Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/ccd96e-133e-45b7-88b7-e2ae055eced1/1/Lfh3mjyC8A_BRDXufY0LjW3YIE4.mft
File: Lfh3mjyC8A_BRDXufY0LjW3YIE4.mft (raw, json)
Hash identifier: 1uNhOZyeUSHzlG364hIclsNs71+iAD+LbQpPzBzAxRY=
Subject key identifier: 2C:DD:96:B3:C4:71:3E:4A:38:1A:38:1F:4C:54:57:DE:F6:4E:71:44
Authority key identifier: 2D:F8:77:9A:3C:82:F0:0F:C1:44:35:EE:7D:8D:0B:8D:6D:D8:20:4E
Certificate issuer: /CN=2df8779a3c82f00fc14435ee7d8d0b8d6dd8204e
Certificate serial: 0194BD4E3D7019E4B4236A7A4BCC13CD4824
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lfh3mjyC8A_BRDXufY0LjW3YIE4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/ccd96e-133e-45b7-88b7-e2ae055eced1/1/Lfh3mjyC8A_BRDXufY0LjW3YIE4.mft
Manifest number: 142E
Signing time: Fri 31 Jan 2025 17:00:08 +0000
Manifest this update: Fri 31 Jan 2025 17:00:08 +0000
Manifest next update: Sat 01 Feb 2025 17:00:08 +0000
Files and hashes: 1: LDfn0M5v99IHnOQFUNXp12Nf90k.roa (hash: do0pH7tAz4W21wYBRY5jEznU82Zdd3DteyiFEbjbCqA=)
2: Lfh3mjyC8A_BRDXufY0LjW3YIE4.crl (hash: tTGcBB8uEJ5QslZUFgBsB0Mi+YQ2z0meRlWvBFV9tQU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:3d:70:19:e4:b4:23:6a:7a:4b:cc:13:cd:48:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2df8779a3c82f00fc14435ee7d8d0b8d6dd8204e
Validity
Not Before: Jan 31 17:00:08 2025 GMT
Not After : Feb 1 17:00:08 2025 GMT
Subject: CN=2cdd96b3c4713e4a381a381f4c5457def64e7144
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:32:27:d9:fe:9c:b8:e4:74:22:00:d9:bf:b1:
3c:85:59:85:ec:d4:8f:6e:97:95:06:d0:05:df:7c:
0b:cc:bd:12:a7:23:b4:f0:0b:e6:cc:d6:71:16:d4:
43:31:0f:a6:0f:55:68:e9:bd:cc:b9:eb:f0:94:25:
78:06:d3:50:98:f0:cb:88:01:47:80:e0:a3:ee:61:
d5:c4:b6:9e:96:28:d5:e6:82:42:18:4a:3a:c6:91:
1f:5b:a9:0d:66:9d:32:49:8b:57:ab:a4:fd:ac:29:
4d:c3:05:a9:38:90:42:9d:63:62:37:76:1e:3c:5b:
51:9d:3c:6a:74:37:08:fe:c9:09:83:cd:b6:f4:7a:
bc:8f:84:f4:8e:56:48:a3:e9:41:ed:7f:c8:aa:0d:
03:40:11:e8:aa:8e:c6:05:4c:17:91:dd:65:a3:08:
f4:f6:f4:69:fc:51:57:e5:9e:88:30:d1:b1:4e:05:
f2:15:83:6d:bc:a1:35:c9:9f:7e:ff:81:01:3a:81:
1d:92:9f:4f:16:4b:91:0c:f7:39:b7:db:68:87:6b:
44:4c:c6:1c:f4:a4:22:f3:e7:e4:b5:a4:c5:f4:75:
60:4e:13:98:44:44:85:f8:30:46:f5:17:ab:eb:79:
d9:7d:12:74:5b:36:2a:3f:36:5a:6a:8a:82:42:2a:
56:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:DD:96:B3:C4:71:3E:4A:38:1A:38:1F:4C:54:57:DE:F6:4E:71:44
X509v3 Authority Key Identifier:
keyid:2D:F8:77:9A:3C:82:F0:0F:C1:44:35:EE:7D:8D:0B:8D:6D:D8:20:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lfh3mjyC8A_BRDXufY0LjW3YIE4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/ccd96e-133e-45b7-88b7-e2ae055eced1/1/Lfh3mjyC8A_BRDXufY0LjW3YIE4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/ccd96e-133e-45b7-88b7-e2ae055eced1/1/Lfh3mjyC8A_BRDXufY0LjW3YIE4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:a9:60:d6:6c:7c:ef:1b:c5:df:2e:91:2b:3e:df:57:84:e4:
f5:fa:5c:6b:66:d1:e7:82:4e:c8:f8:05:db:87:84:8d:a4:97:
4d:25:59:94:e1:47:f8:06:21:38:eb:85:fb:b8:a7:b7:e0:e2:
47:0f:a8:a0:95:16:30:61:e0:9c:f3:3b:cd:8a:54:1c:7b:e7:
22:7d:12:47:09:f4:1d:eb:e4:a0:e8:ee:51:90:3c:12:f3:1f:
a7:7c:68:75:87:dc:13:7a:b1:37:cb:44:8e:16:44:89:f1:c4:
d6:54:a3:7b:2b:05:65:37:15:57:0d:cc:47:85:7f:3d:c8:cb:
70:9c:eb:4d:39:87:65:2a:83:ac:f4:24:55:46:0c:b2:9d:37:
a8:ea:b6:1d:07:2d:31:f5:69:1e:6a:aa:5b:4b:8c:dc:4f:cb:
a9:d9:01:83:cc:5c:10:62:52:07:6b:73:83:45:65:b2:9a:91:
b5:ff:5f:e6:7f:d8:db:33:47:78:15:41:e3:ee:89:4b:ca:d3:
be:38:ff:32:1f:bd:97:94:73:21:42:3c:01:27:ea:ec:ee:e6:
e7:d5:b6:ed:b7:5c:ce:92:69:3a:73:3c:02:f5:62:ad:5f:8e:
fe:29:c4:61:1c:99:aa:e3:91:ef:c4:23:b2:b3:24:f1:d3:0d:
9d:ae:15:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:40:14 2025 by rpki-client