Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/1cdf84-a35b-4f52-9ee1-f6489f551f15/1/lLUJKKlsuekSD_PLY1s_fXDJfOA.mft
File: lLUJKKlsuekSD_PLY1s_fXDJfOA.mft (raw, json)
Hash identifier: 0stIvCd4ntMUWvWKGuehENHpG4J8XsBvfaxnhHHiG4o=
Subject key identifier: 1A:61:3A:E5:1A:1E:17:7C:B9:54:77:AA:E3:59:1C:8E:6C:1A:65:5D
Authority key identifier: 94:B5:09:28:A9:6C:B9:E9:12:0F:F3:CB:63:5B:3F:7D:70:C9:7C:E0
Certificate issuer: /CN=94b50928a96cb9e9120ff3cb635b3f7d70c97ce0
Certificate serial: 0194BC3BEB4538A7DD07C44586490CB823BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lLUJKKlsuekSD_PLY1s_fXDJfOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/1cdf84-a35b-4f52-9ee1-f6489f551f15/1/lLUJKKlsuekSD_PLY1s_fXDJfOA.mft
Manifest number: 03D3
Signing time: Fri 31 Jan 2025 12:00:30 +0000
Manifest this update: Fri 31 Jan 2025 12:00:30 +0000
Manifest next update: Sat 01 Feb 2025 12:00:30 +0000
Files and hashes: 1: LpnDXu3JDFLVkqdaS_J_mqz_IRA.roa (hash: rZ4d4CAV2di4e3eFZ315ntn8Ch6bIgV7U8l1SlWqnhA=)
2: lLUJKKlsuekSD_PLY1s_fXDJfOA.crl (hash: VTpllENkNQ8GatJjyuoUcnJZuAJAHRGxX9FtWH2ziwI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:eb:45:38:a7:dd:07:c4:45:86:49:0c:b8:23:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94b50928a96cb9e9120ff3cb635b3f7d70c97ce0
Validity
Not Before: Jan 31 12:00:30 2025 GMT
Not After : Feb 1 12:00:30 2025 GMT
Subject: CN=1a613ae51a1e177cb95477aae3591c8e6c1a655d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:c5:a6:2f:5c:55:2e:13:e5:83:41:2e:2a:d2:
43:85:92:9a:bc:99:58:58:85:28:58:5a:2d:6b:77:
9a:c5:d2:75:af:31:0d:4a:9e:0a:d1:b2:eb:a2:b2:
86:85:3e:65:09:89:07:99:22:2e:67:95:5e:43:7c:
c4:da:33:d2:f6:de:65:2a:75:3d:3e:4f:dd:81:c0:
8e:e2:97:2f:6b:bd:12:11:0c:af:d8:2e:99:bb:11:
f2:78:30:b6:04:ef:18:41:45:0c:15:72:66:35:73:
a2:f8:5e:3f:f1:b1:bd:56:d4:9e:d4:1b:86:da:ab:
45:33:1f:87:e1:69:a3:cb:6e:ee:34:64:f4:3e:60:
4c:ed:25:3f:eb:ac:b3:6b:19:4b:03:7f:1a:14:97:
a1:ea:cc:7a:62:db:39:eb:db:ae:32:3c:3b:28:a4:
6c:02:d4:c9:8e:7b:9a:5d:f8:0d:90:ae:66:1e:fb:
57:66:ed:8e:d1:33:7f:1a:92:d2:9b:1a:57:51:17:
d9:2e:aa:d9:04:1e:51:f8:e7:02:60:98:cb:06:5e:
36:c2:57:2a:87:cd:2c:7b:6d:73:c8:32:a8:9b:e0:
07:57:21:81:b6:68:5a:fa:f5:2d:7c:fe:22:04:a7:
71:e3:c2:47:f8:e7:17:3b:8c:09:06:b6:e4:f5:54:
33:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:61:3A:E5:1A:1E:17:7C:B9:54:77:AA:E3:59:1C:8E:6C:1A:65:5D
X509v3 Authority Key Identifier:
keyid:94:B5:09:28:A9:6C:B9:E9:12:0F:F3:CB:63:5B:3F:7D:70:C9:7C:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lLUJKKlsuekSD_PLY1s_fXDJfOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/1cdf84-a35b-4f52-9ee1-f6489f551f15/1/lLUJKKlsuekSD_PLY1s_fXDJfOA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/1cdf84-a35b-4f52-9ee1-f6489f551f15/1/lLUJKKlsuekSD_PLY1s_fXDJfOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:a1:a0:5f:3b:ba:69:ba:f6:fb:31:cd:c5:63:4e:e4:d3:54:
1d:bd:8a:1f:b7:8a:fe:81:97:66:a1:ce:35:02:5c:97:31:6d:
09:ce:4d:1a:0a:df:80:c4:9e:cf:85:37:8c:49:4a:74:0c:26:
5c:90:9e:5b:04:2a:5b:f9:4d:c5:08:39:2b:a4:f6:a2:5f:b6:
1b:88:49:d0:f3:62:a6:2a:04:05:7e:e2:bb:38:9a:9f:83:1b:
30:5d:e4:2f:7d:d2:d9:a5:94:2c:f0:ec:9b:ed:c0:cd:2b:c1:
96:e7:22:12:32:c5:e6:cc:98:d5:ca:02:e2:9f:a1:36:89:ee:
dc:b4:fe:7e:06:a6:76:01:b5:01:59:cb:3d:10:de:c0:7f:0b:
1f:ce:f2:b5:2c:68:65:9b:11:2e:f8:59:35:49:7d:17:c0:b3:
db:d0:d5:7d:f8:18:f1:00:64:1e:9f:1a:e4:81:a1:82:7c:63:
41:7d:0b:5c:15:19:d5:67:2c:ad:84:aa:b7:8c:d3:8c:23:79:
7c:aa:7b:6b:2b:6e:b9:62:14:3a:e2:81:d4:29:e6:ea:8e:bd:
d3:31:ba:1c:38:ef:4b:6b:61:f8:fc:7f:ca:e8:c8:f9:60:fe:
a1:2d:58:97:a9:8f:d0:3b:68:c8:92:b9:28:67:85:0d:30:87:
30:58:d2:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:29:47 2025 by rpki-client