Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/c75af4-9d26-4290-b027-a56c52be198c/1/LX893KDLOOx7CMaQKeIPUtxAjxc.mft
File: LX893KDLOOx7CMaQKeIPUtxAjxc.mft (raw, json)
Hash identifier: oYTtQx+1FJ5CvtBmN8d2COJr3OIXDjYcbkODmI8AuoE=
Subject key identifier: 02:CC:1E:15:7F:36:81:85:E2:B5:88:06:A3:E0:E5:46:E6:75:91:1C
Authority key identifier: 2D:7F:3D:DC:A0:CB:38:EC:7B:08:C6:90:29:E2:0F:52:DC:40:8F:17
Certificate issuer: /CN=2d7f3ddca0cb38ec7b08c69029e20f52dc408f17
Certificate serial: 0194BD1778A612346E0CCEC9AA520E100E16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LX893KDLOOx7CMaQKeIPUtxAjxc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/c75af4-9d26-4290-b027-a56c52be198c/1/LX893KDLOOx7CMaQKeIPUtxAjxc.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 16:00:19 +0000
Manifest this update: Fri 31 Jan 2025 16:00:19 +0000
Manifest next update: Sat 01 Feb 2025 16:00:19 +0000
Files and hashes: 1: LX893KDLOOx7CMaQKeIPUtxAjxc.crl (hash: nq5/SX9FaEJ2x+tOwVst/Nr0lIKcypqQP3s22yTw5V0=)
2: NJtD_wJPtwe6yI8QzJv-rd_AAv4.roa (hash: goN8mo/tdm+T4x5aP0V4Y6dre6dhF2ryG392gou/4Qo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:78:a6:12:34:6e:0c:ce:c9:aa:52:0e:10:0e:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d7f3ddca0cb38ec7b08c69029e20f52dc408f17
Validity
Not Before: Jan 31 16:00:19 2025 GMT
Not After : Feb 1 16:00:19 2025 GMT
Subject: CN=02cc1e157f368185e2b58806a3e0e546e675911c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:24:92:1f:b3:d1:11:90:9c:af:5e:66:bd:42:
ff:1a:7e:f7:4f:4c:66:f5:d8:87:95:e0:aa:13:da:
bb:38:ba:b6:30:c6:ae:b4:ab:f7:36:71:58:5a:f8:
9e:c1:4e:bc:cf:80:10:38:9f:55:7f:d1:11:e3:47:
20:ea:c7:ad:a1:57:c8:f0:67:f5:87:b3:72:df:53:
07:31:ed:6c:ab:d4:d3:0a:64:62:19:b6:0d:8b:81:
04:45:10:35:af:8a:5c:d0:3f:84:5d:5b:46:3d:f8:
12:ac:5f:0f:69:73:c5:49:bb:f4:e6:9a:0d:68:4d:
26:99:b6:3f:c9:cc:27:61:b8:c7:11:6a:63:37:7f:
43:8a:33:8a:e3:28:b8:8b:4d:f0:92:9a:d8:af:7e:
97:5e:2b:69:ba:13:e9:5c:6b:a2:7a:f0:5e:c2:9a:
0f:1e:4d:df:8c:b7:90:5c:31:67:ea:cf:67:00:5e:
3b:63:5a:0e:4e:ba:35:c3:a4:9b:53:45:25:c2:96:
d7:95:7f:03:f0:2c:1a:a1:9c:e5:6e:70:57:70:00:
ad:24:67:4b:8e:e1:6b:cc:ae:c5:78:f6:13:81:9a:
2c:77:43:2b:7a:a1:6d:25:20:cb:bc:9c:77:71:09:
be:09:bd:4f:d2:e3:2f:68:b6:c1:e9:ff:88:0d:bf:
20:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:CC:1E:15:7F:36:81:85:E2:B5:88:06:A3:E0:E5:46:E6:75:91:1C
X509v3 Authority Key Identifier:
keyid:2D:7F:3D:DC:A0:CB:38:EC:7B:08:C6:90:29:E2:0F:52:DC:40:8F:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LX893KDLOOx7CMaQKeIPUtxAjxc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/c75af4-9d26-4290-b027-a56c52be198c/1/LX893KDLOOx7CMaQKeIPUtxAjxc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/c75af4-9d26-4290-b027-a56c52be198c/1/LX893KDLOOx7CMaQKeIPUtxAjxc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:b9:f8:74:c9:1f:ea:58:9b:cd:da:fc:5c:0b:cf:e0:47:ac:
65:4f:08:26:a0:b5:d0:f7:1a:4e:2c:d0:5b:8f:89:7f:d6:c1:
70:d5:77:86:f1:58:5e:eb:7e:70:20:31:c3:68:43:3e:b9:a5:
03:ce:be:eb:cc:e8:6d:6b:3b:22:f3:50:20:3f:0e:d2:52:32:
1d:11:50:37:73:3d:b5:93:d6:f9:60:01:ad:86:57:37:be:7b:
da:d2:d0:0b:c0:8c:68:e6:64:a6:f3:70:b7:bf:12:b8:e1:54:
16:6d:46:98:fb:22:ba:15:d7:dd:0f:5a:ab:43:48:c8:0e:81:
c2:a0:80:ba:75:31:9f:4c:ef:bd:5f:45:5d:d8:8f:86:b0:08:
f4:87:4e:58:d0:c8:ab:27:6a:1b:74:9d:87:48:ab:f5:51:09:
dd:2a:09:e8:a2:ad:db:6a:1d:8a:23:f8:ac:a4:4e:21:ac:d7:
1f:e5:b4:f1:88:4b:9f:22:67:08:84:d8:a3:2f:56:8c:d8:4f:
b6:a4:e5:5a:ee:d1:3e:72:8c:09:0c:a8:92:25:a6:48:4c:33:
ba:07:9a:98:4e:02:f3:c4:4d:a7:32:0f:cc:33:3f:b8:c8:88:
94:02:6a:b4:8a:f2:75:e0:d9:c6:d1:3d:72:57:ca:a2:2d:e3:
0b:1d:ba:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:46:40 2025 by rpki-client