Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/567876-8d17-46c6-8cdd-4b843e9d04f8/1/LuKffz-qSKlAq42iErSxEWiD8nM.mft
File: LuKffz-qSKlAq42iErSxEWiD8nM.mft (raw, json)
Hash identifier: toFQv+z6FyR636ZtYMgqs8cmLiSE9hOLpOeMT3d7MLU=
Subject key identifier: 49:CB:F5:1D:5D:B8:0E:B5:90:12:0A:52:84:66:D8:BA:E0:13:99:85
Authority key identifier: 2E:E2:9F:7F:3F:AA:48:A9:40:AB:8D:A2:12:B4:B1:11:68:83:F2:73
Certificate issuer: /CN=2ee29f7f3faa48a940ab8da212b4b1116883f273
Certificate serial: 0194BCA9DF9E262C9A6E71A8A67720BE8362
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LuKffz-qSKlAq42iErSxEWiD8nM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/567876-8d17-46c6-8cdd-4b843e9d04f8/1/LuKffz-qSKlAq42iErSxEWiD8nM.mft
Manifest number: 142E
Signing time: Fri 31 Jan 2025 14:00:36 +0000
Manifest this update: Fri 31 Jan 2025 14:00:36 +0000
Manifest next update: Sat 01 Feb 2025 14:00:36 +0000
Files and hashes: 1: LuKffz-qSKlAq42iErSxEWiD8nM.crl (hash: L1ZBVBX6GVYneM/IPfctjCJswtE6CjptyKOPJKwdARE=)
2: YnocbPb6eCTl7D0AAtuW-w6T8XI.roa (hash: 0/3lBvSnn24lW/dA1E4Lwb6/p+92YZin4bwE+8xDWMc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:df:9e:26:2c:9a:6e:71:a8:a6:77:20:be:83:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ee29f7f3faa48a940ab8da212b4b1116883f273
Validity
Not Before: Jan 31 14:00:36 2025 GMT
Not After : Feb 1 14:00:36 2025 GMT
Subject: CN=49cbf51d5db80eb590120a528466d8bae0139985
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:b1:d4:fd:e8:b6:70:af:4c:e3:78:58:e2:84:
ce:32:43:5b:b7:5c:9f:8e:b4:99:c0:60:bc:ca:a7:
8c:6a:db:88:45:83:0c:c2:b2:b4:84:89:1e:f2:91:
b0:90:79:01:db:87:46:1e:1f:0f:2c:59:67:83:f9:
90:ee:4c:6a:83:f1:91:15:bf:08:61:6d:97:c2:a6:
69:f9:ed:55:36:42:b2:a2:30:0d:b6:36:57:ed:2b:
86:a3:34:6f:1d:eb:b4:10:7e:ab:13:aa:29:f4:7f:
f3:c7:e9:d2:0b:e5:f0:14:55:2b:3d:60:1e:19:eb:
d2:d1:12:9f:50:f5:b3:88:aa:c7:7e:12:e6:36:65:
67:26:fc:66:45:97:7d:d4:55:53:b0:cf:1e:8e:52:
18:54:db:7f:84:7b:a2:9a:82:0d:97:e3:80:6d:a0:
1d:37:ca:d9:68:83:5f:1b:8e:8d:80:9d:9a:b3:74:
95:42:cc:98:99:ba:de:9f:77:e4:a1:e0:8a:ee:82:
c1:8e:ea:c0:aa:39:8c:e9:f7:31:4f:6e:9d:b3:ad:
56:41:bb:d3:3e:af:c8:6a:c6:2e:17:6b:4f:10:b2:
72:af:95:5e:41:a0:4d:4f:ca:0b:24:c0:47:ab:5d:
f7:f0:c7:91:b0:1d:44:55:82:3e:94:c2:8f:48:71:
e1:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:CB:F5:1D:5D:B8:0E:B5:90:12:0A:52:84:66:D8:BA:E0:13:99:85
X509v3 Authority Key Identifier:
keyid:2E:E2:9F:7F:3F:AA:48:A9:40:AB:8D:A2:12:B4:B1:11:68:83:F2:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LuKffz-qSKlAq42iErSxEWiD8nM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/567876-8d17-46c6-8cdd-4b843e9d04f8/1/LuKffz-qSKlAq42iErSxEWiD8nM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/567876-8d17-46c6-8cdd-4b843e9d04f8/1/LuKffz-qSKlAq42iErSxEWiD8nM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:39:fd:b7:28:32:83:20:19:f0:3a:f5:ec:ae:bd:25:60:0e:
a4:50:15:39:3a:61:a5:e5:82:4f:01:5c:32:88:83:ac:13:76:
e2:9a:38:94:48:6e:8e:ac:8d:df:8c:eb:53:04:39:f1:bc:c7:
42:4e:3c:31:fa:34:13:a9:54:01:3a:db:8e:77:81:71:02:24:
08:32:60:2c:ae:97:8b:44:bf:4a:ea:9d:e6:f8:8c:e3:c2:22:
0c:23:cf:7c:d4:8c:09:fe:76:bf:e7:bd:92:5e:04:eb:90:f4:
f0:1c:32:01:f1:a3:30:e4:f3:4d:0f:39:1d:c0:2d:00:20:79:
9e:be:17:fa:e6:26:c8:f1:f0:5c:08:40:39:d5:15:e3:5c:a0:
1d:85:14:6b:d3:fd:47:92:29:65:ba:43:3f:a5:0c:33:76:d5:
e4:3c:85:f4:e8:7a:a9:e8:25:aa:3a:b0:e3:29:56:30:a1:f8:
f7:f9:50:9c:51:10:43:7a:3b:52:26:77:39:f3:53:fd:7a:5c:
66:c9:0f:70:a1:27:1b:54:ed:8a:a0:40:19:1f:72:0b:98:84:
14:cb:f6:1d:7a:2e:a0:11:9d:e6:c6:74:c8:f8:88:e2:69:ff:
f6:0f:0e:bd:63:04:c1:3f:3a:8b:ad:9c:6d:04:88:1f:ea:89:
e9:79:46:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:37:31 2025 by rpki-client