Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/48f99e-1a10-45c3-aa34-4cd15cbc501b/1/lakErGCT4eIpoHTFBQb_7NoBDM8.mft
File: lakErGCT4eIpoHTFBQb_7NoBDM8.mft (raw, json)
Hash identifier: UTZeEJ8I5/BjMHq7MYQfKWWZcEhxrz6u5jKjRvJiIeg=
Subject key identifier: EB:2B:1D:EA:06:36:AD:17:0E:7C:BE:B5:CB:CB:47:FD:B1:7B:2D:23
Authority key identifier: 95:A9:04:AC:60:93:E1:E2:29:A0:74:C5:05:06:FF:EC:DA:01:0C:CF
Certificate issuer: /CN=95a904ac6093e1e229a074c50506ffecda010ccf
Certificate serial: 0194BBCDDB492D1ACD43C006929511AEF174
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lakErGCT4eIpoHTFBQb_7NoBDM8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/48f99e-1a10-45c3-aa34-4cd15cbc501b/1/lakErGCT4eIpoHTFBQb_7NoBDM8.mft
Manifest number: 09A1
Signing time: Fri 31 Jan 2025 10:00:17 +0000
Manifest this update: Fri 31 Jan 2025 10:00:17 +0000
Manifest next update: Sat 01 Feb 2025 10:00:17 +0000
Files and hashes: 1: EYwLNQ0R_Ied-v-mXvUH_vf6GVA.roa (hash: TajJUilMmDGZNmoTd4v8tDuWl6eHYmByCynqf999DBU=)
2: lakErGCT4eIpoHTFBQb_7NoBDM8.crl (hash: sTXkUGAxuOr8Uv0mfedTc+6ridk0ymtkhc5wd2GbtxE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:db:49:2d:1a:cd:43:c0:06:92:95:11:ae:f1:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95a904ac6093e1e229a074c50506ffecda010ccf
Validity
Not Before: Jan 31 10:00:17 2025 GMT
Not After : Feb 1 10:00:17 2025 GMT
Subject: CN=eb2b1dea0636ad170e7cbeb5cbcb47fdb17b2d23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:95:e6:ff:95:2f:67:e3:38:33:e5:06:d5:38:
c1:7a:12:54:74:1a:ee:14:06:d1:27:88:bc:62:86:
5c:79:0b:63:ba:55:2b:08:78:62:4f:8d:61:96:8d:
19:20:db:47:7a:89:b2:5a:4b:61:37:cb:ee:42:3d:
8f:fb:21:e9:35:d2:0e:5a:65:e9:6d:56:5b:04:e6:
94:b0:90:4e:dd:24:c6:59:92:e4:e0:fe:74:f8:f6:
d1:29:0f:99:96:00:8b:7e:e6:99:01:44:92:a6:03:
76:6c:4f:e1:fd:90:85:17:75:d2:37:be:c6:a0:d4:
81:de:b9:59:15:a0:57:af:c9:94:fe:df:12:63:b3:
af:0f:09:7f:f0:17:e2:7d:45:4d:d3:c8:24:0b:03:
21:b2:f3:8f:50:d0:b3:c5:30:51:e7:9d:f1:e1:08:
29:76:56:15:ca:bb:8e:6f:4e:4d:a3:39:c1:f1:6b:
b2:36:81:f4:11:bf:36:e1:04:4c:7f:2a:4d:e3:96:
0a:01:8f:84:b7:c4:2f:24:ed:64:60:ec:35:43:12:
aa:f8:15:7d:4a:f5:13:86:62:c1:3d:25:4d:9c:51:
bf:6d:25:fd:11:38:20:61:4b:e3:7b:42:08:36:a5:
ad:d8:9f:da:5a:92:50:2c:f9:58:38:c0:0a:b1:c2:
67:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:2B:1D:EA:06:36:AD:17:0E:7C:BE:B5:CB:CB:47:FD:B1:7B:2D:23
X509v3 Authority Key Identifier:
keyid:95:A9:04:AC:60:93:E1:E2:29:A0:74:C5:05:06:FF:EC:DA:01:0C:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lakErGCT4eIpoHTFBQb_7NoBDM8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/48f99e-1a10-45c3-aa34-4cd15cbc501b/1/lakErGCT4eIpoHTFBQb_7NoBDM8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/48f99e-1a10-45c3-aa34-4cd15cbc501b/1/lakErGCT4eIpoHTFBQb_7NoBDM8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:21:03:db:ad:11:ea:a3:16:bc:30:f4:a2:4e:06:86:ca:e6:
9f:3c:e9:38:9b:89:eb:8d:c3:71:0e:a8:a3:8c:91:a2:75:49:
28:2d:52:1e:93:03:d7:96:8f:6b:1a:49:c1:21:26:96:4d:8e:
77:f5:05:f1:86:9a:1c:c4:cf:42:fb:09:d5:5b:8f:32:a0:d8:
45:14:cb:2f:6a:c9:15:fd:22:bd:da:fd:59:59:a1:f8:9e:7e:
95:ae:69:fc:90:6a:9e:a3:b1:ab:87:bf:77:04:77:27:19:21:
a4:f1:54:b3:8e:5c:c9:34:a4:ef:81:47:05:15:27:6b:2a:69:
f5:39:c1:38:cf:02:8b:a9:23:a9:f6:68:04:e6:b9:a9:2d:22:
98:33:0c:f7:80:76:a2:b4:7a:c3:37:23:73:70:cb:63:3f:05:
75:0d:49:fe:1c:cd:47:c2:7f:45:bd:02:5b:6f:9d:3f:03:da:
53:71:63:3d:ee:26:cc:f0:c4:b3:90:11:01:5a:f4:a5:d8:89:
ea:fb:f6:d2:d0:8b:25:e7:f6:ac:68:09:38:21:dd:b6:c5:2e:
71:32:83:4c:a3:cd:03:f8:c9:3c:58:30:2d:41:8a:0d:2a:84:
50:5c:17:10:a7:6f:86:97:b8:23:e3:53:dc:d8:0c:ae:4b:7a:
30:48:ca:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 11:01:26 2025 by rpki-client