Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/064e35-8814-43f6-b48b-a26de313b34d/1/LYaVbM1-OrtCkd1U29i0NCv5V8w.mft
File: LYaVbM1-OrtCkd1U29i0NCv5V8w.mft (raw, json)
Hash identifier: jLXnY1rovSIO3n2Ijt6RTkjAFDIi585tp3wa7SOd5pA=
Subject key identifier: 06:EA:26:1F:E1:AD:AB:61:25:4D:C3:D2:F9:FA:AB:F0:84:51:1E:EC
Authority key identifier: 2D:86:95:6C:CD:7E:3A:BB:42:91:DD:54:DB:D8:B4:34:2B:F9:57:CC
Certificate issuer: /CN=2d86956ccd7e3abb4291dd54dbd8b4342bf957cc
Certificate serial: 0194BC72CDE8DFC6E8236173669B4C3B9245
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LYaVbM1-OrtCkd1U29i0NCv5V8w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/064e35-8814-43f6-b48b-a26de313b34d/1/LYaVbM1-OrtCkd1U29i0NCv5V8w.mft
Manifest number: 142E
Signing time: Fri 31 Jan 2025 13:00:27 +0000
Manifest this update: Fri 31 Jan 2025 13:00:27 +0000
Manifest next update: Sat 01 Feb 2025 13:00:27 +0000
Files and hashes: 1: ClcfyiciZMtdgpDBHSxNZ8_ZF9c.roa (hash: dOAWbp1/aTClUEGzmi/WNAdZr626HfWjPgvNWe2YweQ=)
2: LYaVbM1-OrtCkd1U29i0NCv5V8w.crl (hash: wfSCXonIe+dqaiANpiMiVL9Cy62nVmdCnaA9SsldecQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:cd:e8:df:c6:e8:23:61:73:66:9b:4c:3b:92:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d86956ccd7e3abb4291dd54dbd8b4342bf957cc
Validity
Not Before: Jan 31 13:00:27 2025 GMT
Not After : Feb 1 13:00:27 2025 GMT
Subject: CN=06ea261fe1adab61254dc3d2f9faabf084511eec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:92:4a:26:8c:65:c2:56:02:4d:9b:32:75:21:
e9:da:6c:9f:5d:6b:89:4d:28:7d:f2:00:79:7f:f5:
00:59:a6:09:91:60:f0:f2:ff:57:0c:7e:87:14:64:
d1:2a:4e:4b:b8:90:b4:90:0c:4d:3d:74:ae:84:4e:
96:60:62:61:09:2d:bc:fe:da:ac:ef:18:33:d7:bc:
4c:1c:a9:f3:96:69:8c:54:03:d9:01:49:3e:33:b7:
0b:8a:ee:ff:8d:4a:9e:d4:50:62:a5:eb:eb:1d:74:
ea:b8:dd:b6:65:3b:cb:73:af:36:2c:69:80:8d:c6:
df:e8:9b:a4:c6:33:b0:e8:92:ce:81:44:8d:81:bf:
8d:54:18:84:e9:bc:e3:8e:57:39:92:12:ce:15:18:
9d:b3:c8:e1:d7:b5:fb:3c:3d:5c:13:9a:db:f7:9e:
1f:d5:42:d7:8b:0d:a8:23:da:8b:4b:ea:5e:bf:1b:
2f:6c:96:b0:b8:37:c6:0f:61:81:a5:b5:15:31:7d:
0d:f8:10:2c:56:e2:6b:2b:3d:f8:31:c4:b5:16:b6:
ea:0c:72:a5:e4:3e:7b:53:5d:60:64:c6:12:b3:28:
7b:f1:cb:c6:22:ff:42:91:b9:c3:a5:0b:6a:7b:45:
27:e6:88:a1:12:52:ab:de:20:a9:07:07:e2:48:99:
3e:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:EA:26:1F:E1:AD:AB:61:25:4D:C3:D2:F9:FA:AB:F0:84:51:1E:EC
X509v3 Authority Key Identifier:
keyid:2D:86:95:6C:CD:7E:3A:BB:42:91:DD:54:DB:D8:B4:34:2B:F9:57:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LYaVbM1-OrtCkd1U29i0NCv5V8w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/064e35-8814-43f6-b48b-a26de313b34d/1/LYaVbM1-OrtCkd1U29i0NCv5V8w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/064e35-8814-43f6-b48b-a26de313b34d/1/LYaVbM1-OrtCkd1U29i0NCv5V8w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:28:e1:21:53:2b:cd:28:a9:b6:3d:e9:7e:0e:14:30:80:bb:
3a:71:8e:f9:f9:6c:04:78:38:4a:2c:41:7f:9b:ef:69:64:ac:
ad:aa:a5:e5:69:fa:b8:59:30:cc:47:ba:cb:1b:6c:ed:a7:70:
ea:f8:85:16:da:6a:40:f0:bf:74:20:7a:8d:30:ec:1b:27:0f:
a5:44:e1:b1:2a:cf:7b:81:26:4c:b7:2c:c5:70:07:b0:ab:12:
a8:6d:1e:af:53:0f:d2:c5:c1:0a:e5:17:0d:7c:77:54:71:04:
45:5e:5d:40:ec:68:ca:1a:44:2e:66:52:e2:bc:24:27:93:fa:
5c:d4:37:ca:36:95:b4:b9:23:6b:39:02:f9:aa:62:0c:cf:f1:
2f:9b:02:58:5f:6b:1d:79:8a:2d:e3:24:35:47:3e:bc:57:25:
c8:f0:6e:b6:66:46:e1:d6:c6:ba:2a:3c:53:f4:0f:e6:f2:60:
c8:70:da:40:71:08:00:dd:b5:97:6a:5e:8b:3f:b1:0a:a5:11:
bd:34:8c:ad:d6:16:bd:df:98:82:c9:7e:7e:7e:ed:65:aa:88:
40:e1:ee:ef:82:f7:28:e9:1a:47:57:5c:d9:8c:48:57:f8:cf:
72:62:39:be:71:52:b7:8f:9b:a0:e8:9f:e0:74:82:2e:ef:fe:
3e:88:7c:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:15:59 2025 by rpki-client