Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/86ba36-78b8-44bb-9fb4-26c7c963a769/1/LkPayOpVaTQ53RuLSBK6cYNPEDE.mft
File: LkPayOpVaTQ53RuLSBK6cYNPEDE.mft (raw, json)
Hash identifier: Ikj6v8Ryric7F5grHM8RaY8TcxZZydj5tUW2escD2t0=
Subject key identifier: 0C:7D:28:D7:17:63:DE:7E:7E:53:C4:51:EB:4D:E0:5B:14:10:9D:E1
Authority key identifier: 2E:43:DA:C8:EA:55:69:34:39:DD:1B:8B:48:12:BA:71:83:4F:10:31
Certificate issuer: /CN=2e43dac8ea55693439dd1b8b4812ba71834f1031
Certificate serial: 0194BC3C2AC398B7CE783B7705ACD33CFCAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LkPayOpVaTQ53RuLSBK6cYNPEDE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/86ba36-78b8-44bb-9fb4-26c7c963a769/1/LkPayOpVaTQ53RuLSBK6cYNPEDE.mft
Manifest number: 10CF
Signing time: Fri 31 Jan 2025 12:00:47 +0000
Manifest this update: Fri 31 Jan 2025 12:00:47 +0000
Manifest next update: Sat 01 Feb 2025 12:00:47 +0000
Files and hashes: 1: ANPtCnGv8gHA7x3faWzBPJFvOXI.roa (hash: 47gT+uwBF8roCKnncbKY5zhpD+DW3HsUlU+dHgq1yW0=)
2: LkPayOpVaTQ53RuLSBK6cYNPEDE.crl (hash: +STeWTmYQGUeAdOkjmUSCq740BEDjo/eBCLhYCb0EGs=)
3: Q_F5FBMRJgiBKxNjWiortg2YMoY.roa (hash: aObbq13Sl5QPy6edKviS0LhaIUtmg0bsHO4b4zIGuiQ=)
4: UhVG2jyrAmFon0NT28kVJfJ2xPU.roa (hash: 0vKwRNkKIsm0/VOmSdKGt70EGUg+yxe2L/I3kHNcIS8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:2a:c3:98:b7:ce:78:3b:77:05:ac:d3:3c:fc:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e43dac8ea55693439dd1b8b4812ba71834f1031
Validity
Not Before: Jan 31 12:00:47 2025 GMT
Not After : Feb 1 12:00:47 2025 GMT
Subject: CN=0c7d28d71763de7e7e53c451eb4de05b14109de1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:b0:16:93:ce:b2:24:21:f2:b8:2a:da:29:a9:
a8:69:d2:d2:93:e6:8c:c0:a4:12:50:3c:4e:db:ab:
1a:81:1c:4f:ed:06:18:45:ac:8d:b6:15:87:86:f6:
4a:20:e3:03:d0:79:7d:ed:b2:74:39:df:57:e7:b0:
2c:9c:ff:66:e3:aa:d4:b9:ea:bf:8f:9f:9b:96:03:
e3:bd:ee:89:d7:e2:5e:3e:8e:c6:08:89:8b:04:2d:
a2:e4:6a:87:5c:cc:62:03:3f:3c:69:cb:3c:72:21:
37:9d:27:07:4f:85:1b:4b:82:5d:a4:73:8a:f2:15:
98:69:92:8b:a8:2b:57:a5:7c:90:fd:54:2f:3c:71:
f0:0a:2a:c7:bc:17:d7:09:2d:f4:6d:c6:d6:9d:a7:
fd:65:d3:a8:0b:e8:20:83:4c:2e:52:f8:fb:46:ef:
a9:e3:e9:69:17:03:6b:87:9e:7c:c3:65:fc:34:7c:
4c:9e:46:41:42:39:80:08:d9:a3:29:64:8d:76:b7:
d9:d9:26:bc:01:07:e6:db:78:bd:4a:15:6c:09:21:
d4:1e:14:0a:c7:5c:18:d6:1f:35:0e:f8:a7:da:00:
24:67:fc:d7:23:3d:36:b3:62:56:c9:2d:0f:cf:28:
30:69:07:b9:0c:44:a9:d9:44:05:ab:00:59:2e:67:
ed:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:7D:28:D7:17:63:DE:7E:7E:53:C4:51:EB:4D:E0:5B:14:10:9D:E1
X509v3 Authority Key Identifier:
keyid:2E:43:DA:C8:EA:55:69:34:39:DD:1B:8B:48:12:BA:71:83:4F:10:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LkPayOpVaTQ53RuLSBK6cYNPEDE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/86ba36-78b8-44bb-9fb4-26c7c963a769/1/LkPayOpVaTQ53RuLSBK6cYNPEDE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/86ba36-78b8-44bb-9fb4-26c7c963a769/1/LkPayOpVaTQ53RuLSBK6cYNPEDE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:e1:c9:41:1b:3e:69:5a:b6:47:a8:1d:46:c8:77:69:15:97:
48:44:0f:f6:6b:74:d1:16:49:e0:f4:66:ea:b4:d1:26:0f:84:
90:9a:cf:c6:9a:64:91:b2:14:20:c2:6b:63:9f:c8:74:cf:10:
58:b8:fc:ac:89:20:05:28:4a:29:c5:fb:6d:62:74:32:9c:aa:
22:6c:7f:64:43:cc:ab:83:0c:e5:f9:54:8a:9d:c6:74:12:9b:
90:17:44:43:cb:27:ae:e5:b9:c6:a1:2e:b6:d6:15:08:9b:d6:
57:ab:c9:c0:b2:d1:c8:e5:45:ec:b7:d1:de:cb:9e:37:91:21:
6f:43:05:ac:dd:4e:e0:79:37:18:4b:98:e3:1e:3e:09:a2:af:
96:c3:71:21:9b:ef:8f:1e:e5:d5:97:ef:c9:89:9d:e9:47:c3:
97:2b:a3:eb:06:90:58:72:31:16:0a:0c:5e:93:6e:c2:d8:eb:
96:31:e2:7d:e4:c9:2c:9c:5c:86:33:e3:49:5b:b4:30:d8:62:
cf:33:96:4b:5e:08:21:b3:8d:47:c2:78:6a:34:f0:bb:13:0f:
52:3b:19:36:41:5a:37:f4:01:d5:81:f1:e3:e8:2c:04:c9:85:
46:c8:61:fd:f0:35:d9:d7:ea:73:7c:6a:51:56:8e:6a:86:73:
59:26:2e:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:44:23 2025 by rpki-client