Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/4a0949-df58-4005-9768-fc5393c57887/1/LHVK5HPZwVS4BLcO0xiB4CXZJqo.mft
File: LHVK5HPZwVS4BLcO0xiB4CXZJqo.mft (raw, json)
Hash identifier: UmGmQE9L+WzyBQx2tvewgAQkqt+BYlPFq46jDdmmnSc=
Subject key identifier: 83:38:3C:3F:E7:15:30:80:13:5C:8A:D1:C6:BA:F7:76:7F:C3:A5:7F
Authority key identifier: 2C:75:4A:E4:73:D9:C1:54:B8:04:B7:0E:D3:18:81:E0:25:D9:26:AA
Certificate issuer: /CN=2c754ae473d9c154b804b70ed31881e025d926aa
Certificate serial: 0194BCE095CBD4B79BE1808D416FB6C8AF54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LHVK5HPZwVS4BLcO0xiB4CXZJqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/4a0949-df58-4005-9768-fc5393c57887/1/LHVK5HPZwVS4BLcO0xiB4CXZJqo.mft
Manifest number: 0A06
Signing time: Fri 31 Jan 2025 15:00:22 +0000
Manifest this update: Fri 31 Jan 2025 15:00:22 +0000
Manifest next update: Sat 01 Feb 2025 15:00:22 +0000
Files and hashes: 1: LHVK5HPZwVS4BLcO0xiB4CXZJqo.crl (hash: emZAtkUpltaJ7rtJicYw7r/R4zbIJAllQEl5RYI9sHg=)
2: RIso09h5--_F82YqfcCEAd3EpSw.roa (hash: dWlymz3qci5T5aLh2Je4Ec71LNxokFg1VFDedEjsW+8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:95:cb:d4:b7:9b:e1:80:8d:41:6f:b6:c8:af:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c754ae473d9c154b804b70ed31881e025d926aa
Validity
Not Before: Jan 31 15:00:22 2025 GMT
Not After : Feb 1 15:00:22 2025 GMT
Subject: CN=83383c3fe7153080135c8ad1c6baf7767fc3a57f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:09:ad:fd:11:3b:90:d3:eb:44:78:e8:8e:0c:
c4:e3:ff:19:15:c1:df:2c:c6:13:41:11:a3:fc:89:
ca:7a:12:66:e1:16:a5:9e:65:99:6a:93:93:cc:90:
47:91:24:ec:b4:1b:ec:04:21:f5:01:3c:ee:d2:30:
61:fe:09:dc:e2:5d:7d:72:d1:ce:b4:81:40:32:1f:
ab:06:1d:61:46:43:31:2f:a1:8a:ad:94:16:73:32:
12:07:3c:ce:02:73:f6:d9:66:7f:60:21:29:45:c9:
09:04:47:1c:3c:93:4d:1d:63:7f:84:bc:30:7b:64:
07:c2:6a:74:b7:09:e9:e6:5c:5a:33:90:00:ec:c1:
73:3f:48:1f:f1:fb:1b:22:25:80:eb:7a:04:a7:76:
db:0b:40:b5:d4:1c:4e:a2:f8:40:64:98:bd:6d:eb:
77:d7:28:8d:02:79:84:0a:3b:66:81:35:3f:73:69:
ba:e4:89:f6:97:98:44:bc:33:d7:d9:c8:c7:ef:69:
69:47:da:5c:7f:17:11:16:23:75:0d:11:67:4c:ec:
c9:08:88:92:66:d6:61:0b:30:05:16:80:2a:69:56:
b3:ed:45:70:dd:8d:c3:66:a3:16:4f:35:9b:90:4f:
df:2b:f9:7b:67:26:b1:4c:41:82:0a:c7:e1:7c:06:
50:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:38:3C:3F:E7:15:30:80:13:5C:8A:D1:C6:BA:F7:76:7F:C3:A5:7F
X509v3 Authority Key Identifier:
keyid:2C:75:4A:E4:73:D9:C1:54:B8:04:B7:0E:D3:18:81:E0:25:D9:26:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LHVK5HPZwVS4BLcO0xiB4CXZJqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/4a0949-df58-4005-9768-fc5393c57887/1/LHVK5HPZwVS4BLcO0xiB4CXZJqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/4a0949-df58-4005-9768-fc5393c57887/1/LHVK5HPZwVS4BLcO0xiB4CXZJqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:b2:d9:46:a8:fc:5d:f2:86:4a:bc:5d:c7:d1:60:c3:d5:d3:
ca:7a:3a:c8:fc:42:18:6c:56:1d:18:8a:2b:d0:85:1b:92:44:
0e:67:ff:de:c0:34:91:ef:7b:ce:1f:0d:d4:f3:28:ff:39:9d:
fb:cd:d6:fc:6d:57:e7:2c:70:86:a9:e1:1b:36:31:54:b7:78:
f6:b0:69:dc:2d:ba:cd:d6:fd:32:02:08:c4:b0:05:6e:b7:fb:
66:f6:8f:b0:65:7f:86:33:12:d8:b7:fe:0c:0f:34:4d:6d:18:
b0:eb:c4:8f:ad:cc:5c:df:f4:b1:91:36:60:65:63:eb:3b:4e:
bd:f8:a6:f6:cd:71:b7:9b:35:c7:c4:24:05:91:92:8c:6d:2f:
9c:e9:94:8f:fa:b7:81:7b:0e:74:69:4d:aa:f3:6c:18:61:9e:
a3:51:af:2c:6a:31:3e:38:b0:ff:34:98:51:a9:2d:63:c4:c4:
ca:df:0b:b9:99:69:81:71:ca:c0:62:0b:56:68:fc:ef:10:79:
f9:ae:7a:89:a2:b9:d8:1c:f1:4d:fc:d2:1a:22:08:75:6d:bf:
c8:59:02:da:75:98:6c:02:e8:c2:ea:4b:b9:86:75:cf:ac:4e:
b4:6c:ea:4a:fe:d4:bf:69:c0:ec:40:f6:78:d0:eb:3c:00:e5:
2b:89:40:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:12:04 2025 by rpki-client