
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/c35dcd-3103-4ea0-a8c5-866f1d2327aa/1/LENEciZF2iXs47F8eoN2LtQt2lI.mft
File: LENEciZF2iXs47F8eoN2LtQt2lI.mft (raw, json)
Hash identifier: IMSckrHdgUtQh+lbW/ytSWQ2tcIIfYDJT/t9Lr/WgHg=
Subject key identifier: 4F:6D:3C:51:F9:46:12:45:4E:08:6C:9C:7D:C9:95:35:7F:E9:04:49
Authority key identifier: 2C:43:44:72:26:45:DA:25:EC:E3:B1:7C:7A:83:76:2E:D4:2D:DA:52
Certificate issuer: /CN=2c4344722645da25ece3b17c7a83762ed42dda52
Certificate serial: 0194BC7296F0E2FF1C922F4E5B857AF32733
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LENEciZF2iXs47F8eoN2LtQt2lI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/c35dcd-3103-4ea0-a8c5-866f1d2327aa/1/LENEciZF2iXs47F8eoN2LtQt2lI.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 13:00:13 +0000
Manifest this update: Fri 31 Jan 2025 13:00:13 +0000
Manifest next update: Sat 01 Feb 2025 13:00:13 +0000
Files and hashes: 1: DNca1fRckrUMFldSKB-cqGf1TK0.roa (hash: kIv065JqVrTE0ajJFMvarA4KoH/TSNsdKoOgfZZUL90=)
2: LENEciZF2iXs47F8eoN2LtQt2lI.crl (hash: 61hRPKoCcYgwJfPXkOZeh0HMzMWLAe/TaBmeAQzEJPw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:96:f0:e2:ff:1c:92:2f:4e:5b:85:7a:f3:27:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c4344722645da25ece3b17c7a83762ed42dda52
Validity
Not Before: Jan 31 13:00:13 2025 GMT
Not After : Feb 1 13:00:13 2025 GMT
Subject: CN=4f6d3c51f94612454e086c9c7dc995357fe90449
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:23:cb:8d:f9:09:44:5d:ee:18:26:e3:76:33:
b1:14:df:25:dc:f4:4b:b7:2b:b0:c8:6b:a0:67:f8:
8a:2f:9b:4b:73:df:ff:e9:52:a3:4b:a4:3f:03:b8:
98:bb:b9:70:65:62:71:5a:09:6f:fe:e2:f9:22:2f:
be:ad:f6:a6:94:3f:87:bc:20:33:41:ef:2a:e0:1b:
fb:75:14:7e:6d:a5:55:f9:5e:6e:fd:d6:ca:99:67:
50:42:69:21:74:b1:27:9d:95:4a:9c:41:b7:4f:72:
e6:47:5c:de:68:2b:9a:54:1c:f6:04:0c:57:29:60:
75:a2:8e:66:3d:56:0a:67:26:bc:34:c0:46:a6:c8:
53:31:54:56:c5:6a:d4:83:ad:9d:79:cc:2c:36:5e:
07:b8:b6:d0:90:47:a8:cc:31:d5:89:44:63:8c:b2:
49:e8:89:82:56:35:18:50:47:2d:0a:4e:bd:b5:7a:
3b:db:1b:c9:5b:e8:1b:83:d8:38:e8:43:a0:39:4e:
4e:9f:87:25:80:dc:f4:e2:df:9e:19:6d:49:3c:d1:
ef:d6:0f:ad:30:a5:96:23:5c:55:1b:7a:f7:e8:49:
ea:04:ff:2e:70:cc:61:97:60:48:fb:61:84:da:f5:
a7:a9:46:b1:fd:ee:4a:c8:a2:00:ad:0c:d8:2a:b8:
79:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:6D:3C:51:F9:46:12:45:4E:08:6C:9C:7D:C9:95:35:7F:E9:04:49
X509v3 Authority Key Identifier:
keyid:2C:43:44:72:26:45:DA:25:EC:E3:B1:7C:7A:83:76:2E:D4:2D:DA:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LENEciZF2iXs47F8eoN2LtQt2lI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/c35dcd-3103-4ea0-a8c5-866f1d2327aa/1/LENEciZF2iXs47F8eoN2LtQt2lI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/c35dcd-3103-4ea0-a8c5-866f1d2327aa/1/LENEciZF2iXs47F8eoN2LtQt2lI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:b6:6c:fe:70:20:ff:9f:4b:ac:9b:b4:f7:ce:dd:f9:99:1a:
42:ae:39:08:da:0c:bf:cf:9d:ad:ff:9d:41:a5:75:06:b5:90:
e2:42:95:82:27:b1:f0:08:d0:2e:1b:92:eb:ad:66:94:d0:8b:
2c:f0:1f:61:a8:2e:38:9a:53:a2:f4:6d:0b:05:15:dd:87:8e:
a7:80:bc:75:8a:00:9a:57:be:59:73:56:f9:0a:ec:c0:f4:9a:
00:2a:70:7a:ac:31:9c:12:01:2d:2f:eb:49:4f:34:0a:81:79:
75:1f:db:a0:58:3a:04:66:78:2b:45:c5:d0:36:84:de:10:20:
97:69:ff:56:91:8d:d5:f2:ab:53:d9:39:3d:12:1f:82:9d:3d:
e1:04:d1:ad:0f:31:11:39:53:3a:37:2a:49:2d:86:84:53:86:
b8:40:7d:82:9a:62:35:9f:a6:f2:e2:bb:9f:51:41:39:8f:ed:
fa:fd:3b:99:31:36:6b:6b:e0:4f:bb:c9:3d:dc:42:46:62:ce:
2c:91:83:f8:79:89:d0:5b:23:38:11:b0:46:ad:0b:27:45:b3:
82:a2:2b:17:6e:92:52:6f:1e:ac:57:1c:a3:a9:df:24:b1:ba:
79:6e:73:2c:bb:22:9e:5f:45:a4:da:84:dd:64:02:ea:96:df:
9c:11:30:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:42:34 2025 by rpki-client