Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/9120cb-0b06-4861-b657-757838670948/1/lnc-nMl0MBp4t-5tmUUo8fiC5G8.mft
File: lnc-nMl0MBp4t-5tmUUo8fiC5G8.mft (raw, json)
Hash identifier: DacqphQqrMW98l7EOkcKxJ17Mp/b+4Sc2S/gtBCxFYw=
Subject key identifier: 4B:A2:88:DD:D3:41:F7:B8:5A:AC:9E:3E:55:D9:77:C6:75:66:5A:1F
Authority key identifier: 96:77:3E:9C:C9:74:30:1A:78:B7:EE:6D:99:45:28:F1:F8:82:E4:6F
Certificate issuer: /CN=96773e9cc974301a78b7ee6d994528f1f882e46f
Certificate serial: 0194BC04CE21789B20B5C188D89AA1494011
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lnc-nMl0MBp4t-5tmUUo8fiC5G8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/9120cb-0b06-4861-b657-757838670948/1/lnc-nMl0MBp4t-5tmUUo8fiC5G8.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 11:00:18 +0000
Manifest this update: Fri 31 Jan 2025 11:00:18 +0000
Manifest next update: Sat 01 Feb 2025 11:00:18 +0000
Files and hashes: 1: 6ApC-jHQIcJABZYGTnaj4cDWTZ0.roa (hash: mW6j44egYeyH1Rdwi9kE+w3aUg6boclFfelfnL+ZOCc=)
2: gnEe3OeabPYnBDM3IzIwqcZpMW8.roa (hash: VzRNxcBeLn35opHADGeiMTKNeQ/005lIREbbg/TGf9U=)
3: lnc-nMl0MBp4t-5tmUUo8fiC5G8.crl (hash: OdFG1BG+OjRPni1uF5y7/bac/rxRq5qXG9bBx3cQDUc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:ce:21:78:9b:20:b5:c1:88:d8:9a:a1:49:40:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96773e9cc974301a78b7ee6d994528f1f882e46f
Validity
Not Before: Jan 31 11:00:18 2025 GMT
Not After : Feb 1 11:00:18 2025 GMT
Subject: CN=4ba288ddd341f7b85aac9e3e55d977c675665a1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c5:b4:b7:18:43:f5:8e:6f:c9:d4:fb:1d:75:
66:cd:ed:e3:5d:1f:4e:c4:41:ec:01:db:21:d9:13:
05:ca:eb:2c:2a:9f:0f:ac:92:a3:6f:8f:74:21:7b:
74:4e:d7:11:68:61:c5:0d:1a:62:0c:98:25:39:ac:
91:2a:65:a3:88:29:1a:4a:3e:dc:cf:01:66:96:9c:
60:bb:91:af:e5:b4:30:4d:31:29:80:94:1d:b9:90:
7e:43:bc:cb:b9:63:6c:06:48:7a:5b:a4:1f:c4:e6:
9d:8f:05:e8:2a:1f:fc:bc:51:20:3b:1c:73:47:46:
f5:32:86:48:be:ac:75:ba:68:16:2e:a5:52:55:eb:
22:72:d2:24:b7:f1:4f:5f:02:05:5f:d5:d0:b3:c8:
f6:4b:bd:7f:03:10:70:5f:05:ed:82:18:38:69:d6:
a9:f8:be:af:cf:e1:cb:e3:49:9b:0f:9e:39:d6:7d:
47:bf:5a:82:61:30:66:eb:30:11:e0:2c:3b:bd:43:
1e:69:fb:23:4f:b1:ae:35:86:11:3a:8c:4a:5c:18:
92:6c:69:a0:d1:46:bf:f7:a1:82:a7:63:44:86:fd:
05:c1:d1:c0:37:7e:d3:37:02:15:da:43:d5:f9:4e:
26:c5:8a:1e:9c:aa:ae:b1:d7:cf:92:4c:ec:56:14:
81:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:A2:88:DD:D3:41:F7:B8:5A:AC:9E:3E:55:D9:77:C6:75:66:5A:1F
X509v3 Authority Key Identifier:
keyid:96:77:3E:9C:C9:74:30:1A:78:B7:EE:6D:99:45:28:F1:F8:82:E4:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lnc-nMl0MBp4t-5tmUUo8fiC5G8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/9120cb-0b06-4861-b657-757838670948/1/lnc-nMl0MBp4t-5tmUUo8fiC5G8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/9120cb-0b06-4861-b657-757838670948/1/lnc-nMl0MBp4t-5tmUUo8fiC5G8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:1c:b2:50:28:18:7a:ad:ff:a2:05:b7:b7:e9:1d:a6:65:ee:
92:08:45:74:d4:61:53:1b:c3:c8:d1:e6:da:09:2c:11:64:8e:
2d:b2:88:7f:b8:64:4c:54:ad:66:26:3d:f3:82:3d:ca:eb:83:
fa:9a:14:1a:3d:6b:c5:9e:ad:26:24:34:1d:41:6b:c8:cf:93:
70:77:3d:85:6c:d1:c5:bf:25:d2:13:4f:66:10:83:32:0a:87:
8d:51:c7:f2:63:6c:dd:0f:80:01:f0:78:89:e4:c5:d8:c7:2a:
34:d1:7f:42:d3:3b:ac:04:19:62:40:76:80:1d:be:d7:48:85:
20:d7:35:fa:b3:45:f9:d8:48:1d:00:7a:af:a8:76:61:04:de:
43:3c:ce:73:e8:93:84:8a:5d:69:b3:0b:5c:fe:52:3e:32:1a:
61:d6:f2:30:de:2f:d2:b7:6c:f6:47:3a:3a:56:eb:38:57:00:
57:a3:39:82:32:c9:2d:34:fa:cf:32:15:c1:41:c6:a2:7f:0e:
9f:06:f6:33:ff:fe:f9:72:47:89:42:a6:46:86:0b:f0:a3:87:
b5:65:2e:33:8e:8d:fb:ad:3a:af:80:b7:97:a5:46:73:f2:6c:
f2:6f:63:80:5e:05:2b:d6:36:fd:93:27:e4:84:2e:b1:23:8e:
a3:c9:83:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:57:17 2025 by rpki-client