Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/cddf94-8d51-41cd-8a5b-a0b4930cbd1e/1/lhebOdHB0o9QY8qSHWAH42Phxgs.mft
File: lhebOdHB0o9QY8qSHWAH42Phxgs.mft (raw, json)
Hash identifier: TkIh/rtXDP1ExCdASqoK+xg/CimrnEEZZiL+vg3gUF4=
Subject key identifier: 60:DC:C1:07:D8:E8:41:3D:92:84:90:DD:CF:0F:78:96:3E:47:AC:76
Authority key identifier: 96:17:9B:39:D1:C1:D2:8F:50:63:CA:92:1D:60:07:E3:63:E1:C6:0B
Certificate issuer: /CN=96179b39d1c1d28f5063ca921d6007e363e1c60b
Certificate serial: 0194BBCE59CEE570990382EB3A5D662528E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lhebOdHB0o9QY8qSHWAH42Phxgs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/cddf94-8d51-41cd-8a5b-a0b4930cbd1e/1/lhebOdHB0o9QY8qSHWAH42Phxgs.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 10:00:50 +0000
Manifest this update: Fri 31 Jan 2025 10:00:50 +0000
Manifest next update: Sat 01 Feb 2025 10:00:50 +0000
Files and hashes: 1: lhebOdHB0o9QY8qSHWAH42Phxgs.crl (hash: 0SA1ga/5WO1HKKW93af5bd9Q0lr9CxesxPcpoxN1qG4=)
2: zIbC2a3NLstRoJ1KbSzBvFb6vZ0.roa (hash: YltSOQHV02hFJedVO9/8WLk8TMz1RedE7tGsvMysOE4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:59:ce:e5:70:99:03:82:eb:3a:5d:66:25:28:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96179b39d1c1d28f5063ca921d6007e363e1c60b
Validity
Not Before: Jan 31 10:00:50 2025 GMT
Not After : Feb 1 10:00:50 2025 GMT
Subject: CN=60dcc107d8e8413d928490ddcf0f78963e47ac76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:f9:d1:4a:e0:ce:ff:54:c4:5d:43:c5:91:61:
5d:2c:08:60:75:7e:7c:51:04:bb:74:9e:59:e4:98:
11:73:c3:eb:cb:b1:0b:96:4f:84:68:0c:a2:cb:ec:
75:3e:e4:dd:d0:da:72:16:ae:f9:cd:9c:a1:ea:c1:
3d:66:9b:e5:15:84:2c:ce:90:4e:02:c4:48:74:0f:
1f:85:00:29:2b:6e:08:53:6e:a4:21:f1:56:54:24:
d1:b1:1a:5b:08:04:84:d9:20:f4:3e:94:25:2f:36:
3d:06:85:69:7e:4d:42:56:36:1c:18:ad:cb:d6:49:
32:68:e6:fc:3c:e5:4b:96:f6:5d:2b:63:01:be:ce:
dc:d7:e9:6a:4c:92:2b:c4:07:92:98:11:d8:6f:4f:
d3:01:1e:73:8e:95:bb:a3:8b:51:fe:4f:31:6f:b8:
2f:da:b9:b4:4f:28:d7:d9:f0:ba:b2:3a:e0:44:c9:
43:a1:d2:58:36:99:11:23:9d:1e:10:d1:b5:dc:40:
1c:69:a9:de:3f:fa:dd:bc:4e:1f:c1:6f:0b:78:95:
17:e7:67:d0:55:8f:3e:b3:d2:fe:17:8b:3f:99:ae:
2d:c7:8c:6f:05:f1:40:d3:b6:14:4d:9a:19:37:88:
9d:41:7c:12:c9:a8:af:45:61:24:2f:1e:c3:fb:51:
b5:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:DC:C1:07:D8:E8:41:3D:92:84:90:DD:CF:0F:78:96:3E:47:AC:76
X509v3 Authority Key Identifier:
keyid:96:17:9B:39:D1:C1:D2:8F:50:63:CA:92:1D:60:07:E3:63:E1:C6:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lhebOdHB0o9QY8qSHWAH42Phxgs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/cddf94-8d51-41cd-8a5b-a0b4930cbd1e/1/lhebOdHB0o9QY8qSHWAH42Phxgs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/cddf94-8d51-41cd-8a5b-a0b4930cbd1e/1/lhebOdHB0o9QY8qSHWAH42Phxgs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:ba:04:db:35:b8:c4:ea:b3:c4:1d:e1:76:95:8a:ba:fd:16:
3e:44:92:10:05:36:32:03:83:67:79:23:90:17:7e:1e:61:9c:
28:1e:f9:7c:e4:ca:73:7c:57:9f:ea:f6:39:5f:a9:20:35:2a:
60:1e:1d:b0:4a:32:30:62:95:97:1e:3f:1b:87:28:c4:13:09:
a2:b4:1d:00:d8:08:02:f3:61:75:02:3c:77:3d:bb:21:90:ac:
6d:a7:69:fa:f9:d5:61:35:70:ac:3e:99:a9:e5:9b:bc:f0:4b:
89:b8:d6:89:92:df:07:c5:e2:90:89:94:35:ae:7a:fe:c5:e0:
31:24:71:f0:90:84:2e:3c:9c:1a:34:29:48:2e:34:9c:d6:d2:
0a:3e:c7:b9:05:34:99:12:a2:f2:b3:78:93:92:5d:2e:58:2b:
ce:db:0f:95:5f:3a:c4:8e:ba:88:01:8f:9c:fb:ee:0d:00:c2:
18:75:43:76:f5:91:a2:ed:bc:b1:8d:62:1a:9a:26:3a:c5:71:
06:24:84:d0:90:9d:c1:a6:e3:ce:2a:6b:45:5e:fc:31:58:f1:
eb:46:bb:71:35:5a:3c:de:45:73:72:77:ab:d5:2c:a2:b2:f3:
2e:e6:ed:d8:13:1c:a3:d1:49:7e:84:ee:88:fd:ac:b4:c9:7c:
c5:37:13:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 06:56:35 2025 by rpki-client