Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/1fc627-a373-474d-bc7e-e2d846849482/1/LvuebXVm3--dXLmNkpy3AyPTifI.mft
File: LvuebXVm3--dXLmNkpy3AyPTifI.mft (raw, json)
Hash identifier: ReUekUrGRqbPEw+wBmRhOJSybVbWOo+6lhELLJFJHW4=
Subject key identifier: D7:2A:92:87:57:AA:F9:9E:B7:28:50:0E:B4:20:04:9B:D0:01:EC:88
Authority key identifier: 2E:FB:9E:6D:75:66:DF:EF:9D:5C:B9:8D:92:9C:B7:03:23:D3:89:F2
Certificate issuer: /CN=2efb9e6d7566dfef9d5cb98d929cb70323d389f2
Certificate serial: 0194BD85869A2C41E8926C8E4F54E2C37D92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LvuebXVm3--dXLmNkpy3AyPTifI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/1fc627-a373-474d-bc7e-e2d846849482/1/LvuebXVm3--dXLmNkpy3AyPTifI.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 18:00:32 +0000
Manifest this update: Fri 31 Jan 2025 18:00:32 +0000
Manifest next update: Sat 01 Feb 2025 18:00:32 +0000
Files and hashes: 1: LvuebXVm3--dXLmNkpy3AyPTifI.crl (hash: MCOc5CpHKB9zXnmkpnaAZSG7BGAA66au5Rmsti7EQs4=)
2: crLPMCLXufFmk5JWVKp5VcK8TgM.roa (hash: YNo5LlcmxdPpx/UYh+crxJHa+r1xiA2h5iT8bwm5x4Y=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:86:9a:2c:41:e8:92:6c:8e:4f:54:e2:c3:7d:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2efb9e6d7566dfef9d5cb98d929cb70323d389f2
Validity
Not Before: Jan 31 18:00:32 2025 GMT
Not After : Feb 1 18:00:32 2025 GMT
Subject: CN=d72a928757aaf99eb728500eb420049bd001ec88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:f0:d0:76:4c:ac:94:80:f3:09:53:bd:b3:8d:
78:e6:50:72:e5:28:18:01:34:ce:24:67:0e:7b:a1:
ec:cc:3d:16:44:f6:f4:28:40:71:17:06:ca:37:c7:
3f:b7:09:43:79:9d:8c:3e:c2:c3:e0:7b:fb:dd:a7:
9a:91:f3:8c:e8:e6:99:f8:ec:29:d0:6b:38:67:ab:
61:29:7d:88:1e:26:62:03:26:1f:a2:54:5f:48:88:
9c:2f:2d:a8:83:ae:af:bc:cc:ae:ac:25:65:09:7d:
df:05:aa:ae:07:09:f6:c8:c5:c3:ae:c1:69:35:04:
d7:4b:20:13:f6:be:21:8b:5d:0f:04:57:13:08:14:
63:dd:c1:b1:82:77:3f:5c:69:6c:c6:5a:da:29:f7:
0b:2d:43:55:22:22:33:59:ce:cd:e5:d2:b8:7f:cc:
ca:5a:60:2e:0a:b8:9d:90:1f:3e:ee:02:9e:d6:28:
5f:00:3a:ef:15:d1:8a:59:33:90:ab:63:1c:b1:3e:
84:86:ff:d3:24:24:07:67:44:63:7c:fa:d3:03:32:
f1:96:bc:2a:9b:be:76:3a:a1:2d:1d:b9:43:1f:e5:
13:0a:65:03:15:05:f5:ac:dc:88:39:70:43:53:5f:
db:c2:bd:eb:2b:26:df:63:69:91:6a:7d:37:dd:f2:
17:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:2A:92:87:57:AA:F9:9E:B7:28:50:0E:B4:20:04:9B:D0:01:EC:88
X509v3 Authority Key Identifier:
keyid:2E:FB:9E:6D:75:66:DF:EF:9D:5C:B9:8D:92:9C:B7:03:23:D3:89:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LvuebXVm3--dXLmNkpy3AyPTifI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/1fc627-a373-474d-bc7e-e2d846849482/1/LvuebXVm3--dXLmNkpy3AyPTifI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/1fc627-a373-474d-bc7e-e2d846849482/1/LvuebXVm3--dXLmNkpy3AyPTifI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:8a:2f:59:f1:0f:60:30:65:e2:de:8a:de:89:79:20:d4:c1:
22:26:70:de:92:5d:93:da:20:63:24:6f:1c:1c:a2:27:8d:cd:
5f:d0:8f:f9:3e:d7:77:03:ba:24:c5:b6:41:d7:11:69:cf:8f:
ce:0b:db:e8:42:b2:3f:2d:46:84:2d:c7:76:b0:60:43:00:ca:
b0:7b:1c:9b:9a:88:d2:cc:ec:bd:29:47:3a:d2:7a:e1:3e:ad:
dc:14:4e:c4:85:c5:26:47:e5:a5:53:dc:f7:8e:ea:96:6c:1d:
67:cf:b6:a4:f2:77:2b:af:2a:d4:d3:32:fa:bf:e2:07:eb:d0:
e9:70:dd:b3:c9:a7:8e:e3:e2:1b:66:5e:d0:76:ac:6d:ee:90:
e8:ea:ab:aa:63:f4:e6:0e:be:8e:06:3d:92:2c:bc:d8:de:51:
84:60:af:d8:af:0a:48:38:6d:22:62:68:30:46:73:15:9b:58:
fa:6f:22:c9:f6:9d:9b:d0:18:6d:dc:0f:2e:1c:8a:7b:9d:06:
be:c2:0a:9a:b6:c8:89:8d:bb:b9:02:3e:fc:f9:99:8c:35:6a:
b2:ee:ad:79:25:af:04:22:73:52:e0:fa:e0:cc:bb:f2:0d:a3:
af:4e:c0:46:d8:fb:c1:6c:94:77:23:af:64:55:23:38:c2:aa:
9b:74:32:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:40:18 2025 by rpki-client