Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/79aca9-51dd-4f22-b404-d53866e9186a/1/LRFywcc_lxqfsuibeRcgDFAO5Ac.mft
File: LRFywcc_lxqfsuibeRcgDFAO5Ac.mft (raw, json)
Hash identifier: ItyetF8VNTfVsh9mbJKDoogWz2eHcKMetXjpT9A+t/g=
Subject key identifier: 45:56:AE:71:8D:09:F9:6F:F0:CE:EE:DD:76:F2:EB:23:93:AB:E2:BE
Authority key identifier: 2D:11:72:C1:C7:3F:97:1A:9F:B2:E8:9B:79:17:20:0C:50:0E:E4:07
Certificate issuer: /CN=2d1172c1c73f971a9fb2e89b7917200c500ee407
Certificate serial: 0194BC72C2A4AC1BE89739BC68D097EC4C1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LRFywcc_lxqfsuibeRcgDFAO5Ac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/79aca9-51dd-4f22-b404-d53866e9186a/1/LRFywcc_lxqfsuibeRcgDFAO5Ac.mft
Manifest number: 1434
Signing time: Fri 31 Jan 2025 13:00:24 +0000
Manifest this update: Fri 31 Jan 2025 13:00:24 +0000
Manifest next update: Sat 01 Feb 2025 13:00:24 +0000
Files and hashes: 1: CxBTWe0phnLQfEvy14KZrA9LaZk.roa (hash: dM9wG7UCGb2jgf3z7+woCnj6ywdvLeoZBvHOHvMXmvE=)
2: IPPrratubHXAQd-ifZngdpirX5c.roa (hash: I/yflOCWYAytKofslD/06DhDQeYHbVXIxz2aV+s2uxk=)
3: LRFywcc_lxqfsuibeRcgDFAO5Ac.crl (hash: N7oKDM5YYJq8s+U3ayLdhxmqwLgUGcIthZnbt435eh0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:c2:a4:ac:1b:e8:97:39:bc:68:d0:97:ec:4c:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d1172c1c73f971a9fb2e89b7917200c500ee407
Validity
Not Before: Jan 31 13:00:24 2025 GMT
Not After : Feb 1 13:00:24 2025 GMT
Subject: CN=4556ae718d09f96ff0ceeedd76f2eb2393abe2be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:93:1c:fe:35:35:28:92:03:50:4f:62:e6:d3:
ad:39:7c:54:5e:5a:12:73:38:24:97:14:1c:2c:70:
38:bc:3c:13:32:19:cd:58:23:40:34:7a:3c:99:a3:
60:03:e8:6a:77:31:bd:4e:c8:b7:be:f3:d9:0f:e5:
87:55:81:38:06:5d:12:c0:8d:ea:40:fb:bf:e7:65:
3c:74:5e:a7:78:68:72:6a:1d:f8:e1:b8:23:04:05:
05:5a:a1:c0:fe:37:50:d1:f7:0c:2d:13:02:44:b4:
11:47:de:55:f0:27:ec:08:83:96:b2:46:20:6f:e9:
54:18:9c:b6:39:29:45:a5:e0:0b:83:4b:4e:70:bd:
c9:71:6c:b4:b4:66:7e:e3:d1:2b:0c:bf:00:ec:29:
ae:09:c3:d1:50:df:b7:e4:1f:d4:8b:d0:d5:ab:e3:
6c:0c:4d:6f:aa:b2:56:99:51:18:60:9a:5c:67:1e:
59:07:ec:1e:bb:94:b1:27:47:69:0e:17:85:57:a1:
60:6a:c4:62:de:67:d9:aa:04:29:82:95:3d:f6:ae:
c4:ec:7c:34:0e:33:04:c4:95:15:fc:5b:7c:9d:12:
c4:93:22:eb:8e:0b:11:7c:22:fc:3e:86:d3:2b:4f:
26:85:32:e7:9d:f5:73:52:7e:34:50:8d:20:aa:92:
b9:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:56:AE:71:8D:09:F9:6F:F0:CE:EE:DD:76:F2:EB:23:93:AB:E2:BE
X509v3 Authority Key Identifier:
keyid:2D:11:72:C1:C7:3F:97:1A:9F:B2:E8:9B:79:17:20:0C:50:0E:E4:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRFywcc_lxqfsuibeRcgDFAO5Ac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/79aca9-51dd-4f22-b404-d53866e9186a/1/LRFywcc_lxqfsuibeRcgDFAO5Ac.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/79aca9-51dd-4f22-b404-d53866e9186a/1/LRFywcc_lxqfsuibeRcgDFAO5Ac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:b7:8b:27:f9:1c:4a:b9:df:e0:7a:ab:72:e7:08:65:0b:fd:
75:6c:e1:8d:6e:66:6c:29:98:42:d6:6f:38:97:d5:f7:c5:a2:
88:3f:8a:bf:4b:e0:bb:90:a0:52:de:a7:85:94:73:55:e3:4c:
c1:41:6f:84:2f:be:63:d2:95:18:ba:74:d3:0b:21:6b:5a:3f:
77:11:df:46:b9:fb:ab:44:a5:29:84:84:d1:f3:f9:09:d4:23:
ce:2f:1f:b2:f6:e3:a0:9c:d3:f2:43:ed:f8:0e:46:58:2f:2a:
f6:f6:9b:25:df:9f:85:7f:b1:86:81:b7:eb:bc:22:d3:71:15:
65:32:1e:bb:39:68:4a:ed:39:49:c8:da:18:be:2c:10:ff:f8:
a9:a3:d9:ab:d5:8f:22:45:a9:90:01:8f:bd:61:06:13:a6:db:
c7:cf:c4:af:ec:51:81:47:8b:53:08:9c:c4:10:44:a0:d2:b8:
78:92:4c:33:a9:fa:ee:10:74:3e:03:cd:cf:56:19:11:2a:16:
35:34:78:dc:48:7b:21:c4:9a:15:4a:6f:6a:f4:59:75:1d:f3:
a2:6e:eb:23:4f:b8:85:90:4c:91:6d:c9:37:b2:df:50:b7:b0:
5f:01:9d:6f:29:13:1a:8c:4c:63:93:bb:8b:38:aa:5d:f1:d4:
be:1c:5a:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:04:59 2025 by rpki-client