Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/1f7c98-18aa-47d8-ab41-1161edb9bf0e/1/lmr8FNShmnwsFo6yyB1WIrMBSes.mft
File: lmr8FNShmnwsFo6yyB1WIrMBSes.mft (raw, json)
Hash identifier: ksa9UqdDnoRAbgB6ukGJBFdJLdPwk0aaIgNSyvopEsE=
Subject key identifier: 08:11:56:00:60:79:F3:9C:EA:43:C4:4C:45:1C:3D:1F:0F:90:2A:13
Authority key identifier: 96:6A:FC:14:D4:A1:9A:7C:2C:16:8E:B2:C8:1D:56:22:B3:01:49:EB
Certificate issuer: /CN=966afc14d4a19a7c2c168eb2c81d5622b30149eb
Certificate serial: 0194BCA9F909858D2ED63BB332B7807BDC6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lmr8FNShmnwsFo6yyB1WIrMBSes.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/1f7c98-18aa-47d8-ab41-1161edb9bf0e/1/lmr8FNShmnwsFo6yyB1WIrMBSes.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 14:00:43 +0000
Manifest this update: Fri 31 Jan 2025 14:00:43 +0000
Manifest next update: Sat 01 Feb 2025 14:00:43 +0000
Files and hashes: 1: YBabozhq7Bm__rh2KvKvZaWJJSk.roa (hash: ZpYTHURBPLv+zLOzTtEUmCp4scPYCX2Bazth3B2lfOY=)
2: lmr8FNShmnwsFo6yyB1WIrMBSes.crl (hash: GfwCCWLQonxQ9LZ68aHXJ3KLDpgWLbhp4BXtuZMZq/Y=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:f9:09:85:8d:2e:d6:3b:b3:32:b7:80:7b:dc:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=966afc14d4a19a7c2c168eb2c81d5622b30149eb
Validity
Not Before: Jan 31 14:00:43 2025 GMT
Not After : Feb 1 14:00:43 2025 GMT
Subject: CN=081156006079f39cea43c44c451c3d1f0f902a13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:6c:c5:d7:00:80:4b:f5:33:c8:44:4e:ff:1f:
0d:11:8d:6d:da:3a:58:25:23:ea:d1:70:55:94:6d:
2d:fe:5f:bf:cd:5b:94:59:67:35:cf:ca:52:d0:60:
8f:46:f5:70:75:9a:6c:ea:f4:89:f3:cc:77:dc:e6:
3e:37:1e:66:0e:61:cd:e2:5e:8a:86:a7:3f:75:0b:
fa:4c:a8:fd:6c:8a:24:7e:ac:91:e0:1b:22:5b:66:
29:1d:f6:e7:95:be:08:42:7e:fa:4c:32:54:78:a4:
bf:ab:70:81:c7:2c:b0:57:86:f8:ae:96:94:63:a8:
8a:19:50:4f:41:ee:61:6b:a2:0c:f6:09:a4:f7:c4:
37:31:5c:92:56:46:88:10:c7:64:1f:5b:09:86:f5:
ea:19:49:8b:ed:6a:1c:42:47:96:db:c8:ab:3e:3f:
d5:36:05:c4:73:68:db:e0:72:d1:55:e9:53:73:3b:
2a:5a:54:69:97:6a:d2:38:97:f1:25:15:31:88:4c:
28:fe:60:8e:82:bb:78:ba:ce:d5:d5:e4:8c:1c:79:
ba:d2:ff:c0:87:c3:da:e5:64:17:9e:6c:dc:78:d0:
ae:cd:f6:9c:98:ec:ea:2f:2e:df:f6:6f:d2:82:19:
a3:25:1b:3e:b0:bf:3c:9a:89:1e:a5:ef:1f:72:50:
b2:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:11:56:00:60:79:F3:9C:EA:43:C4:4C:45:1C:3D:1F:0F:90:2A:13
X509v3 Authority Key Identifier:
keyid:96:6A:FC:14:D4:A1:9A:7C:2C:16:8E:B2:C8:1D:56:22:B3:01:49:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lmr8FNShmnwsFo6yyB1WIrMBSes.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/1f7c98-18aa-47d8-ab41-1161edb9bf0e/1/lmr8FNShmnwsFo6yyB1WIrMBSes.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/1f7c98-18aa-47d8-ab41-1161edb9bf0e/1/lmr8FNShmnwsFo6yyB1WIrMBSes.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:09:c6:3c:5d:f2:93:5a:9b:94:bc:43:b3:d3:0f:1d:2f:0f:
1d:82:e7:1c:40:75:33:ea:d6:a1:90:7f:1d:0f:3b:9b:0b:c3:
63:66:b8:17:f3:cb:5b:bc:3c:be:aa:12:04:8a:b2:e1:4a:5c:
cd:44:08:a7:94:e4:79:13:f5:44:4e:36:c7:dc:45:1d:27:70:
09:28:ac:2c:ef:2d:80:4e:2a:c9:53:c2:7b:ff:53:b1:45:60:
f5:83:36:6d:84:48:05:7d:92:9a:1a:b7:85:75:ab:a7:62:f6:
f8:d1:6d:6c:56:ed:03:60:0a:e9:83:30:24:1b:6a:0e:e9:8f:
51:30:53:1a:76:8a:26:58:91:cc:3f:6f:11:7f:92:70:57:45:
9c:45:5b:89:de:c5:ed:08:f4:6f:3f:40:55:dc:43:30:26:f3:
87:77:79:2f:2b:05:97:93:86:c0:d1:fd:3b:97:80:21:b9:6d:
10:1f:77:69:b3:fc:0f:29:fb:bf:f8:d3:cf:43:fa:4a:72:dd:
eb:6e:77:8e:07:32:ac:28:c3:9d:1a:45:4a:82:6d:ff:48:70:
0f:67:ad:4f:21:66:f2:36:be:11:35:75:94:d5:ee:d0:ec:6a:
a7:f8:2f:12:39:95:47:30:05:ed:dc:9d:70:c3:b0:3c:12:8b:
e9:5e:cf:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:03:13 2025 by rpki-client