Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/8a707a-5ced-4c75-ae38-56596beed1c7/1/lAueGO6wlNkS3rWV3HqshmGw1sc.mft
File: lAueGO6wlNkS3rWV3HqshmGw1sc.mft (raw, json)
Hash identifier: DbsZzHRceownoO4m3r6f5VdHnaQlleuqMn9IMAprESo=
Subject key identifier: 12:1B:BF:06:F3:02:AE:F8:24:05:69:3D:CD:BE:D4:A7:97:76:D6:64
Authority key identifier: 94:0B:9E:18:EE:B0:94:D9:12:DE:B5:95:DC:7A:AC:86:61:B0:D6:C7
Certificate issuer: /CN=940b9e18eeb094d912deb595dc7aac8661b0d6c7
Certificate serial: 0194BC04EDEB7A1E99D62127222D8E97C001
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lAueGO6wlNkS3rWV3HqshmGw1sc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/8a707a-5ced-4c75-ae38-56596beed1c7/1/lAueGO6wlNkS3rWV3HqshmGw1sc.mft
Manifest number: 1428
Signing time: Fri 31 Jan 2025 11:00:27 +0000
Manifest this update: Fri 31 Jan 2025 11:00:27 +0000
Manifest next update: Sat 01 Feb 2025 11:00:27 +0000
Files and hashes: 1: LAIYSHBNgDJwVs33iUQdNmBywEc.roa (hash: InEjvH48yKZ/JYP0Dutv2j5z1AvlQ/oufM81Pmqxk2w=)
2: VSA2PLMqpOv7dlTMBPyD4an4HVU.roa (hash: eXWyLM0MZufkmn0XWy2I12Cyf+5VVc0lvhOa7vlAv3E=)
3: lAueGO6wlNkS3rWV3HqshmGw1sc.crl (hash: 4DqfCNwxLCh7WmiQnizvaNR87V/bXvpcwFGooe5mCvY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:ed:eb:7a:1e:99:d6:21:27:22:2d:8e:97:c0:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=940b9e18eeb094d912deb595dc7aac8661b0d6c7
Validity
Not Before: Jan 31 11:00:27 2025 GMT
Not After : Feb 1 11:00:27 2025 GMT
Subject: CN=121bbf06f302aef82405693dcdbed4a79776d664
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:5d:ea:fc:3e:7e:ac:d7:b8:96:c3:b0:9b:62:
18:c5:bc:06:ab:65:f6:29:85:42:d5:41:7e:23:64:
22:5e:45:b0:bb:f0:c2:72:59:34:b6:79:92:db:b4:
1e:09:2c:2f:f5:7c:0e:58:e5:c6:6f:16:2c:3b:c8:
64:27:f1:2c:a0:b7:e0:a6:aa:76:46:b0:6a:00:48:
e6:d0:6a:53:1e:c5:49:bb:fb:e5:d2:c4:cc:f3:bf:
15:71:dc:f4:3b:c2:56:af:47:41:d2:70:a2:0d:b5:
82:f8:9e:fe:e6:5b:46:d0:8d:96:4f:4f:28:33:a4:
42:4f:a8:66:c8:04:ea:c3:e8:1f:bd:11:74:50:e8:
fd:db:4c:64:cb:0b:ae:7f:0e:16:e9:1d:76:71:d1:
51:0b:f5:c7:58:ac:aa:5a:f9:c2:cb:ef:a2:8d:12:
70:0a:ab:11:2d:01:e0:1f:08:8b:49:35:b0:fb:77:
28:e4:5d:7f:18:0f:a0:a0:49:db:ca:fe:29:f1:f3:
18:67:a5:15:38:42:e4:d7:5f:6d:19:77:26:bb:32:
6b:9e:fa:4d:77:02:5b:f6:db:4b:ca:d5:99:3c:ed:
49:f3:74:7b:88:50:54:80:d7:7d:f4:90:96:0d:75:
d1:80:9d:fc:e7:0a:40:d0:07:b0:b3:d3:e8:0c:d4:
db:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:1B:BF:06:F3:02:AE:F8:24:05:69:3D:CD:BE:D4:A7:97:76:D6:64
X509v3 Authority Key Identifier:
keyid:94:0B:9E:18:EE:B0:94:D9:12:DE:B5:95:DC:7A:AC:86:61:B0:D6:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lAueGO6wlNkS3rWV3HqshmGw1sc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/8a707a-5ced-4c75-ae38-56596beed1c7/1/lAueGO6wlNkS3rWV3HqshmGw1sc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/8a707a-5ced-4c75-ae38-56596beed1c7/1/lAueGO6wlNkS3rWV3HqshmGw1sc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:dc:03:a6:20:c9:df:f4:00:2b:b1:e2:2b:a6:78:f1:e3:a7:
55:f2:ad:50:b2:0c:b7:08:e2:d4:9b:fd:33:34:dc:46:ff:3f:
fe:92:fc:f7:8e:39:3f:1e:a4:03:ce:d2:a2:3c:e7:94:ef:4d:
61:e6:8d:14:05:d3:7f:4f:d7:c3:01:ce:bd:3a:37:ae:5c:e2:
a2:ae:f3:60:78:a6:7d:96:04:51:e1:a7:fe:3c:54:67:0e:63:
47:10:88:48:88:7a:52:f9:92:38:c1:f1:cf:34:aa:97:59:f9:
41:e2:e7:6d:16:d6:cf:b6:51:2c:e6:8d:32:20:88:88:84:8e:
71:b4:f7:39:e6:42:83:bd:81:4a:eb:0f:31:8b:97:e7:a1:67:
0c:69:60:2f:a0:69:b7:39:51:ff:d4:23:2b:ac:30:2e:9c:ee:
78:4c:c6:a4:39:23:f0:ac:19:30:a2:fe:57:d8:1f:16:2b:17:
92:66:9a:71:a6:a3:05:cd:c4:69:8b:97:e6:c6:5d:84:ae:7a:
40:b1:3a:c3:d0:d4:fb:a6:02:a1:20:6e:71:6f:26:cf:55:be:
4d:f5:e2:30:2c:42:48:dd:24:91:f3:61:f5:da:9e:c0:6c:7c:
8a:3c:98:93:c8:08:ae:51:c0:c5:c9:05:d1:59:3a:5d:a1:67:
c6:69:98:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 21:32:49 2025 by rpki-client