Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/71c608-1cc2-4899-a5fa-846aaf0eb1ad/1/LuliCJJdg2-NA30XmYCoOhsME0I.mft
File: LuliCJJdg2-NA30XmYCoOhsME0I.mft (raw, json)
Hash identifier: 41GnfAYhWC/hUgOi/1pyhxb6+fGZCrwCags9rFZmNpw=
Subject key identifier: 46:CA:32:4F:95:52:D8:13:22:81:A8:E9:91:68:23:DA:24:65:28:40
Authority key identifier: 2E:E9:62:08:92:5D:83:6F:8D:03:7D:17:99:80:A8:3A:1B:0C:13:42
Certificate issuer: /CN=2ee96208925d836f8d037d179980a83a1b0c1342
Certificate serial: 0194BC3C4EDBA93EFB929D61C89E21DCAB6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LuliCJJdg2-NA30XmYCoOhsME0I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/71c608-1cc2-4899-a5fa-846aaf0eb1ad/1/LuliCJJdg2-NA30XmYCoOhsME0I.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 12:00:56 +0000
Manifest this update: Fri 31 Jan 2025 12:00:56 +0000
Manifest next update: Sat 01 Feb 2025 12:00:56 +0000
Files and hashes: 1: LuliCJJdg2-NA30XmYCoOhsME0I.crl (hash: gAletPhL81ejEJ+/xMK3c6WLc+8kFZt6bf3A0xXyIGA=)
2: g5NXYnWEAdkaK-Lr_Xc0-zmGZq0.roa (hash: iRJFMsAKyY3mWv0ViO4zwD2HGWC+kyCn/YQlP9uYKFo=)
3: xQvw96YsBggpZWCMaHwX9DtK_i8.roa (hash: IyrcXeoQh+atYLYkLXH6rE0dL5Be39eF+FzxQzEG5Cs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:4e:db:a9:3e:fb:92:9d:61:c8:9e:21:dc:ab:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ee96208925d836f8d037d179980a83a1b0c1342
Validity
Not Before: Jan 31 12:00:56 2025 GMT
Not After : Feb 1 12:00:56 2025 GMT
Subject: CN=46ca324f9552d8132281a8e9916823da24652840
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:25:4e:a4:29:e2:ee:31:80:20:e2:10:d4:b3:
df:85:94:20:77:c5:37:0f:c7:b9:18:84:5d:72:3e:
6e:be:ec:c9:0a:04:6e:6e:fa:ff:c4:d8:06:12:e5:
01:05:48:2b:75:37:2b:1d:5c:8d:be:3f:c4:d0:ad:
d8:b2:ef:2d:9b:e6:12:e9:0d:d8:ea:db:93:c5:bb:
c0:19:ca:e1:25:ab:42:fd:2b:ab:43:1f:0c:9f:cb:
c8:6d:d2:31:5e:75:ac:14:91:ba:93:18:ee:3d:b8:
39:5b:b1:6e:1a:a8:3b:89:46:8c:c5:9a:c2:e6:c5:
16:ce:43:4f:72:8a:2f:7f:ab:bf:a8:2e:d3:f9:5b:
d8:c6:ea:ba:e7:b9:9b:07:4b:6d:6e:f3:65:3b:3d:
36:6b:9f:0d:e4:ef:e9:35:af:70:ab:39:e8:67:46:
32:f4:b3:5d:ce:2d:28:a4:97:c8:33:96:6d:fa:6d:
eb:19:29:9c:16:5d:13:c0:c5:de:69:2b:5f:88:95:
83:91:0b:9a:75:4c:60:00:83:8f:9a:f8:d7:91:61:
07:47:c4:a8:5f:d0:29:0c:50:d5:bf:05:28:88:8f:
11:b5:5d:d5:d2:e1:ba:b9:24:99:8b:5e:9a:1f:71:
15:2e:8d:9d:75:99:ec:d6:f2:21:25:d4:2f:dd:1b:
d3:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:CA:32:4F:95:52:D8:13:22:81:A8:E9:91:68:23:DA:24:65:28:40
X509v3 Authority Key Identifier:
keyid:2E:E9:62:08:92:5D:83:6F:8D:03:7D:17:99:80:A8:3A:1B:0C:13:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LuliCJJdg2-NA30XmYCoOhsME0I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/71c608-1cc2-4899-a5fa-846aaf0eb1ad/1/LuliCJJdg2-NA30XmYCoOhsME0I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/71c608-1cc2-4899-a5fa-846aaf0eb1ad/1/LuliCJJdg2-NA30XmYCoOhsME0I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:3b:29:bf:f3:58:88:ad:44:56:93:20:a1:5e:fa:aa:32:dd:
35:b9:90:91:ca:0c:10:b0:ab:83:dd:1a:8e:7e:1c:ab:90:71:
ca:63:5e:80:b7:f4:91:7d:a7:73:a4:3f:48:39:c6:f1:b8:72:
36:83:63:41:29:03:8c:f6:8a:72:80:01:a3:ac:a9:a0:1f:ad:
35:d2:4e:3d:65:85:12:fa:e4:c6:f1:e6:de:ce:48:6a:ee:20:
fc:d1:10:d4:96:4f:42:3b:61:3d:cb:57:9a:77:5e:15:f5:fc:
95:f3:36:2a:c1:cb:9a:33:2a:67:93:99:33:ef:fa:b4:93:25:
6a:0d:03:c0:71:33:15:b8:cc:0b:19:55:e6:50:c4:24:37:ee:
94:ec:8c:ba:19:4e:75:fc:b9:04:a4:cb:f2:0e:cf:8a:68:22:
7d:a8:f8:ed:e5:69:67:14:9e:46:98:7f:7f:f7:10:96:7b:4a:
95:86:20:a4:fe:99:97:81:ed:c2:38:c3:64:0a:19:90:47:25:
d8:a7:25:7b:74:74:d8:b6:45:d9:b5:06:4e:70:dd:0b:29:bc:
73:ff:77:e3:8b:5d:be:85:e2:94:1a:9f:9b:67:cf:62:42:84:
2a:5b:d8:35:1a:3a:f7:77:79:00:27:73:4e:c7:a6:83:bb:a3:
c2:d4:d4:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:43:26 2025 by rpki-client