Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/20f805-df63-4631-99bd-a256177739c6/1/lNtLHp7Wi7XDMiiuMOnN0lKzL7g.mft
File: lNtLHp7Wi7XDMiiuMOnN0lKzL7g.mft (raw, json)
Hash identifier: MlEfuQ/pVO8jcaxo4p1nL3EokOmsO/KpD7btjok9EfM=
Subject key identifier: 37:BD:DA:DF:72:E8:6C:5D:14:AD:C4:87:25:18:66:5F:5C:93:69:71
Authority key identifier: 94:DB:4B:1E:9E:D6:8B:B5:C3:32:28:AE:30:E9:CD:D2:52:B3:2F:B8
Certificate issuer: /CN=94db4b1e9ed68bb5c33228ae30e9cdd252b32fb8
Certificate serial: 0194BD17CC8E46686A750A603AE92EBDF520
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lNtLHp7Wi7XDMiiuMOnN0lKzL7g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/20f805-df63-4631-99bd-a256177739c6/1/lNtLHp7Wi7XDMiiuMOnN0lKzL7g.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 16:00:40 +0000
Manifest this update: Fri 31 Jan 2025 16:00:40 +0000
Manifest next update: Sat 01 Feb 2025 16:00:40 +0000
Files and hashes: 1: lNtLHp7Wi7XDMiiuMOnN0lKzL7g.crl (hash: yyAoKvBVIzkRnb68+0k7UtC90V9XoPWf9BccqsjRp3g=)
2: q0ApgfDR6MUFo5SmPdczTTS0Xsc.roa (hash: scfCeq11ilCac8clsFq/zmbEUDIqGanHD8OiJk8YEiI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:cc:8e:46:68:6a:75:0a:60:3a:e9:2e:bd:f5:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94db4b1e9ed68bb5c33228ae30e9cdd252b32fb8
Validity
Not Before: Jan 31 16:00:40 2025 GMT
Not After : Feb 1 16:00:40 2025 GMT
Subject: CN=37bddadf72e86c5d14adc4872518665f5c936971
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:9b:6e:b1:0b:2a:b3:67:6e:bb:34:2d:43:24:
41:59:56:8f:7e:9b:24:de:31:32:49:1d:e7:b1:69:
e2:78:e6:30:95:40:9a:30:b8:fc:49:29:0c:aa:37:
71:f4:8a:9b:1c:31:b5:1a:73:32:e6:4a:de:91:5e:
15:24:c9:65:25:ba:b4:4c:82:38:d0:e3:aa:db:21:
5f:c3:52:de:3e:a0:02:93:c8:26:b8:0b:b9:9d:20:
b9:02:08:a1:af:3a:7f:1f:13:1f:3b:39:24:e1:b2:
76:78:3f:06:aa:54:39:71:7a:5f:75:55:92:81:9e:
60:28:83:11:a9:21:94:13:41:81:b7:f6:12:d1:ac:
d8:90:8b:eb:da:c9:66:8f:78:73:97:86:12:fb:90:
0d:44:3a:3f:43:7e:86:14:dd:8e:df:17:3b:35:62:
e6:db:fd:a7:66:1f:0b:e3:32:27:5b:17:1e:6b:bc:
a6:c5:ef:13:55:5f:96:5f:04:0a:54:e3:84:fe:54:
2c:3e:eb:2c:13:ce:b7:fc:61:cf:9e:68:d4:ac:b3:
63:7a:90:aa:de:bc:ab:5b:5f:57:c2:6d:dd:20:ff:
67:e6:61:70:5c:3a:01:94:a0:bd:fa:d8:30:e8:62:
f4:fd:e2:2b:7c:1d:85:2d:67:8c:66:ba:f9:b0:92:
29:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:BD:DA:DF:72:E8:6C:5D:14:AD:C4:87:25:18:66:5F:5C:93:69:71
X509v3 Authority Key Identifier:
keyid:94:DB:4B:1E:9E:D6:8B:B5:C3:32:28:AE:30:E9:CD:D2:52:B3:2F:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lNtLHp7Wi7XDMiiuMOnN0lKzL7g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/20f805-df63-4631-99bd-a256177739c6/1/lNtLHp7Wi7XDMiiuMOnN0lKzL7g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/20f805-df63-4631-99bd-a256177739c6/1/lNtLHp7Wi7XDMiiuMOnN0lKzL7g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:4b:02:83:c0:f6:a0:45:c8:a9:0e:03:59:42:1f:df:48:bb:
ae:57:36:e6:3e:35:89:0b:79:0a:52:43:f0:18:0a:50:34:c6:
e7:da:56:40:32:98:c8:e2:04:2c:a4:62:6e:52:41:85:2b:75:
17:6d:b4:7b:43:e3:be:8d:00:19:07:e8:12:5e:e8:8d:73:ce:
06:6a:6d:bc:7c:39:37:b4:df:3b:5f:5f:05:c4:44:85:f5:95:
33:ff:58:05:33:66:24:bd:2f:78:f2:cf:e0:5c:c7:98:83:db:
87:92:d0:e3:ed:f0:fc:6d:b6:b0:1f:1a:d2:60:f7:24:f0:70:
e7:08:a4:5b:0a:c7:e1:ab:eb:7f:7d:53:8f:e1:60:e6:78:5a:
9d:43:cd:09:ca:e2:49:50:98:cf:89:9d:39:9c:fe:b7:5d:55:
4c:bb:19:23:23:ad:b6:d9:d1:f4:50:c2:bb:03:a7:71:c1:86:
ef:c7:50:de:4a:8d:fa:d8:95:eb:b8:71:45:59:8c:36:32:0e:
aa:5a:92:b2:5f:5b:92:4e:97:73:3e:54:62:81:ab:7d:02:98:
9a:93:50:48:94:57:ce:a8:7f:9d:31:ff:dd:44:8b:74:18:ba:
c4:55:54:bb:96:9a:c9:b5:49:e7:5c:f4:64:fa:6c:03:7f:4f:
6e:db:4f:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:34 2025 by rpki-client