Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/92e74f-1159-4e89-b15c-7637793f8f3e/1/LAX_pc0oy9ANAmhELHiI-yqjpfg.mft
File: LAX_pc0oy9ANAmhELHiI-yqjpfg.mft (raw, json)
Hash identifier: Vhr2/p1vVHF6sldAqhEGb4DkRbZR907uRNdfQy+pdhM=
Subject key identifier: 49:9E:A3:AC:20:20:5B:22:20:0E:55:F9:EF:0D:27:AF:04:E4:C2:C3
Authority key identifier: 2C:05:FF:A5:CD:28:CB:D0:0D:02:68:44:2C:78:88:FB:2A:A3:A5:F8
Certificate issuer: /CN=2c05ffa5cd28cbd00d0268442c7888fb2aa3a5f8
Certificate serial: 0194BC72E8D376D56F305E0E234457072AEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LAX_pc0oy9ANAmhELHiI-yqjpfg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/92e74f-1159-4e89-b15c-7637793f8f3e/1/LAX_pc0oy9ANAmhELHiI-yqjpfg.mft
Manifest number: 09F2
Signing time: Fri 31 Jan 2025 13:00:34 +0000
Manifest this update: Fri 31 Jan 2025 13:00:34 +0000
Manifest next update: Sat 01 Feb 2025 13:00:34 +0000
Files and hashes: 1: LAX_pc0oy9ANAmhELHiI-yqjpfg.crl (hash: mX2ZI8xNxxx5ujfyTCj+S6ehVVCm/A6huYaTNTGwpWc=)
2: Uev3ms-PRGrivyRSUw9HwGncKw0.roa (hash: IzYHkFLw712ufmc2//GI0v4Y5gTYHcbd5XwyKaiB5sw=)
3: o_E0IJVdKhbQRmHC6Pylr1ZYJik.roa (hash: QOVqaW1uvzMy3GoiJe9ujvNbGlD/IhJkIYNAUlIWSVs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:e8:d3:76:d5:6f:30:5e:0e:23:44:57:07:2a:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c05ffa5cd28cbd00d0268442c7888fb2aa3a5f8
Validity
Not Before: Jan 31 13:00:34 2025 GMT
Not After : Feb 1 13:00:34 2025 GMT
Subject: CN=499ea3ac20205b22200e55f9ef0d27af04e4c2c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:9d:f1:2b:fb:8c:89:d3:63:fe:d0:af:68:4b:
0b:36:86:08:82:33:0e:80:34:9d:62:90:31:71:1b:
83:dc:c1:a8:9e:ef:6e:e1:28:aa:69:3f:13:a1:c7:
8f:b1:61:6e:27:f6:96:8a:8c:11:be:53:ff:89:68:
23:ba:14:fb:fb:ba:f4:15:2c:b0:69:80:0f:dd:cc:
1d:0b:b7:5e:37:7e:de:b4:2b:cf:aa:a3:ac:2b:b6:
cd:06:6a:63:43:38:0b:08:b6:9d:16:5d:96:8a:95:
dc:c7:d7:f9:3d:49:34:ba:90:b5:b5:12:b2:bd:bf:
56:b3:64:58:3e:b2:bc:3f:0d:9b:3b:cc:5f:27:f6:
0e:9e:3e:88:b5:15:e8:d7:21:31:e4:b3:e1:30:d3:
2a:5b:b7:a4:bd:93:96:d0:43:a9:2b:07:05:ea:6f:
5b:ed:a2:ca:ee:33:de:6a:4c:d8:3c:01:4f:61:63:
18:a6:07:a1:e1:49:e1:27:b1:f0:2f:80:58:e5:c9:
2a:1f:92:28:70:64:f5:cb:27:14:ea:06:c2:9d:33:
61:37:55:23:f6:98:e5:bd:ab:56:7f:ff:bf:38:9e:
a4:8e:02:44:db:a1:ac:2e:e6:d7:e3:27:d3:05:e2:
70:c5:e5:fb:09:c2:48:21:31:1d:b0:f0:e5:eb:ab:
fc:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:9E:A3:AC:20:20:5B:22:20:0E:55:F9:EF:0D:27:AF:04:E4:C2:C3
X509v3 Authority Key Identifier:
