Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/c5cc6b-bfdf-402f-be6c-47755c63cc03/1/lSb7aB-4dU5Nlmmy3GgGqyhM4Uc.mft
File: lSb7aB-4dU5Nlmmy3GgGqyhM4Uc.mft (raw, json)
Hash identifier: jBeyLuBuCvMtYkhrnRd7haWHGazhgiVYGdraA+Wgo7w=
Subject key identifier: 7F:0A:54:B0:2E:C2:4B:9C:2E:35:5C:D8:18:EB:82:60:6C:35:02:C0
Authority key identifier: 95:26:FB:68:1F:B8:75:4E:4D:96:69:B2:DC:68:06:AB:28:4C:E1:47
Certificate issuer: /CN=9526fb681fb8754e4d9669b2dc6806ab284ce147
Certificate serial: 0194BC72A47DA95BE130C2B98AE20487B7E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lSb7aB-4dU5Nlmmy3GgGqyhM4Uc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/c5cc6b-bfdf-402f-be6c-47755c63cc03/1/lSb7aB-4dU5Nlmmy3GgGqyhM4Uc.mft
Manifest number: 0AD3
Signing time: Fri 31 Jan 2025 13:00:17 +0000
Manifest this update: Fri 31 Jan 2025 13:00:17 +0000
Manifest next update: Sat 01 Feb 2025 13:00:17 +0000
Files and hashes: 1: D3i9EVA32LU2rGVYsxndx1JTftM.roa (hash: tlnX1w1cOV5lcgJWKpzZKTU4C07C/i0e3u+/uvX0sH0=)
2: Uga7lkbHD-v-uh8A_8oHbgCwXjA.roa (hash: hmv7UPLFFmBr0e3HMje4/dQjNiIYMBPVXNKj9SALCsg=)
3: lSb7aB-4dU5Nlmmy3GgGqyhM4Uc.crl (hash: 1UMaaNWUdZzlVUoLw92xeFnA+vbHCXK6e02iuWO/WFU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:a4:7d:a9:5b:e1:30:c2:b9:8a:e2:04:87:b7:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9526fb681fb8754e4d9669b2dc6806ab284ce147
Validity
Not Before: Jan 31 13:00:17 2025 GMT
Not After : Feb 1 13:00:17 2025 GMT
Subject: CN=7f0a54b02ec24b9c2e355cd818eb82606c3502c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:71:bf:82:c9:3a:b0:b1:bd:ae:1c:ae:c1:2e:
d0:79:10:f8:ca:f9:21:a7:4a:d9:b9:9c:30:8b:c8:
00:b3:a3:13:5b:2e:4a:68:6d:4f:db:bb:b9:86:b6:
21:6f:c1:0c:b2:d8:e5:86:b0:4d:a0:6b:9c:2c:5b:
da:a1:9e:77:85:0a:a2:7b:4e:ed:46:92:35:b9:c2:
c3:05:a5:77:81:a0:a1:e8:be:4c:04:d4:87:36:24:
e6:e8:49:78:14:d3:1f:dc:58:d4:fa:de:3a:95:04:
8a:c2:48:63:22:6f:34:ee:60:f7:df:e1:15:2b:d3:
bd:8f:cc:cd:5e:38:db:db:0b:f5:94:4a:32:93:5e:
7a:e4:77:4f:2e:41:4b:b8:4e:9f:f0:7b:ee:f0:66:
a5:6e:46:4e:d9:db:21:b8:fe:39:3a:ac:d1:19:ea:
45:9f:e3:24:91:7a:18:dc:23:b6:7b:35:3a:74:bb:
8e:e5:64:29:28:61:41:9f:6b:1d:3a:13:da:ae:28:
9b:c0:1c:cd:aa:ec:ec:3f:50:b7:84:c1:2a:b2:af:
6b:a9:f5:b3:29:d4:71:77:bb:73:d0:49:18:50:b5:
f5:84:89:48:75:3c:78:89:63:0e:af:e6:53:41:9a:
b9:57:1a:be:d7:67:17:a1:0b:f1:56:b8:58:b6:d1:
ec:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:0A:54:B0:2E:C2:4B:9C:2E:35:5C:D8:18:EB:82:60:6C:35:02:C0
X509v3 Authority Key Identifier:
keyid:95:26:FB:68:1F:B8:75:4E:4D:96:69:B2:DC:68:06:AB:28:4C:E1:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lSb7aB-4dU5Nlmmy3GgGqyhM4Uc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/c5cc6b-bfdf-402f-be6c-47755c63cc03/1/lSb7aB-4dU5Nlmmy3GgGqyhM4Uc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/c5cc6b-bfdf-402f-be6c-47755c63cc03/1/lSb7aB-4dU5Nlmmy3GgGqyhM4Uc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:91:f7:ed:35:bd:c6:ff:29:8e:48:ac:11:4b:5f:2c:f7:cb:
0e:7f:ae:d6:fc:d0:f5:ec:ca:37:88:29:4d:55:9d:91:78:b0:
ec:1f:0c:6a:62:d5:56:60:33:a6:f6:db:c7:61:14:87:b0:1e:
88:2b:76:17:ed:8f:32:88:9e:8f:53:53:a6:7e:0c:9e:5c:2c:
58:b3:d3:b4:f5:b2:69:6c:46:39:af:f6:fe:97:37:2b:d4:90:
83:dd:84:84:86:0b:5b:04:85:66:fe:72:44:81:3b:f0:02:8c:
ce:7e:a7:82:11:ec:f7:ff:52:60:bb:0c:61:42:32:d0:38:da:
7b:5a:fb:8a:5a:99:41:b4:41:1f:1e:d3:91:e7:2d:50:d5:e0:
48:e3:82:3d:e4:ef:a2:c5:07:bb:68:7e:2e:51:6a:77:93:63:
50:e1:15:c2:8a:1d:a9:a8:2e:25:9e:c8:05:e3:52:e8:15:ee:
72:c2:b0:68:67:c0:a7:a4:01:0a:f0:2d:41:10:36:c7:7d:a2:
1c:4d:5f:3d:20:a2:a8:2e:bb:e8:3b:6d:5a:74:37:c6:9a:a5:
b6:2a:84:b9:a1:0b:65:b0:b9:e1:3e:87:44:bb:1c:61:2e:a3:
d8:8e:22:c7:a4:5e:9a:ee:2c:b8:0f:a5:72:7a:cd:7a:7f:78:
36:2b:83:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:50:44 2025 by rpki-client