Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/52e997-6d9a-45ae-a7c2-0d205fb1ad05/1/LxiqH1XWNcliBMp5qCmT-87BUSw.mft
File: LxiqH1XWNcliBMp5qCmT-87BUSw.mft (raw, json)
Hash identifier: rQRzXyjDAqf/sFMECSJPfts0lQgoPkfc4g2qstYFiuk=
Subject key identifier: 4B:BB:25:F4:0F:26:6D:9A:7E:29:AA:2B:E0:CE:40:7C:3F:4C:38:A1
Authority key identifier: 2F:18:AA:1F:55:D6:35:C9:62:04:CA:79:A8:29:93:FB:CE:C1:51:2C
Certificate issuer: /CN=2f18aa1f55d635c96204ca79a82993fbcec1512c
Certificate serial: 0194BD4E81CCC0EB716B49D6C95156239EDC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LxiqH1XWNcliBMp5qCmT-87BUSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/52e997-6d9a-45ae-a7c2-0d205fb1ad05/1/LxiqH1XWNcliBMp5qCmT-87BUSw.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 17:00:26 +0000
Manifest this update: Fri 31 Jan 2025 17:00:26 +0000
Manifest next update: Sat 01 Feb 2025 17:00:26 +0000
Files and hashes: 1: LgyeVhb60AJRIPJ13YatbxO4AsM.roa (hash: +B/MY539hDGa2yzYS0WxkYZEnocpiOn/GpdxMJUzr84=)
2: LxiqH1XWNcliBMp5qCmT-87BUSw.crl (hash: vmJ2aSt7lkTFd9FpULOY3x6GZco/8TKo4TIg+yJc/3s=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:81:cc:c0:eb:71:6b:49:d6:c9:51:56:23:9e:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f18aa1f55d635c96204ca79a82993fbcec1512c
Validity
Not Before: Jan 31 17:00:26 2025 GMT
Not After : Feb 1 17:00:26 2025 GMT
Subject: CN=4bbb25f40f266d9a7e29aa2be0ce407c3f4c38a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:82:3c:ca:92:82:0f:d7:de:f9:71:9b:23:b0:
e5:dd:55:0f:b0:04:a8:1c:22:00:bc:c8:a4:c3:dd:
d0:97:a2:46:64:01:7c:9c:c8:a8:81:dd:e7:17:1e:
7e:e3:4d:8b:40:e6:cb:b4:8c:89:a4:be:ff:4c:f4:
dc:74:f3:99:ef:6a:cb:fc:f7:f9:2c:3d:92:85:99:
4c:2d:2a:91:d9:05:78:c5:4a:a8:1d:a6:34:02:c3:
2b:1a:ac:bf:e1:c2:5d:2d:1c:ea:6a:be:4a:07:85:
07:91:c3:23:2a:3b:3e:f0:8a:fa:32:51:62:23:8c:
2e:58:7a:ec:45:a3:81:82:ec:48:37:d7:74:91:40:
0e:51:d9:e5:74:0c:73:20:22:3a:28:82:6b:30:75:
f5:bd:87:4c:e9:6b:66:dd:d8:89:32:fc:f8:e7:30:
58:e8:8b:6b:16:18:83:a4:79:52:88:eb:42:a3:9c:
c0:9f:60:b0:59:3f:fd:44:4d:0e:ee:b2:bd:92:a0:
b8:12:67:4a:0e:88:90:e7:c3:61:ba:45:c1:e4:f7:
8f:99:17:0b:7c:34:15:8e:84:e1:73:ea:c8:eb:05:
2d:11:9e:d5:c7:9f:fd:aa:94:45:3e:fa:c5:5c:56:
6d:60:c9:bf:ac:4d:3b:b6:cd:61:b1:33:5b:95:6c:
ef:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:BB:25:F4:0F:26:6D:9A:7E:29:AA:2B:E0:CE:40:7C:3F:4C:38:A1
X509v3 Authority Key Identifier:
keyid:2F:18:AA:1F:55:D6:35:C9:62:04:CA:79:A8:29:93:FB:CE:C1:51:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LxiqH1XWNcliBMp5qCmT-87BUSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/52e997-6d9a-45ae-a7c2-0d205fb1ad05/1/LxiqH1XWNcliBMp5qCmT-87BUSw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/52e997-6d9a-45ae-a7c2-0d205fb1ad05/1/LxiqH1XWNcliBMp5qCmT-87BUSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:5d:81:09:55:ab:d3:3b:b9:e7:be:67:d2:48:cb:0e:3a:f6:
71:e0:ab:80:8b:6d:7d:95:e1:36:c1:df:b3:2b:d7:8f:7f:1f:
fa:8b:38:65:05:3f:96:b2:39:78:09:42:a5:bc:3c:40:84:02:
fb:c6:fc:48:29:2f:64:50:c4:ad:1e:54:01:f9:20:c9:18:57:
6e:ed:bc:10:39:ad:a8:34:f4:4f:d5:4d:d9:a1:72:33:12:1f:
49:3c:90:f0:40:47:ac:5f:b8:41:1c:57:88:ef:06:86:19:11:
7c:d9:7f:be:bc:9b:ad:df:cf:f4:fc:96:80:fd:c9:15:4a:da:
95:80:fe:e2:1c:47:dd:b9:02:62:1f:03:3b:87:8d:c7:40:c2:
8a:77:b1:17:01:1c:1c:a9:ca:10:3b:9a:c1:f1:3b:70:0f:8e:
06:52:31:1c:d1:9d:c1:9f:c4:e3:89:4d:9d:20:7a:c6:29:38:
99:40:a0:3c:63:d0:0a:ea:83:7b:36:6f:88:9c:f6:7c:99:1f:
46:8e:c3:0d:79:50:de:99:f8:ce:c9:ea:12:40:d9:73:31:da:
c5:5b:78:8b:25:0a:a0:8b:63:65:70:dc:87:0e:50:a4:88:be:
07:10:ee:5c:21:29:60:0f:12:a3:f9:f4:1d:4f:af:54:00:45:
d2:2e:9d:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:47:17 2025 by rpki-client