Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/1cdf84-a35b-4f52-9ee1-f6489f551f15/1/lLUJKKlsuekSD_PLY1s_fXDJfOA.mft
File: lLUJKKlsuekSD_PLY1s_fXDJfOA.mft (raw, json)
Hash identifier: x8a3x2rNqcZeV/Up7a9ynILOFe27+3j8bxKa0qKaRi8=
Subject key identifier: 48:7F:FD:8D:FF:55:D2:FF:E8:39:22:CB:D7:7F:3E:37:40:9A:9B:4C
Authority key identifier: 94:B5:09:28:A9:6C:B9:E9:12:0F:F3:CB:63:5B:3F:7D:70:C9:7C:E0
Certificate issuer: /CN=94b50928a96cb9e9120ff3cb635b3f7d70c97ce0
Certificate serial: 0195B74AAF6AE57A7A6A4C2744A0AAC0DC82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lLUJKKlsuekSD_PLY1s_fXDJfOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/1cdf84-a35b-4f52-9ee1-f6489f551f15/1/lLUJKKlsuekSD_PLY1s_fXDJfOA.mft
Manifest number: 0455
Signing time: Fri 21 Mar 2025 06:01:19 +0000
Manifest this update: Fri 21 Mar 2025 06:01:19 +0000
Manifest next update: Sat 22 Mar 2025 06:01:19 +0000
Files and hashes: 1: LpnDXu3JDFLVkqdaS_J_mqz_IRA.roa (hash: rZ4d4CAV2di4e3eFZ315ntn8Ch6bIgV7U8l1SlWqnhA=)
2: lLUJKKlsuekSD_PLY1s_fXDJfOA.crl (hash: u/n3RWXKivc9RDIgra1u3qxZ3Uzi1CVWvY1GhvGt76c=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:b7:4a:af:6a:e5:7a:7a:6a:4c:27:44:a0:aa:c0:dc:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94b50928a96cb9e9120ff3cb635b3f7d70c97ce0
Validity
Not Before: Mar 21 06:01:19 2025 GMT
Not After : Mar 22 06:01:19 2025 GMT
Subject: CN=487ffd8dff55d2ffe83922cbd77f3e37409a9b4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:d8:39:b7:6f:a5:da:80:6c:99:4d:58:29:6b:
1e:13:97:06:70:59:07:a3:1c:24:9b:7f:49:58:c5:
66:1f:c9:a0:20:06:22:9a:21:62:6b:bf:01:c6:73:
97:03:60:f2:eb:09:3f:9c:c4:a1:64:c5:06:63:8f:
d9:ee:29:15:db:f3:c4:a4:20:b7:c9:4b:10:b3:53:
77:a9:8d:eb:36:cf:7e:01:1f:fe:f7:aa:a6:eb:1c:
8a:cc:81:14:4f:15:d8:f4:2d:e0:73:4b:8c:ad:18:
25:84:df:2e:dd:3b:60:f8:c8:7f:8d:71:8a:ec:77:
3f:af:c2:f5:19:c0:ef:54:7c:95:58:1b:fa:20:18:
75:bf:34:5f:9c:db:ca:3d:9a:a7:7b:76:80:b5:1a:
a7:94:fa:f1:c6:6b:64:8c:02:ef:1b:5e:a5:54:0a:
59:95:65:cb:06:cc:44:1d:c0:00:fb:1c:7d:b1:1e:
b9:99:07:ba:d1:f2:ef:b9:bc:a8:49:4c:0e:fc:5e:
2d:c1:a2:33:b6:93:17:e4:45:e1:2e:55:44:87:83:
40:c7:0b:7e:08:f7:37:aa:98:30:70:da:1f:27:04:
7f:de:e9:2a:6b:c5:d1:0e:97:45:71:4f:37:b2:46:
bc:24:43:4f:c8:20:2a:f1:aa:3f:66:98:78:b4:d1:
01:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:7F:FD:8D:FF:55:D2:FF:E8:39:22:CB:D7:7F:3E:37:40:9A:9B:4C
X509v3 Authority Key Identifier:
keyid:94:B5:09:28:A9:6C:B9:E9:12:0F:F3:CB:63:5B:3F:7D:70:C9:7C:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lLUJKKlsuekSD_PLY1s_fXDJfOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/1cdf84-a35b-4f52-9ee1-f6489f551f15/1/lLUJKKlsuekSD_PLY1s_fXDJfOA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/1cdf84-a35b-4f52-9ee1-f6489f551f15/1/lLUJKKlsuekSD_PLY1s_fXDJfOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:a9:8f:a9:89:72:f5:43:ae:bf:e3:2d:df:13:7a:65:b0:2e:
92:92:63:38:d7:6c:28:e0:eb:96:53:34:90:45:d3:4a:92:86:
46:6b:e6:f3:3b:95:69:5c:f9:58:bc:61:bf:69:ee:0d:9e:26:
90:f3:a7:6d:8a:b9:25:aa:62:03:b9:34:5c:66:50:20:61:05:
d1:28:6d:79:4a:ef:80:49:7c:1d:51:af:34:8b:78:18:4b:b4:
81:9a:03:ce:e7:ca:72:4e:ce:b5:de:9b:0a:82:10:3e:a4:2b:
6c:7d:a1:07:3b:47:d4:7e:b3:14:25:34:9d:99:c4:9f:ab:b3:
15:f5:6c:3e:1a:4e:16:86:c2:31:a6:62:37:16:70:3f:4e:2b:
ed:c4:f6:bd:f4:3c:10:30:c8:12:d1:67:1a:45:85:a3:e9:f3:
87:ef:4c:ee:8f:1c:f5:ac:fa:5e:2f:fa:ff:ed:ba:38:4d:05:
a5:24:aa:e4:6d:f8:98:f7:57:28:38:a3:fc:15:ba:9e:94:55:
eb:54:92:01:80:d4:6c:59:25:5e:66:17:33:82:d2:d7:7d:1c:
4b:ce:65:92:6f:2c:af:8a:e5:21:42:b5:50:4e:6f:66:18:9d:
f0:ed:46:ad:96:a4:ac:8e:ea:f6:3b:24:7b:ed:8c:d9:4e:d3:
ff:ab:0e:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 01:59:05 2025 by rpki-client