Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/323add-1d87-416a-bd05-1e9848cb1745/1/Lm0jW_0rt32YhrFMsQ3EnEIII1M.mft
File: Lm0jW_0rt32YhrFMsQ3EnEIII1M.mft (raw, json)
Hash identifier: +7LrKluI2IgQQdce/ZOTTaYplms/wtebcUF2fsRF8Qg=
Subject key identifier: 1B:84:E1:7B:5C:C5:AD:E9:05:E7:F0:4D:9D:EE:55:E0:5E:B3:F4:FD
Authority key identifier: 2E:6D:23:5B:FD:2B:B7:7D:98:86:B1:4C:B1:0D:C4:9C:42:08:23:53
Certificate issuer: /CN=2e6d235bfd2bb77d9886b14cb10dc49c42082353
Certificate serial: 0194BCA984E3BA80BA8CF598CE17C2EB31A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lm0jW_0rt32YhrFMsQ3EnEIII1M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/323add-1d87-416a-bd05-1e9848cb1745/1/Lm0jW_0rt32YhrFMsQ3EnEIII1M.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 14:00:13 +0000
Manifest this update: Fri 31 Jan 2025 14:00:13 +0000
Manifest next update: Sat 01 Feb 2025 14:00:13 +0000
Files and hashes: 1: 6fPKrr2WqJdenIvBOBD3KjEA0wk.roa (hash: i2OyGf183j1iELGCpTBdb4xd43I9V5TO+gNqwj8iJKU=)
2: Lm0jW_0rt32YhrFMsQ3EnEIII1M.crl (hash: 4ejYhCYHGFof2XFvzDkbdGON5wYbva7al3eyhPwbwTs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:84:e3:ba:80:ba:8c:f5:98:ce:17:c2:eb:31:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e6d235bfd2bb77d9886b14cb10dc49c42082353
Validity
Not Before: Jan 31 14:00:13 2025 GMT
Not After : Feb 1 14:00:13 2025 GMT
Subject: CN=1b84e17b5cc5ade905e7f04d9dee55e05eb3f4fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:10:7f:7b:4b:d0:41:e7:f1:47:da:65:8a:20:
da:74:4f:3b:7d:cc:d1:72:34:ab:64:da:44:15:28:
88:d8:c9:cc:41:5b:0a:d3:6f:4f:b3:14:d3:04:40:
c9:e1:02:8a:58:b8:95:8e:63:e6:f1:60:f3:83:59:
0a:6e:ee:c5:67:a9:a0:2e:b5:28:0c:dd:57:bf:ad:
d9:ec:51:60:51:2e:d6:43:3d:46:c0:87:c1:bf:9c:
bd:6c:8a:bf:1c:61:a3:bb:bc:a0:11:b4:8a:ba:2c:
01:20:14:9c:79:c2:c5:bc:5f:45:67:30:86:ba:e9:
68:a4:de:92:44:34:96:1c:09:97:15:cd:f0:94:8f:
67:46:c5:fc:af:6c:3f:01:84:0d:97:58:f8:19:20:
d4:c8:c4:cd:bb:d8:01:75:e5:38:81:d9:8b:f7:e4:
80:56:59:9c:98:eb:86:26:7c:d9:6e:9b:b3:81:c4:
4a:f9:d5:84:40:8c:49:22:e7:3f:3c:9c:38:a5:9b:
29:0a:98:1f:43:9b:27:1d:ba:2b:37:78:06:fc:3c:
52:f8:b3:1c:22:02:56:bb:0a:87:09:a8:0c:2f:ad:
89:ad:06:98:33:7a:27:98:59:d0:dc:45:d0:75:45:
9d:e8:d0:4b:e2:de:13:94:11:4d:b4:4a:27:6c:de:
28:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:84:E1:7B:5C:C5:AD:E9:05:E7:F0:4D:9D:EE:55:E0:5E:B3:F4:FD
X509v3 Authority Key Identifier:
keyid:2E:6D:23:5B:FD:2B:B7:7D:98:86:B1:4C:B1:0D:C4:9C:42:08:23:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lm0jW_0rt32YhrFMsQ3EnEIII1M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/323add-1d87-416a-bd05-1e9848cb1745/1/Lm0jW_0rt32YhrFMsQ3EnEIII1M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/323add-1d87-416a-bd05-1e9848cb1745/1/Lm0jW_0rt32YhrFMsQ3EnEIII1M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:1b:38:2f:2d:39:62:c0:a2:67:1d:57:18:f7:24:1a:6e:da:
2b:b6:7c:82:05:ec:b7:7f:12:5d:25:49:b9:90:38:37:2c:27:
44:3a:3d:72:cc:d5:11:fc:ee:3d:c2:3f:e6:36:ae:3e:2c:21:
94:82:66:58:e1:70:bf:39:99:82:a6:98:b8:ed:e8:49:f2:52:
c9:19:c4:cb:e6:ba:c2:a4:ce:07:7b:af:35:08:e5:1b:8e:24:
6c:f7:1f:fd:38:b9:28:79:1f:a1:4a:0d:a8:d6:f8:8b:ce:72:
f5:83:fb:40:b8:3d:5f:68:44:b4:64:8d:fe:80:64:c4:8e:49:
29:da:b1:0a:a5:a5:ed:b2:4f:5b:7b:5d:40:21:fb:1b:1c:46:
c3:a9:89:51:c3:d3:2c:c9:cd:9c:53:07:ca:aa:e3:5c:c3:cc:
b6:3d:32:e6:1f:bb:d4:f9:1a:69:5e:d7:80:c8:e5:e9:8d:81:
fa:5c:8a:7a:f7:8c:02:50:c3:3c:09:4b:b3:05:4a:10:d1:b5:
67:1d:73:18:87:e9:c4:bf:10:e4:a5:a0:20:11:d3:07:3e:d4:
b5:95:ba:16:e9:9f:ef:eb:2f:0a:50:55:df:3b:43:67:86:a1:
95:fd:36:e2:22:fd:b7:aa:13:f0:18:49:4d:c0:4e:d9:a3:a2:
ba:de:fe:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:37:48 2025 by rpki-client