Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/c59b61-9115-415f-81f2-a4c1bbcb8c97/1/lS3cs1B4Jn9PN1LltMzGWmY6Y-c.mft
File: lS3cs1B4Jn9PN1LltMzGWmY6Y-c.mft (raw, json)
Hash identifier: +6Cp+iKff2YVDjeWO8EU3f3aQD0RaHA0iYIPxUkBxIE=
Subject key identifier: 01:71:3A:9B:40:D8:BF:A9:CB:7A:07:1E:52:62:A9:C8:FC:14:DF:42
Authority key identifier: 95:2D:DC:B3:50:78:26:7F:4F:37:52:E5:B4:CC:C6:5A:66:3A:63:E7
Certificate issuer: /CN=952ddcb35078267f4f3752e5b4ccc65a663a63e7
Certificate serial: 0194BD85B3EB8A7B5865FDEC5E8750CE7C02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lS3cs1B4Jn9PN1LltMzGWmY6Y-c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/c59b61-9115-415f-81f2-a4c1bbcb8c97/1/lS3cs1B4Jn9PN1LltMzGWmY6Y-c.mft
Manifest number: 010C
Signing time: Fri 31 Jan 2025 18:00:43 +0000
Manifest this update: Fri 31 Jan 2025 18:00:43 +0000
Manifest next update: Sat 01 Feb 2025 18:00:43 +0000
Files and hashes: 1: fxlFgI3EysiECIF3mL-wg3P66gA.roa (hash: WG+Wf/XaXu5fK/R90C0HW02K/9LIUpQXBf5GmZqFRDg=)
2: lS3cs1B4Jn9PN1LltMzGWmY6Y-c.crl (hash: AwFFDCsVuCYKMY/hisrseudlr6icrs/a4QYxSgmJBD0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:b3:eb:8a:7b:58:65:fd:ec:5e:87:50:ce:7c:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=952ddcb35078267f4f3752e5b4ccc65a663a63e7
Validity
Not Before: Jan 31 18:00:43 2025 GMT
Not After : Feb 1 18:00:43 2025 GMT
Subject: CN=01713a9b40d8bfa9cb7a071e5262a9c8fc14df42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:83:51:3a:e3:6e:fe:27:17:64:f7:e5:26:10:
52:f5:79:6e:c0:18:11:ee:60:ff:5b:88:ba:e1:66:
82:63:f2:e0:b0:b7:a9:1a:39:91:8d:23:26:b3:8a:
a2:3f:aa:65:99:5b:b7:c6:4d:72:47:0c:dc:eb:a3:
4c:81:82:22:97:93:b3:96:f6:8c:c3:99:4d:dd:17:
ed:2a:3b:cb:98:ad:04:d9:cb:82:cc:e0:d1:d9:ac:
74:c9:a0:e2:79:a1:b0:23:0d:71:89:b7:9d:07:dd:
da:eb:90:74:97:98:3c:18:33:7b:6f:70:7b:68:0b:
7b:da:1d:d4:61:eb:5d:fd:b0:60:2f:6c:24:12:49:
c6:2a:39:58:e1:c8:f4:c9:d5:28:09:cd:49:20:64:
51:a6:44:a5:9c:5d:fa:01:85:e6:45:42:4e:03:aa:
11:f3:e0:96:2d:e8:99:82:29:da:b9:48:a4:db:2b:
12:1f:b0:02:73:9c:63:a4:99:f4:50:d7:26:a4:d9:
08:48:61:81:75:36:fc:9d:8e:80:c3:9b:5f:09:35:
28:50:e3:b0:fc:43:13:cb:62:d8:0b:6f:77:c0:0e:
a9:1c:cb:c7:c2:a5:8f:ae:d2:0f:f3:45:2a:ca:eb:
d9:82:51:df:40:e1:c6:83:65:b1:c9:b9:fa:8e:de:
83:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:71:3A:9B:40:D8:BF:A9:CB:7A:07:1E:52:62:A9:C8:FC:14:DF:42
X509v3 Authority Key Identifier:
keyid:95:2D:DC:B3:50:78:26:7F:4F:37:52:E5:B4:CC:C6:5A:66:3A:63:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lS3cs1B4Jn9PN1LltMzGWmY6Y-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/c59b61-9115-415f-81f2-a4c1bbcb8c97/1/lS3cs1B4Jn9PN1LltMzGWmY6Y-c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/c59b61-9115-415f-81f2-a4c1bbcb8c97/1/lS3cs1B4Jn9PN1LltMzGWmY6Y-c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:f3:6c:f9:71:21:f4:d0:12:65:b6:e9:3c:dc:bf:41:f2:92:
3c:06:52:91:9c:f2:b1:5f:2a:33:65:eb:8c:1d:47:09:40:21:
ee:22:5d:a5:12:7c:08:5d:0e:71:ff:0d:b4:e7:0f:1a:85:b6:
f9:ba:78:b5:24:9f:36:89:c7:5e:f4:48:d9:00:23:d3:58:a9:
de:15:b3:11:e0:08:11:fe:27:21:c7:6b:de:6b:42:5e:f0:da:
55:ad:f1:c5:7e:92:f1:03:85:f0:69:dc:41:ee:8a:d8:16:00:
12:4c:29:4c:12:e5:0c:44:62:28:c2:23:c7:cc:28:1b:44:e2:
d0:f5:d8:3b:44:3c:b1:37:88:e6:04:30:f7:7c:61:a0:96:09:
3e:7d:27:29:c1:89:91:1e:58:a3:0e:dd:00:27:c0:db:9f:ce:
db:41:82:46:37:a9:7e:4c:33:f2:cb:29:b4:36:c8:5b:a7:da:
d0:00:49:80:a4:96:f7:db:c8:c5:09:cb:69:f0:97:94:a0:29:
07:20:70:89:da:f7:46:77:f5:32:87:4d:ae:8f:2d:e7:fe:02:
d5:06:69:01:bc:45:97:9e:13:a1:a1:bb:b5:da:34:b6:5b:ba:
06:89:96:14:fd:61:7e:92:24:b2:f2:5a:36:80:cb:56:d4:b7:
60:dc:e6:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:23:39 2025 by rpki-client