Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/634172-bb37-4d82-88a2-942d2c6c5856/1/lbmAuBA5WB4NLDelEhbNeXKbDHE.mft
File: lbmAuBA5WB4NLDelEhbNeXKbDHE.mft (raw, json)
Hash identifier: ydZ3OiVwWVt6DmdZ2umoBQRcmIvGNWQBsVDJz9wGfQk=
Subject key identifier: 8F:8F:0F:A0:AF:A7:94:0E:DC:FE:43:98:A3:01:AE:04:72:04:FC:FB
Authority key identifier: 95:B9:80:B8:10:39:58:1E:0D:2C:37:A5:12:16:CD:79:72:9B:0C:71
Certificate issuer: /CN=95b980b81039581e0d2c37a51216cd79729b0c71
Certificate serial: 0194BC72B9B8E4E589F96734B6B8612740D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lbmAuBA5WB4NLDelEhbNeXKbDHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/634172-bb37-4d82-88a2-942d2c6c5856/1/lbmAuBA5WB4NLDelEhbNeXKbDHE.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 13:00:22 +0000
Manifest this update: Fri 31 Jan 2025 13:00:22 +0000
Manifest next update: Sat 01 Feb 2025 13:00:22 +0000
Files and hashes: 1: ANSAYrE9HNntD61TvEpJUmG8rgw.roa (hash: 4+iM21UqhAp7nE5c7mZKQw9TVqg+SMBpGm5UpV8V8dc=)
2: PJ5ra5RQEPuenhUZKqA-ySi8au4.roa (hash: HAE/ZYsuA8aESklvJ9Rn5+/ozrtEQRVx0jFM8lv6NbI=)
3: lbmAuBA5WB4NLDelEhbNeXKbDHE.crl (hash: cp73NaFENQCMHqS679brPl2qKcBqnC2y6F410RmZhys=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:b9:b8:e4:e5:89:f9:67:34:b6:b8:61:27:40:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95b980b81039581e0d2c37a51216cd79729b0c71
Validity
Not Before: Jan 31 13:00:22 2025 GMT
Not After : Feb 1 13:00:22 2025 GMT
Subject: CN=8f8f0fa0afa7940edcfe4398a301ae047204fcfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ab:d4:9f:54:48:9a:e2:8a:e5:7a:69:40:11:
25:10:dd:be:70:f3:5e:d2:2c:d6:34:34:d2:ab:86:
b6:ca:9e:d5:9d:8b:3d:09:74:86:9d:6f:98:11:58:
2e:2e:82:f2:a1:f3:57:64:dc:5b:6a:ad:22:2e:fd:
a5:be:18:4d:fa:65:1f:95:20:1b:34:0c:11:30:eb:
91:c5:b9:45:b3:60:e2:ae:7f:d2:a8:97:bb:1f:a9:
55:93:23:e1:8a:4f:d7:c9:f6:c6:e4:af:13:45:b0:
aa:20:76:c4:db:7e:21:99:56:32:e2:bd:ce:69:0e:
3f:1f:8e:c2:df:41:43:6d:98:60:68:26:46:12:76:
55:4c:f4:ae:30:1f:16:18:26:be:2f:e4:c5:54:7c:
62:3b:b5:a2:39:c8:f1:3e:63:5a:90:91:40:af:31:
1f:e9:b1:f0:7d:4f:e3:e0:f0:d6:84:f3:5f:38:ba:
51:1c:84:50:b8:ee:b6:33:d3:70:c8:f8:92:0d:d5:
6c:9e:2e:49:56:4d:82:7a:b6:86:ad:f8:a3:a3:b1:
d5:b8:04:af:98:16:e4:0b:78:db:5f:b7:e2:f8:fb:
77:fe:c2:d6:3c:46:4f:38:05:98:e7:85:03:2f:0b:
67:4d:02:8e:ac:20:31:84:1b:9e:5f:e1:af:da:31:
b3:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:8F:0F:A0:AF:A7:94:0E:DC:FE:43:98:A3:01:AE:04:72:04:FC:FB
X509v3 Authority Key Identifier:
keyid:95:B9:80:B8:10:39:58:1E:0D:2C:37:A5:12:16:CD:79:72:9B:0C:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lbmAuBA5WB4NLDelEhbNeXKbDHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/634172-bb37-4d82-88a2-942d2c6c5856/1/lbmAuBA5WB4NLDelEhbNeXKbDHE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/634172-bb37-4d82-88a2-942d2c6c5856/1/lbmAuBA5WB4NLDelEhbNeXKbDHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:9b:87:24:3c:7e:3f:fe:9e:19:fd:a4:5d:7d:83:79:be:78:
93:d2:9b:98:d9:65:4e:04:a8:5a:d7:24:87:40:7c:24:1c:01:
9b:d2:47:5e:59:41:17:b5:a4:13:b7:e0:f6:f5:af:ab:da:36:
41:fe:91:85:b6:55:fe:ef:0d:0d:92:87:f1:a8:2a:76:f8:69:
a3:a8:d8:63:3e:17:59:25:8a:f7:80:bf:76:38:67:97:f3:c7:
1f:f6:57:6e:7e:a9:89:90:21:c2:19:83:82:31:45:b8:3b:49:
86:2d:b5:e5:c2:11:2e:cb:e0:bb:fa:09:2b:9e:e8:25:95:5a:
21:cb:58:2b:73:37:bf:79:9f:fb:af:de:4a:f4:ef:5e:11:40:
1c:76:e2:6b:35:cd:52:8c:dc:1d:df:1d:8b:76:fc:42:3b:00:
88:33:74:51:5d:bb:71:54:38:bf:ef:74:7b:0f:20:0a:99:e0:
85:41:83:ef:67:23:14:f8:52:4a:60:92:27:95:42:28:cc:c8:
b8:07:a7:b7:c9:d2:4f:cd:e6:31:87:4a:1f:36:cd:e2:90:4d:
57:00:19:25:73:8d:ab:b5:ef:b3:6b:26:53:c0:b5:25:e4:fb:
92:3a:98:84:09:01:6d:cc:01:e3:0a:cd:b6:30:fb:47:7f:6a:
30:c9:b5:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:49:28 2025 by rpki-client