Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/166933-f68c-49a0-8869-bdf55db4a90a/1/lxru6oeY927JpDTnVjfs2IEJLsI.mft
File: lxru6oeY927JpDTnVjfs2IEJLsI.mft (raw, json)
Hash identifier: mrc5GgyX8Z07xGwZW69kW4RqIyUBxYIBqBLsnoPNV6w=
Subject key identifier: 19:85:FD:7A:B4:92:4D:3E:94:90:FD:EB:72:55:72:92:01:09:3E:00
Authority key identifier: 97:1A:EE:EA:87:98:F7:6E:C9:A4:34:E7:56:37:EC:D8:81:09:2E:C2
Certificate issuer: /CN=971aeeea8798f76ec9a434e75637ecd881092ec2
Certificate serial: 0194BC72942E4E802325D7859B4D5CEFA441
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lxru6oeY927JpDTnVjfs2IEJLsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/166933-f68c-49a0-8869-bdf55db4a90a/1/lxru6oeY927JpDTnVjfs2IEJLsI.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 13:00:13 +0000
Manifest this update: Fri 31 Jan 2025 13:00:13 +0000
Manifest next update: Sat 01 Feb 2025 13:00:13 +0000
Files and hashes: 1: Ai3_NgCb2mwvHHHWVo7OjI6Wj04.roa (hash: mxmvKEH6k3H+fHWxr8AaesSD9p5zVNhT7qFX1XU+vIQ=)
2: EZLjMnt3YY1uGOfZ3nimgNl-yLU.roa (hash: Ko07ZGo7IwS8NL/yJPyHpJ9m0iW9ngaJs3DqWmHrpi0=)
3: RIQPOEjptB8udCiUyrk1eA7kGsQ.roa (hash: iUSixJ9qOvizzSlye8GPbxagX4TAp65dTuqFovVtZ00=)
4: lxru6oeY927JpDTnVjfs2IEJLsI.crl (hash: x4RjLMa9WHfo/QWijnesvI8PDoueqpEIAO+aNWyBhAQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:94:2e:4e:80:23:25:d7:85:9b:4d:5c:ef:a4:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=971aeeea8798f76ec9a434e75637ecd881092ec2
Validity
Not Before: Jan 31 13:00:13 2025 GMT
Not After : Feb 1 13:00:13 2025 GMT
Subject: CN=1985fd7ab4924d3e9490fdeb7255729201093e00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:3e:c1:19:63:2d:50:52:cc:7b:20:be:61:10:
01:01:c3:38:3e:c0:48:47:25:ae:ab:18:e6:b4:51:
49:e7:d2:de:02:6e:14:3d:b6:a7:d1:af:d0:b9:b0:
8a:ac:2d:a1:51:68:f3:4c:ba:6e:c0:9f:10:cf:26:
94:91:09:13:54:5f:c3:4e:01:ef:bf:62:cf:30:3c:
26:8e:dd:0f:f6:4b:68:aa:69:e6:ef:d3:05:ef:ca:
61:67:1a:13:42:b5:25:3a:37:57:94:4f:5a:eb:b8:
cc:c3:08:38:98:fa:db:82:1e:8f:9b:d2:95:d6:65:
fb:5c:03:eb:ec:ee:a0:cb:9c:2a:d5:8f:8a:f8:b8:
d3:11:bb:f9:bb:77:3b:45:6e:d4:65:41:18:7f:d2:
63:d3:ba:6a:58:3a:3f:d8:54:1e:93:85:cf:8e:54:
e9:c8:1e:83:84:ce:8b:da:a4:90:2c:59:aa:49:ff:
fc:49:65:6a:3b:86:bf:c3:93:a5:47:bc:05:38:c7:
77:2d:48:0f:08:3d:d7:6c:a1:73:bc:b8:c9:ff:2c:
e5:32:03:3a:bf:a3:a0:57:63:3b:c9:b3:bb:6f:4b:
c5:ac:1f:f6:2c:ec:55:3d:e0:8b:4c:70:63:44:49:
ff:70:7d:ff:87:43:7b:06:3b:a6:1a:30:3c:fa:96:
67:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:85:FD:7A:B4:92:4D:3E:94:90:FD:EB:72:55:72:92:01:09:3E:00
X509v3 Authority Key Identifier:
keyid:97:1A:EE:EA:87:98:F7:6E:C9:A4:34:E7:56:37:EC:D8:81:09:2E:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lxru6oeY927JpDTnVjfs2IEJLsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/166933-f68c-49a0-8869-bdf55db4a90a/1/lxru6oeY927JpDTnVjfs2IEJLsI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/166933-f68c-49a0-8869-bdf55db4a90a/1/lxru6oeY927JpDTnVjfs2IEJLsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:d7:ae:38:7f:6b:8e:d1:f3:a7:d0:7e:16:65:fa:fa:f4:a7:
1b:69:ec:89:c7:88:20:10:c2:ee:c4:47:56:c9:9b:23:8c:af:
20:92:a6:45:d4:40:f2:73:cc:29:9f:13:c2:34:0e:36:bd:6e:
8b:98:dd:ec:46:eb:37:57:20:26:d6:59:5c:e4:66:7d:a5:18:
88:05:58:e1:ab:64:37:46:55:1b:cd:85:d0:9f:d7:1d:b9:c8:
25:a2:5c:25:e7:50:bc:3c:c7:0c:ca:6d:8e:3d:bc:b3:15:c7:
6e:52:09:ee:69:d2:6b:95:95:42:e9:90:73:c7:19:11:4c:e1:
01:4b:56:74:f8:68:4e:40:af:15:04:2f:dc:ce:7e:f9:c3:89:
70:9a:51:13:83:08:32:57:2d:bb:e5:89:8b:81:7c:c1:82:5a:
99:10:f6:78:51:4c:2a:ac:e3:99:1a:2d:7c:42:76:a5:a3:fe:
e0:e5:61:55:3a:3b:46:2c:20:05:ac:80:50:b4:a9:7c:a4:54:
6f:93:3b:35:a4:d7:70:4d:c0:07:63:18:b2:52:b2:58:a1:9a:
83:d7:06:81:f5:fa:94:fc:df:f4:a4:0b:44:84:a6:d2:2b:b8:
68:15:2b:6b:78:2d:2d:dc:11:14:db:b5:65:33:6c:b9:8e:c0:
7f:b7:00:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:42:34 2025 by rpki-client