Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/4225b9-e9c3-4b8e-8bff-3a533cedc301/1/LhznvOx_18KfCYu64NMSte46NF4.mft
File: LhznvOx_18KfCYu64NMSte46NF4.mft (raw, json)
Hash identifier: 5SFDew4dySu1G38MwTzawxhAKuyWwic8BCA2xOryRHk=
Subject key identifier: C3:8C:93:5A:29:F0:66:71:D0:86:F9:BE:6B:11:21:BC:06:8E:4E:EF
Authority key identifier: 2E:1C:E7:BC:EC:7F:D7:C2:9F:09:8B:BA:E0:D3:12:B5:EE:3A:34:5E
Certificate issuer: /CN=2e1ce7bcec7fd7c29f098bbae0d312b5ee3a345e
Certificate serial: 0194BD85703BC1868FD7A339CF76F73CE8AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LhznvOx_18KfCYu64NMSte46NF4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/4225b9-e9c3-4b8e-8bff-3a533cedc301/1/LhznvOx_18KfCYu64NMSte46NF4.mft
Manifest number: AF
Signing time: Fri 31 Jan 2025 18:00:26 +0000
Manifest this update: Fri 31 Jan 2025 18:00:26 +0000
Manifest next update: Sat 01 Feb 2025 18:00:26 +0000
Files and hashes: 1: LhznvOx_18KfCYu64NMSte46NF4.crl (hash: sz6szcnv1Jc4+HHfAm3nyxDONj7Fon/4mjjJ7jS5PEw=)
2: dGGMhhLDaoWkDWmK8o4AcoqcFuc.roa (hash: +aGKRXgqkoPg+9wbbAijk/9YLBVcGbYOuDtpc/CsaCg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:70:3b:c1:86:8f:d7:a3:39:cf:76:f7:3c:e8:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e1ce7bcec7fd7c29f098bbae0d312b5ee3a345e
Validity
Not Before: Jan 31 18:00:26 2025 GMT
Not After : Feb 1 18:00:26 2025 GMT
Subject: CN=c38c935a29f06671d086f9be6b1121bc068e4eef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:00:7b:ed:a5:4e:67:77:ed:5d:5b:30:ed:6e:
b7:b3:29:c8:12:cb:8a:59:ab:23:1c:3c:b4:8d:61:
8b:59:43:84:4a:3d:6b:75:ae:e4:5e:10:ed:44:9a:
5b:77:5f:d4:be:4d:81:94:97:ff:a5:d9:d8:de:1b:
bf:7c:9a:e9:57:80:c4:66:a9:27:df:5c:ad:b3:ca:
2a:86:7b:b0:86:70:24:48:cb:58:1f:92:c4:de:77:
ca:0f:06:c8:2c:5b:02:a2:64:13:b5:e9:95:47:a1:
b6:f8:ec:19:af:6b:36:6a:04:ac:79:c9:a3:95:e7:
85:99:3a:72:79:d9:ad:a7:1b:f7:7a:af:77:27:76:
66:3c:21:1f:12:5d:d5:79:96:69:2d:0a:d9:a4:0c:
1d:90:7c:55:45:19:51:5f:b4:d1:37:04:95:06:f1:
44:e1:d2:d0:be:be:0b:fa:cb:18:c7:ae:e6:e3:b4:
b7:8f:a0:7a:da:5e:5f:d7:d9:5f:49:44:54:49:df:
88:d9:d9:ae:58:5d:77:9a:42:6a:13:db:cb:11:83:
65:4d:8d:ff:01:4c:d3:1a:df:21:e4:5b:16:30:f8:
9e:8c:88:37:1a:9d:64:fe:a5:10:59:35:7d:ba:9d:
35:98:06:02:c6:dd:a3:df:b2:ef:b0:13:69:35:fd:
06:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:8C:93:5A:29:F0:66:71:D0:86:F9:BE:6B:11:21:BC:06:8E:4E:EF
X509v3 Authority Key Identifier:
keyid:2E:1C:E7:BC:EC:7F:D7:C2:9F:09:8B:BA:E0:D3:12:B5:EE:3A:34:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LhznvOx_18KfCYu64NMSte46NF4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/4225b9-e9c3-4b8e-8bff-3a533cedc301/1/LhznvOx_18KfCYu64NMSte46NF4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/4225b9-e9c3-4b8e-8bff-3a533cedc301/1/LhznvOx_18KfCYu64NMSte46NF4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:b5:08:6e:0d:4b:f1:4d:44:f5:97:0b:38:7b:6d:1a:e5:89:
72:79:76:07:c5:9b:e8:ab:86:a8:51:9d:24:21:68:80:7a:6d:
af:04:93:9e:ec:42:1a:09:d8:13:60:21:e8:bb:35:48:03:05:
6a:25:fc:c6:fd:e5:2d:12:bf:57:11:ff:97:ff:a7:14:78:d8:
55:2c:9d:95:03:24:bf:22:55:61:ce:87:67:53:24:33:44:d9:
0b:af:b4:bf:83:6f:81:dc:9a:8d:4a:2f:ed:e8:d4:26:87:30:
06:42:d6:4c:17:24:2c:0a:80:0e:a6:51:69:70:1b:54:15:f6:
25:f0:35:31:ad:78:ea:61:a9:f6:3b:e3:c4:7d:82:76:21:89:
b0:01:a7:d1:e2:8c:1d:e4:86:4a:5f:fd:eb:e8:12:d3:5f:56:
a9:f6:90:19:ff:61:39:95:d9:0d:69:5d:de:1b:2b:bd:00:58:
3e:e6:32:4a:da:de:48:9b:69:1e:4c:10:e5:52:9c:dc:4b:f2:
68:49:a8:b0:6d:af:c5:a3:b6:b9:87:6d:ec:c4:63:29:9b:d6:
66:85:d3:5b:25:f2:56:d3:cd:fd:9a:68:19:79:dc:6d:a5:a5:
88:af:7d:84:b5:08:2a:c4:f2:23:a9:56:4c:42:a5:65:0b:b1:
46:85:8f:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:35:01 2025 by rpki-client