Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/33bec5-6ad5-4e80-bf58-52ca2a9d514b/1/LkB-t2Tgg4VaJYEwjzQdW6fYskc.mft
File: LkB-t2Tgg4VaJYEwjzQdW6fYskc.mft (raw, json)
Hash identifier: lijHXzoxFq4VoejW0Jo1jrLAP2Bh9iNqqibDFtWC2mU=
Subject key identifier: AF:66:57:D5:C0:F2:EB:FC:32:73:5B:C5:70:83:DC:75:63:60:99:0E
Authority key identifier: 2E:40:7E:B7:64:E0:83:85:5A:25:81:30:8F:34:1D:5B:A7:D8:B2:47
Certificate issuer: /CN=2e407eb764e083855a2581308f341d5ba7d8b247
Certificate serial: 0194BC72A35FAF593EEBFCC5021C6FD5F488
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LkB-t2Tgg4VaJYEwjzQdW6fYskc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/33bec5-6ad5-4e80-bf58-52ca2a9d514b/1/LkB-t2Tgg4VaJYEwjzQdW6fYskc.mft
Manifest number: 03D5
Signing time: Fri 31 Jan 2025 13:00:16 +0000
Manifest this update: Fri 31 Jan 2025 13:00:16 +0000
Manifest next update: Sat 01 Feb 2025 13:00:16 +0000
Files and hashes: 1: LkB-t2Tgg4VaJYEwjzQdW6fYskc.crl (hash: ArSOPqoaW8Zui4M5szOrukbc7/o4HEUYknBwGeV/njE=)
2: r5qx5bv9vQTvcbqQmzIlloI4Pqo.roa (hash: M9wDMgC7kb97z4Tf7FppQBmD+yOsS5ArXp6NW17Hl7c=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:a3:5f:af:59:3e:eb:fc:c5:02:1c:6f:d5:f4:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e407eb764e083855a2581308f341d5ba7d8b247
Validity
Not Before: Jan 31 13:00:16 2025 GMT
Not After : Feb 1 13:00:16 2025 GMT
Subject: CN=af6657d5c0f2ebfc32735bc57083dc756360990e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:46:ac:a3:e9:f4:50:8c:53:d0:d9:3f:87:b6:
ea:89:f8:9e:07:e7:3f:cf:5a:c4:6b:7f:b3:6c:f8:
2e:45:8d:da:02:a6:44:d7:48:29:96:30:93:73:4c:
db:fb:6e:fe:0b:ed:bf:5c:86:33:74:6b:15:a1:8e:
d4:60:47:fb:ef:0c:b1:e4:23:4f:b2:42:67:e5:14:
f7:82:09:4e:5a:5a:d7:27:ab:6c:5d:38:70:e9:a2:
d9:f6:74:11:7e:1d:2e:67:d5:1c:a7:ab:cf:f7:a7:
bd:6c:29:27:73:be:b6:5c:c1:13:ef:34:04:fd:6f:
06:78:af:ae:ec:4c:03:72:2c:25:81:59:bc:7e:2d:
ef:7c:0a:66:1c:f8:51:fa:1c:d3:71:2e:36:bf:47:
a8:7b:ae:c2:8f:88:2b:d4:e0:a3:43:c6:0b:15:77:
b8:39:58:39:37:35:e1:92:86:ee:22:fa:1b:1c:6a:
51:a2:64:bc:26:09:54:5a:4e:74:38:a9:30:63:9c:
18:e3:34:c1:50:01:48:2c:c0:0e:2a:6e:89:0a:46:
89:4e:cb:12:32:ab:83:32:9e:e8:9d:44:7f:64:d9:
a3:d0:bf:d1:17:b3:9b:db:f0:27:f5:03:77:a9:dd:
31:cb:24:a9:5e:7a:51:85:7b:a2:e7:4f:86:b3:e6:
a9:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:66:57:D5:C0:F2:EB:FC:32:73:5B:C5:70:83:DC:75:63:60:99:0E
X509v3 Authority Key Identifier:
keyid:2E:40:7E:B7:64:E0:83:85:5A:25:81:30:8F:34:1D:5B:A7:D8:B2:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LkB-t2Tgg4VaJYEwjzQdW6fYskc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/33bec5-6ad5-4e80-bf58-52ca2a9d514b/1/LkB-t2Tgg4VaJYEwjzQdW6fYskc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/33bec5-6ad5-4e80-bf58-52ca2a9d514b/1/LkB-t2Tgg4VaJYEwjzQdW6fYskc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:cd:b2:e4:fb:2d:44:9a:30:37:9a:dd:9b:91:04:27:85:72:
68:cb:92:2a:b9:e4:8c:8c:9f:13:0f:7c:b9:b5:bb:97:75:15:
0a:b1:33:3d:90:5d:6a:3e:4f:97:e3:04:9e:24:cf:64:57:5b:
e1:5a:f7:a5:53:1c:80:94:5a:6e:eb:e0:36:fb:77:bc:5b:f1:
b6:98:23:26:69:0d:24:69:b8:cd:02:2b:11:2c:b5:22:81:7e:
1f:de:fc:dd:30:b5:16:fe:e1:e1:ff:8c:18:af:ed:27:a2:9e:
db:bd:9a:27:94:fb:f1:cf:39:73:ea:73:c9:4b:c5:18:c3:0e:
3f:79:d1:04:31:c6:7b:53:6e:b8:a1:0f:76:1a:12:f0:9c:6a:
d5:7e:6c:a6:2d:6f:b3:e5:fb:7a:18:ff:f1:e8:ad:e7:1d:84:
d1:52:58:9b:aa:62:04:a6:85:d6:05:40:ab:9f:38:83:5d:d0:
87:c3:db:71:6e:ac:ee:02:44:bb:ab:e0:3e:00:74:8a:62:47:
77:d2:74:28:81:67:51:e5:1d:9e:ec:6f:4c:0d:d9:0d:a7:61:
17:59:7f:24:8d:07:7a:10:93:8f:95:26:9c:35:1f:ee:60:97:
d9:1f:71:e5:2b:ba:49:d7:be:06:73:51:d2:34:5d:f1:49:94:
30:75:7c:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:25:19 2025 by rpki-client