Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/40a1e5-7d2a-48d6-a50e-f96fb4ea7e70/1/LHXzXSVsxKW4gxm7fku7oynkk0E.mft
File: LHXzXSVsxKW4gxm7fku7oynkk0E.mft (raw, json)
Hash identifier: EQti5vxSkMF2hnQ/ATErq31dIDRUuzr3X+nz2ATHRdA=
Subject key identifier: AB:AE:92:06:32:5D:5D:D4:33:F9:28:05:B5:32:A3:C1:17:FC:08:61
Authority key identifier: 2C:75:F3:5D:25:6C:C4:A5:B8:83:19:BB:7E:4B:BB:A3:29:E4:93:41
Certificate issuer: /CN=2c75f35d256cc4a5b88319bb7e4bbba329e49341
Certificate serial: 0194BC7319C4C7F5C3DE6EE546B58C8FCD28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LHXzXSVsxKW4gxm7fku7oynkk0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/40a1e5-7d2a-48d6-a50e-f96fb4ea7e70/1/LHXzXSVsxKW4gxm7fku7oynkk0E.mft
Manifest number: 0C41
Signing time: Fri 31 Jan 2025 13:00:47 +0000
Manifest this update: Fri 31 Jan 2025 13:00:47 +0000
Manifest next update: Sat 01 Feb 2025 13:00:47 +0000
Files and hashes: 1: LHXzXSVsxKW4gxm7fku7oynkk0E.crl (hash: 2Z7wd+nxUOTYRhMFWXic+Rgp/t52f/ACBHDqYMjkZco=)
2: YkA8Ssik5dMp6e7KGDWmp6DJ7AM.roa (hash: kaPK3T3qFTRqHUlFynSutBS2oYj5+768wNKSaLHwTTo=)
3: l2XBgGbcIMQ-iwqh11S1_yjLWig.roa (hash: nZxnXhBR3pemT3iBrE0kPVvVmqlAyhaBxoPDBmxVBEw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:19:c4:c7:f5:c3:de:6e:e5:46:b5:8c:8f:cd:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c75f35d256cc4a5b88319bb7e4bbba329e49341
Validity
Not Before: Jan 31 13:00:47 2025 GMT
Not After : Feb 1 13:00:47 2025 GMT
Subject: CN=abae9206325d5dd433f92805b532a3c117fc0861
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:61:24:9d:2e:eb:19:76:4e:b1:80:e6:78:b6:
1c:3e:08:1e:66:91:33:c6:3d:ed:8c:2a:b1:ac:9d:
10:66:44:a6:b7:31:1c:0d:dc:32:80:2c:fd:05:d0:
70:bd:67:44:43:36:8a:eb:3f:db:13:0b:98:69:2c:
65:3f:18:40:1e:f7:0b:92:fe:47:98:9a:9e:1d:d6:
75:e3:c2:e0:c4:ab:07:ca:c9:08:1b:f4:a2:be:81:
a9:07:e8:a5:37:c6:df:7f:0d:ad:ca:e5:17:13:76:
eb:c1:f8:32:d3:a0:9f:8c:87:5c:34:07:16:5d:2e:
35:84:eb:ba:f2:f7:7a:64:e8:b3:e3:d6:f0:02:ab:
84:d4:63:87:a1:51:f6:46:93:a6:89:b6:7a:04:fc:
9a:a8:cd:d2:e4:ae:c3:d5:99:6c:8d:88:37:d3:4e:
cd:50:3c:92:1e:55:85:6a:43:eb:a6:31:d2:62:b9:
d2:e4:c4:35:45:89:f5:91:c0:ac:f2:55:e7:c4:50:
63:9c:ea:c5:4a:52:0c:a2:cc:bc:f3:67:b1:53:f5:
dd:bf:77:0d:22:d5:9b:da:b1:d1:76:4c:2f:e0:c1:
04:4c:0a:71:82:66:4c:b1:5b:d4:e8:8e:cd:31:05:
95:51:c2:c6:29:6b:7c:48:af:5b:bd:5e:17:e4:f8:
fe:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:AE:92:06:32:5D:5D:D4:33:F9:28:05:B5:32:A3:C1:17:FC:08:61
X509v3 Authority Key Identifier:
keyid:2C:75:F3:5D:25:6C:C4:A5:B8:83:19:BB:7E:4B:BB:A3:29:E4:93:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LHXzXSVsxKW4gxm7fku7oynkk0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/40a1e5-7d2a-48d6-a50e-f96fb4ea7e70/1/LHXzXSVsxKW4gxm7fku7oynkk0E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/40a1e5-7d2a-48d6-a50e-f96fb4ea7e70/1/LHXzXSVsxKW4gxm7fku7oynkk0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:7f:05:d0:71:9a:a1:3b:b1:5a:eb:b8:2c:f9:c1:d9:c4:b5:
e5:25:17:48:14:79:15:07:9d:11:b2:87:4f:4a:3b:f5:16:c3:
ed:62:8e:36:ae:56:f5:da:83:4d:ec:1f:d8:79:a4:31:35:f2:
c3:60:25:3b:dc:8a:0f:80:95:8b:66:49:de:e4:ad:c8:15:11:
98:64:20:b0:25:93:21:c9:d6:f2:d2:3c:ff:e6:a1:88:9a:8a:
9a:31:ff:a0:f9:24:63:74:26:da:2d:cd:20:da:5a:35:4a:c1:
a3:64:66:4c:a3:a9:05:0a:fe:d9:c7:86:eb:11:8e:eb:d6:b0:
b9:24:8d:06:b1:fb:d3:8c:1a:97:3f:e6:37:d0:6a:8e:dd:22:
34:f4:5e:9b:b3:06:54:3d:91:d0:2a:5a:01:0e:a4:2e:01:7d:
ff:c2:3f:3f:94:5d:61:01:cd:28:02:50:ef:f6:35:42:96:2b:
2c:f6:eb:96:e7:a4:cb:54:8b:3c:4a:2a:7b:19:bb:62:e2:31:
51:40:cf:8b:c0:31:27:0b:68:c0:dd:0a:5d:f9:09:1e:42:d4:
f3:9e:5a:0c:cb:98:fd:cd:b1:ae:9a:2a:64:a8:9c:f1:87:2a:
bf:a8:80:6d:d6:2b:1e:44:a2:7b:3c:e1:23:4d:ee:71:99:ec:
85:ab:38:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:04:34 2025 by rpki-client