Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/bfbc8e-eab5-4f20-8eea-96bf143eb452/1/LiSXk-WSSp8l86Co3ZlLN065N9I.mft
File: LiSXk-WSSp8l86Co3ZlLN065N9I.mft (raw, json)
Hash identifier: qX/Q1szZKtSMdRq1cVcfRZyBx8g58HLL56NxueNTwsA=
Subject key identifier: CA:19:C6:30:8F:E8:8C:77:F0:F2:5D:D5:B8:06:FD:90:A6:37:FB:21
Authority key identifier: 2E:24:97:93:E5:92:4A:9F:25:F3:A0:A8:DD:99:4B:37:4E:B9:37:D2
Certificate issuer: /CN=2e249793e5924a9f25f3a0a8dd994b374eb937d2
Certificate serial: 0194BBCE90C7765FBA3B860E941FD3958771
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LiSXk-WSSp8l86Co3ZlLN065N9I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/bfbc8e-eab5-4f20-8eea-96bf143eb452/1/LiSXk-WSSp8l86Co3ZlLN065N9I.mft
Manifest number: 1402
Signing time: Fri 31 Jan 2025 10:01:04 +0000
Manifest this update: Fri 31 Jan 2025 10:01:04 +0000
Manifest next update: Sat 01 Feb 2025 10:01:04 +0000
Files and hashes: 1: FP9KPtAPudwifvNA1yXNkNCFOFY.roa (hash: ocGzp/8Fhd1lCI2svcm4GtNlcaUMkqz9rj4sgodMzFo=)
2: LiSXk-WSSp8l86Co3ZlLN065N9I.crl (hash: YqMSc+Y4UgLRGjp4mTeNIdOw0KPBiitnI+5rqcsnhhM=)
3: gzJT4-cX5kiA_JxRqpqJmyeN7rM.roa (hash: j7soth2EwPp+uzVpjpNq3DRnu+ZloTBjkFjkTsLwX1c=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:90:c7:76:5f:ba:3b:86:0e:94:1f:d3:95:87:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e249793e5924a9f25f3a0a8dd994b374eb937d2
Validity
Not Before: Jan 31 10:01:04 2025 GMT
Not After : Feb 1 10:01:04 2025 GMT
Subject: CN=ca19c6308fe88c77f0f25dd5b806fd90a637fb21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:1d:b9:37:de:01:d1:c7:a6:2d:0d:17:e9:b1:
f0:e9:41:68:d1:dd:ed:72:e6:bb:6c:16:e9:ff:eb:
d7:c9:be:93:49:c8:f3:7b:c5:78:9b:cf:c7:51:d3:
d4:3a:b3:19:8b:2e:19:ac:08:e9:8d:1d:7b:ee:20:
e7:67:78:6e:27:bd:f0:f8:ab:84:00:01:2d:55:fc:
64:d4:51:1e:fd:8a:81:f1:6a:c3:16:57:73:d4:b2:
c7:64:5e:7d:67:3d:17:3b:1d:02:9b:0b:ad:7d:3c:
82:c4:d7:f3:d0:e7:aa:bb:bb:58:9e:57:f3:60:bf:
70:1b:2e:02:43:f2:fd:52:29:d7:5b:73:7a:b5:71:
36:04:0f:08:b4:95:70:14:6c:a4:99:74:9b:b8:95:
98:82:a4:fe:f5:28:c9:32:2d:df:f2:21:f2:c6:06:
75:14:61:f0:44:f9:83:c0:3d:d0:e7:09:ff:ef:b5:
c2:46:e7:76:c0:11:30:1b:c2:9d:01:82:fc:78:72:
10:7a:86:57:dd:e3:af:a8:db:81:df:94:3f:0b:af:
4b:c0:d9:fc:f8:5f:e2:07:01:fe:3a:e9:97:e7:fc:
41:65:55:28:99:6c:fa:75:80:32:8a:bd:36:8d:f5:
18:40:98:26:9e:61:4a:c4:bb:99:47:15:0f:ce:66:
bd:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:19:C6:30:8F:E8:8C:77:F0:F2:5D:D5:B8:06:FD:90:A6:37:FB:21
X509v3 Authority Key Identifier:
keyid:2E:24:97:93:E5:92:4A:9F:25:F3:A0:A8:DD:99:4B:37:4E:B9:37:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LiSXk-WSSp8l86Co3ZlLN065N9I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/bfbc8e-eab5-4f20-8eea-96bf143eb452/1/LiSXk-WSSp8l86Co3ZlLN065N9I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/bfbc8e-eab5-4f20-8eea-96bf143eb452/1/LiSXk-WSSp8l86Co3ZlLN065N9I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:61:16:72:50:4a:f3:a2:a0:3c:6a:a0:a7:1a:4f:47:49:f4:
b4:36:0d:81:2a:7e:be:8c:ed:53:37:5f:4d:bb:bc:a1:3c:6b:
53:83:d9:ee:f2:58:9f:fa:b0:73:93:8c:fe:c9:d2:b8:fb:8a:
0f:5a:a6:c1:dc:7a:6c:2e:61:ef:4e:8b:fe:c2:40:2d:30:79:
9c:d7:a6:71:59:dd:6b:76:a5:24:98:91:58:be:c4:d4:94:8d:
5f:e6:ff:ee:da:e2:ce:4f:e5:4a:e9:24:99:8d:fd:c8:de:26:
c3:f0:6e:75:94:8f:00:dd:28:72:7c:c8:b4:3f:97:64:f7:c2:
7f:29:4e:3b:d4:36:a9:d1:b5:cd:4b:34:fa:47:10:14:3e:51:
b4:05:5e:e5:50:53:0a:9d:4d:c4:5a:d2:06:0a:6d:f1:6e:a0:
56:32:02:35:08:7b:25:a5:28:39:13:d0:bb:d9:be:43:cc:d4:
f9:52:65:90:b6:0a:1a:ac:e0:17:6d:10:87:46:9f:4f:17:50:
86:24:c0:7c:ef:16:d7:51:e1:c5:e5:cf:16:fc:94:79:2c:5f:
21:47:6b:f4:63:9e:b7:37:84:2f:22:bb:f0:84:84:41:f3:d3:
9e:1e:ca:ee:94:7b:40:ce:2d:86:05:e2:ba:d5:bd:b1:93:93:
5a:4d:12:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:28:51 2025 by rpki-client