Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/6891df-971e-4e60-8cbc-e3c2f32cf3b7/1/lmsFxmHHalvMSNqDju22lz8VO4Y.mft
File: lmsFxmHHalvMSNqDju22lz8VO4Y.mft (raw, json)
Hash identifier: ZOn9UqADDWmFAiiHSDPu0Jiw6BeNUoYR3MkH2aMyoms=
Subject key identifier: 6D:F0:12:B9:C8:84:64:D8:DE:B6:93:C6:30:C5:55:72:C6:7E:3E:5B
Authority key identifier: 96:6B:05:C6:61:C7:6A:5B:CC:48:DA:83:8E:ED:B6:97:3F:15:3B:86
Certificate issuer: /CN=966b05c661c76a5bcc48da838eedb6973f153b86
Certificate serial: 0194BD85337AF3435B7DD0F5DB0F01DD1AF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lmsFxmHHalvMSNqDju22lz8VO4Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/6891df-971e-4e60-8cbc-e3c2f32cf3b7/1/lmsFxmHHalvMSNqDju22lz8VO4Y.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 18:00:10 +0000
Manifest this update: Fri 31 Jan 2025 18:00:10 +0000
Manifest next update: Sat 01 Feb 2025 18:00:10 +0000
Files and hashes: 1: TJQ4iHjsEa_CDFuqEaOqRs6tWiM.roa (hash: 5u5yG9F1dj6okhQFxjTOrTdhi+XMd7VfKkkCnAOAbSo=)
2: lmsFxmHHalvMSNqDju22lz8VO4Y.crl (hash: JXk5/omTmUta6NojrAuV+G9+vQafYeRR6VzOMpxxzMA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:33:7a:f3:43:5b:7d:d0:f5:db:0f:01:dd:1a:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=966b05c661c76a5bcc48da838eedb6973f153b86
Validity
Not Before: Jan 31 18:00:10 2025 GMT
Not After : Feb 1 18:00:10 2025 GMT
Subject: CN=6df012b9c88464d8deb693c630c55572c67e3e5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:c1:53:2f:75:41:52:f1:d8:f1:4b:f4:77:7f:
64:34:32:bd:f9:3e:5d:0f:aa:0d:39:46:47:dd:ed:
12:ab:dd:78:3d:32:34:64:0b:76:a8:c7:c4:bf:fa:
2a:f4:b3:a7:2b:c7:0f:1f:4d:37:66:98:6e:f1:3a:
6e:c6:73:89:4b:53:a6:ea:e4:bc:9a:ff:c0:e2:20:
a3:e6:6f:51:5b:9d:21:46:38:0f:6c:03:4b:4b:eb:
15:7f:36:2e:69:0a:c8:64:9a:9c:5c:91:c9:85:00:
ec:63:e0:51:d3:cd:71:0d:43:f4:91:46:f5:7f:69:
83:55:26:16:28:dd:79:5a:c8:3f:e9:51:73:71:18:
9e:f9:01:04:c1:ae:09:88:7d:44:7c:9a:37:28:50:
0f:ce:99:8c:b4:f3:e0:10:1d:2d:c2:f8:1b:4d:18:
28:e4:36:21:8c:d1:9d:d8:29:db:5c:68:13:db:60:
fa:a3:b5:e3:35:45:53:11:7a:2d:b4:67:ba:fe:6d:
5d:8f:5f:90:21:88:ac:07:67:e4:b5:72:74:1b:36:
c4:b5:6a:54:a1:6c:ea:f0:e3:3b:ef:1a:55:a3:75:
8e:10:eb:4e:c6:26:64:36:11:85:2f:32:32:2d:ac:
b0:6d:02:95:c8:cd:ad:bf:a6:4c:ce:28:6d:7a:b0:
21:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:F0:12:B9:C8:84:64:D8:DE:B6:93:C6:30:C5:55:72:C6:7E:3E:5B
X509v3 Authority Key Identifier:
keyid:96:6B:05:C6:61:C7:6A:5B:CC:48:DA:83:8E:ED:B6:97:3F:15:3B:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lmsFxmHHalvMSNqDju22lz8VO4Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6891df-971e-4e60-8cbc-e3c2f32cf3b7/1/lmsFxmHHalvMSNqDju22lz8VO4Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6891df-971e-4e60-8cbc-e3c2f32cf3b7/1/lmsFxmHHalvMSNqDju22lz8VO4Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:99:94:c9:24:cc:62:85:a3:c1:5a:30:d6:d5:7c:3e:b0:16:
d2:74:37:49:ff:4e:69:3a:7b:b7:3c:8c:3b:e9:3c:bf:d4:7a:
1d:4b:6c:0c:7b:0d:a8:81:88:03:c5:21:0a:93:27:9a:9f:e0:
49:5b:5f:81:69:93:af:9d:49:a9:cc:69:80:77:49:62:51:9c:
50:f9:95:99:e1:f3:35:8f:83:a5:e0:c0:d7:ab:ab:b5:6b:60:
44:ca:26:88:be:8c:92:df:1b:c7:17:e3:be:dc:4f:37:34:a9:
ef:1c:c4:f3:3e:bc:dd:ea:92:a3:5c:59:a5:c4:38:e6:f0:4b:
48:e5:70:28:37:c6:d5:9b:82:17:c2:86:4c:66:61:7c:7b:05:
24:67:7d:b5:4f:88:33:49:bb:fd:7d:df:d5:90:1f:33:d5:57:
cd:a5:99:b6:4c:41:87:d0:ca:b5:c3:66:47:d2:fb:d1:09:3f:
b6:c5:7d:40:88:ef:62:41:af:a0:a0:0a:65:51:23:bc:a1:ab:
83:ad:12:b7:84:1f:c2:cc:37:da:61:b4:37:c8:36:ce:6d:6f:
e0:02:67:0f:bd:3c:03:11:96:ff:39:c8:4f:bd:a8:9f:ef:07:
d1:7f:2e:d3:a2:31:6c:2a:91:28:c1:f3:5a:9e:fc:8a:e1:96:
b3:df:80:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 09:54:26 2025 by rpki-client