Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/7d3f00-d48c-416f-919e-dc0389f9167d/1/lxpsuy325_rMxYU7pUAPH0cOqxY.mft
File: lxpsuy325_rMxYU7pUAPH0cOqxY.mft (raw, json)
Hash identifier: kuI5pIbIQpd4tuelHiLGkEEKGp8vhU3ANz2gZUiLtpc=
Subject key identifier: D1:3A:22:0D:FD:63:45:84:52:1F:84:11:55:0E:0B:C8:8D:EE:F6:5C
Authority key identifier: 97:1A:6C:BB:2D:F6:E7:FA:CC:C5:85:3B:A5:40:0F:1F:47:0E:AB:16
Certificate issuer: /CN=971a6cbb2df6e7faccc5853ba5400f1f470eab16
Certificate serial: 0194BC3BF48F0EFAC1B9495DDD90815056FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lxpsuy325_rMxYU7pUAPH0cOqxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/7d3f00-d48c-416f-919e-dc0389f9167d/1/lxpsuy325_rMxYU7pUAPH0cOqxY.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 12:00:33 +0000
Manifest this update: Fri 31 Jan 2025 12:00:33 +0000
Manifest next update: Sat 01 Feb 2025 12:00:33 +0000
Files and hashes: 1: 6wuoxtQ9bA6opmTkPy5nyUw0MFc.roa (hash: yaei0hfQngE+ZuEYmOizBFXF772vW3jT8cVqsppYXew=)
2: Cuk2XVVN2lww7wgchDt5Q_JIiHA.roa (hash: YJd5NF7BnIFbCJZm98sSNpBsaL371EEDxMPWmL/C3GQ=)
3: lxpsuy325_rMxYU7pUAPH0cOqxY.crl (hash: XS40B+P6lsb9zXt47jNwTZYzwh03nkLjU9PDkduuwhw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:f4:8f:0e:fa:c1:b9:49:5d:dd:90:81:50:56:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=971a6cbb2df6e7faccc5853ba5400f1f470eab16
Validity
Not Before: Jan 31 12:00:33 2025 GMT
Not After : Feb 1 12:00:33 2025 GMT
Subject: CN=d13a220dfd634584521f8411550e0bc88deef65c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:41:d6:31:cf:ef:87:07:9a:2c:08:d9:e0:18:
b6:7c:4b:5b:d9:aa:35:93:c6:3c:eb:56:d3:f0:d7:
16:28:94:15:02:da:c8:a1:a4:cc:af:9a:1d:1a:6e:
4f:6c:cd:c3:32:77:25:83:fa:39:db:c1:98:fb:9f:
bf:1f:38:a9:4e:85:78:60:87:8f:98:42:55:d9:0e:
b9:95:a6:89:44:6b:f2:60:00:05:84:d3:5f:b8:55:
d0:cd:de:ea:e1:3e:a7:73:c0:3b:0f:72:6b:08:b6:
1f:2b:8e:0a:96:04:14:3f:d6:77:26:8f:cf:0e:9d:
9b:08:5c:8b:2b:a7:eb:50:74:e4:6c:03:5d:79:71:
7a:70:1e:62:10:47:1d:4e:ec:01:b7:03:6f:94:f3:
66:4a:70:65:b2:8b:03:56:87:06:f6:2c:2a:f0:81:
7c:6a:05:9d:24:f2:e8:b4:1b:c9:91:dc:e6:5c:81:
61:dd:63:bf:ef:e1:8b:a0:41:fa:23:d1:16:d2:84:
0d:06:98:7a:df:7f:b4:a8:e7:07:27:1f:a5:b7:56:
8c:eb:ba:44:97:96:59:8c:8d:22:e8:94:53:d1:e0:
50:5e:61:de:c0:a2:1b:c2:74:52:70:78:42:93:62:
44:6f:e3:d5:73:40:32:2d:f6:a0:11:5c:be:83:c2:
a1:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:3A:22:0D:FD:63:45:84:52:1F:84:11:55:0E:0B:C8:8D:EE:F6:5C
X509v3 Authority Key Identifier:
keyid:97:1A:6C:BB:2D:F6:E7:FA:CC:C5:85:3B:A5:40:0F:1F:47:0E:AB:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lxpsuy325_rMxYU7pUAPH0cOqxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/7d3f00-d48c-416f-919e-dc0389f9167d/1/lxpsuy325_rMxYU7pUAPH0cOqxY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/7d3f00-d48c-416f-919e-dc0389f9167d/1/lxpsuy325_rMxYU7pUAPH0cOqxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:e0:7d:54:8e:41:63:47:97:b3:84:54:b5:c1:62:3a:ad:4d:
98:2d:bf:28:62:81:02:ce:3b:ec:35:fb:9d:01:61:30:e8:b4:
25:98:3d:80:99:a2:28:17:f2:6b:c3:48:fe:12:f1:b9:6a:ab:
d9:02:0f:6f:17:98:d4:b6:f0:e3:55:2c:12:a6:60:56:fd:9f:
f0:26:e0:5f:92:af:35:69:ec:0b:5a:8d:23:18:f2:4d:7b:62:
d9:ce:3e:af:3f:0f:2a:77:c2:f6:7f:b5:50:23:e5:e5:e2:86:
4d:57:5a:0d:29:19:3a:e2:36:a7:db:1d:cc:17:f8:3e:0a:04:
d8:42:ac:2e:40:7a:c4:7d:9c:79:d8:9e:fe:00:e5:b7:3b:37:
a4:8e:38:85:e8:69:01:a5:5f:a8:97:fa:89:13:76:b6:44:cf:
7f:6c:4e:3f:a8:51:da:ac:9b:81:2c:f1:6d:92:05:d2:ca:c7:
c2:d6:a6:5f:95:00:00:28:1f:c0:bf:a0:b2:07:7e:39:05:96:
8c:1e:a0:1c:b4:1e:86:a4:cf:c2:cf:5b:9f:50:fe:15:5b:fa:
ab:d3:d9:82:49:60:31:40:8f:0a:db:4f:cd:cd:5b:5c:d1:80:
58:d4:8c:fc:74:ee:34:4b:97:6f:6d:77:26:6b:de:eb:dc:51:
18:ee:f5:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 12:48:43 2025 by rpki-client