Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/accde8-f46f-4ef9-94af-8dd81e4b3e33/1/LmszQT-qXl4dJ5oqJf-B2NFTJd8.mft
File: LmszQT-qXl4dJ5oqJf-B2NFTJd8.mft (raw, json)
Hash identifier: a2n5oTf5UKfgwhjTvYoqB37nizFRHcAsPDyltE9ThYo=
Subject key identifier: 62:DD:DC:BE:C8:17:49:DC:D7:48:AB:AD:FE:AB:5C:F3:D4:B6:5F:32
Authority key identifier: 2E:6B:33:41:3F:AA:5E:5E:1D:27:9A:2A:25:FF:81:D8:D1:53:25:DF
Certificate issuer: /CN=2e6b33413faa5e5e1d279a2a25ff81d8d15325df
Certificate serial: 0194BD4E8DEFECDA18BAD388BF7FC1CE590A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LmszQT-qXl4dJ5oqJf-B2NFTJd8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/accde8-f46f-4ef9-94af-8dd81e4b3e33/1/LmszQT-qXl4dJ5oqJf-B2NFTJd8.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 17:00:29 +0000
Manifest this update: Fri 31 Jan 2025 17:00:29 +0000
Manifest next update: Sat 01 Feb 2025 17:00:29 +0000
Files and hashes: 1: 1-rQwqNKly6aenIYeWSDOecvE9Dg.roa (hash: xyKaPv0UlzvDAkK4ZPQkPqyXzd2d32Ec3cQVPGFT2Lk=)
2: 53x_LlMR9wDfhoH_h-dm_2o9cfc.roa (hash: hpGqRuP4r/d0ndxhvimQvb9wKXUShtDAOOkpu0Or3Uk=)
3: LmszQT-qXl4dJ5oqJf-B2NFTJd8.crl (hash: g0pgsphfchYEDfIIycpsqpGSFo6eucOuKsukocMh7t4=)
4: sCdHa8GDoglI_mdXJ5Cs8c0F3ts.roa (hash: MzLxzWRZS24YmZa+mNMBCsFOGmjiB2b/WusU+bbqWL8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:8d:ef:ec:da:18:ba:d3:88:bf:7f:c1:ce:59:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e6b33413faa5e5e1d279a2a25ff81d8d15325df
Validity
Not Before: Jan 31 17:00:29 2025 GMT
Not After : Feb 1 17:00:29 2025 GMT
Subject: CN=62dddcbec81749dcd748abadfeab5cf3d4b65f32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:c8:dc:5b:97:65:23:fd:51:98:79:4e:b2:98:
af:5a:46:e1:26:5a:8d:f6:c1:3b:ea:1e:81:be:a2:
2b:3f:10:c4:3f:c4:55:4d:16:2e:e3:35:c7:23:fd:
dd:7b:73:03:76:10:29:98:34:bb:bf:a6:e6:21:8e:
ff:a7:d0:0f:ed:00:98:6c:c3:5e:ed:2d:bb:b1:71:
92:80:1f:94:cb:ec:79:0b:72:8e:c5:79:31:1a:d6:
61:98:9b:20:d2:10:29:ef:d3:a4:73:02:ca:ce:bd:
2c:36:05:81:3f:2d:14:36:46:2e:57:14:21:d5:65:
fa:2a:18:78:44:b3:cd:dd:22:b9:d8:a6:d1:b1:49:
f1:e4:02:7f:e8:40:92:b2:42:69:f5:20:57:15:91:
79:75:fd:f9:82:c2:36:4e:d6:04:b3:d8:5a:1f:4c:
ee:a2:80:18:56:eb:08:ea:5d:a5:25:aa:66:e4:13:
9f:0e:fa:d7:45:3f:94:4b:55:2a:01:d1:61:6d:08:
41:a0:b1:3d:af:fa:b7:80:d8:df:9b:c7:3c:52:33:
d7:8a:1c:f7:15:cb:9c:45:e0:c3:ba:5b:fc:09:54:
12:81:f5:72:be:75:39:fb:36:08:93:8b:5a:c2:2d:
4f:d2:55:e0:f7:2a:73:24:05:9a:ff:ef:e0:10:44:
5e:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:DD:DC:BE:C8:17:49:DC:D7:48:AB:AD:FE:AB:5C:F3:D4:B6:5F:32
X509v3 Authority Key Identifier:
keyid:2E:6B:33:41:3F:AA:5E:5E:1D:27:9A:2A:25:FF:81:D8:D1:53:25:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LmszQT-qXl4dJ5oqJf-B2NFTJd8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/accde8-f46f-4ef9-94af-8dd81e4b3e33/1/LmszQT-qXl4dJ5oqJf-B2NFTJd8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/accde8-f46f-4ef9-94af-8dd81e4b3e33/1/LmszQT-qXl4dJ5oqJf-B2NFTJd8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:bc:6d:65:b6:a0:71:39:fd:ed:d3:f2:2a:f7:72:fc:aa:7c:
b0:09:79:bb:16:e9:4f:8d:53:6b:65:6d:23:7a:45:8d:0e:4b:
3e:76:dc:85:be:df:55:a6:1a:76:88:9f:e4:c4:df:c8:0a:9b:
22:dd:20:31:35:e5:6d:7e:90:6a:51:32:2e:89:8a:b8:aa:b6:
21:91:d6:5b:44:4c:d0:cd:5a:4d:67:0f:34:b8:3a:5f:9c:76:
cb:b6:57:bc:7f:94:d1:b9:52:84:d6:fb:f3:65:cc:67:eb:24:
42:ad:3e:d5:4d:91:0a:ab:32:d5:c1:38:fe:84:4e:23:66:ee:
05:cb:a1:48:ad:5e:01:0d:18:b8:9d:c1:20:4b:20:65:1b:84:
31:96:f3:df:84:e5:8b:0c:f4:b4:a2:da:5c:d7:c7:bb:86:38:
7b:ea:47:c9:fb:a1:ba:cb:60:5f:40:38:c0:5d:e1:2c:b7:b8:
d7:a8:09:57:8c:2a:e2:11:1f:35:82:5a:51:af:31:09:5d:33:
05:a0:35:d7:16:f9:54:10:e1:2e:a0:fe:5f:59:70:27:a7:8d:
5e:5c:02:62:1b:7f:a2:e1:7b:bc:68:82:e9:63:73:6c:3e:3c:
cc:c2:10:88:34:31:26:3a:8d:8b:73:15:f3:20:52:ef:bd:b6:
7a:47:96:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:37:52 2025 by rpki-client