Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/49bef1-401a-48d2-8746-267275e92570/1/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.mft
File: Lrs2JLgvDh5TiwCRn0QtIAx-PNI.mft (raw, json)
Hash identifier: xlUbIvIFpXOLEy7zcrMMg9tcgBbj/8hWd8LiGZ1IU3k=
Subject key identifier: 75:3A:F8:B3:06:8F:D3:D7:1D:A1:01:11:68:57:F9:92:85:A5:DA:E4
Authority key identifier: 2E:BB:36:24:B8:2F:0E:1E:53:8B:00:91:9F:44:2D:20:0C:7E:3C:D2
Certificate issuer: /CN=2ebb3624b82f0e1e538b00919f442d200c7e3cd2
Certificate serial: 0194BBCF032332A898568CB87B5C0986722C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/49bef1-401a-48d2-8746-267275e92570/1/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 10:01:33 +0000
Manifest this update: Fri 31 Jan 2025 10:01:33 +0000
Manifest next update: Sat 01 Feb 2025 10:01:33 +0000
Files and hashes: 1: Fkh2hiOOX1_9ZIsh1QOkg1uOFC8.roa (hash: 4wHVTXOU9z+SM/PpUwslG9Qh7bHf21AbIIUgGIPuA60=)
2: Lrs2JLgvDh5TiwCRn0QtIAx-PNI.crl (hash: +XTmwF8cK8GymHONEJLjP5xxXj/TTl7j0VdLRYf+c5A=)
3: sbB_qhcZ5C6QsaRQey8d6Z2fiqQ.roa (hash: UF7xshn/lezkLw7gZiOHSmc0ml+xgRop+HTs7XfValk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cf:03:23:32:a8:98:56:8c:b8:7b:5c:09:86:72:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ebb3624b82f0e1e538b00919f442d200c7e3cd2
Validity
Not Before: Jan 31 10:01:33 2025 GMT
Not After : Feb 1 10:01:33 2025 GMT
Subject: CN=753af8b3068fd3d71da101116857f99285a5dae4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:57:32:b2:5e:2a:bc:43:5c:62:ac:b0:bf:14:
57:d0:bf:26:a0:43:b6:55:ab:63:07:30:ab:24:78:
82:98:9f:ef:b7:5d:e0:68:f6:de:2a:d1:de:76:7e:
69:31:e9:20:20:34:24:5a:c9:6c:d9:89:8c:6a:43:
f9:48:ce:e4:8f:2a:ce:b7:58:62:ef:28:5b:73:bd:
92:77:4a:d4:19:55:6c:89:ef:06:1e:92:d2:a5:91:
51:70:fa:9b:6f:3b:dc:49:32:4c:99:6c:f9:0d:3c:
1c:12:7b:71:58:dd:c3:0a:23:bc:b3:29:9d:c2:8b:
59:67:3b:bb:9f:6c:b0:b7:3a:ac:05:5e:c3:b3:18:
b6:b9:5e:3d:82:f0:02:87:e5:b7:81:20:e4:07:09:
d7:2c:2f:aa:59:5d:19:71:92:75:3c:46:ef:f8:17:
fe:18:1d:97:73:65:61:fb:ca:bf:f1:12:bd:b9:0c:
b2:cc:22:7a:aa:d6:bd:e3:95:31:06:b1:05:6d:b4:
06:31:05:13:ef:70:09:6c:03:89:82:c3:93:4a:a4:
9f:aa:1b:b7:c8:5d:ec:74:c6:60:5c:d9:19:a8:27:
4a:0f:1a:3c:ce:d2:89:63:20:ea:d5:1e:44:31:0b:
80:91:45:76:d1:e8:9b:23:78:9c:4f:24:7f:10:16:
12:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:3A:F8:B3:06:8F:D3:D7:1D:A1:01:11:68:57:F9:92:85:A5:DA:E4
X509v3 Authority Key Identifier:
keyid:2E:BB:36:24:B8:2F:0E:1E:53:8B:00:91:9F:44:2D:20:0C:7E:3C:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/49bef1-401a-48d2-8746-267275e92570/1/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/49bef1-401a-48d2-8746-267275e92570/1/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:53:94:b2:f2:38:1d:10:25:8a:dc:53:d1:c3:29:bb:ce:2d:
b4:bd:61:b2:61:b6:59:61:2e:42:5d:fe:11:5a:8f:55:7f:54:
5e:2b:07:26:06:2f:8f:a6:9e:be:64:89:80:32:00:2f:55:e5:
df:73:fb:91:20:ab:ee:9d:90:02:6e:ae:af:3a:76:15:21:14:
53:cc:e1:6b:25:d9:4a:96:01:b4:46:dd:c7:62:7b:d9:a9:9e:
74:88:6d:ce:6c:95:2f:1e:fa:9a:0b:50:14:8b:2a:8b:c2:1a:
cc:39:92:c6:47:32:26:b4:fc:1a:fd:10:c5:0e:aa:15:5a:fb:
95:53:f0:67:91:99:7d:23:1f:14:97:c7:0b:ee:09:49:be:44:
48:22:b9:91:20:05:68:12:b0:72:35:05:28:e9:d1:81:54:0d:
6b:40:b2:a5:de:65:f0:cd:00:f9:b3:db:18:46:aa:c0:3b:9c:
8a:bf:39:9b:82:60:ec:8b:f7:68:09:07:c7:09:83:b5:fb:6e:
e6:ac:ba:11:4d:c8:40:a6:83:2b:11:73:7e:b6:83:b0:04:37:
32:bd:14:10:55:33:7b:81:d9:74:74:e2:49:59:8f:99:15:71:
7a:f1:31:c3:fb:4f:f3:67:fd:91:69:d7:80:56:24:d4:bb:37:
c3:26:ab:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:39:17 2025 by rpki-client