keyid:2C:05:FF:A5:CD:28:CB:D0:0D:02:68:44:2C:78:88:FB:2A:A3:A5:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LAX_pc0oy9ANAmhELHiI-yqjpfg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/92e74f-1159-4e89-b15c-7637793f8f3e/1/LAX_pc0oy9ANAmhELHiI-yqjpfg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/92e74f-1159-4e89-b15c-7637793f8f3e/1/LAX_pc0oy9ANAmhELHiI-yqjpfg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:31:87:8d:10:8b:30:4a:11:14:cc:e7:90:42:cb:60:5c:fc:
28:06:1b:9a:64:71:de:37:22:92:4a:a6:0d:27:1c:2d:d7:fb:
c6:06:0e:55:05:7c:d6:80:db:9a:c4:e9:89:e2:d8:99:f4:e1:
ba:8d:1c:33:03:18:a6:01:c2:32:4a:3f:1b:54:b8:7d:e1:f3:
9a:01:ca:e3:41:3b:63:d8:e3:7b:6f:d4:3d:bd:30:1b:d8:4e:
84:cb:e0:f8:08:fd:dc:77:f6:56:5b:e9:aa:db:76:f3:b7:66:
9a:e7:2b:d1:c2:57:96:e1:02:32:73:0c:14:e7:0f:c3:71:44:
53:8f:ed:56:02:2c:6b:f5:55:84:ac:19:8b:d4:d4:05:d0:97:
ae:70:97:3d:20:6b:92:13:fc:33:9b:f5:93:53:d0:08:7e:48:
e8:f5:37:c1:f8:ad:fd:28:ae:98:d7:12:b9:6c:04:57:60:37:
82:c1:f9:13:8e:80:f8:84:27:8e:a9:a4:3e:d0:94:f9:23:09:
a0:40:23:dd:e4:2e:ea:9f:11:98:1e:76:e6:98:9e:ef:68:d9:
98:11:df:aa:de:5e:3c:da:15:74:8e:48:27:1b:c8:7a:d0:0a:
68:30:0a:b3:97:d8:91:d9:2a:ce:a4:2c:06:d3:12:31:c7:65:
56:6c:d2:98
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8cujTdtVvMF4OI0RXByrvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJjMDVmZmE1Y2QyOGNiZDAwZDAyNjg0NDJjNzg4OGZiMmFh
M2E1ZjgwHhcNMjUwMTMxMTMwMDM0WhcNMjUwMjAxMTMwMDM0WjAzMTEwLwYDVQQD
Eyg0OTllYTNhYzIwMjA1YjIyMjAwZTU1ZjllZjBkMjdhZjA0ZTRjMmMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv53xK/uMidNj/tCvaEsLNoYIgjMO
gDSdYpAxcRuD3MGonu9u4SiqaT8TocePsWFuJ/aWiowRvlP/iWgjuhT7+7r0FSyw
aYAP3cwdC7deN37etCvPqqOsK7bNBmpjQzgLCLadFl2WipXcx9f5PUk0upC1tRKy
vb9Ws2RYPrK8Pw2bO8xfJ/YOnj6ItRXo1yEx5LPhMNMqW7ekvZOW0EOpKwcF6m9b
7aLK7jPeakzYPAFPYWMYpgeh4UnhJ7HwL4BY5ckqH5IocGT1yycU6gbCnTNhN1Uj
9pjlvatWf/+/OJ6kjgJE26GsLubX4yfTBeJwxeX7CcJIITEdsPDl66v8oQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEmeo6wgIFsiIA5V+e8NJ68E5MLDMB8GA1UdIwQY
MBaAFCwF/6XNKMvQDQJoRCx4iPsqo6X4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTEFYX3BjMG95OUFOQW1oRUxIaUkteXFqcGZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC85MmU3NGYtMTE1OS00ZTg5LWIxNWMt
NzYzNzc5M2Y4ZjNlLzEvTEFYX3BjMG95OUFOQW1oRUxIaUkteXFqcGZnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OC85MmU3NGYtMTE1OS00ZTg5LWIxNWMtNzYzNzc5M2Y4ZjNl
LzEvTEFYX3BjMG95OUFOQW1oRUxIaUkteXFqcGZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAljGHjRCL
MEoRFMznkELLYFz8KAYbmmRx3jcikkqmDSccLdf7xgYOVQV81oDbmsTpieLYmfTh
uo0cMwMYpgHCMko/G1S4feHzmgHK40E7Y9jje2/UPb0wG9hOhMvg+Aj93Hf2Vlvp
qtt287dmmucr0cJXluECMnMMFOcPw3FEU4/tVgIsa/VVhKwZi9TUBdCXrnCXPSBr
khP8M5v1k1PQCH5I6PU3wfit/SiumNcSuWwEV2A3gsH5E46A+IQnjqmkPtCU+SMJ
oEAj3eQu6p8RmB525pie72jZmBHfqt5ePNoVdI5IJxvIetAKaDAKs5fYkdkqzqQs
BtMSMcdlVmzSmA==
-----END CERTIFICATE-----
Generated at Mon Apr 28 12:37:30 2025 by rpki-client