Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/120043-1733-4c72-ad47-bc0e511c20ce/1/l4kxgrFnGJg7wAjI0If43co9hhQ.mft
File: l4kxgrFnGJg7wAjI0If43co9hhQ.mft (raw, json)
Hash identifier: /pnCSZNONUZnJ1I/Zxi4xXKmx1AHFI6JpHqmCZAu6o4=
Subject key identifier: 0D:C4:73:E1:9D:12:5D:DD:A2:06:BC:AE:C7:D7:9D:BF:62:8C:AD:37
Authority key identifier: 97:89:31:82:B1:67:18:98:3B:C0:08:C8:D0:87:F8:DD:CA:3D:86:14
Certificate issuer: /CN=97893182b16718983bc008c8d087f8ddca3d8614
Certificate serial: 0194BD176A1D68FE9F858C9828FB7BA6D79C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l4kxgrFnGJg7wAjI0If43co9hhQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/120043-1733-4c72-ad47-bc0e511c20ce/1/l4kxgrFnGJg7wAjI0If43co9hhQ.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 16:00:15 +0000
Manifest this update: Fri 31 Jan 2025 16:00:15 +0000
Manifest next update: Sat 01 Feb 2025 16:00:15 +0000
Files and hashes: 1: aqDSlJI6fRe1RN2uayTTFYQxD-s.roa (hash: KcsQCykFuSuY+9QOJB4kYVylQTDKAT5qMJFTxYEhYPg=)
2: cQ6SdnmY7fIgfdAemGXpWF1FOPQ.roa (hash: rE5sWP16qEy550XaQGyvVum39Vv1f9SuBJn5Bpfsn24=)
3: i6VRDQdIil0CjvQd057rABtr9kE.roa (hash: sn7kvKyr4NofwuxW4yXFFyr4t+Wfqf9Hgohjb3PA8yY=)
4: is06NJF_pdLdCky9_vvySjLbIWk.roa (hash: iohuFwFwemTLBjzODMRz2CDiXJBSgnTn1Frh7C6hyPQ=)
5: kAy4RLfssItqnKihng08SJ24kLU.roa (hash: NzDxF5VtRsVHoeFsy5okPqrnmIPsJbnNlHuQYgmsl+0=)
6: l4kxgrFnGJg7wAjI0If43co9hhQ.crl (hash: JT03BbgzkNZ53O5qYhvWppLFmWyt4uvShSMbumiydow=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:6a:1d:68:fe:9f:85:8c:98:28:fb:7b:a6:d7:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97893182b16718983bc008c8d087f8ddca3d8614
Validity
Not Before: Jan 31 16:00:15 2025 GMT
Not After : Feb 1 16:00:15 2025 GMT
Subject: CN=0dc473e19d125ddda206bcaec7d79dbf628cad37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:2b:84:8e:95:df:93:f5:80:64:d4:54:df:f8:
a7:09:18:18:62:98:0f:db:0d:92:b3:28:a2:e2:1b:
a2:c4:f6:f6:75:e3:c9:ab:15:02:b6:27:05:02:19:
50:fe:52:76:97:f9:54:af:87:33:41:97:92:85:fc:
23:06:56:76:d4:94:e8:7e:87:e4:0a:68:d3:d6:9d:
a4:65:e2:7d:81:25:0d:af:f1:fa:9e:f9:f3:54:1c:
67:75:9a:d1:94:21:e6:51:2d:09:26:6a:7f:2e:5b:
91:df:db:3f:28:1f:bc:df:f6:69:14:c6:5d:59:ad:
09:fb:a9:3a:17:a0:4a:4d:b6:11:77:41:78:dd:0f:
98:27:af:dd:44:f8:6e:36:b4:2d:07:2f:ae:b3:66:
8b:cd:6c:b0:e1:18:e6:6b:92:ac:3e:f3:79:17:8d:
78:55:3a:61:bf:cb:08:89:4c:83:03:5a:77:a8:38:
e3:f7:ce:c7:7b:da:6e:be:5c:56:a3:14:63:82:06:
52:d8:ea:a7:ba:fb:28:20:6e:57:19:bd:49:9e:40:
5f:02:e3:65:76:f8:a8:9e:7d:31:a5:67:d2:e7:68:
c7:b2:16:33:c0:35:1f:8e:ab:cf:43:b1:d8:65:37:
55:13:0d:ab:e7:78:9e:5c:87:7c:7e:b2:2b:73:39:
0f:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:C4:73:E1:9D:12:5D:DD:A2:06:BC:AE:C7:D7:9D:BF:62:8C:AD:37
X509v3 Authority Key Identifier:
keyid:97:89:31:82:B1:67:18:98:3B:C0:08:C8:D0:87:F8:DD:CA:3D:86:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l4kxgrFnGJg7wAjI0If43co9hhQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/120043-1733-4c72-ad47-bc0e511c20ce/1/l4kxgrFnGJg7wAjI0If43co9hhQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/120043-1733-4c72-ad47-bc0e511c20ce/1/l4kxgrFnGJg7wAjI0If43co9hhQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:5b:01:5b:29:08:32:70:6c:59:94:4c:03:de:e8:92:4d:2f:
e0:b9:db:85:c1:f3:6a:11:aa:23:36:9a:f7:a6:9f:60:b2:c7:
67:31:d5:7a:eb:a3:4d:ed:f2:12:08:d3:99:fd:46:2c:e0:30:
65:cc:fe:b0:9a:b0:77:19:53:2a:9c:9a:21:51:87:8e:2f:d1:
9a:1b:c9:d2:c4:65:5d:bb:98:57:14:db:20:21:0a:ba:30:a3:
a4:3d:b7:13:06:dd:11:9c:29:92:c2:c6:96:32:17:e9:bc:83:
4c:02:ec:e4:11:92:07:27:ed:f5:7e:64:5e:db:86:50:89:53:
5d:8f:9b:8e:d0:3e:23:1d:90:02:82:e5:ff:e0:fb:f3:3a:bc:
39:bd:78:28:0d:70:37:45:c9:1a:db:62:83:ab:62:2f:df:ed:
af:92:bd:18:da:00:ec:4b:43:2b:51:c0:a6:4f:df:cd:49:76:
49:29:a5:05:0e:17:db:69:35:34:67:bc:85:4f:47:34:cf:de:
54:5b:bd:7b:de:32:17:66:4b:f0:50:a5:83:c3:b2:9d:37:e6:
b3:9f:45:6f:6b:79:87:ac:cb:87:e7:db:29:45:16:7e:0c:55:
ca:99:18:e2:fc:00:9c:67:07:e6:57:03:df:65:4c:3c:c7:74:
57:e1:9b:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:49:26 2025 by rpki-client