Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/1df8e1-6e80-443c-b6e8-d9f905fdc89a/1/LBGlP232MAtJEs4T9vqbEA_OJIg.mft
File: LBGlP232MAtJEs4T9vqbEA_OJIg.mft (raw, json)
Hash identifier: 87W4yrnOFnH2CdrzZgKwGHrZqXg4LLRHr49K/Y9/9go=
Subject key identifier: CF:4F:44:2A:85:03:ED:AD:AE:C2:26:E5:25:42:EA:32:ED:CA:E4:30
Authority key identifier: 2C:11:A5:3F:6D:F6:30:0B:49:12:CE:13:F6:FA:9B:10:0F:CE:24:88
Certificate issuer: /CN=2c11a53f6df6300b4912ce13f6fa9b100fce2488
Certificate serial: 0194BC3CBEE8DB2E9F4818C2D7DD9A9B18E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LBGlP232MAtJEs4T9vqbEA_OJIg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/1df8e1-6e80-443c-b6e8-d9f905fdc89a/1/LBGlP232MAtJEs4T9vqbEA_OJIg.mft
Manifest number: 1138
Signing time: Fri 31 Jan 2025 12:01:25 +0000
Manifest this update: Fri 31 Jan 2025 12:01:25 +0000
Manifest next update: Sat 01 Feb 2025 12:01:25 +0000
Files and hashes: 1: 54SDy2hBAf60rRk7Cn2SENdLnF0.roa (hash: W4T7JvYJiD5Kubx3/xyHkSB0zOGjx+2ez3Dgx71rGrg=)
2: LBGlP232MAtJEs4T9vqbEA_OJIg.crl (hash: Sq0CsFH7JssTz7gxNKxdYTEqANPhMTD/RmbMiILsg10=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:be:e8:db:2e:9f:48:18:c2:d7:dd:9a:9b:18:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c11a53f6df6300b4912ce13f6fa9b100fce2488
Validity
Not Before: Jan 31 12:01:25 2025 GMT
Not After : Feb 1 12:01:25 2025 GMT
Subject: CN=cf4f442a8503edadaec226e52542ea32edcae430
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:72:2e:17:c8:99:7b:bd:63:ff:63:c8:08:65:
d2:f1:84:80:5d:20:76:c0:8b:cb:6f:87:8e:5a:1f:
9b:1b:1a:ba:2e:3d:79:22:30:fd:a2:78:62:2c:00:
69:d9:b0:5a:f3:2d:d7:7a:bd:8f:03:f0:45:a2:0b:
ea:52:d6:6c:cb:b8:73:37:92:fa:6a:55:d4:04:1e:
cd:1f:79:ed:32:59:af:1a:4e:8c:b1:2e:34:81:26:
d4:3f:c4:5b:52:23:f6:d5:9a:6e:6d:1b:d7:9e:4b:
d6:52:0e:a2:72:24:dc:13:d0:ae:0f:02:78:b9:a7:
c1:c1:98:6a:4f:05:d6:b3:c0:54:c7:14:4e:4e:e7:
06:5c:bf:41:cf:45:a8:28:9e:40:bd:29:8d:ac:94:
f0:71:80:f2:ca:d1:26:b5:98:57:65:9e:98:f7:b9:
ba:c8:6f:bd:ac:3b:af:cb:89:09:be:2e:de:d1:6b:
cc:db:61:02:62:ef:e0:b0:39:c5:2a:c6:21:63:e1:
99:f8:1a:64:cb:bd:6f:e6:fc:f2:27:7a:31:14:a7:
b5:d1:90:1e:99:df:c9:d8:84:aa:07:a3:99:46:17:
c1:36:ec:71:5f:96:8f:30:7f:f8:90:33:c7:02:d0:
42:4c:3c:77:ab:11:da:d5:10:dd:8d:f2:ce:93:17:
e0:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:4F:44:2A:85:03:ED:AD:AE:C2:26:E5:25:42:EA:32:ED:CA:E4:30
X509v3 Authority Key Identifier:
keyid:2C:11:A5:3F:6D:F6:30:0B:49:12:CE:13:F6:FA:9B:10:0F:CE:24:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LBGlP232MAtJEs4T9vqbEA_OJIg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/1df8e1-6e80-443c-b6e8-d9f905fdc89a/1/LBGlP232MAtJEs4T9vqbEA_OJIg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/1df8e1-6e80-443c-b6e8-d9f905fdc89a/1/LBGlP232MAtJEs4T9vqbEA_OJIg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:43:14:f7:a3:3c:cd:e3:3e:45:62:6b:db:3f:e9:63:97:d6:
b4:9e:8e:bb:bd:37:03:af:de:fa:0e:c5:b9:fb:6a:21:a7:73:
6a:f8:1d:f1:1b:65:87:f5:3e:a8:15:ed:12:23:ab:74:f8:8b:
0d:6e:75:5c:4c:ab:33:e2:d6:73:e1:9f:4b:23:b6:a0:64:66:
01:ab:2a:3c:34:1d:31:23:87:0e:0b:81:1e:b4:f5:3d:fb:04:
6c:22:ca:68:29:48:2c:15:cd:0a:56:c6:93:4a:bf:9b:7f:4c:
08:07:88:8c:e9:fb:4d:37:95:fd:97:d9:0a:b4:bc:97:7e:da:
14:9f:29:32:d2:78:9e:da:19:ea:b2:92:25:58:cf:f3:40:9b:
a1:50:b2:82:c4:91:15:7e:5f:5e:4f:40:9c:1d:99:74:18:ac:
b4:bf:4f:24:04:d6:b4:6f:84:1b:51:90:2c:78:c5:df:06:a6:
97:6c:c0:b3:3f:a5:5e:e3:64:c1:37:b0:dc:b2:3e:2a:d1:94:
b6:fe:a3:8e:27:b5:12:b2:f6:a4:5f:95:66:5f:78:6c:6d:cb:
4f:15:50:ba:e6:b6:3d:45:08:fd:26:6c:38:63:c2:66:7e:90:
93:f6:9a:b1:74:14:9c:7c:ed:9b:12:3d:ab:30:76:31:0e:96:
d1:15:3e:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:39:21 2025 by rpki-client