Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/ccc808-14bb-494d-99c8-2f11a651962b/1/LcnLUwLY0T_pHoD1y9H7rLwBSCc.mft
File: LcnLUwLY0T_pHoD1y9H7rLwBSCc.mft (raw, json)
Hash identifier: BYjQBEo9yft1aahChNE3e9B+f6g4E3d2MFyUNNLPg1I=
Subject key identifier: EC:97:81:16:60:0B:94:0A:A0:94:59:91:08:D6:87:07:AE:47:5C:82
Authority key identifier: 2D:C9:CB:53:02:D8:D1:3F:E9:1E:80:F5:CB:D1:FB:AC:BC:01:48:27
Certificate issuer: /CN=2dc9cb5302d8d13fe91e80f5cbd1fbacbc014827
Certificate serial: 0194BBCDF9725A1AF0AF0255EE0FE124FFD8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LcnLUwLY0T_pHoD1y9H7rLwBSCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/ccc808-14bb-494d-99c8-2f11a651962b/1/LcnLUwLY0T_pHoD1y9H7rLwBSCc.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 10:00:25 +0000
Manifest this update: Fri 31 Jan 2025 10:00:25 +0000
Manifest next update: Sat 01 Feb 2025 10:00:25 +0000
Files and hashes: 1: Jc6JT4xshgQRG7HUAK1HtP9BkTI.roa (hash: hCl5v0Z86Jy7+0GlCW+6oKfv2bUVufzYinCdryb0Gzo=)
2: LcnLUwLY0T_pHoD1y9H7rLwBSCc.crl (hash: h22KLcQH+5ecQBygR62Q5gerIEKTBdp1qrLzu0bO1hE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:f9:72:5a:1a:f0:af:02:55:ee:0f:e1:24:ff:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2dc9cb5302d8d13fe91e80f5cbd1fbacbc014827
Validity
Not Before: Jan 31 10:00:25 2025 GMT
Not After : Feb 1 10:00:25 2025 GMT
Subject: CN=ec978116600b940aa094599108d68707ae475c82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:19:0e:23:89:c1:47:46:af:a0:12:c6:0b:63:
61:42:5a:01:60:63:4b:50:fc:2d:2c:30:a2:3d:bc:
12:31:cc:e5:55:8a:60:47:fc:e9:a5:54:a3:41:34:
b6:15:65:75:bc:2b:3d:59:17:6a:70:de:a7:c7:a1:
ce:73:62:b6:5d:85:ee:61:d2:6f:9b:ea:8a:cd:3b:
9b:89:4f:22:bc:2f:43:34:7a:34:e5:aa:b0:56:1e:
b3:92:a0:3e:51:17:eb:7a:75:46:60:5d:7b:5a:fe:
df:90:36:7e:48:2c:a0:a9:a7:45:15:5b:fa:9b:e9:
36:65:56:23:9c:1d:9e:8c:7f:e2:95:93:15:3a:77:
0f:a6:ca:9a:c1:1d:d7:23:fb:e1:79:7c:88:cb:5f:
9f:bd:40:07:4d:f8:15:c2:a9:73:08:3b:10:24:a9:
be:5f:1a:dc:e5:8a:53:24:b4:e2:b3:be:fd:fc:54:
68:de:b9:ff:31:99:49:4e:25:d2:3e:70:77:85:e3:
00:19:9e:bc:a3:8f:61:9f:63:e3:a5:aa:71:2f:49:
0a:f1:9e:fb:fd:1b:41:b5:2e:57:f9:ca:b7:c1:a3:
86:03:e7:53:9b:3f:57:34:6a:24:25:d7:7d:e5:b1:
b4:36:07:1b:a7:c1:fd:8c:e0:6b:e1:24:1a:42:17:
27:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:97:81:16:60:0B:94:0A:A0:94:59:91:08:D6:87:07:AE:47:5C:82
X509v3 Authority Key Identifier:
keyid:2D:C9:CB:53:02:D8:D1:3F:E9:1E:80:F5:CB:D1:FB:AC:BC:01:48:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LcnLUwLY0T_pHoD1y9H7rLwBSCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/ccc808-14bb-494d-99c8-2f11a651962b/1/LcnLUwLY0T_pHoD1y9H7rLwBSCc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/ccc808-14bb-494d-99c8-2f11a651962b/1/LcnLUwLY0T_pHoD1y9H7rLwBSCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:38:16:6f:af:72:ff:56:22:a9:46:35:ff:0b:62:63:09:fc:
90:38:7f:03:fe:65:fc:82:4c:18:ab:6d:54:5b:5a:46:fc:1d:
3f:53:3a:cf:e8:36:be:33:c9:71:87:95:5f:d2:92:78:bc:f3:
30:1e:ef:49:c0:bf:7d:36:3a:be:f3:0b:8e:99:15:71:ad:06:
da:1c:ec:54:d2:95:37:27:e8:3f:9b:ae:96:66:a7:ce:ff:ba:
49:6b:0d:43:ba:af:34:4a:52:ef:9f:c4:77:c0:2e:81:4b:73:
f9:b4:61:23:bc:b5:98:a3:3c:99:65:3d:01:24:60:4e:8b:17:
43:43:3a:b1:b7:b4:ee:93:ca:2e:e4:38:21:ac:79:9e:19:a7:
24:09:29:08:87:40:5f:fe:11:d5:1f:9a:99:50:a4:e3:00:c6:
68:da:cb:b1:ce:b5:c9:d2:c9:a9:83:35:f1:c6:6a:57:e7:38:
5f:cd:37:e1:c2:1b:80:f9:6a:3b:ae:02:f9:ae:25:51:9a:95:
10:99:ff:7c:6b:d7:40:5c:e9:a0:e0:35:43:bf:c2:7e:3c:b5:
6f:17:ed:b3:a2:7c:67:74:5f:10:ab:a0:b7:7f:13:2b:ad:88:
d1:b8:33:48:c8:ae:c2:59:7b:45:9a:c5:de:eb:f1:0f:cc:34:
53:b7:6a:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:58:28 2025 by rpki-client