4:bf:85:d8:28:8d:55:a7:81:fa:71:
51:42:6f:a5:23:99:21:1c:6c:ee:2e:2e:8b:4b:68:b0:4e:78:
2f:84:bf:39:b4:78:7f:ce:14:1a:cf:f2:33:3e:6f:40:b4:0a:
d1:74:12:5a:9e:72:c0:83:71:38:59:ff:25:8e:17:82:7e:a6:
e6:ad:52:cc:e6:6e:db:25:98:d6:9c:92:70:b9:8f:c9:ae:c1:
1c:91:3c:19:9b:96:bb:d9:5a:b9:79:94:35:48:d8:fb:3e:05:
bd:1b:da:6e:41:9a:9c:e1:40:dd:56:c2:17:b3:37:21:e5:77:
cf:b9:6c:f3:cc:1c:d7:1a:1b:d2:df:2e:59:a8:1e:73:d4:fb:
35:86:0b:f8:75:85:22:0b:cd:00:17:79:0a:13:2c:cd:97:6f:
aa:c6:43:f6:3a:43:b6:29:20:f4:03:8b:42:a6:42:bf:40:35:
8d:12:a4:cb:ab:e5:d3:9d:98:ad:83:c1:a8:7b:a5:41:6b:e8:
f8:45:67:37:54:b5:cd:68:6a:3a:a6:84:9e:a0:3e:ac:59:51:
1a:8d:08:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 11:24:34 2025 by rpki-client