Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/a6b613-66bd-4312-8f0c-36b5dda9fbe8/1/LhmWbA6l3zqYf4NlUktRKMun_JA.mft
File: LhmWbA6l3zqYf4NlUktRKMun_JA.mft (raw, json)
Hash identifier: dMnFFKWb7zKhWypTeL44rcZMkNYv4BqfeE9jTO1s3Hg=
Subject key identifier: FF:7E:AA:C3:EE:D8:87:BE:EA:45:B5:A2:47:21:26:A5:81:43:B8:41
Authority key identifier: 2E:19:96:6C:0E:A5:DF:3A:98:7F:83:65:52:4B:51:28:CB:A7:FC:90
Certificate issuer: /CN=2e19966c0ea5df3a987f8365524b5128cba7fc90
Certificate serial: 0194BCE0D197C6C2E58F88D9C8A218026C30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LhmWbA6l3zqYf4NlUktRKMun_JA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/a6b613-66bd-4312-8f0c-36b5dda9fbe8/1/LhmWbA6l3zqYf4NlUktRKMun_JA.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 15:00:37 +0000
Manifest this update: Fri 31 Jan 2025 15:00:37 +0000
Manifest next update: Sat 01 Feb 2025 15:00:37 +0000
Files and hashes: 1: EB2pKsJqEpEjhB4YuLKeyjkIp9Q.roa (hash: ruDUWZ/Fl5sEVfjlgGOsVStJ3zZdJ/uyG7EZiN/zjl0=)
2: LhmWbA6l3zqYf4NlUktRKMun_JA.crl (hash: In0izZE3HQf+LqdUnvnzGKfuZT1KalkXYZFCyiElEuM=)
3: iOSgDas4E473RISs54ZCqJXEL1Y.roa (hash: cm025SWzl2vuQDv4U8M4vf0+/0CnnGay76ie0c/nESQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:d1:97:c6:c2:e5:8f:88:d9:c8:a2:18:02:6c:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e19966c0ea5df3a987f8365524b5128cba7fc90
Validity
Not Before: Jan 31 15:00:37 2025 GMT
Not After : Feb 1 15:00:37 2025 GMT
Subject: CN=ff7eaac3eed887beea45b5a2472126a58143b841
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:23:ba:ef:8d:8a:dc:10:cd:4b:99:b4:06:93:
4c:c5:74:2a:88:95:19:f5:8a:13:25:83:de:8f:8f:
ae:3d:d5:fd:16:5b:a5:33:74:95:c8:8d:e4:b7:90:
26:28:8d:f9:8a:64:42:92:8e:09:c0:50:26:c2:28:
cb:df:ae:1e:01:9a:f6:b9:27:84:6d:90:a9:77:25:
3f:dc:b0:11:3a:e6:1e:9d:e0:13:43:38:b2:cd:61:
ab:fd:af:5b:10:b5:34:7a:bf:14:df:2d:25:e6:fd:
20:e4:f6:a5:19:dc:c6:d8:04:ea:c1:c0:b0:16:72:
dc:b6:0e:08:87:3e:3b:95:c6:58:42:2e:e5:71:94:
b8:fa:39:e5:22:af:10:e9:0d:1f:6d:23:1e:a1:56:
bb:de:1a:e6:ab:56:13:fb:52:15:d5:85:cd:3e:02:
97:86:a7:49:e5:e6:61:99:fc:cf:4d:09:04:20:af:
93:5e:b3:ac:77:c8:af:4c:e1:b6:ef:cf:f3:03:0a:
1a:1d:ae:0d:93:aa:51:ac:a9:fd:50:29:9d:20:95:
4b:be:20:a9:94:ed:c2:fe:e9:c4:e6:16:7e:f8:31:
83:9a:b8:4e:4e:fc:73:60:50:05:36:66:28:3b:79:
9e:cf:df:4d:e2:3e:09:5a:6c:b3:4c:a5:2b:0f:bb:
4d:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:7E:AA:C3:EE:D8:87:BE:EA:45:B5:A2:47:21:26:A5:81:43:B8:41
X509v3 Authority Key Identifier:
keyid:2E:19:96:6C:0E:A5:DF:3A:98:7F:83:65:52:4B:51:28:CB:A7:FC:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LhmWbA6l3zqYf4NlUktRKMun_JA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/a6b613-66bd-4312-8f0c-36b5dda9fbe8/1/LhmWbA6l3zqYf4NlUktRKMun_JA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/a6b613-66bd-4312-8f0c-36b5dda9fbe8/1/LhmWbA6l3zqYf4NlUktRKMun_JA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:b3:6b:93:80:9f:71:b0:63:3e:3c:2a:dc:64:47:d9:04:31:
68:5b:56:e3:0a:0a:81:53:e1:00:dc:f8:6d:80:a7:61:ee:97:
6b:e2:4f:af:d1:ca:ac:84:51:f6:f5:50:2c:50:0d:e1:8f:73:
6d:17:f8:e8:10:db:66:f8:db:6f:75:79:c7:e4:13:3f:29:6e:
99:f0:01:b8:b8:05:78:5d:f6:ab:53:ec:cf:04:e7:7d:89:6d:
28:22:53:9e:6b:de:17:9f:4e:16:8d:48:bb:2a:4b:d5:3a:0f:
36:79:c7:65:41:73:c7:24:b4:9d:6a:f1:d2:0d:c6:c4:d4:f0:
2b:78:a1:0c:8a:75:c5:62:8b:fe:a1:cf:75:80:fc:56:c2:a9:
d2:2c:3b:8e:2a:09:6f:e0:cc:e3:6b:ac:c1:e1:25:c4:7f:90:
2b:37:ec:f6:ac:af:fb:ea:60:cb:72:f6:1c:42:be:b5:4d:54:
65:3f:96:dc:0f:7a:a7:53:8c:72:54:74:47:8a:18:e9:3a:c7:
cd:a9:10:5d:44:9d:cf:b7:4c:1f:26:53:44:5a:48:95:8c:cf:
8c:41:22:28:cd:77:4c:ec:62:25:1b:53:41:e9:c3:e9:9f:69:
70:ee:5a:de:c6:90:88:ab:20:71:dd:12:ca:f0:56:c8:73:18:
4f:52:ff:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:04:42 2025 by rpki-client