Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/8d0360-fbc2-46eb-9ac2-cac3e42ae03f/1/LwjfFl1JfXqbmeDnHxW6B9GEYVo.mft
File: LwjfFl1JfXqbmeDnHxW6B9GEYVo.mft (raw, json)
Hash identifier: 0UDPR3UlxH+c3Us79YBHR5lAooKb9zEiMIDbrVD+aeM=
Subject key identifier: 13:D5:30:7D:04:A7:91:04:24:26:BE:E1:6C:73:69:FC:AB:0F:A3:54
Authority key identifier: 2F:08:DF:16:5D:49:7D:7A:9B:99:E0:E7:1F:15:BA:07:D1:84:61:5A
Certificate issuer: /CN=2f08df165d497d7a9b99e0e71f15ba07d184615a
Certificate serial: 0194BC72F078656BAE700E99F05C70AAB7F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LwjfFl1JfXqbmeDnHxW6B9GEYVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/8d0360-fbc2-46eb-9ac2-cac3e42ae03f/1/LwjfFl1JfXqbmeDnHxW6B9GEYVo.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 13:00:36 +0000
Manifest this update: Fri 31 Jan 2025 13:00:36 +0000
Manifest next update: Sat 01 Feb 2025 13:00:36 +0000
Files and hashes: 1: LwjfFl1JfXqbmeDnHxW6B9GEYVo.crl (hash: I35pZFnXYDn3VDoBwGY4REXS3Fn2OuCkP3miyUDQfh8=)
2: TZLeuUkI4CjEnpLLtWGzEA-joRI.roa (hash: YPtfqltU/oN+o/HH/QLZS2oxA/bwOyzCiodegvrQed4=)
3: ai_A7AG70LoK-2voHZXOhAOVMf0.roa (hash: hn2u5HU4dhrWeJ6INpgfQ8ZAf8MY3atf6SETHEmPiMU=)
4: c_zOfM7vLQJCIH9ZtTubpG60GUI.roa (hash: PR+2Ofr0AqtJDndUiUP4vY2xuU8uzBfHcV/JcyjNBZU=)
5: vMV24DhvZ51gpTgovgA0DHavZ5Y.roa (hash: pvB3MpylBNAYQdSCjBtx8G9c34zYXq6BUWOPnr06JNs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:f0:78:65:6b:ae:70:0e:99:f0:5c:70:aa:b7:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f08df165d497d7a9b99e0e71f15ba07d184615a
Validity
Not Before: Jan 31 13:00:36 2025 GMT
Not After : Feb 1 13:00:36 2025 GMT
Subject: CN=13d5307d04a791042426bee16c7369fcab0fa354
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:44:21:60:1c:23:c0:71:0b:d1:f2:7b:de:b9:
8e:70:9e:71:98:a3:12:98:5b:05:c4:3a:f4:fe:ab:
c0:42:0e:33:65:a9:1d:7c:0d:12:4b:d9:5f:08:ca:
8b:b4:0e:f5:4e:53:09:0e:b2:e9:b5:99:1d:8c:bd:
e2:81:5b:91:e8:8b:a7:0f:f3:ee:05:c3:b7:31:07:
99:df:26:79:93:40:0e:e4:62:2f:e5:07:c4:e3:4d:
14:32:35:20:d4:a2:f9:32:d3:55:fc:c6:7e:89:76:
f0:85:1c:f4:88:47:52:a3:a5:fe:e0:fa:ff:22:fa:
f2:82:cd:36:05:88:7d:7b:ef:e7:5e:f2:db:ba:6e:
97:86:56:5f:17:5f:d9:65:05:3c:e6:ce:86:06:af:
0b:23:91:93:b0:e1:78:77:e8:db:82:11:bb:a6:e7:
23:52:f0:08:99:57:d6:f0:3b:bb:20:10:71:3f:a8:
5b:12:9a:74:ba:f0:e5:af:cf:64:be:f4:19:21:fb:
df:fc:b4:17:be:eb:7b:54:c4:8b:59:8f:53:fb:ac:
04:16:44:04:45:1e:bd:61:5a:a5:c2:4f:23:8b:b8:
f2:6a:42:e4:f4:bf:9e:43:1e:3b:be:29:0e:0e:a2:
07:3d:8e:29:3f:18:02:2a:b3:85:d1:3d:a4:cb:14:
e8:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:D5:30:7D:04:A7:91:04:24:26:BE:E1:6C:73:69:FC:AB:0F:A3:54
X509v3 Authority Key Identifier:
keyid:2F:08:DF:16:5D:49:7D:7A:9B:99:E0:E7:1F:15:BA:07:D1:84:61:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LwjfFl1JfXqbmeDnHxW6B9GEYVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/8d0360-fbc2-46eb-9ac2-cac3e42ae03f/1/LwjfFl1JfXqbmeDnHxW6B9GEYVo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/8d0360-fbc2-46eb-9ac2-cac3e42ae03f/1/LwjfFl1JfXqbmeDnHxW6B9GEYVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:6f:b9:0a:7d:fc:55:3c:8b:ae:59:93:d2:3a:e1:91:b5:34:
a5:d4:32:a6:28:0e:29:0a:ee:cc:a5:99:53:4c:50:73:83:72:
fc:d3:e8:ae:c2:dc:b7:e9:44:bb:c0:0c:5a:34:39:53:0b:2f:
cc:63:b4:c5:c7:78:7e:76:da:fd:73:c1:73:fd:2c:6a:58:e3:
64:0a:8e:f5:60:8a:f3:21:4b:0b:1e:55:dc:5e:1e:74:05:32:
3d:12:d5:a8:e7:16:4d:eb:62:cc:44:1f:59:72:77:a7:b1:66:
16:ce:0a:55:6a:32:f4:15:f4:67:5d:2d:63:10:be:c3:cd:00:
88:ff:8a:2d:07:51:f7:e1:2e:df:56:52:f5:ad:b9:c1:7a:2d:
99:4d:d6:44:28:27:a2:37:c8:6c:ab:87:76:6d:24:00:c8:f4:
8f:b0:19:4b:ca:0d:33:b5:91:64:0b:33:37:38:0c:8f:fc:5b:
f0:92:71:08:74:45:ec:b9:21:9a:6f:d4:52:2f:9b:4b:5c:21:
ab:5e:27:8d:f7:aa:4c:51:0d:d5:30:ee:47:a5:ca:10:25:81:
38:8f:e6:b0:67:33:03:ec:a3:9c:ad:29:76:4e:e4:0b:e7:18:
3b:18:3f:60:5f:bd:eb:4c:19:44:1a:75:9c:f8:c6:83:d6:3c:
17:9c:92:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:47:12 2025 by rpki-client