Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/0aab78-66de-444c-a843-0b3cb4c6b79a/1/lbgfTkXXEdoMFI3Cuq0VBN27Qns.mft
File: lbgfTkXXEdoMFI3Cuq0VBN27Qns.mft (raw, json)
Hash identifier: pUZt4bmEYDjztMyrBXMo7a+BCmSq8+AbkchZTRoEhck=
Subject key identifier: 45:B7:10:64:40:16:C3:57:0C:53:C2:DB:3D:8F:13:28:B0:31:EA:C6
Authority key identifier: 95:B8:1F:4E:45:D7:11:DA:0C:14:8D:C2:BA:AD:15:04:DD:BB:42:7B
Certificate issuer: /CN=95b81f4e45d711da0c148dc2baad1504ddbb427b
Certificate serial: 0194BC3C4A046A72EE00CFB5499B43FA24AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lbgfTkXXEdoMFI3Cuq0VBN27Qns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/0aab78-66de-444c-a843-0b3cb4c6b79a/1/lbgfTkXXEdoMFI3Cuq0VBN27Qns.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 12:00:55 +0000
Manifest this update: Fri 31 Jan 2025 12:00:55 +0000
Manifest next update: Sat 01 Feb 2025 12:00:55 +0000
Files and hashes: 1: 7akWYjQwsX6a6HhUzkzvmpveN9o.roa (hash: NaXDBHO9cOnr/DrruhF4XLx1P8skQ7ZIYlWJ7+sC7iA=)
2: lbgfTkXXEdoMFI3Cuq0VBN27Qns.crl (hash: zt2FEygxuv931dOaDz0vIX6JXOzqO3K/IRuPOWzdu3c=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:4a:04:6a:72:ee:00:cf:b5:49:9b:43:fa:24:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95b81f4e45d711da0c148dc2baad1504ddbb427b
Validity
Not Before: Jan 31 12:00:55 2025 GMT
Not After : Feb 1 12:00:55 2025 GMT
Subject: CN=45b710644016c3570c53c2db3d8f1328b031eac6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:90:23:9a:21:54:47:5d:e6:55:7b:c9:7d:92:
0e:a8:9b:ce:57:49:64:b9:ba:2f:1d:6d:fa:81:87:
fe:2b:0e:14:59:4f:63:ba:40:f5:ec:4e:a2:db:03:
9b:89:8f:13:d3:e5:47:46:ac:cf:2e:c6:7b:56:fa:
f7:59:53:c6:75:3f:dd:63:65:96:9c:d5:47:7c:9b:
33:95:31:fc:00:f3:6a:fc:bc:71:a5:d7:33:e7:7d:
7a:25:f8:26:d0:d2:6b:22:a7:fe:6f:59:10:d0:6b:
57:d5:df:25:99:74:5b:1e:e6:3a:82:c1:1e:e7:03:
42:48:56:de:63:a2:7c:cb:07:c5:03:d1:90:27:4d:
21:bd:fa:de:ba:e2:b5:95:f8:ef:d2:b3:ff:b8:65:
1f:f9:de:ef:86:9c:c0:f9:95:7c:3b:99:15:6a:cb:
2f:be:55:b0:eb:62:15:89:d2:48:89:54:05:f0:e7:
14:52:f4:48:2d:4e:93:be:00:24:7f:3e:35:cd:a7:
0e:30:91:68:ba:1e:31:03:eb:92:db:4a:ce:4b:8a:
47:86:af:07:6b:85:71:66:7f:39:17:f9:33:a9:e4:
6a:7f:cb:d8:29:4b:01:b1:94:ee:5c:c7:bd:b6:2e:
00:a9:e6:94:e2:3a:ab:f4:bd:ab:49:39:e9:f6:ad:
7a:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:B7:10:64:40:16:C3:57:0C:53:C2:DB:3D:8F:13:28:B0:31:EA:C6
X509v3 Authority Key Identifier:
keyid:95:B8:1F:4E:45:D7:11:DA:0C:14:8D:C2:BA:AD:15:04:DD:BB:42:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lbgfTkXXEdoMFI3Cuq0VBN27Qns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/0aab78-66de-444c-a843-0b3cb4c6b79a/1/lbgfTkXXEdoMFI3Cuq0VBN27Qns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/0aab78-66de-444c-a843-0b3cb4c6b79a/1/lbgfTkXXEdoMFI3Cuq0VBN27Qns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:71:ee:bd:18:62:17:4a:f2:99:4a:b5:50:a9:c0:a6:33:42:
b2:fb:5c:17:c5:35:8d:63:fc:40:a9:65:90:13:f6:65:51:01:
94:d1:4a:a7:88:90:f5:53:8d:2d:8a:2c:6a:4e:e1:dc:0f:45:
71:7a:ea:25:d1:aa:e8:09:b5:4d:8f:e3:a3:d4:a0:6a:29:bf:
9d:2b:2a:b3:9f:d8:3d:22:96:c2:d0:a0:5c:8e:0c:69:4c:4a:
da:13:b6:4d:77:d1:28:6c:3e:90:30:61:10:5c:af:3f:d1:ff:
8f:74:5f:8f:7c:77:17:6a:8e:74:de:f1:69:34:e0:9f:3b:33:
04:6e:a9:e6:6b:cb:d3:bf:e1:50:27:56:40:d6:1b:44:b8:86:
4b:e6:52:08:bd:9b:18:41:da:a7:8a:86:e6:ce:02:0e:cd:de:
05:94:a9:de:1a:26:19:7c:51:a5:02:22:b0:09:e3:0f:93:78:
19:ec:f7:cc:ee:bb:bb:0a:d9:60:4b:ec:b5:00:a8:f3:64:9e:
4b:a8:28:8f:37:89:44:21:89:16:02:9f:77:5a:59:ae:d3:a2:
f1:12:88:98:60:a1:ab:b8:6e:54:74:2b:62:2a:7f:6d:57:55:
24:cd:8e:9b:00:ff:a1:ce:54:1b:17:bd:95:e2:35:60:25:35:
42:fe:94:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:45:56 2025 by rpki-client