Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/06be8f-a265-426a-aa0a-e479c6b9ff2b/1/Lmfz5OGXer6YzLIMoa-oWPHmaBw.mft
File: Lmfz5OGXer6YzLIMoa-oWPHmaBw.mft (raw, json)
Hash identifier: gJUTlmvReBOh4+cZson10sbwqmH4k1dKjm+TqwkQmbU=
Subject key identifier: 1D:51:32:E7:90:8A:5B:18:53:1F:40:0A:D3:9F:29:49:62:59:F3:15
Authority key identifier: 2E:67:F3:E4:E1:97:7A:BE:98:CC:B2:0C:A1:AF:A8:58:F1:E6:68:1C
Certificate issuer: /CN=2e67f3e4e1977abe98ccb20ca1afa858f1e6681c
Certificate serial: 0194BD859A037FD577C0889A61BE5DCF5F29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lmfz5OGXer6YzLIMoa-oWPHmaBw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/06be8f-a265-426a-aa0a-e479c6b9ff2b/1/Lmfz5OGXer6YzLIMoa-oWPHmaBw.mft
Manifest number: 13FF
Signing time: Fri 31 Jan 2025 18:00:36 +0000
Manifest this update: Fri 31 Jan 2025 18:00:36 +0000
Manifest next update: Sat 01 Feb 2025 18:00:36 +0000
Files and hashes: 1: Lmfz5OGXer6YzLIMoa-oWPHmaBw.crl (hash: CJ1zL+F9GNbzfb2KmcbJpf9nLKntfaBvIcYfey0LH3Q=)
2: M21MDqZhLpMUHwm9053y5X5hUu4.roa (hash: SYGPLAqkM4uXfmWggV4XyNi06NaAyivAORW2HClwZBk=)
3: nXQPLiO12M3Y_MzU88OuVYMZ5_U.roa (hash: T3shL01w4f9E1vbhrlXsqoTnaDV8nANG2xjOAb2Kx6E=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:9a:03:7f:d5:77:c0:88:9a:61:be:5d:cf:5f:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e67f3e4e1977abe98ccb20ca1afa858f1e6681c
Validity
Not Before: Jan 31 18:00:36 2025 GMT
Not After : Feb 1 18:00:36 2025 GMT
Subject: CN=1d5132e7908a5b18531f400ad39f29496259f315
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:e7:61:e8:59:3c:04:15:de:db:2e:f8:2a:db:
8a:99:9e:d1:2e:43:64:96:83:12:3a:93:28:a8:05:
47:b1:f5:f9:01:5e:4a:67:57:31:08:27:cb:98:38:
e4:b1:0e:34:36:34:0e:d2:69:0a:67:31:fe:0e:2b:
fe:73:9a:e7:79:af:3f:99:48:15:5f:f1:b1:05:5e:
6b:4e:39:76:81:bc:a6:47:b4:5f:a5:17:39:07:ae:
cc:78:70:17:ba:c2:aa:a1:3e:e3:c5:6c:d4:4d:d2:
b8:60:62:f9:22:3e:81:da:ac:55:df:5b:07:de:0f:
62:93:ea:c3:be:d7:90:1e:e9:d2:36:83:c7:0d:14:
20:e2:c7:77:7e:77:3b:7c:20:81:44:54:80:4d:33:
06:05:1f:94:5f:71:27:a1:48:69:99:6c:65:29:54:
3f:80:a6:ed:94:51:bf:a0:29:70:43:3f:a1:91:1e:
8e:e9:79:05:b9:09:1d:86:e6:9f:68:64:b5:1d:27:
17:9c:75:67:72:b0:a0:92:a3:45:96:fb:a3:a4:67:
4d:c2:f8:79:7b:e6:2b:3c:ad:60:f9:d5:20:5a:b5:
96:c7:0c:24:31:50:41:55:f2:04:f3:09:35:83:b3:
79:76:10:aa:e8:9d:13:26:52:76:0d:5b:22:7a:a2:
68:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:51:32:E7:90:8A:5B:18:53:1F:40:0A:D3:9F:29:49:62:59:F3:15
X509v3 Authority Key Identifier:
keyid:2E:67:F3:E4:E1:97:7A:BE:98:CC:B2:0C:A1:AF:A8:58:F1:E6:68:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lmfz5OGXer6YzLIMoa-oWPHmaBw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/06be8f-a265-426a-aa0a-e479c6b9ff2b/1/Lmfz5OGXer6YzLIMoa-oWPHmaBw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/06be8f-a265-426a-aa0a-e479c6b9ff2b/1/Lmfz5OGXer6YzLIMoa-oWPHmaBw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:1b:4c:f6:72:65:bb:af:b5:d5:63:1e:f4:10:e0:20:8a:1e:
1e:ef:8d:94:d7:e3:8b:be:1e:48:cc:61:d4:b2:e7:06:d7:a8:
23:1f:87:9f:6f:12:34:b6:3d:02:e3:1d:b0:23:f9:32:3b:4c:
dc:64:07:a1:ac:46:b8:31:fc:25:1d:18:0b:48:9b:57:5f:13:
64:13:25:47:58:ab:e3:f7:19:ff:5c:a3:21:07:e9:fd:8a:0a:
26:46:95:aa:bb:c0:43:a5:05:d9:98:0f:9e:1c:5b:33:45:e0:
f8:a0:d0:cc:83:d5:02:29:4e:1e:92:b2:7b:d3:88:57:88:a2:
89:5e:64:13:3b:fe:85:b3:3f:f8:99:bd:5c:2c:e5:ce:8e:71:
71:45:f2:75:e1:d0:cc:75:3c:5b:9b:12:23:4e:4a:44:b5:05:
b1:9a:3c:03:67:6d:dd:c4:7a:6f:a1:8e:c1:bb:03:a6:b5:ee:
8e:8e:cc:67:db:d5:e8:ce:ca:61:5d:0d:de:50:37:77:fc:f4:
4c:59:33:0e:73:bb:91:9a:02:bf:a5:ca:0b:a7:76:b6:b3:1c:
d2:c7:62:ca:76:c1:46:af:fc:27:6f:06:36:48:6a:34:00:97:
8c:af:cd:77:30:29:00:5c:b1:f1:c2:fb:d1:f9:00:5e:0d:2f:
6d:3e:24:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:28:15 2025 by rpki-client