Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/LyoPogODMyo_QU8FR1OgtgsluhA.mft
File: LyoPogODMyo_QU8FR1OgtgsluhA.mft (raw, json)
Hash identifier: Gk/ipR/I3VmABI8oGdf6WWhIIDzga6KqfyR2BnwQz+8=
Subject key identifier: EC:02:08:79:4B:C2:70:DB:5A:A0:95:54:0A:80:65:D9:65:5F:FD:3A
Authority key identifier: 2F:2A:0F:A2:03:83:33:2A:3F:41:4F:05:47:53:A0:B6:0B:25:BA:10
Certificate issuer: /CN=2f2a0fa20383332a3f414f054753a0b60b25ba10
Certificate serial: 0194BCAA1B5861B1819547F2FBD4B1D013AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LyoPogODMyo_QU8FR1OgtgsluhA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/LyoPogODMyo_QU8FR1OgtgsluhA.mft
Manifest number: 028C
Signing time: Fri 31 Jan 2025 14:00:52 +0000
Manifest this update: Fri 31 Jan 2025 14:00:52 +0000
Manifest next update: Sat 01 Feb 2025 14:00:52 +0000
Files and hashes: 1: Lw7_YPuqPYPBZV8n8Wt5P9NRwsQ.roa (hash: 1Dm2dtkAzqxn7yado6BTKG4Rw10eSLXp8OwGOIhf1xs=)
2: LyoPogODMyo_QU8FR1OgtgsluhA.crl (hash: WR+IKPxgQ1SDFSInkAHJ7ABEjVYZLq9UYkW2Jxo3+T4=)
3: i3qsVHyfbqO0LUJfHTVL0XnxqmQ.roa (hash: bRxbKPEHo1x0VknlCGZJYlUtB8abnLChZo1PgdyJ4io=)
4: jXorES_blK4nBNFm3R_EwLoZj0U.roa (hash: gZjunuqIq6U6ZGj5kWZ5wADLITCN/sbwJ1ZzoK8csEc=)
5: jbQQlUaQf4y3wBUe2RhCnG3Bh5E.roa (hash: nOzCtLmpb5H2HJeqqoWQeqpwroidkYD2/cNCEbPju1g=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:1b:58:61:b1:81:95:47:f2:fb:d4:b1:d0:13:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f2a0fa20383332a3f414f054753a0b60b25ba10
Validity
Not Before: Jan 31 14:00:52 2025 GMT
Not After : Feb 1 14:00:52 2025 GMT
Subject: CN=ec0208794bc270db5aa095540a8065d9655ffd3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:34:8b:d2:1a:57:a7:1f:b9:55:92:ce:6d:c9:
57:ad:42:33:13:ee:6f:e0:ed:b8:48:72:11:13:ac:
eb:1f:dc:78:71:a3:50:c5:70:72:d1:54:b9:80:dc:
f9:ac:17:80:35:d5:e1:96:9c:aa:59:21:fb:66:5e:
cb:7a:e7:18:48:ea:05:23:96:3b:02:5c:a3:c3:c7:
f8:89:12:89:7c:7a:8f:f1:ca:be:26:67:0e:cb:4b:
10:00:02:28:94:25:c4:a7:04:34:b4:de:be:37:46:
67:e9:43:21:fd:a8:b7:b3:6d:36:ea:bc:a5:70:35:
23:a0:08:7f:1e:65:70:86:92:5d:10:7a:13:24:ee:
c1:7d:f4:fb:35:97:da:68:1d:2d:ee:8a:22:16:61:
75:b9:8d:14:09:fb:11:f5:2e:2b:ce:8e:93:2b:6d:
00:86:c4:0a:b5:8a:0e:bf:5e:d7:bb:96:6b:dd:94:
e0:81:e6:98:39:aa:90:63:86:c5:a5:01:c2:73:d9:
ce:30:b8:c5:23:ac:a4:ad:9c:df:57:ed:9b:4f:b5:
d1:c7:ff:c0:5d:5b:48:3a:b9:ab:f7:0d:04:6a:6c:
68:35:19:5d:56:66:23:68:fe:3e:b2:e6:52:de:a4:
42:1b:9f:04:d6:55:ac:36:4f:71:ae:ef:88:90:fb:
47:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:02:08:79:4B:C2:70:DB:5A:A0:95:54:0A:80:65:D9:65:5F:FD:3A
X509v3 Authority Key Identifier:
keyid:2F:2A:0F:A2:03:83:33:2A:3F:41:4F:05:47:53:A0:B6:0B:25:BA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LyoPogODMyo_QU8FR1OgtgsluhA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/LyoPogODMyo_QU8FR1OgtgsluhA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/LyoPogODMyo_QU8FR1OgtgsluhA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:c3:15:5c:30:66:94:06:21:12:db:5f:2a:c6:a0:f2:d6:5e:
76:67:d4:8e:8d:39:39:f4:38:30:9d:72:5f:a8:42:ab:8a:03:
54:ed:e2:96:9a:27:fe:01:ec:12:74:ad:37:98:8d:f5:27:a1:
35:05:d4:2f:5f:1c:6a:7b:bf:04:50:99:e9:b1:cb:63:bb:49:
04:96:75:b4:93:d4:58:7c:23:76:da:e0:c1:b8:37:5f:9c:1a:
81:dc:99:5f:4a:17:e0:68:b2:f9:25:7b:f9:e1:f8:74:ae:2c:
dd:7a:19:45:69:b2:2a:b3:80:32:db:e6:87:21:f4:4f:19:2a:
07:2a:52:4c:6f:52:8a:91:84:ea:14:b5:de:30:10:ad:73:04:
13:9c:b9:c1:69:4e:ed:27:02:93:29:4a:29:67:02:4a:b1:5e:
92:52:44:bc:32:9a:fd:4e:a6:9f:8c:59:b1:33:94:94:1a:ed:
62:9f:17:89:ba:f1:2f:dc:06:ac:6c:e3:53:f1:cd:79:e9:27:
73:3d:40:2b:7e:f0:ef:5c:39:fd:7b:22:0f:53:4d:5e:39:54:
69:d7:01:93:fc:e7:6b:71:c8:01:79:5f:dd:b9:84:d2:6d:70:
df:a2:3d:a3:ed:b7:da:18:4b:a6:61:b9:54:d8:23:08:24:07:
ef:de:9d:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:47:39 2025 by rpki-client