Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/a86a91-6356-4c2c-9f8f-de4accb00dd7/1/l1lSndMXBkXXbPasBllQbMZJypA.mft
File: l1lSndMXBkXXbPasBllQbMZJypA.mft (raw, json)
Hash identifier: kDNfi86wxvou/2ZHgqlL9r5uvRZqVXhyShmUow6yTl4=
Subject key identifier: B4:5C:98:C7:39:98:AA:F5:B6:95:B4:15:01:1A:2B:E9:92:DA:1A:95
Authority key identifier: 97:59:52:9D:D3:17:06:45:D7:6C:F6:AC:06:59:50:6C:C6:49:CA:90
Certificate issuer: /CN=9759529dd3170645d76cf6ac0659506cc649ca90
Certificate serial: 0194BD8547B1AED5C4983F90A33A1656EE02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l1lSndMXBkXXbPasBllQbMZJypA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/a86a91-6356-4c2c-9f8f-de4accb00dd7/1/l1lSndMXBkXXbPasBllQbMZJypA.mft
Manifest number: 1143
Signing time: Fri 31 Jan 2025 18:00:15 +0000
Manifest this update: Fri 31 Jan 2025 18:00:15 +0000
Manifest next update: Sat 01 Feb 2025 18:00:15 +0000
Files and hashes: 1: 0CXMUaTMQIKH6epSkL7Djl138G4.roa (hash: 7ikpmMwL3KhBT/ey6JF8CQkgs9c+Pq5I2Oo9Rhvfk8c=)
2: 2E_YHRCuF5MHTxlMx4c1H-5_vdo.roa (hash: cd6fZP84XkBNWRqBbhJXNCRjH3aM1q5IULZkt1L/R08=)
3: l1lSndMXBkXXbPasBllQbMZJypA.crl (hash: 3SL0TB+lzUumilq6DKtdUDbgbfAqxsldtrI0goxfZVQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:47:b1:ae:d5:c4:98:3f:90:a3:3a:16:56:ee:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9759529dd3170645d76cf6ac0659506cc649ca90
Validity
Not Before: Jan 31 18:00:15 2025 GMT
Not After : Feb 1 18:00:15 2025 GMT
Subject: CN=b45c98c73998aaf5b695b415011a2be992da1a95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:3e:03:6d:cd:24:c3:3d:70:21:d5:1c:6e:69:
d0:89:44:0c:ab:c1:e6:35:c9:d3:3c:09:cf:09:58:
fb:42:ae:71:74:c0:70:f7:28:3a:bc:9d:86:b9:3f:
8b:62:10:77:a6:97:aa:07:2f:49:eb:6c:88:a8:78:
20:4e:d3:de:9a:b6:b9:dc:db:83:91:26:96:21:be:
35:db:4c:5b:0c:e3:5d:d0:ab:d3:3f:fa:34:be:2a:
48:fc:9f:70:f6:fa:ce:dd:0c:7a:9c:b9:ea:95:41:
30:ce:d0:de:91:0a:3c:38:f3:94:6c:88:8d:15:59:
1f:8c:96:7e:b9:92:e9:4e:0b:ba:79:f9:0f:23:95:
23:ae:fb:a0:36:47:68:76:5f:51:a4:09:66:2b:a4:
20:24:44:e9:ae:51:5c:17:41:18:cf:b1:78:07:3a:
77:bd:f8:df:1c:19:0a:bd:b4:aa:02:3a:85:5d:63:
d5:bb:bf:8c:35:4f:27:c7:7f:75:3d:db:70:21:71:
4b:31:87:41:5b:3b:0c:76:31:51:10:d3:c5:0c:1d:
1d:81:a3:03:39:53:a4:95:7f:b4:ca:4e:89:28:2d:
ee:c6:d3:2b:fa:1e:81:71:0f:ee:31:53:18:db:1e:
98:d3:1b:a5:67:48:f3:49:10:77:22:3e:42:7e:b9:
6d:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:5C:98:C7:39:98:AA:F5:B6:95:B4:15:01:1A:2B:E9:92:DA:1A:95
X509v3 Authority Key Identifier:
keyid:97:59:52:9D:D3:17:06:45:D7:6C:F6:AC:06:59:50:6C:C6:49:CA:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l1lSndMXBkXXbPasBllQbMZJypA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/a86a91-6356-4c2c-9f8f-de4accb00dd7/1/l1lSndMXBkXXbPasBllQbMZJypA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/a86a91-6356-4c2c-9f8f-de4accb00dd7/1/l1lSndMXBkXXbPasBllQbMZJypA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:96:18:9b:91:03:61:5f:aa:6e:5d:dd:02:3a:5a:c0:ac:14:
0d:bc:fa:53:19:b5:4e:62:b6:08:01:66:86:76:eb:dc:c3:5f:
3c:04:77:4e:ca:8a:4b:dc:27:53:58:dd:4b:ef:3c:19:1e:26:
8b:45:40:d0:d7:27:91:70:29:22:3a:04:23:6d:73:99:a4:af:
3f:72:40:c8:2b:e6:e8:37:07:c0:37:d7:2c:f1:05:7e:ac:8c:
06:ca:ca:bb:87:69:3b:4c:f7:6c:3b:8c:da:38:0f:17:fb:59:
0b:ad:60:92:5c:b3:a0:88:44:c8:b8:eb:d6:28:80:9f:3b:aa:
cf:78:fb:68:65:71:fd:8f:03:22:bb:97:0e:a8:b7:a2:95:18:
e7:a1:83:e2:cf:63:82:b9:e1:86:5b:25:36:55:d2:83:be:c1:
94:69:60:a6:71:b5:36:eb:09:02:b2:fb:49:99:18:69:e6:98:
48:85:4b:2e:2e:c6:fe:a2:f8:20:4f:61:1e:e4:7b:c8:44:d7:
2a:42:aa:de:3c:b0:6a:f8:73:1c:7c:74:12:67:aa:95:82:a2:
1b:81:41:e7:3c:7e:a5:89:b9:f9:6b:79:3c:96:40:75:e5:5e:
4b:58:55:76:f4:f6:26:71:e9:22:37:c2:c9:41:ff:2a:a1:94:
f4:63:31:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:44:08 2025 by rpki-client