Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/42ad02-d48a-41ac-a80b-2102d96ee355/1/LrqqxROYKzwk02DG1GXPgkIFaok.mft
File: LrqqxROYKzwk02DG1GXPgkIFaok.mft (raw, json)
Hash identifier: bcXTRSRe2lR6BPTo2F5yp7taeYoWZ8792FxyUCQqEhw=
Subject key identifier: E1:F2:17:59:DF:29:63:81:59:B4:35:BE:3C:C9:98:1F:14:E9:D2:0D
Authority key identifier: 2E:BA:AA:C5:13:98:2B:3C:24:D3:60:C6:D4:65:CF:82:42:05:6A:89
Certificate issuer: /CN=2ebaaac513982b3c24d360c6d465cf8242056a89
Certificate serial: 0194BC053BECDE9B508638DBC4358F259953
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LrqqxROYKzwk02DG1GXPgkIFaok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/42ad02-d48a-41ac-a80b-2102d96ee355/1/LrqqxROYKzwk02DG1GXPgkIFaok.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 11:00:46 +0000
Manifest this update: Fri 31 Jan 2025 11:00:46 +0000
Manifest next update: Sat 01 Feb 2025 11:00:46 +0000
Files and hashes: 1: GY1X78tUCHALN-6VezXTntkS1S0.roa (hash: B4/LrjmuUdItXDnKDdePMAJjiq+F77UrPT1SZV8fodQ=)
2: LrqqxROYKzwk02DG1GXPgkIFaok.crl (hash: DC/Azlm5k47ym0buQnfiZyObBfa4nSCPclSKvhfrUII=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:3b:ec:de:9b:50:86:38:db:c4:35:8f:25:99:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ebaaac513982b3c24d360c6d465cf8242056a89
Validity
Not Before: Jan 31 11:00:46 2025 GMT
Not After : Feb 1 11:00:46 2025 GMT
Subject: CN=e1f21759df29638159b435be3cc9981f14e9d20d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:24:c0:9b:ec:a1:0e:d1:ec:0c:03:8a:2a:27:
25:1a:a2:39:eb:ea:69:11:6c:1f:30:4d:b4:15:43:
83:8b:d2:a2:c2:8d:72:84:a9:c6:bd:e7:04:85:6a:
c6:7f:e1:6a:76:22:41:94:dd:f6:06:ad:03:c2:ac:
67:62:c6:19:51:43:8c:e1:21:ae:a8:0e:4a:04:56:
c0:ae:5b:24:45:19:73:87:86:e1:ef:b5:82:77:9e:
94:28:ac:c1:90:bc:ea:78:c8:bc:0a:98:e4:52:29:
6e:3f:65:ef:00:9a:8a:71:04:33:3a:e8:94:a4:d8:
a4:b8:36:2c:03:87:64:62:dd:79:a2:19:0d:9f:9e:
ed:57:d0:43:32:f4:51:63:9d:ed:60:d3:b6:8b:51:
cc:d5:d9:b4:c5:59:a4:7e:0a:3b:8e:f0:25:e4:28:
fb:c9:92:80:d0:41:82:cd:24:51:8a:ad:3c:23:11:
7c:89:d1:8d:05:78:46:7b:51:10:57:c0:91:98:c4:
ff:8d:2d:a0:d2:3c:6f:9d:93:4a:75:71:5b:09:3a:
ab:51:da:a5:0f:5b:50:73:b5:a3:83:94:99:f8:1f:
37:ac:f7:8e:c9:ba:0e:93:f3:4e:d1:ce:16:82:a8:
44:da:97:03:21:1a:2b:20:d6:be:1f:fc:a9:9b:fe:
c5:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:F2:17:59:DF:29:63:81:59:B4:35:BE:3C:C9:98:1F:14:E9:D2:0D
X509v3 Authority Key Identifier:
keyid:2E:BA:AA:C5:13:98:2B:3C:24:D3:60:C6:D4:65:CF:82:42:05:6A:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LrqqxROYKzwk02DG1GXPgkIFaok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/42ad02-d48a-41ac-a80b-2102d96ee355/1/LrqqxROYKzwk02DG1GXPgkIFaok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/42ad02-d48a-41ac-a80b-2102d96ee355/1/LrqqxROYKzwk02DG1GXPgkIFaok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:87:32:c7:cb:a0:bc:a9:87:5f:0a:ca:ab:6f:43:aa:1b:55:
ba:e3:55:a8:36:ae:b2:2e:5a:64:cc:7c:25:30:7a:d5:69:2e:
58:0b:9b:47:2c:13:6a:57:b8:62:b0:32:19:be:93:2e:05:80:
40:f7:0f:a0:58:2d:25:ff:b3:58:1e:e0:b4:b4:97:44:35:65:
e4:3b:c7:e3:c7:9b:30:68:7e:c9:09:15:10:a4:00:43:33:4e:
73:67:9b:ba:74:e9:ff:b8:56:ce:ed:23:eb:d9:f2:55:84:0b:
74:ca:c3:f0:e1:4d:6e:a5:41:a2:48:a7:40:fa:d6:44:20:f2:
67:91:c2:7b:87:1e:84:fa:52:8b:a2:98:f6:d6:27:d4:10:69:
fd:bd:ab:5b:77:64:55:fb:c4:e1:0e:7b:14:f2:ec:60:ae:d4:
77:d2:48:26:9a:8b:c0:2c:57:a5:ac:d2:50:96:3a:a2:80:77:
af:c8:3f:fe:01:39:ec:3c:ae:bc:88:c5:ab:86:3c:33:0e:cf:
80:78:76:ea:4c:13:2e:be:4b:0b:38:66:cc:fe:59:ef:1d:4f:
c9:bf:74:69:b5:51:31:fe:ba:07:1c:72:2e:c5:7a:9d:79:3d:
73:55:27:18:de:60:78:29:52:9a:a7:ca:d5:fc:93:0b:14:6c:
a8:03:ba:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:42:11 2025 by rpki-client