Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/738188-73ae-4918-bfd7-7788aee1215f/1/LNH_SXJfYzHmO47XZEjXJd16hN4.mft
File: LNH_SXJfYzHmO47XZEjXJd16hN4.mft (raw, json)
Hash identifier: JyrBct655EGcmBP+Get7HgqVvVIWgSNPojct83dMEmE=
Subject key identifier: E3:54:B7:82:35:C1:C3:57:87:2E:28:CF:49:35:BB:DB:CC:E2:C9:68
Authority key identifier: 2C:D1:FF:49:72:5F:63:31:E6:3B:8E:D7:64:48:D7:25:DD:7A:84:DE
Certificate issuer: /CN=2cd1ff49725f6331e63b8ed76448d725dd7a84de
Certificate serial: 0194BCAA298E7E167BEAA06782B2BC1C0EB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LNH_SXJfYzHmO47XZEjXJd16hN4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/738188-73ae-4918-bfd7-7788aee1215f/1/LNH_SXJfYzHmO47XZEjXJd16hN4.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 14:00:55 +0000
Manifest this update: Fri 31 Jan 2025 14:00:55 +0000
Manifest next update: Sat 01 Feb 2025 14:00:55 +0000
Files and hashes: 1: LNH_SXJfYzHmO47XZEjXJd16hN4.crl (hash: i/M/T/lJY47kKhzRLRELLlYW56hXG2bcs7tZcCe3YHU=)
2: Upzwlv30c7TC3O9gxJ1kAAgNiDA.roa (hash: yTJNjXZ4BZhaMYBc9uxx4ckW86PF2pvOMSFidtmg0eA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:29:8e:7e:16:7b:ea:a0:67:82:b2:bc:1c:0e:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cd1ff49725f6331e63b8ed76448d725dd7a84de
Validity
Not Before: Jan 31 14:00:55 2025 GMT
Not After : Feb 1 14:00:55 2025 GMT
Subject: CN=e354b78235c1c357872e28cf4935bbdbcce2c968
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:be:c2:fe:d0:35:73:21:9e:f5:34:88:de:c2:
f5:4e:00:74:04:8f:80:1d:1b:db:b9:3c:21:d7:d1:
37:1e:54:c3:89:7f:97:05:47:7b:c5:3d:d2:07:84:
b3:3f:c1:77:42:6a:68:ed:9f:40:5f:d6:1e:af:eb:
a2:38:c3:2f:bb:3c:c1:82:30:f7:15:75:53:b0:01:
10:77:47:77:23:2e:fe:ba:e4:a9:f1:dc:7f:59:a7:
b6:25:7b:c2:dd:c4:7c:04:91:59:fc:bd:ce:ae:d0:
96:03:33:be:99:34:43:93:eb:9c:88:fa:dc:05:ad:
ce:2a:a5:6f:e2:58:ed:e6:76:aa:4b:52:f1:fd:29:
74:f9:7b:45:d7:0f:e1:0b:dd:a0:cb:f2:f4:ff:d5:
c6:76:24:ae:d1:cd:c4:30:b1:40:67:b3:7d:32:64:
d6:0a:4d:c2:47:c3:b6:0a:28:a6:dc:31:b7:d4:93:
26:3e:21:5a:38:7c:7f:b7:bd:4c:f8:39:6c:55:4e:
bd:ee:ec:93:c8:2a:07:e9:58:3a:af:7a:ef:48:02:
34:fb:54:a7:4c:c8:28:cd:45:e5:3e:e0:69:16:4c:
89:4e:44:44:78:ef:12:3b:44:22:62:21:b4:a9:f4:
83:f5:4e:87:04:90:aa:bb:5b:01:9b:ec:78:ff:e3:
b3:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:54:B7:82:35:C1:C3:57:87:2E:28:CF:49:35:BB:DB:CC:E2:C9:68
X509v3 Authority Key Identifier:
keyid:2C:D1:FF:49:72:5F:63:31:E6:3B:8E:D7:64:48:D7:25:DD:7A:84:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LNH_SXJfYzHmO47XZEjXJd16hN4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/738188-73ae-4918-bfd7-7788aee1215f/1/LNH_SXJfYzHmO47XZEjXJd16hN4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/738188-73ae-4918-bfd7-7788aee1215f/1/LNH_SXJfYzHmO47XZEjXJd16hN4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:c0:5c:0a:8a:c1:05:ab:9c:f2:62:73:7c:04:4c:40:96:6a:
83:73:35:3c:de:8e:fb:80:64:60:5b:9d:1f:fd:45:7b:1e:01:
97:28:f9:f1:eb:98:c4:3a:67:d7:a6:10:f3:b7:0a:90:29:20:
e7:dc:32:bd:19:a2:79:09:3b:3a:d3:da:d6:ed:6e:1a:b9:0f:
6a:eb:e1:c1:ce:72:3e:08:7c:1a:25:dd:a5:91:83:8a:8e:78:
a2:1f:81:4b:7d:c0:c9:f2:b7:94:a7:27:f2:44:f7:e5:36:23:
b7:4d:d6:7d:92:78:52:2b:53:b5:f4:e0:84:18:17:17:63:d9:
2c:30:92:dd:b4:4d:4d:87:22:f7:b5:ae:f3:48:c1:be:b6:8e:
58:0f:ff:fd:ff:15:a8:5a:19:12:d0:60:65:00:86:fa:9f:52:
4d:9f:3a:41:ac:f0:17:5e:b1:36:7f:f0:11:fe:e1:29:48:98:
b8:dd:46:11:49:fc:61:76:75:f2:9f:61:ab:2c:e2:83:df:f1:
d7:51:d0:41:ab:01:a8:da:16:d5:f1:ed:3c:4b:d6:64:af:c3:
7f:97:a3:06:ea:98:78:fa:74:e6:ea:1b:e2:42:bf:25:45:a7:
1a:26:ef:cd:d5:20:36:bf:62:37:6d:67:25:cb:ee:69:f9:21:
8e:ec:9f:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:58:55 2025 by rpki-client