Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/811b1b-3a72-4402-b4fd-fa4dd21ae3dc/1/LPtHb88xPP8pXeDRcJFWrwJT188.mft
File: LPtHb88xPP8pXeDRcJFWrwJT188.mft (raw, json)
Hash identifier: WrwdLy4za0GNAh9cW8ptjYou1EjpH/MOrPJe2FglfbE=
Subject key identifier: C3:1C:35:36:9A:05:06:04:20:9D:FF:6F:D7:73:17:5F:4D:62:FB:0E
Authority key identifier: 2C:FB:47:6F:CF:31:3C:FF:29:5D:E0:D1:70:91:56:AF:02:53:D7:CF
Certificate issuer: /CN=2cfb476fcf313cff295de0d1709156af0253d7cf
Certificate serial: 0194BBCE753268351B5E1122BA8A6C2937A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LPtHb88xPP8pXeDRcJFWrwJT188.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/811b1b-3a72-4402-b4fd-fa4dd21ae3dc/1/LPtHb88xPP8pXeDRcJFWrwJT188.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 10:00:57 +0000
Manifest this update: Fri 31 Jan 2025 10:00:57 +0000
Manifest next update: Sat 01 Feb 2025 10:00:57 +0000
Files and hashes: 1: LPtHb88xPP8pXeDRcJFWrwJT188.crl (hash: 5+Tw1ormOUis5a5ta2cTUriP7gzEUNVaZagpBfnfWDc=)
2: QG26uYioHVmhp2a5DlzMfuEJFvQ.roa (hash: QYW9l61NzSQ8p9p0VXIlshNNkTFPqxE5hMNyzeqT5Xw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:75:32:68:35:1b:5e:11:22:ba:8a:6c:29:37:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cfb476fcf313cff295de0d1709156af0253d7cf
Validity
Not Before: Jan 31 10:00:57 2025 GMT
Not After : Feb 1 10:00:57 2025 GMT
Subject: CN=c31c35369a050604209dff6fd773175f4d62fb0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:8a:bc:5c:0f:67:2b:8e:a8:f7:51:29:21:8c:
98:30:7d:e1:e2:67:f6:b6:7d:a6:29:ab:65:d8:e5:
72:83:be:e6:1e:01:31:9b:19:c7:7a:71:4a:4c:1e:
5e:a4:fb:e5:6a:5a:68:67:01:e8:43:53:f8:4a:13:
e8:d7:4b:26:33:23:c1:eb:c1:21:0e:9b:af:a1:ab:
ea:44:14:4b:45:a8:8b:3d:f7:50:0e:57:a5:0b:fc:
fb:5b:2c:5e:42:98:d1:7d:94:6a:65:8d:b1:91:98:
21:44:00:74:3d:e7:00:3a:d1:9a:fc:e3:d7:65:fa:
16:31:74:c2:6e:dd:15:44:2b:23:00:30:b0:40:d5:
18:3c:c3:f1:a7:9a:09:1a:66:0d:80:f1:b9:78:ba:
37:a1:2b:74:57:8d:52:1a:18:72:59:d9:6d:36:16:
a5:6d:f2:7e:db:d8:78:52:b6:09:bc:7b:7e:ff:dd:
e4:f6:e2:9b:66:e8:ae:ae:c0:1b:de:41:15:1a:e4:
27:1f:00:68:6f:2e:dc:c8:b2:83:8c:5c:c7:65:6d:
e6:b6:cc:94:e4:d9:41:57:cd:e5:35:d4:9b:b9:17:
50:a9:22:ed:8a:6a:7a:f1:c0:d5:ed:5d:da:bf:c3:
15:ea:10:a2:a3:f5:df:41:c2:0a:e1:fe:33:f5:c1:
90:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:1C:35:36:9A:05:06:04:20:9D:FF:6F:D7:73:17:5F:4D:62:FB:0E
X509v3 Authority Key Identifier:
keyid:2C:FB:47:6F:CF:31:3C:FF:29:5D:E0:D1:70:91:56:AF:02:53:D7:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LPtHb88xPP8pXeDRcJFWrwJT188.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/811b1b-3a72-4402-b4fd-fa4dd21ae3dc/1/LPtHb88xPP8pXeDRcJFWrwJT188.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/811b1b-3a72-4402-b4fd-fa4dd21ae3dc/1/LPtHb88xPP8pXeDRcJFWrwJT188.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:51:4b:30:41:92:46:0c:0c:fc:f9:a6:73:21:ac:85:d3:ca:
a9:59:b8:d1:f5:0b:af:6a:d2:85:07:28:3d:08:d2:ae:8a:96:
a6:d4:39:ff:93:ff:59:27:39:59:5c:fe:51:ae:e6:cb:4b:2e:
a5:08:1e:6d:2a:f1:53:64:0a:a0:5f:d4:55:df:19:fc:65:46:
46:e2:cb:ae:d0:4c:36:66:8e:8a:31:ed:be:d6:24:f7:e3:7e:
e3:78:5a:bc:73:52:39:44:7c:d0:7c:f2:9f:bd:d1:9f:2f:1d:
51:75:20:ca:ad:0e:46:43:9c:38:eb:0a:74:be:64:8c:4d:47:
42:0d:f9:3d:70:a1:65:f2:5c:81:50:7e:15:f3:72:04:21:9d:
06:a4:c9:33:a0:43:29:fc:aa:1f:19:f4:22:18:f5:58:2a:da:
d5:55:13:92:9c:c4:95:73:b4:9b:d5:32:56:8e:4d:80:d7:99:
d7:5a:da:d3:32:c4:0f:d6:1e:7e:a5:c4:dc:df:06:00:45:bc:
05:94:8c:55:8b:96:c7:33:39:58:37:c3:a3:fe:a7:f1:4d:ee:
4b:4b:61:1a:8c:9d:3f:28:35:d1:cd:af:af:00:99:be:65:36:
13:74:50:e2:86:26:a0:2e:61:c3:1b:ae:35:6c:22:53:76:37:
3f:3f:af:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 11:29:02 2025 by rpki-client