Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/8f4a2b-492c-4331-84f8-026e0a4ccaaa/1/lcsYx-zmvdyVcPN_94ZgtY5sIEQ.mft
File: lcsYx-zmvdyVcPN_94ZgtY5sIEQ.mft (raw, json)
Hash identifier: aeSyIFw3KHFZEHuaX2ail/mdwsRc0nWk95RPOw0b9eQ=
Subject key identifier: 85:08:A1:B3:B9:36:2C:14:15:1B:DE:64:8D:AD:72:C8:03:BD:86:FC
Authority key identifier: 95:CB:18:C7:EC:E6:BD:DC:95:70:F3:7F:F7:86:60:B5:8E:6C:20:44
Certificate issuer: /CN=95cb18c7ece6bddc9570f37ff78660b58e6c2044
Certificate serial: 0194BD17E7FDAD5AEB3C07021278F570543B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lcsYx-zmvdyVcPN_94ZgtY5sIEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/8f4a2b-492c-4331-84f8-026e0a4ccaaa/1/lcsYx-zmvdyVcPN_94ZgtY5sIEQ.mft
Manifest number: 0143
Signing time: Fri 31 Jan 2025 16:00:47 +0000
Manifest this update: Fri 31 Jan 2025 16:00:47 +0000
Manifest next update: Sat 01 Feb 2025 16:00:47 +0000
Files and hashes: 1: 4d05APiOYCmE2eSMktC6x0oiOVY.roa (hash: 4uLCDeXqKEU2GmyDcCV44Z6CSoTvWfkLJ1BLXOmGGm4=)
2: lcsYx-zmvdyVcPN_94ZgtY5sIEQ.crl (hash: QMLl6he1BmQmLkGeuOrBgZFSBtsJ942tFsC8erPAqkU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:e7:fd:ad:5a:eb:3c:07:02:12:78:f5:70:54:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95cb18c7ece6bddc9570f37ff78660b58e6c2044
Validity
Not Before: Jan 31 16:00:47 2025 GMT
Not After : Feb 1 16:00:47 2025 GMT
Subject: CN=8508a1b3b9362c14151bde648dad72c803bd86fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:ce:2d:60:e3:ad:5a:1f:9d:43:6b:f2:ba:10:
48:9c:1f:06:56:e0:08:2c:b3:2e:1d:c9:4c:19:e4:
cc:d0:6d:18:a2:88:d7:ec:73:28:73:24:32:6e:e8:
48:a9:cc:20:a9:37:ce:8d:cf:52:e6:46:5e:dd:be:
49:13:42:2d:20:d4:99:98:48:59:16:a9:1b:2e:db:
12:a7:d4:c0:cc:63:45:1b:7f:e3:e6:c4:74:38:44:
75:49:98:05:35:7f:ce:0a:72:6d:fb:c6:b5:45:85:
aa:00:d4:99:bc:8c:8a:9f:6e:94:a2:d3:0b:07:96:
a6:b0:79:59:56:67:87:d6:bc:d8:ad:ec:1b:f1:92:
4f:3d:f6:6d:a6:a7:f9:ff:6d:48:04:52:c3:06:d7:
80:52:82:b1:34:07:95:a5:c0:81:18:69:78:8d:2a:
f0:19:15:91:36:10:2f:79:cf:87:e9:2a:82:56:85:
c9:c9:be:76:57:20:13:5a:96:0f:8d:f5:32:78:92:
dc:23:f8:8a:a4:c0:33:ff:ab:6d:12:15:4d:86:65:
80:e3:54:3f:5b:46:69:b6:2c:dd:ae:ad:55:34:72:
2b:92:45:b2:6c:95:cc:7d:60:26:da:bb:76:04:f4:
b6:ba:61:17:8e:a4:e0:1d:09:ec:8b:27:15:f6:23:
a1:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:08:A1:B3:B9:36:2C:14:15:1B:DE:64:8D:AD:72:C8:03:BD:86:FC
X509v3 Authority Key Identifier:
keyid:95:CB:18:C7:EC:E6:BD:DC:95:70:F3:7F:F7:86:60:B5:8E:6C:20:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lcsYx-zmvdyVcPN_94ZgtY5sIEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/8f4a2b-492c-4331-84f8-026e0a4ccaaa/1/lcsYx-zmvdyVcPN_94ZgtY5sIEQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/8f4a2b-492c-4331-84f8-026e0a4ccaaa/1/lcsYx-zmvdyVcPN_94ZgtY5sIEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:65:9c:33:3b:bb:cc:db:75:eb:66:47:8f:b7:a4:40:06:e1:
51:d0:1c:a4:92:d6:e8:8f:68:0a:4a:54:ea:5f:c7:49:18:32:
b9:d5:9d:5f:a0:e3:86:c5:72:50:89:2f:ce:42:a6:c4:f9:61:
c7:d5:e5:b0:3d:68:f7:ad:c8:ea:a3:c9:f9:7d:70:c4:78:6b:
0e:d1:fc:e2:e5:7e:7b:36:d8:58:b9:95:f3:65:3f:45:23:ab:
0c:b3:42:49:9e:01:dc:61:4f:6e:fe:93:c2:c9:cc:6a:4b:ba:
ae:bb:8f:95:16:ab:9d:a2:ed:00:af:c2:19:c3:c0:38:e1:76:
f2:df:fd:10:08:45:b9:a3:9b:4a:ba:30:25:1f:86:b2:41:4d:
72:1e:f0:53:d1:27:39:b3:cb:26:ea:b0:99:c6:49:35:c8:1b:
75:cf:c7:66:97:c5:7a:10:03:bb:d4:be:09:67:99:8a:9a:4d:
31:3c:35:d9:2c:d7:59:e9:24:96:9e:12:92:85:50:05:b8:ae:
36:2e:af:35:0d:38:ca:08:06:fd:64:ce:f9:23:c2:37:19:04:
47:db:a0:81:dd:7c:64:b9:7a:c8:5a:cc:3e:1b:c5:d1:c1:4a:
d1:d7:0d:8e:e1:50:d4:e6:73:94:58:d2:25:44:a9:65:71:f7:
37:5c:d7:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:39:28 2025 by rpki-client