Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/fa81f4-6600-4079-93c5-4897261ba46b/1/lmXIEQ0N2Gp-uwk4qjLgnR2xIvY.mft
File: lmXIEQ0N2Gp-uwk4qjLgnR2xIvY.mft (raw, json)
Hash identifier: g0jphU8iBOsc/chi9dBOup08+usMYe6gvll7qfFH9Zg=
Subject key identifier: 4F:BE:01:2E:C8:AC:FB:62:41:0E:80:07:6C:BE:05:DD:8A:67:9C:D8
Authority key identifier: 96:65:C8:11:0D:0D:D8:6A:7E:BB:09:38:AA:32:E0:9D:1D:B1:22:F6
Certificate issuer: /CN=9665c8110d0dd86a7ebb0938aa32e09d1db122f6
Certificate serial: 0194BC04FC5C6CFA43C0D1722BA3D1A3BCC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lmXIEQ0N2Gp-uwk4qjLgnR2xIvY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/fa81f4-6600-4079-93c5-4897261ba46b/1/lmXIEQ0N2Gp-uwk4qjLgnR2xIvY.mft
Manifest number: 0CCF
Signing time: Fri 31 Jan 2025 11:00:30 +0000
Manifest this update: Fri 31 Jan 2025 11:00:30 +0000
Manifest next update: Sat 01 Feb 2025 11:00:30 +0000
Files and hashes: 1: hDr7XZdy7Zu__1e0bkoorUALVGI.roa (hash: Ah9s+DUMovObb0WEEgnVu12bFf+2vlp0mJLr4ANjGq0=)
2: lmXIEQ0N2Gp-uwk4qjLgnR2xIvY.crl (hash: agSzfAItqBjjUyfOA2kU0RmCxzOb08O8GE65nCl8Aq0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:fc:5c:6c:fa:43:c0:d1:72:2b:a3:d1:a3:bc:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9665c8110d0dd86a7ebb0938aa32e09d1db122f6
Validity
Not Before: Jan 31 11:00:30 2025 GMT
Not After : Feb 1 11:00:30 2025 GMT
Subject: CN=4fbe012ec8acfb62410e80076cbe05dd8a679cd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:71:b8:7f:b9:82:25:cc:47:91:74:80:51:69:
88:29:38:46:cc:4b:35:ad:71:df:22:ec:cb:0d:52:
ee:88:a8:2f:6a:86:a0:d6:dc:c4:04:0e:8a:ee:2e:
3b:f5:e4:47:0d:96:56:85:46:ec:d3:08:ef:39:a7:
4d:68:5c:92:a4:a6:e6:21:8e:cd:16:f6:05:99:ea:
75:07:e8:4f:89:45:c0:de:66:74:db:e6:bc:2c:95:
6d:3d:42:46:22:85:74:1e:bd:96:0f:9b:fb:b3:f4:
f9:2c:60:1f:7e:bb:06:e9:36:6d:40:4b:a2:01:43:
5c:45:09:a6:bf:e8:92:a5:d6:08:d9:16:02:0a:67:
66:1b:b7:18:24:fe:a3:b2:e6:11:52:fb:86:e6:15:
8d:4d:e3:a3:c1:24:67:a2:cd:5e:e4:ef:e6:8e:9c:
6a:db:95:13:fa:61:1f:e0:46:4c:85:8b:51:9d:c7:
0d:ac:95:7e:87:7f:92:e2:0e:fa:98:8c:9a:52:8c:
04:79:fd:83:b2:9f:af:03:85:71:f3:7c:b7:ea:55:
f7:42:24:4f:a3:94:38:dd:44:15:c2:f7:0c:9f:36:
54:03:6a:aa:86:8a:b9:67:2e:e4:4b:46:27:a7:08:
de:79:30:67:95:f2:74:f7:b2:9c:e7:29:7b:f2:37:
75:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:BE:01:2E:C8:AC:FB:62:41:0E:80:07:6C:BE:05:DD:8A:67:9C:D8
X509v3 Authority Key Identifier:
keyid:96:65:C8:11:0D:0D:D8:6A:7E:BB:09:38:AA:32:E0:9D:1D:B1:22:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lmXIEQ0N2Gp-uwk4qjLgnR2xIvY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/fa81f4-6600-4079-93c5-4897261ba46b/1/lmXIEQ0N2Gp-uwk4qjLgnR2xIvY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/fa81f4-6600-4079-93c5-4897261ba46b/1/lmXIEQ0N2Gp-uwk4qjLgnR2xIvY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:d1:6f:48:e2:b3:59:e9:f9:00:3f:ce:80:d8:17:1c:f0:77:
0a:9b:02:de:1b:f2:91:c4:03:ce:c1:ad:02:ea:03:14:2a:fa:
38:cb:c0:39:e7:d3:0c:61:01:91:18:6a:da:92:48:a1:ad:96:
67:57:2c:f4:57:be:ff:05:2f:b3:7b:86:93:69:d9:ff:73:f8:
73:5b:53:0e:ee:ef:fd:d4:3d:58:18:68:a3:b4:13:c4:60:28:
83:dc:4e:3e:d2:7b:73:f5:f0:6c:41:ea:1b:74:58:3e:dd:8f:
c8:b4:17:89:92:b3:ec:40:83:a2:90:54:6e:c4:4b:f1:fa:f3:
41:6a:0f:c6:d4:21:51:18:e1:fb:8d:1f:0a:3d:cb:57:cb:61:
93:1d:82:bd:99:e4:d0:1c:54:a3:bb:68:5b:bb:c5:d3:34:b9:
d7:7d:e2:e0:1b:e8:e5:1f:5b:b5:73:7e:5a:da:cd:ae:46:4d:
77:46:79:be:68:76:34:5d:93:02:65:5c:25:5a:1a:8a:f0:1b:
5a:d6:c6:ec:60:d0:21:91:2d:0f:55:de:2d:50:02:04:c2:bf:
54:fb:9d:0c:b5:5d:ed:cd:ff:31:81:bf:6d:e0:6f:26:33:67:
dd:07:bc:53:84:a9:1b:99:6c:29:63:97:4c:90:b5:f5:c5:e1:
93:70:ab:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:48 2025 by rpki-client