Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/07ae9e-3d04-45b6-9db0-46935fcc855e/1/lvcbInOrNO1KVIEXbvcPrYZ-8WY.mft
File: lvcbInOrNO1KVIEXbvcPrYZ-8WY.mft (raw, json)
Hash identifier: OHd8sfy6FXCorNCBtsNAf/Xh93lbgXdXsv7usWovwLM=
Subject key identifier: 3D:C5:6B:ED:09:13:EC:CC:27:A6:FF:E8:70:FE:60:A2:69:16:BF:8A
Authority key identifier: 96:F7:1B:22:73:AB:34:ED:4A:54:81:17:6E:F7:0F:AD:86:7E:F1:66
Certificate issuer: /CN=96f71b2273ab34ed4a5481176ef70fad867ef166
Certificate serial: 0194BCE0964FF656324A1141046B8FE41A57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lvcbInOrNO1KVIEXbvcPrYZ-8WY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/07ae9e-3d04-45b6-9db0-46935fcc855e/1/lvcbInOrNO1KVIEXbvcPrYZ-8WY.mft
Manifest number: 0E58
Signing time: Fri 31 Jan 2025 15:00:22 +0000
Manifest this update: Fri 31 Jan 2025 15:00:22 +0000
Manifest next update: Sat 01 Feb 2025 15:00:22 +0000
Files and hashes: 1: Fj_5uSamv3jJtjHIke52iA3Na28.roa (hash: bRfKAtXHlDItQpeybK7VtR0dtUctyiWAqKlzDKS2Kn8=)
2: dJXQbo6z-3ryGZc7-KlzntCNDPg.roa (hash: dZ1N3sX+9N9ZicyxN/2APG+qgevhxMcEIynl4tsXiwo=)
3: lvcbInOrNO1KVIEXbvcPrYZ-8WY.crl (hash: +QjfEW+53BnZwZ/SCdyc05Hu+jEEMSOBfPpaD/Aw7ts=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:96:4f:f6:56:32:4a:11:41:04:6b:8f:e4:1a:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96f71b2273ab34ed4a5481176ef70fad867ef166
Validity
Not Before: Jan 31 15:00:22 2025 GMT
Not After : Feb 1 15:00:22 2025 GMT
Subject: CN=3dc56bed0913eccc27a6ffe870fe60a26916bf8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:78:d2:c3:76:bd:5e:3e:27:7b:6e:33:27:5c:
36:8b:f6:5f:5b:64:aa:90:3b:dd:c7:ac:d1:8a:45:
17:58:2f:dc:b2:82:43:23:80:fb:12:2d:0a:25:d3:
34:fb:db:49:73:58:96:76:25:e1:1c:1a:09:57:99:
0a:45:64:50:ff:13:4c:ee:b2:de:88:04:2f:47:05:
d7:a1:49:50:ca:76:8c:13:2f:f1:63:59:a1:45:d4:
89:35:ba:50:d0:77:52:41:12:3c:7f:a6:df:ef:c0:
86:ea:15:49:0c:2a:e4:8f:1d:fc:9f:bd:90:37:95:
5d:11:a9:fc:35:40:6c:c6:cb:56:2e:02:20:e6:57:
51:54:0f:f7:39:9f:30:e4:b2:74:e0:51:09:a6:e1:
e3:49:f5:e4:da:33:d3:77:27:f4:bb:4b:e5:49:96:
f8:ec:74:17:89:ad:5f:db:f7:2c:57:26:df:85:31:
c0:ac:f5:1e:6a:72:ab:93:f9:34:e0:c3:cc:e4:56:
a4:e1:01:a8:6b:0b:2a:16:95:bf:76:d2:e9:03:96:
90:2a:6e:44:91:ed:6a:9b:e0:a0:4b:89:5a:ed:f0:
81:9d:93:73:63:39:e7:7a:d4:da:cd:f2:a2:1b:16:
52:1a:fd:02:6f:7b:b1:fb:9f:40:f7:b7:8e:41:a1:
58:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:C5:6B:ED:09:13:EC:CC:27:A6:FF:E8:70:FE:60:A2:69:16:BF:8A
X509v3 Authority Key Identifier:
keyid:96:F7:1B:22:73:AB:34:ED:4A:54:81:17:6E:F7:0F:AD:86:7E:F1:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lvcbInOrNO1KVIEXbvcPrYZ-8WY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/07ae9e-3d04-45b6-9db0-46935fcc855e/1/lvcbInOrNO1KVIEXbvcPrYZ-8WY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/07ae9e-3d04-45b6-9db0-46935fcc855e/1/lvcbInOrNO1KVIEXbvcPrYZ-8WY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:af:b2:20:0e:82:dd:63:fd:e2:e4:16:c9:4e:30:da:c1:c3:
10:0e:24:8e:e3:48:5d:0f:4f:3e:26:25:89:5f:f7:f7:09:93:
ae:b7:82:e8:45:5a:ea:e1:de:4c:05:90:54:de:64:ad:35:5f:
37:01:ff:a9:a2:ec:5a:9c:c0:a7:be:22:57:34:a1:c7:be:0b:
d9:91:62:36:59:ac:71:cb:4b:22:e5:7b:16:5c:b3:7a:f5:d8:
45:1e:8a:98:52:63:08:60:18:b9:0a:85:83:3a:52:db:13:bb:
9c:53:c8:60:26:99:67:6f:6c:17:33:1d:a9:94:0c:9f:d6:cb:
6e:36:12:57:89:bb:62:c8:5f:37:2b:45:37:f4:7b:0e:fc:d7:
1d:fb:92:92:e1:e1:99:ad:66:be:8b:a5:ea:44:15:88:d7:5c:
41:d8:d9:c6:8a:81:0b:42:13:3f:90:0f:e6:53:7c:2b:71:d5:
f7:a9:4c:aa:0a:a0:1c:7c:84:e7:9a:6b:92:5d:ec:a1:c9:ea:
9e:33:27:69:5d:d4:4d:48:97:93:7c:5d:93:69:bb:a0:15:5e:
8b:56:22:f9:96:4e:e3:4c:e1:ec:3e:9d:b8:72:5b:7d:72:da:
18:d9:d5:52:d9:3d:25:5d:f6:12:4c:75:18:a0:1c:2c:ba:35:
c9:e2:0e:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 14:42:44 2025 by rpki-client