Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/24a47d-6a4d-4e15-a238-7740b3d6905e/1/lvGXfPF_5OHeLxYpPGafRNW9dDM.mft
File: lvGXfPF_5OHeLxYpPGafRNW9dDM.mft (raw, json)
Hash identifier: Ta683owv+eBZ0qON9OqAPxZ32jPlvmzl6t3pylphSdM=
Subject key identifier: A5:96:E9:A6:29:AA:86:59:94:10:64:BC:7A:26:0C:75:69:8B:B2:CB
Authority key identifier: 96:F1:97:7C:F1:7F:E4:E1:DE:2F:16:29:3C:66:9F:44:D5:BD:74:33
Certificate issuer: /CN=96f1977cf17fe4e1de2f16293c669f44d5bd7433
Certificate serial: 0194BCA9AF59937F30F25C889B5921A43314
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lvGXfPF_5OHeLxYpPGafRNW9dDM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/24a47d-6a4d-4e15-a238-7740b3d6905e/1/lvGXfPF_5OHeLxYpPGafRNW9dDM.mft
Manifest number: 06A0
Signing time: Fri 31 Jan 2025 14:00:24 +0000
Manifest this update: Fri 31 Jan 2025 14:00:24 +0000
Manifest next update: Sat 01 Feb 2025 14:00:24 +0000
Files and hashes: 1: lvGXfPF_5OHeLxYpPGafRNW9dDM.crl (hash: 0ClCnKsA00lgBZNWTFy2ndM0YsunxS0ZNWDZWI0/UJw=)
2: yyEfKYzfWifnZltk7ctCY5A-44M.roa (hash: Bx/CCORj4vVt+Qie6xpQv8J6eghjTLCeuziTvvg5CUE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:af:59:93:7f:30:f2:5c:88:9b:59:21:a4:33:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96f1977cf17fe4e1de2f16293c669f44d5bd7433
Validity
Not Before: Jan 31 14:00:24 2025 GMT
Not After : Feb 1 14:00:24 2025 GMT
Subject: CN=a596e9a629aa8659941064bc7a260c75698bb2cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:67:f8:ed:49:ee:27:6b:72:68:04:80:f7:99:
46:a6:cc:56:48:d9:30:19:8d:7c:1e:de:a4:e4:f9:
ec:7b:6e:de:dc:6a:cc:1c:97:52:40:da:1e:fc:d8:
e2:fb:99:e5:3f:44:e2:19:b7:90:86:1e:7a:d8:d5:
bd:87:54:2d:e9:cd:20:98:22:74:93:93:58:08:48:
ca:fd:0b:30:1a:f1:a4:27:c6:e4:7b:f4:5e:8b:fc:
d0:ae:8c:b1:cf:37:05:a4:ea:60:16:e2:8a:f4:f3:
52:98:d6:06:22:86:8e:3a:59:4f:8b:f6:17:59:ef:
af:83:7a:f2:35:4e:d9:4e:d8:01:43:fe:d5:35:41:
1c:1a:e4:cd:46:0a:06:fe:03:55:56:1f:62:24:2c:
31:75:a1:9e:d2:0a:39:5d:52:75:fb:ab:40:b9:f7:
c1:94:ea:fd:38:b8:60:cb:b7:7d:03:18:e6:f8:cc:
47:e4:68:36:7c:f0:1b:a7:a6:73:fa:65:d2:89:cb:
18:a9:8f:d0:a4:db:c8:1d:7c:52:1b:26:75:8e:23:
58:40:bc:f8:47:ec:79:fd:4c:6b:eb:60:b5:40:26:
ae:c3:a3:92:df:2f:de:f2:67:94:ae:da:2e:cb:08:
99:52:5c:c1:ad:c2:50:01:e2:32:c4:6b:65:ae:37:
73:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:96:E9:A6:29:AA:86:59:94:10:64:BC:7A:26:0C:75:69:8B:B2:CB
X509v3 Authority Key Identifier:
keyid:96:F1:97:7C:F1:7F:E4:E1:DE:2F:16:29:3C:66:9F:44:D5:BD:74:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lvGXfPF_5OHeLxYpPGafRNW9dDM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/24a47d-6a4d-4e15-a238-7740b3d6905e/1/lvGXfPF_5OHeLxYpPGafRNW9dDM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/24a47d-6a4d-4e15-a238-7740b3d6905e/1/lvGXfPF_5OHeLxYpPGafRNW9dDM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:bc:44:9b:69:33:08:51:50:6c:b7:d5:54:20:cc:c7:51:40:
e9:11:50:a9:6b:b9:76:12:ec:a7:d3:a3:c1:a9:43:12:8e:cd:
81:f1:74:99:86:88:7c:e8:d6:c6:c4:90:1c:2b:13:37:58:8f:
a7:cb:a1:3a:d7:49:cc:7a:e9:dd:2a:a9:a7:aa:ce:87:9f:c8:
aa:49:5a:0d:fc:a5:8d:28:16:30:17:11:99:ee:4b:5a:01:9e:
ea:6d:52:3e:ea:74:71:1f:75:0e:0b:e3:a9:2d:7b:9d:4f:e2:
8b:00:52:4b:8e:25:9a:2d:92:91:97:e7:27:a8:f0:42:63:f5:
4e:6b:2d:a2:b5:ff:fa:39:28:ce:e4:65:47:bb:42:87:47:65:
dd:21:e2:6c:ec:6f:da:ef:e0:7f:fb:c0:84:6d:c1:eb:9a:fd:
7c:8d:1d:8f:b9:8c:a1:21:15:0d:52:f7:8a:6c:33:30:23:c3:
1a:38:66:fa:d5:02:17:a1:01:ff:4e:87:16:34:ae:a5:56:d6:
c7:b9:1d:ce:4c:20:4b:bd:c5:6b:c5:c9:1f:c7:04:fa:87:83:
25:82:bb:ea:96:a6:eb:b1:b1:8d:f2:33:80:4c:00:c5:fb:90:
c4:d3:dd:bb:e8:ab:61:84:d1:63:bb:80:ef:67:16:07:93:43:
f2:3c:1c:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:10:02 2025 by rpki-client