Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/bf3eca-171f-401c-9b5d-ccc4f1e00990/1/LHJ9Cfuxmn-YXXUaIDEcG61LBx8.mft
File: LHJ9Cfuxmn-YXXUaIDEcG61LBx8.mft (raw, json)
Hash identifier: rbDjrM8Q4Lh/p03mh4HLF3lXrEHuwAPTAYuM0MKs7mY=
Subject key identifier: E1:04:A1:D6:2D:13:2F:5F:A8:00:4A:4F:5D:19:5D:9D:50:27:80:BD
Authority key identifier: 2C:72:7D:09:FB:B1:9A:7F:98:5D:75:1A:20:31:1C:1B:AD:4B:07:1F
Certificate issuer: /CN=2c727d09fbb19a7f985d751a20311c1bad4b071f
Certificate serial: 0194BC3C8E538529CCAE30A021F1E4AEA847
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LHJ9Cfuxmn-YXXUaIDEcG61LBx8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/bf3eca-171f-401c-9b5d-ccc4f1e00990/1/LHJ9Cfuxmn-YXXUaIDEcG61LBx8.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 12:01:12 +0000
Manifest this update: Fri 31 Jan 2025 12:01:12 +0000
Manifest next update: Sat 01 Feb 2025 12:01:12 +0000
Files and hashes: 1: 9phsu2p4WF8NqnfUkSWWdnt6zzA.roa (hash: f41MILFdl6rcNDj7+ORCxwVOJlnjfxd2bAX97uHKrtw=)
2: LHJ9Cfuxmn-YXXUaIDEcG61LBx8.crl (hash: 8YlFfUCU21y00DcsoJlHKLz2YKisVUr9qMC61Ntqzy0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:8e:53:85:29:cc:ae:30:a0:21:f1:e4:ae:a8:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c727d09fbb19a7f985d751a20311c1bad4b071f
Validity
Not Before: Jan 31 12:01:12 2025 GMT
Not After : Feb 1 12:01:12 2025 GMT
Subject: CN=e104a1d62d132f5fa8004a4f5d195d9d502780bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:82:91:75:9f:e3:7e:4b:7e:f9:3c:05:d6:cd:
f0:02:1a:78:52:15:81:e1:90:fe:e8:85:fb:b6:3e:
b9:24:f2:82:fd:22:2b:b3:8e:6d:4e:7e:a2:66:0a:
c7:d6:1c:3f:80:f1:17:dc:6e:61:0f:49:6f:04:95:
e1:61:ea:64:dc:20:41:40:88:56:71:70:f3:38:80:
84:e1:14:7b:7e:05:83:d3:94:6c:fa:7b:ce:5e:c8:
0b:a7:23:c3:27:8f:95:3e:6e:7d:43:55:f4:9b:d4:
13:75:a1:75:71:4d:05:8b:54:b5:2a:12:b0:89:66:
20:a8:fc:81:83:ed:09:1a:9e:91:bc:9c:fc:86:8d:
37:ad:90:57:9d:36:8d:65:52:d4:10:53:fb:7f:79:
a6:8d:69:c3:c6:9d:f5:c2:03:fb:64:12:3e:17:e9:
09:76:4d:a1:8a:ac:00:a4:0b:bd:fe:5f:40:ce:3d:
70:12:0f:2d:58:0d:2f:73:50:85:b2:99:c7:41:e9:
f9:83:a9:31:69:11:98:be:78:85:e2:b7:2c:3a:96:
86:4d:6f:7b:6a:b4:0f:9f:71:85:b5:6d:c8:26:0d:
12:da:92:29:1a:a5:6a:ba:74:68:84:35:31:f3:e6:
cd:ba:97:32:32:1d:c9:c4:63:58:9f:08:77:6b:c8:
3a:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:04:A1:D6:2D:13:2F:5F:A8:00:4A:4F:5D:19:5D:9D:50:27:80:BD
X509v3 Authority Key Identifier:
keyid:2C:72:7D:09:FB:B1:9A:7F:98:5D:75:1A:20:31:1C:1B:AD:4B:07:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LHJ9Cfuxmn-YXXUaIDEcG61LBx8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/bf3eca-171f-401c-9b5d-ccc4f1e00990/1/LHJ9Cfuxmn-YXXUaIDEcG61LBx8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/bf3eca-171f-401c-9b5d-ccc4f1e00990/1/LHJ9Cfuxmn-YXXUaIDEcG61LBx8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:d8:ef:70:51:83:52:81:e6:53:09:9a:d9:8e:5d:37:9b:85:
b3:77:d9:4a:02:83:18:1c:04:2a:0a:00:1c:7d:a6:f3:c4:66:
27:76:41:36:cb:31:72:57:c5:a1:51:4d:fa:c4:78:e0:77:ac:
a7:4c:cf:82:58:09:80:13:b6:12:1e:f1:bf:81:67:1d:24:74:
9c:65:88:50:25:ae:80:ea:b9:7b:a1:bf:42:ab:3d:9b:1f:9d:
fc:7e:1b:e1:82:ab:7f:e7:c1:6b:cd:5d:2c:be:a0:72:62:78:
63:a3:01:f8:66:e7:41:50:c1:f4:b2:de:99:4e:dc:92:dc:0b:
f9:23:8d:03:81:cd:3e:aa:e4:47:8b:d0:40:d5:3e:15:45:a3:
9d:88:9b:e1:29:62:7e:71:e9:43:a5:8c:b5:6e:fa:77:92:34:
9d:6a:19:05:92:05:be:97:43:58:02:fb:c3:aa:be:55:45:64:
87:e8:44:22:dd:7b:af:92:c3:a6:a7:1c:71:1f:9f:5a:55:e0:
bf:c0:4a:f8:e1:d0:b8:41:b4:bb:fc:68:b7:9e:1f:26:8b:3a:
45:e6:75:bc:eb:ca:cd:f9:31:86:12:95:07:cd:85:95:f5:42:
76:e8:60:18:04:2b:bc:ef:ea:63:44:52:ec:08:19:c3:d6:b9:
0a:d2:f6:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:25:05 2025 by rpki-client