Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/c47b46-ccdc-4b5e-862e-bddff197c29d/1/lris-hevk77b78b-tGiPmGBLiq4.mft
File: lris-hevk77b78b-tGiPmGBLiq4.mft (raw, json)
Hash identifier: 7chsmF0MfeOYrNhrFdUCKp2jhBEC9454SG6h5SesAcs=
Subject key identifier: 7B:38:81:52:4D:9E:04:7C:7D:6F:49:B6:76:AA:06:37:60:9F:2B:E6
Authority key identifier: 96:B8:AC:FA:17:AF:93:BE:DB:EF:C6:FE:B4:68:8F:98:60:4B:8A:AE
Certificate issuer: /CN=96b8acfa17af93bedbefc6feb4688f98604b8aae
Certificate serial: 0194BD854DBBF8B1B8353012157FC552D764
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lris-hevk77b78b-tGiPmGBLiq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/c47b46-ccdc-4b5e-862e-bddff197c29d/1/lris-hevk77b78b-tGiPmGBLiq4.mft
Manifest number: 0EB6
Signing time: Fri 31 Jan 2025 18:00:17 +0000
Manifest this update: Fri 31 Jan 2025 18:00:17 +0000
Manifest next update: Sat 01 Feb 2025 18:00:17 +0000
Files and hashes: 1: lCUgvhyBp0UKbHxKxUYkrgGL2EY.roa (hash: kCJqfKEC/8AcT5Dn8+T0849c1Ido/6VgqldxnSwXqNg=)
2: lris-hevk77b78b-tGiPmGBLiq4.crl (hash: 1SvinnXT510QBRZt6+mfnicoxWaapTaHEOzdc6dIcDw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:4d:bb:f8:b1:b8:35:30:12:15:7f:c5:52:d7:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96b8acfa17af93bedbefc6feb4688f98604b8aae
Validity
Not Before: Jan 31 18:00:17 2025 GMT
Not After : Feb 1 18:00:17 2025 GMT
Subject: CN=7b3881524d9e047c7d6f49b676aa0637609f2be6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:63:c8:fa:d2:71:de:d5:43:9b:8b:6e:4a:a7:
d2:6a:a7:b6:14:91:63:81:7b:87:d8:30:56:43:41:
b4:ca:ff:28:31:f7:a6:6d:68:d9:94:f2:bb:77:e7:
91:72:8b:d6:8f:4b:ff:49:5d:22:fa:f9:e2:f2:9d:
61:44:4c:46:d6:9f:a2:9b:cf:7b:c3:c4:02:f9:e8:
0e:ad:fe:66:01:1d:78:20:34:09:b1:00:d0:34:3f:
c3:96:8c:49:b7:16:e8:9c:b8:d6:e9:62:72:f0:2e:
f0:29:b1:ea:5b:97:0d:a5:d7:90:9a:8d:00:89:1a:
30:08:3c:76:8f:ff:ea:b4:e5:ed:bf:94:6d:ca:9f:
bd:43:4a:48:ce:e3:01:06:49:dc:ef:5c:85:7d:ba:
8a:b4:00:67:84:42:48:27:8a:99:1c:7c:16:5f:e5:
bd:1f:34:48:26:b4:62:af:45:e9:38:66:a3:2e:d6:
d3:25:6c:7c:cd:68:3b:90:55:02:25:fe:8c:52:2c:
c5:40:7b:20:a9:bd:5b:b9:f5:4d:ce:d7:01:5a:3b:
e2:b0:d0:c6:37:70:e6:ac:f0:d6:45:00:03:f0:01:
ec:1b:8e:69:95:e7:9a:25:18:44:4e:37:cb:2a:54:
1f:d3:cb:fe:05:e4:2a:fa:72:fe:6d:1b:b4:3e:bb:
c5:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:38:81:52:4D:9E:04:7C:7D:6F:49:B6:76:AA:06:37:60:9F:2B:E6
X509v3 Authority Key Identifier:
keyid:96:B8:AC:FA:17:AF:93:BE:DB:EF:C6:FE:B4:68:8F:98:60:4B:8A:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lris-hevk77b78b-tGiPmGBLiq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/c47b46-ccdc-4b5e-862e-bddff197c29d/1/lris-hevk77b78b-tGiPmGBLiq4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/c47b46-ccdc-4b5e-862e-bddff197c29d/1/lris-hevk77b78b-tGiPmGBLiq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:61:82:f2:0d:e1:66:f6:28:29:f2:e3:38:66:d4:97:b6:8f:
a3:01:ed:16:e4:d5:8a:21:1b:1f:27:36:7f:a4:be:23:63:9c:
ed:89:8b:cc:33:8c:e9:3b:00:33:96:b8:0b:13:7b:6c:ad:c1:
29:53:67:2b:86:0d:71:0b:a1:7b:7d:10:89:9d:56:ff:05:e0:
85:0e:ba:02:b8:83:05:6a:f1:96:e9:82:f0:cb:8b:5b:cb:33:
24:59:12:45:a0:bc:f0:91:04:7b:39:37:a4:7d:b6:d3:e2:90:
06:48:b1:78:5e:66:fa:68:39:7c:69:43:03:c5:57:92:50:5d:
07:4f:66:42:95:8b:41:ba:2a:42:38:99:c7:41:70:9e:49:b9:
84:bd:9e:8e:76:b8:6a:3e:96:5e:ed:2a:93:c7:69:c3:b7:7e:
28:2c:28:a4:af:a0:01:13:be:45:af:34:d2:b4:6f:32:25:db:
c4:9c:a1:31:4f:0d:6b:49:67:65:6e:06:a2:30:7f:e7:cc:d0:
92:cb:7c:41:66:42:c2:20:0a:1f:38:bd:e6:4f:09:d9:af:c3:
b8:ac:9e:62:fb:5e:38:2b:6c:7e:2b:4c:e5:15:6c:28:c2:2a:
c9:b3:a4:b6:d3:db:c8:cb:f9:bb:79:36:f5:6a:65:70:be:7e:
a5:61:31:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:19:21 2025 by rpki-client