Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/b6b9c4-82df-4ea6-aefc-70644e8f3641/1/LfxU1VQ-EkhLa6sv3Dmaj1KVeHw.mft
File: LfxU1VQ-EkhLa6sv3Dmaj1KVeHw.mft (raw, json)
Hash identifier: xxJ2ZThXEOz3sRf2CZsR6Rg6c6tSf4Yht6WCXZrTzuY=
Subject key identifier: AF:9A:05:46:B5:40:5E:15:D5:90:0F:D4:8A:BF:1C:9F:79:B6:FD:B9
Authority key identifier: 2D:FC:54:D5:54:3E:12:48:4B:6B:AB:2F:DC:39:9A:8F:52:95:78:7C
Certificate issuer: /CN=2dfc54d5543e12484b6bab2fdc399a8f5295787c
Certificate serial: 0194BC04DB7ABD6662D02A617F8302AAC388
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LfxU1VQ-EkhLa6sv3Dmaj1KVeHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/b6b9c4-82df-4ea6-aefc-70644e8f3641/1/LfxU1VQ-EkhLa6sv3Dmaj1KVeHw.mft
Manifest number: 01A1
Signing time: Fri 31 Jan 2025 11:00:22 +0000
Manifest this update: Fri 31 Jan 2025 11:00:22 +0000
Manifest next update: Sat 01 Feb 2025 11:00:22 +0000
Files and hashes: 1: LfxU1VQ-EkhLa6sv3Dmaj1KVeHw.crl (hash: g1Rz1kPz/7ct4xxhlEdG87qwk18fYS4HOceub7Abelc=)
2: fQ0Sre67u9FqAYj17x6CK1Kn0s0.roa (hash: gbYNt5MQ+KrOgley7XtqGDbUm1YLGIimwaWi/r+Sqf4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:db:7a:bd:66:62:d0:2a:61:7f:83:02:aa:c3:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2dfc54d5543e12484b6bab2fdc399a8f5295787c
Validity
Not Before: Jan 31 11:00:22 2025 GMT
Not After : Feb 1 11:00:22 2025 GMT
Subject: CN=af9a0546b5405e15d5900fd48abf1c9f79b6fdb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:75:bf:78:c2:79:f3:2b:95:84:23:80:11:83:
eb:22:f0:1e:56:df:cc:9c:c2:5c:23:e3:4a:5c:f2:
ac:1b:a9:19:e5:4d:d9:a2:40:8a:df:14:12:76:49:
49:92:a5:a9:00:09:e8:45:dd:24:9e:0a:ee:52:92:
51:7c:c1:43:e0:c4:4b:76:65:82:dd:4b:81:9d:4a:
09:24:bf:b1:9f:54:34:42:b8:f0:4a:66:cb:d5:f9:
fc:50:85:47:b9:95:eb:4a:69:0c:48:a0:77:13:4d:
0b:37:10:bb:5b:34:4a:ba:22:91:d7:ea:f0:49:63:
b1:61:63:1b:43:c0:04:91:9d:ba:a7:d7:f5:84:ea:
7a:b3:7c:7a:a4:f8:02:cb:d2:61:d9:99:d6:6f:18:
0f:a7:61:98:67:c0:97:4c:38:27:94:31:e8:8b:60:
21:98:23:64:b4:d8:b4:b6:bb:57:1b:72:f9:83:92:
13:04:5d:b9:7a:63:c6:98:f3:8e:29:44:05:7a:af:
d7:37:dd:e2:aa:61:47:0d:ce:6b:2c:36:ab:4a:12:
a6:50:28:66:cd:58:00:99:e3:d8:eb:4a:e7:3d:fa:
a2:77:a3:6a:fd:80:8b:10:0c:12:06:ab:c4:8d:63:
a8:dd:57:54:cb:19:fe:e7:13:09:5b:33:0a:30:0e:
19:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:9A:05:46:B5:40:5E:15:D5:90:0F:D4:8A:BF:1C:9F:79:B6:FD:B9
X509v3 Authority Key Identifier:
keyid:2D:FC:54:D5:54:3E:12:48:4B:6B:AB:2F:DC:39:9A:8F:52:95:78:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LfxU1VQ-EkhLa6sv3Dmaj1KVeHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/b6b9c4-82df-4ea6-aefc-70644e8f3641/1/LfxU1VQ-EkhLa6sv3Dmaj1KVeHw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/b6b9c4-82df-4ea6-aefc-70644e8f3641/1/LfxU1VQ-EkhLa6sv3Dmaj1KVeHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:a0:76:6b:e1:b0:43:bc:7d:14:1d:41:e6:97:30:a4:63:96:
bb:ef:c8:55:b3:12:72:d9:29:b8:08:71:26:2a:56:d5:9f:10:
7a:20:3b:a0:5e:31:44:0d:0b:64:00:8c:9a:d0:e1:41:69:bf:
ca:5a:6b:f2:21:cc:c3:f6:99:68:9f:80:50:90:e3:b2:d8:29:
11:35:3a:b1:b6:75:69:37:dd:5c:71:62:60:a5:bb:cd:bf:d3:
32:c2:6a:09:0f:e0:3d:94:01:68:d6:a6:70:55:7c:50:5a:5c:
77:6f:85:64:65:53:cb:75:5b:fa:49:67:a0:00:5c:ae:a4:eb:
5f:c8:e6:8d:ed:81:c7:1a:46:c6:e1:47:a4:81:aa:fa:86:cf:
fd:00:0a:47:7e:a8:8d:69:9e:6d:32:f9:af:3a:eb:39:a0:9b:
aa:db:69:3f:11:ff:71:69:73:c3:2a:df:43:d0:7a:ca:bd:cc:
c8:c7:e1:17:01:1d:d4:81:82:82:af:35:c6:8e:d9:79:9a:9d:
36:c1:c2:e9:f6:0a:57:40:61:19:19:e7:d1:c5:3c:65:74:f6:
1d:ac:9d:6b:c2:07:81:91:a0:15:1d:4c:a8:a3:30:3b:8d:d0:
99:cb:dc:33:97:b4:44:3f:f1:23:bd:4f:c8:0f:a4:58:9f:dc:
b6:96:5a:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:39:24 2025 by rpki-client