Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/3838c4-6e46-49a8-8c14-ae8b8d788700/1/LNpfA-r1E6d_LsIN5bsWcsXSeas.mft
File: LNpfA-r1E6d_LsIN5bsWcsXSeas.mft (raw, json)
Hash identifier: XFlqSDyIqOvB7BW96uk9sAsH694GwEJi6SJcJIaDjp0=
Subject key identifier: 53:1A:6E:C5:88:26:78:D8:8F:98:54:18:DF:7E:13:22:71:B4:5B:C3
Authority key identifier: 2C:DA:5F:03:EA:F5:13:A7:7F:2E:C2:0D:E5:BB:16:72:C5:D2:79:AB
Certificate issuer: /CN=2cda5f03eaf513a77f2ec20de5bb1672c5d279ab
Certificate serial: 0194BCA96E5F60E98F5F3B2D63C2B67BDC53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LNpfA-r1E6d_LsIN5bsWcsXSeas.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/3838c4-6e46-49a8-8c14-ae8b8d788700/1/LNpfA-r1E6d_LsIN5bsWcsXSeas.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 14:00:07 +0000
Manifest this update: Fri 31 Jan 2025 14:00:07 +0000
Manifest next update: Sat 01 Feb 2025 14:00:07 +0000
Files and hashes: 1: I_El3VD2zizuoyNdnUn9kOdcLek.roa (hash: 74aqpCJ0dpEabBMkIS/h3jijqMv/0y3rfXL3oZ/vRAo=)
2: LNpfA-r1E6d_LsIN5bsWcsXSeas.crl (hash: Yt5nM7HEqCxQuexu+A/ifUwqpH/ozxaxn8rGED6Q1n8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:6e:5f:60:e9:8f:5f:3b:2d:63:c2:b6:7b:dc:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cda5f03eaf513a77f2ec20de5bb1672c5d279ab
Validity
Not Before: Jan 31 14:00:07 2025 GMT
Not After : Feb 1 14:00:07 2025 GMT
Subject: CN=531a6ec5882678d88f985418df7e132271b45bc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:a4:b8:ab:43:48:3f:c6:e3:b2:21:90:bc:65:
b2:48:03:e1:fa:60:50:da:c9:03:81:10:d0:d5:f0:
dd:41:2e:90:75:22:5b:be:8c:ef:2e:fb:a3:02:53:
99:4e:d5:d1:b6:d2:2c:96:cf:a9:a4:8d:f7:97:d3:
68:c0:a1:06:3a:8e:84:e1:83:76:3c:09:18:99:c4:
9f:49:90:f2:d4:59:e0:00:d8:37:6c:a0:73:fd:c2:
0c:cc:2d:94:ec:dc:07:13:41:0b:b8:10:89:33:41:
27:90:eb:a5:f4:76:c0:4e:fe:50:ba:b7:f0:e8:60:
97:3c:3a:a2:ef:1c:3b:b7:0d:6e:be:67:08:e0:c8:
f1:da:9f:22:41:7c:f9:d9:a0:c4:73:f5:58:46:e5:
61:bf:af:72:2f:ae:38:79:aa:62:0a:df:19:0e:54:
7f:47:ef:2f:ee:e7:49:92:cc:4c:b1:ff:29:3e:f5:
29:cf:79:21:31:28:c4:9e:56:0d:6f:aa:5f:1b:26:
51:d0:d4:a1:d7:00:91:44:8c:cb:27:d3:00:df:cf:
14:31:8e:4a:0c:28:48:e2:78:41:fd:50:59:34:36:
8c:2d:23:8b:5c:d1:3c:5a:61:97:f9:b3:45:05:3d:
69:05:14:cd:3c:cf:f5:2b:6d:97:93:a8:d5:54:a0:
99:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:1A:6E:C5:88:26:78:D8:8F:98:54:18:DF:7E:13:22:71:B4:5B:C3
X509v3 Authority Key Identifier:
keyid:2C:DA:5F:03:EA:F5:13:A7:7F:2E:C2:0D:E5:BB:16:72:C5:D2:79:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LNpfA-r1E6d_LsIN5bsWcsXSeas.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/3838c4-6e46-49a8-8c14-ae8b8d788700/1/LNpfA-r1E6d_LsIN5bsWcsXSeas.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/3838c4-6e46-49a8-8c14-ae8b8d788700/1/LNpfA-r1E6d_LsIN5bsWcsXSeas.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:21:3a:4d:71:54:e6:e9:51:55:c0:fa:a3:f0:ed:59:34:d0:
44:15:83:10:ef:49:7f:4b:9d:df:ae:b1:fa:a3:23:f2:f6:c7:
a9:e0:ed:b5:e8:ff:8b:ee:e3:d9:d7:ef:c2:27:8e:aa:c6:e5:
40:11:5e:79:b8:b4:a7:6d:35:7f:1b:73:fd:fc:2c:3d:3d:7c:
3e:70:28:b4:9e:65:b7:94:79:33:f7:0c:45:cf:71:d5:bf:b8:
6d:79:db:ce:11:e1:6f:77:bd:ef:d5:7d:40:d1:c4:31:64:cc:
6c:7b:be:21:3b:a8:b7:df:68:28:52:84:2b:77:3c:4b:47:96:
38:11:f1:14:60:e1:a8:e0:62:64:d6:44:2d:ec:f1:7e:0e:48:
24:e2:0a:14:16:15:c1:55:68:ad:47:d4:65:2f:cc:3d:d8:61:
21:75:07:61:0a:50:63:18:7f:c0:78:cf:74:53:46:68:b3:03:
b5:0f:6a:7c:bd:0b:f5:75:6a:8a:fb:f4:bc:54:39:98:47:b5:
85:18:e7:f1:a8:1a:d3:00:64:04:c9:d8:d1:e6:4b:6d:9a:b0:
2f:bc:d1:1c:c0:d4:d6:e3:b8:f0:af:82:af:ea:a7:8f:bd:c7:
50:62:11:e3:02:d0:c8:fb:46:32:fd:8e:49:8d:e8:0a:27:ad:
8e:6c:bc:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:41:49 2025 by rpki-client