Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/821152-9f13-4c09-9dcd-45bbb23a15d8/1/LhYgiQ9wDwErC6YBcjFOPIWRlRM.mft
File: LhYgiQ9wDwErC6YBcjFOPIWRlRM.mft (raw, json)
Hash identifier: Vf6GYcLONyxPgXY/p+EOw5CdeQksAjLQ+Xjep/tgZ0Q=
Subject key identifier: BC:FE:D8:A4:5D:BE:5C:88:8E:B9:D1:8B:1C:96:41:2D:6C:DB:E5:1E
Authority key identifier: 2E:16:20:89:0F:70:0F:01:2B:0B:A6:01:72:31:4E:3C:85:91:95:13
Certificate issuer: /CN=2e1620890f700f012b0ba60172314e3c85919513
Certificate serial: 0194BCE0E2EA57B27B3FAD33959E5095DA0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LhYgiQ9wDwErC6YBcjFOPIWRlRM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/821152-9f13-4c09-9dcd-45bbb23a15d8/1/LhYgiQ9wDwErC6YBcjFOPIWRlRM.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 15:00:42 +0000
Manifest this update: Fri 31 Jan 2025 15:00:42 +0000
Manifest next update: Sat 01 Feb 2025 15:00:42 +0000
Files and hashes: 1: LhYgiQ9wDwErC6YBcjFOPIWRlRM.crl (hash: YeE9mGAk1VGXda93amhR3Ip7HKsQVPNulDN55/AMZp0=)
2: UEzUyopP5UVcAuE2wQnf6zxgiYA.roa (hash: WO7cSkDAVVG4RqEt/anGaCZXbbFB9XEJIQ0eE+HtSwo=)
3: g1Qj1KnuMxZpXuMaGLTMbgWLRyE.roa (hash: f3NI3BOfnPP1R6nzFdJwSdGpqAlLYVxZtd9uD+YokWY=)
4: x9mgn-wCUD8rT1tTi9C7mbyMAtI.roa (hash: sgZbLcOXGM2ArVU0X49/Qh6v7QEpIvbA1cc08MVfbkw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:e2:ea:57:b2:7b:3f:ad:33:95:9e:50:95:da:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e1620890f700f012b0ba60172314e3c85919513
Validity
Not Before: Jan 31 15:00:42 2025 GMT
Not After : Feb 1 15:00:42 2025 GMT
Subject: CN=bcfed8a45dbe5c888eb9d18b1c96412d6cdbe51e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:e3:7d:72:d3:7e:c0:3f:a4:5a:41:09:5e:1b:
d7:40:0b:24:d1:25:20:f4:2b:d6:56:20:00:b2:3f:
68:9b:59:02:b6:d3:c7:f8:e8:ba:19:27:59:81:62:
23:64:d2:f6:7c:27:38:c0:ee:39:d0:ce:56:ba:62:
a9:91:b5:2c:18:32:ef:5b:d8:a3:18:32:04:74:a9:
4d:34:ad:a0:8e:d2:e4:f3:85:cd:6b:5b:77:31:6b:
e6:13:0d:46:06:44:4e:7e:a1:e5:e2:68:a6:c1:2f:
e7:05:64:27:81:b4:5c:a0:18:2c:22:78:b7:ef:60:
4c:f0:8d:b2:16:19:7c:a4:48:c0:9c:99:54:a8:93:
bc:fa:89:6e:07:1f:55:2a:04:f5:f6:54:8e:bb:d8:
db:90:48:e4:bb:65:75:f0:1d:88:47:6c:0a:70:7c:
f6:92:a7:82:3d:3d:5a:6b:5d:a3:73:f9:ed:e8:cf:
79:12:9f:44:5a:75:f8:09:d0:d6:7b:61:ad:67:46:
4e:1e:b2:f1:a8:dc:07:13:f1:ba:f2:1b:39:0b:83:
4c:f8:42:b0:1c:7e:2d:6c:fc:bb:39:d8:48:07:d7:
be:36:da:f2:b0:e3:3e:a2:14:22:0c:78:92:27:d1:
17:37:3d:6b:d9:92:80:ed:a8:40:0c:ab:d1:97:f4:
69:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:FE:D8:A4:5D:BE:5C:88:8E:B9:D1:8B:1C:96:41:2D:6C:DB:E5:1E
X509v3 Authority Key Identifier:
keyid:2E:16:20:89:0F:70:0F:01:2B:0B:A6:01:72:31:4E:3C:85:91:95:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LhYgiQ9wDwErC6YBcjFOPIWRlRM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/821152-9f13-4c09-9dcd-45bbb23a15d8/1/LhYgiQ9wDwErC6YBcjFOPIWRlRM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/821152-9f13-4c09-9dcd-45bbb23a15d8/1/LhYgiQ9wDwErC6YBcjFOPIWRlRM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:91:4d:26:d2:c8:73:ad:1b:63:90:8e:29:e6:ed:bc:ba:1a:
03:17:5c:0a:82:c2:6b:12:60:b6:29:1b:f8:ad:97:bf:c1:96:
d2:cb:51:53:90:fd:8a:ec:08:f7:66:8e:e5:05:54:cc:a2:fe:
81:3a:77:f3:e6:45:7b:a3:e0:f1:fd:e3:a0:af:df:73:92:e1:
f1:f8:b9:14:33:a7:d7:81:e9:d2:1f:cf:ff:ba:65:75:a2:5f:
cf:e0:13:62:0a:97:df:67:d2:af:60:fe:9d:c1:83:eb:5c:4a:
db:a5:e2:eb:4d:72:a9:e3:70:df:2c:58:cc:39:fb:9f:65:1e:
b8:9a:2e:14:8a:45:1f:1e:a9:40:10:66:37:91:88:b8:87:62:
52:4c:71:3e:28:59:cc:ab:3c:29:8b:9e:73:cc:37:03:71:65:
6b:12:dc:5c:1d:6d:4a:93:41:c8:49:c7:3f:8c:53:60:a0:26:
36:19:a3:43:5a:bf:9e:33:9c:5b:94:a6:b6:4d:fa:75:7d:83:
41:54:22:02:35:96:de:0b:bc:f2:3d:89:ea:7b:84:54:12:72:
2e:82:a2:0e:5d:77:ab:77:5d:bf:1b:d2:10:08:d8:c2:ae:83:
0d:7a:fb:ad:c7:e4:a1:28:b4:71:32:ee:7d:b9:92:8a:a5:b8:
3b:c9:45:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 11:31:51 2025 by rpki-client