Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/fc4690-080f-4018-89a1-93b4fe5157ec/1/lvLaL6G8jtLyvGtwOovxU0D5fPo.mft
File: lvLaL6G8jtLyvGtwOovxU0D5fPo.mft (raw, json)
Hash identifier: 5sf49+ATbmt1MPtfLImN6zYgpvkt1ZgpEal07hL72js=
Subject key identifier: 18:F8:B8:32:3B:99:9F:80:C4:EC:4F:8F:AB:C4:04:D7:97:1D:A7:83
Authority key identifier: 96:F2:DA:2F:A1:BC:8E:D2:F2:BC:6B:70:3A:8B:F1:53:40:F9:7C:FA
Certificate issuer: /CN=96f2da2fa1bc8ed2f2bc6b703a8bf15340f97cfa
Certificate serial: 0194BD8576032277EA22BA356E3E412E15B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lvLaL6G8jtLyvGtwOovxU0D5fPo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/fc4690-080f-4018-89a1-93b4fe5157ec/1/lvLaL6G8jtLyvGtwOovxU0D5fPo.mft
Manifest number: 0808
Signing time: Fri 31 Jan 2025 18:00:27 +0000
Manifest this update: Fri 31 Jan 2025 18:00:27 +0000
Manifest next update: Sat 01 Feb 2025 18:00:27 +0000
Files and hashes: 1: HfieAyyFiGHzuxK88Qqlcm0jHjE.roa (hash: 9hArFOOTkWsSdh7y1qMFDzyLMrMdzpKqI+tBBv6IzqM=)
2: lvLaL6G8jtLyvGtwOovxU0D5fPo.crl (hash: 0f4ht288Voyw7z0aIY1PPruvUGz70YrE3BFxUtIaMMQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:76:03:22:77:ea:22:ba:35:6e:3e:41:2e:15:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96f2da2fa1bc8ed2f2bc6b703a8bf15340f97cfa
Validity
Not Before: Jan 31 18:00:27 2025 GMT
Not After : Feb 1 18:00:27 2025 GMT
Subject: CN=18f8b8323b999f80c4ec4f8fabc404d7971da783
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:87:3b:89:09:b1:f0:e3:48:d7:aa:b8:6c:1c:
d8:f3:6b:47:21:30:6b:3d:d2:f0:67:d4:55:6d:06:
10:5c:ed:65:30:52:ae:d7:17:5d:91:bb:e5:2a:93:
f9:55:31:2a:bc:04:33:81:ec:6f:04:8c:1e:62:76:
8b:5c:3d:40:54:2e:a5:1a:8e:69:5c:f1:c5:8f:ec:
26:2e:33:0e:12:e5:17:15:74:01:8b:65:4a:f9:6d:
ef:3e:3e:5b:b0:10:af:82:06:23:99:5c:3d:24:54:
ed:9d:ae:8d:02:e0:52:1f:6c:07:71:d3:a1:69:a1:
4a:17:ec:44:13:c1:95:ec:28:04:7c:4a:79:ef:d1:
ab:1c:7b:1d:36:49:b3:0e:d5:f8:7c:65:ac:e9:cd:
e9:21:9f:b6:4d:0b:9d:ef:c1:9c:5a:7a:2e:e4:5d:
1f:bc:50:01:4f:e7:ba:f1:d0:1a:73:ed:f4:da:f5:
eb:d0:c1:7a:dd:51:c9:e3:7c:35:cd:58:d4:7f:cf:
b8:c4:ce:80:79:e5:f2:bf:a7:cb:22:46:fa:54:2d:
39:37:d3:96:85:41:f6:80:e2:be:d6:72:7e:c5:eb:
ee:94:89:c2:98:a1:07:1f:0a:a3:72:9e:9c:16:1b:
75:80:52:12:91:e1:eb:51:c4:30:5c:f5:17:a2:38:
26:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:F8:B8:32:3B:99:9F:80:C4:EC:4F:8F:AB:C4:04:D7:97:1D:A7:83
X509v3 Authority Key Identifier:
keyid:96:F2:DA:2F:A1:BC:8E:D2:F2:BC:6B:70:3A:8B:F1:53:40:F9:7C:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lvLaL6G8jtLyvGtwOovxU0D5fPo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/fc4690-080f-4018-89a1-93b4fe5157ec/1/lvLaL6G8jtLyvGtwOovxU0D5fPo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/fc4690-080f-4018-89a1-93b4fe5157ec/1/lvLaL6G8jtLyvGtwOovxU0D5fPo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:b4:98:56:b8:ef:8e:76:1a:63:c8:0a:de:22:f3:a5:d2:93:
9d:44:c7:d6:6c:10:40:92:fa:fe:ed:e3:17:4e:88:bb:7c:bf:
c0:49:22:63:36:6b:8d:2e:f7:df:5b:9b:18:47:d9:60:e1:e1:
61:c7:e5:ef:3e:bf:b6:5b:ae:32:2a:30:6f:94:c8:1a:79:68:
35:78:57:8c:0d:e2:b7:52:fa:f2:73:54:d4:f4:57:d0:a0:99:
4f:c5:61:2f:c1:ea:fe:93:0f:0b:2e:28:e5:24:d3:5b:48:b4:
fe:f8:8a:b6:a4:66:d9:ad:2b:13:be:61:2f:87:61:ef:6e:a4:
b9:f1:81:36:13:e7:50:4e:04:1a:9a:f1:40:60:b9:45:73:0a:
29:6c:a9:8c:ba:a6:82:a0:03:0d:46:6a:a4:f1:5e:0a:a4:a2:
2b:90:b1:ad:f2:34:56:ac:71:2a:c1:03:f7:a5:2e:db:42:ba:
75:f8:6a:3a:bf:d0:27:2c:72:52:15:fc:97:86:c3:ec:9c:03:
31:c0:88:55:94:24:b8:72:18:90:bb:84:e3:e5:07:2c:e5:e6:
74:f2:e1:a1:52:e2:d6:e5:94:bc:0b:2c:e2:03:45:43:31:88:
1e:d0:67:2d:ad:6b:c7:e6:7b:06:7b:16:9d:cc:b4:e9:64:0c:
8b:65:82:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:54:12 2025 by rpki-client