Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/ecbffa-1166-4d1e-9f55-11575db64fbe/1/LBKCZbgJkXiNhuImLpM5A4tO-oI.mft
File: LBKCZbgJkXiNhuImLpM5A4tO-oI.mft (raw, json)
Hash identifier: jyd503vyv68UFWzhv7jr38ZgyFYoj3jNJ7O4Ps7j+fo=
Subject key identifier: 75:0B:24:67:2C:FF:CA:B2:74:B4:A6:A1:85:18:88:96:01:CE:5B:2D
Authority key identifier: 2C:12:82:65:B8:09:91:78:8D:86:E2:26:2E:93:39:03:8B:4E:FA:82
Certificate issuer: /CN=2c128265b80991788d86e2262e9339038b4efa82
Certificate serial: 0195E0EB1AFA8866D6AAC44C758AEDB3DF80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LBKCZbgJkXiNhuImLpM5A4tO-oI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/ecbffa-1166-4d1e-9f55-11575db64fbe/1/LBKCZbgJkXiNhuImLpM5A4tO-oI.mft
Manifest number: 51
Signing time: Sat 29 Mar 2025 08:00:58 +0000
Manifest this update: Sat 29 Mar 2025 08:00:58 +0000
Manifest next update: Sun 30 Mar 2025 08:00:58 +0000
Files and hashes: 1: AUJAohDb7gvWp2PAn2xH3z3Zx8I.roa (hash: Px2ndw4EQ+qkKAfeVMR+LtAp8KsmOxSR4KCS0rfVjWc=)
2: LBKCZbgJkXiNhuImLpM5A4tO-oI.crl (hash: 0fX3YoGH1qbD0u4CpxcjPk85UDl3oG8e8US2QZAnuXw=)
3: LTEzdR9zUquR1ggUmA4_QHu2p50.roa (hash: uNuzvFRDaCwMPWv1CbBVSxROhTe6dbQ9XSUinppVNcM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:eb:1a:fa:88:66:d6:aa:c4:4c:75:8a:ed:b3:df:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c128265b80991788d86e2262e9339038b4efa82
Validity
Not Before: Mar 29 08:00:58 2025 GMT
Not After : Mar 30 08:00:58 2025 GMT
Subject: CN=750b24672cffcab274b4a6a18518889601ce5b2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:12:24:e6:33:70:ff:a5:86:4e:1d:76:a3:d0:
02:74:ed:d5:7a:87:34:a1:ee:d5:d6:ed:b4:37:3f:
2b:1a:dd:c9:bc:d0:66:70:74:7d:06:44:63:23:64:
b5:48:ff:03:d6:83:d9:d7:fd:65:d0:bd:cb:e0:20:
4c:7b:64:d5:a0:9e:06:b6:c7:1b:e4:de:8d:8c:44:
72:c9:9f:f5:b6:ca:20:ca:9f:bf:76:2c:59:57:f1:
2f:30:ef:54:df:d3:6a:96:03:0a:48:8d:f9:22:f8:
e7:d2:ea:b7:9b:1f:80:72:25:a4:c4:4b:87:8f:10:
3d:36:0e:25:9e:5c:d9:f1:e2:3a:8d:73:d4:6f:af:
1d:e1:4f:10:75:c2:a3:52:58:63:3b:32:3d:3e:fa:
fe:88:02:8e:33:ca:78:b8:fa:77:06:cc:84:74:c9:
b1:c6:17:5e:bb:34:ff:15:ca:63:78:06:26:d6:85:
a4:34:cc:5b:30:fb:f0:e7:d9:7e:78:80:20:f4:d0:
1f:f0:c5:5c:70:b6:a2:2b:aa:7b:42:e3:99:89:e8:
bb:65:fe:77:82:f1:25:67:ce:9e:95:85:09:84:ac:
91:d8:bf:4f:e2:1e:83:4e:1f:cc:e5:5d:26:fa:38:
f3:4c:af:6c:b8:4b:33:70:0b:29:97:db:a5:fe:1d:
09:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:0B:24:67:2C:FF:CA:B2:74:B4:A6:A1:85:18:88:96:01:CE:5B:2D
X509v3 Authority Key Identifier:
keyid:2C:12:82:65:B8:09:91:78:8D:86:E2:26:2E:93:39:03:8B:4E:FA:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LBKCZbgJkXiNhuImLpM5A4tO-oI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/ecbffa-1166-4d1e-9f55-11575db64fbe/1/LBKCZbgJkXiNhuImLpM5A4tO-oI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/ecbffa-1166-4d1e-9f55-11575db64fbe/1/LBKCZbgJkXiNhuImLpM5A4tO-oI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:79:3f:30:d7:41:14:69:b0:f0:1f:c1:25:50:94:63:bb:b0:
a8:fe:a9:da:96:90:9d:88:2c:0b:00:ce:f1:42:8f:c7:f9:2e:
a5:23:e9:e7:ab:ab:02:1e:2d:be:e4:bb:d8:a4:f6:fb:23:cc:
7a:b9:aa:9b:bd:38:b6:73:9c:54:f7:ec:68:7b:ca:ec:ed:9f:
e1:9b:d8:72:3b:b8:26:a2:85:96:9a:3d:20:1e:d1:3f:f4:fa:
3a:65:66:74:67:28:09:a9:e6:4e:eb:53:fd:1c:d7:c9:fc:f6:
8b:19:b7:51:c7:39:86:79:fc:54:b9:e1:73:a0:45:44:3a:99:
b7:e1:0b:72:e6:ed:75:9d:77:54:cd:a5:4c:6c:09:bd:9b:ff:
a3:31:6c:d5:22:bf:63:a4:54:62:ce:9f:13:d3:90:4a:b9:d9:
2d:53:a7:f4:20:ee:b9:a2:7e:1c:d0:66:04:7f:d6:ff:4b:77:
cc:b2:d4:59:cb:47:4a:bd:bb:ef:ee:3f:f2:92:96:fb:ab:6a:
c0:b0:1c:4e:c1:53:fd:06:2c:10:7e:a9:2f:89:a0:48:d9:92:
e3:7e:19:47:db:48:c3:19:ba:55:1c:e1:32:58:32:8b:be:24:
1d:73:7a:40:f8:8c:be:93:81:65:27:e2:45:0c:9a:15:a7:38:
57:96:aa:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:00:37 2025 by rpki-client