Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/d5f801-4426-4f45-8f26-9ccdd3c873a6/1/LHwKdxsw0nQoUIDdxC42eYOW8iw.mft
File: LHwKdxsw0nQoUIDdxC42eYOW8iw.mft (raw, json)
Hash identifier: xDWiw894v3wMYZ6G2qo7bB/M4xCTCBLf+p/XEfQU2zk=
Subject key identifier: 28:12:58:9F:C8:A9:E1:FC:61:3D:72:FC:C8:65:FD:3E:45:7A:3A:30
Authority key identifier: 2C:7C:0A:77:1B:30:D2:74:28:50:80:DD:C4:2E:36:79:83:96:F2:2C
Certificate issuer: /CN=2c7c0a771b30d274285080ddc42e36798396f22c
Certificate serial: 0194BD854F997B5CF12422E36093A364FC78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LHwKdxsw0nQoUIDdxC42eYOW8iw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/d5f801-4426-4f45-8f26-9ccdd3c873a6/1/LHwKdxsw0nQoUIDdxC42eYOW8iw.mft
Manifest number: 114D
Signing time: Fri 31 Jan 2025 18:00:17 +0000
Manifest this update: Fri 31 Jan 2025 18:00:17 +0000
Manifest next update: Sat 01 Feb 2025 18:00:17 +0000
Files and hashes: 1: LHwKdxsw0nQoUIDdxC42eYOW8iw.crl (hash: noQK48bn4cJ6jtAqo0DN0zNUueqa1ExDwpRtYHlWGQg=)
2: X5I9mHSu3KNC6L4o4SPIN2DTcIA.roa (hash: pA69W5L+1g5fXu0iB/SINFlaHI6HYNCsbZGjGuRKHrs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:4f:99:7b:5c:f1:24:22:e3:60:93:a3:64:fc:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c7c0a771b30d274285080ddc42e36798396f22c
Validity
Not Before: Jan 31 18:00:17 2025 GMT
Not After : Feb 1 18:00:17 2025 GMT
Subject: CN=2812589fc8a9e1fc613d72fcc865fd3e457a3a30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:ae:dd:01:8e:c8:1c:8a:4d:26:be:2f:c1:62:
26:8a:a0:0e:e7:d4:7c:5c:11:33:4b:76:ca:17:c9:
e5:68:91:9e:15:2f:34:0d:f2:97:f6:20:5b:79:aa:
b5:f3:47:ae:09:b6:ee:af:61:ee:47:87:f5:3d:e0:
bf:20:05:8a:48:ae:9d:8f:f1:b4:c4:e8:7f:1c:ee:
5e:b0:62:03:0e:40:d5:26:fa:81:0c:eb:f8:0b:5d:
24:eb:5d:68:87:00:d9:b3:df:36:38:d0:39:0c:40:
23:e2:3a:f3:c8:bd:fd:48:71:f6:62:b7:fc:ca:d3:
b1:7a:f5:5c:12:20:6b:c0:a1:de:b8:c2:74:33:ef:
21:0d:5b:2b:80:95:63:66:65:a4:11:17:f5:c0:58:
38:a2:17:39:c7:df:a6:d4:4c:55:bb:0e:00:3c:e2:
15:b1:4d:43:ff:65:00:b7:f1:0c:6e:5a:7b:a0:03:
bb:5f:77:dd:dd:94:3d:9b:a1:f8:60:ec:6f:83:98:
e3:4c:43:23:1e:c1:b0:4d:dc:91:4a:5f:56:42:d5:
1b:b1:a6:61:cc:68:ff:43:0a:ce:58:d4:2e:fe:d2:
62:f3:45:c7:04:cf:19:dd:36:e5:ad:8c:50:d7:92:
f8:38:9e:1d:e3:a2:6b:e1:55:ef:26:92:9f:80:c9:
dd:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:12:58:9F:C8:A9:E1:FC:61:3D:72:FC:C8:65:FD:3E:45:7A:3A:30
X509v3 Authority Key Identifier:
keyid:2C:7C:0A:77:1B:30:D2:74:28:50:80:DD:C4:2E:36:79:83:96:F2:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LHwKdxsw0nQoUIDdxC42eYOW8iw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/d5f801-4426-4f45-8f26-9ccdd3c873a6/1/LHwKdxsw0nQoUIDdxC42eYOW8iw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/d5f801-4426-4f45-8f26-9ccdd3c873a6/1/LHwKdxsw0nQoUIDdxC42eYOW8iw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:42:30:6e:85:05:ec:d6:f3:77:01:1c:8c:11:6d:0c:c1:37:
f6:73:f1:5a:7e:11:32:8f:24:fb:81:0e:f5:d6:29:e4:b6:b2:
01:44:90:50:93:36:1d:c9:bc:70:52:71:95:94:d8:65:78:67:
10:c6:c8:fb:6d:d5:06:79:d5:00:4e:ac:0c:67:67:5c:a5:6a:
de:33:6c:d1:6d:ee:7e:a6:4d:60:de:1c:bd:1b:b6:a4:f9:ad:
3d:84:14:80:64:ce:74:fa:70:6d:b9:bd:e1:ea:6f:63:a5:71:
89:02:7a:fc:ac:75:da:74:52:5d:d0:b7:21:e8:d1:39:87:49:
9f:7a:3e:57:53:5d:c8:b6:32:a4:94:d6:90:80:5d:4b:d6:1b:
8e:7b:6b:06:fa:dd:58:50:cd:aa:6f:70:1b:59:41:95:e8:b4:
b7:44:94:11:9c:c7:e8:53:d1:14:a5:14:3c:55:11:31:d6:60:
c2:13:86:57:88:98:44:6b:c6:c1:a0:77:23:8d:80:72:fd:ca:
2e:cc:d7:cf:47:c9:39:63:06:06:ae:e2:65:7a:b7:76:97:73:
f3:0d:96:c2:2d:c6:81:1a:58:bf:cf:26:db:a6:24:1f:28:b4:
42:c6:d2:90:d4:17:ab:ce:c5:8b:ac:1e:21:cb:52:4a:15:5b:
c8:6e:c8:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:31:32 2025 by rpki-client