Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/c5c6a7-710c-490e-89da-119820b522ad/1/LclV9MLHFXq72_6AnPGVYFlJppg.mft
File: LclV9MLHFXq72_6AnPGVYFlJppg.mft (raw, json)
Hash identifier: uiW7klGLY8akJVELFWRQ5p5VY6nH/Y2JQ95TTP9AMPc=
Subject key identifier: 69:C6:A0:0D:AD:AB:B7:F3:4A:F3:B8:82:A2:8B:48:6D:B7:73:3D:E4
Authority key identifier: 2D:C9:55:F4:C2:C7:15:7A:BB:DB:FE:80:9C:F1:95:60:59:49:A6:98
Certificate issuer: /CN=2dc955f4c2c7157abbdbfe809cf195605949a698
Certificate serial: 0194BC3C16D9570DF008344B8AEFA1CC8101
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LclV9MLHFXq72_6AnPGVYFlJppg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/c5c6a7-710c-490e-89da-119820b522ad/1/LclV9MLHFXq72_6AnPGVYFlJppg.mft
Manifest number: 0133
Signing time: Fri 31 Jan 2025 12:00:42 +0000
Manifest this update: Fri 31 Jan 2025 12:00:42 +0000
Manifest next update: Sat 01 Feb 2025 12:00:42 +0000
Files and hashes: 1: IP4ujJVqk5UohCLCA6tGHFm6tpQ.roa (hash: u2FH+am0hxvosviHA7cG2t5BKioAL7DxGSIWvLxxQUo=)
2: LclV9MLHFXq72_6AnPGVYFlJppg.crl (hash: DMkD36uY0mg+IJuk7426YNimTE4fnV/DqZFxSl5O3uY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:16:d9:57:0d:f0:08:34:4b:8a:ef:a1:cc:81:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2dc955f4c2c7157abbdbfe809cf195605949a698
Validity
Not Before: Jan 31 12:00:42 2025 GMT
Not After : Feb 1 12:00:42 2025 GMT
Subject: CN=69c6a00dadabb7f34af3b882a28b486db7733de4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:fa:23:9b:df:ea:42:e9:0e:fa:08:77:c3:07:
3c:aa:b5:10:83:5b:03:85:5a:90:fb:f5:fa:a4:86:
a5:00:50:3c:8f:c5:20:51:e2:63:2d:e1:c0:a1:bc:
b5:05:35:4f:6d:0d:c2:d0:af:82:8f:36:67:c7:c9:
5f:c7:78:60:8a:35:cb:11:de:ef:55:ae:18:7c:72:
94:d1:6b:b9:71:2f:39:96:6c:80:36:1e:ae:64:71:
db:4c:4c:d0:72:ea:a0:00:56:85:e0:21:1a:c2:be:
a8:65:d0:c6:66:c5:da:d2:a4:42:e9:77:70:85:60:
a3:64:97:c6:54:96:25:c4:03:d3:e5:ce:c5:e6:7a:
95:0b:8d:59:4e:c1:d7:84:5f:dc:61:c3:2f:8d:2a:
54:15:73:ca:a5:76:e1:52:02:b6:3d:8a:07:d5:73:
26:55:75:81:7f:fc:b4:8b:2e:1e:a4:b6:81:47:e6:
6d:f8:8a:9b:37:3b:ee:35:de:de:8d:47:d1:f0:cd:
5a:0d:06:98:42:8e:19:9e:83:54:66:cc:7b:41:25:
ab:9a:1e:4e:e3:f0:6c:dc:fc:ed:36:49:d1:53:39:
06:08:89:91:dd:a4:da:f6:12:35:2c:da:47:43:9b:
71:36:49:f5:87:53:15:3c:9f:7f:6f:68:0e:a2:42:
37:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:C6:A0:0D:AD:AB:B7:F3:4A:F3:B8:82:A2:8B:48:6D:B7:73:3D:E4
X509v3 Authority Key Identifier:
keyid:2D:C9:55:F4:C2:C7:15:7A:BB:DB:FE:80:9C:F1:95:60:59:49:A6:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LclV9MLHFXq72_6AnPGVYFlJppg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/c5c6a7-710c-490e-89da-119820b522ad/1/LclV9MLHFXq72_6AnPGVYFlJppg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/c5c6a7-710c-490e-89da-119820b522ad/1/LclV9MLHFXq72_6AnPGVYFlJppg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:91:10:19:d7:c8:53:71:07:70:f1:61:f7:c0:0f:5c:e1:ef:
62:ac:bf:a3:8b:22:46:a0:a5:b6:2a:eb:78:a6:be:28:08:7c:
a3:b5:41:41:94:db:c4:6a:03:83:74:12:95:bb:82:da:39:4c:
b4:fe:2a:b8:eb:4c:6a:52:05:d6:ed:56:f4:9f:62:16:84:94:
c7:6a:94:62:ea:88:9b:17:97:b2:d1:38:cc:93:c7:c8:b1:4b:
0e:66:2f:6f:53:72:9c:e6:de:40:20:d5:22:2f:78:13:5f:91:
67:e1:c7:1f:4b:d5:3f:01:0e:2d:5d:05:32:a6:c9:ea:fc:07:
18:6d:c0:71:ec:3a:4f:47:09:b4:a6:1b:5d:13:ed:26:70:71:
83:de:df:1d:22:ef:bb:fc:12:9f:62:8f:27:8e:ab:84:2c:b1:
24:df:0d:ef:2d:a3:45:24:f8:2b:bb:32:04:8f:8f:de:38:59:
39:e3:a8:28:b9:c3:95:34:28:c6:44:dc:38:50:5c:92:b9:b7:
15:58:a1:85:ff:da:57:c9:a8:47:3b:b4:75:ee:fd:1d:2c:a8:
67:fb:97:1d:ef:de:0f:99:55:82:31:9e:93:59:0c:ef:01:13:
ae:fe:6f:da:13:3d:37:0a:72:f2:34:58:3a:6e:ca:fa:2c:3f:
7a:1c:27:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 11:47:29 2025 by rpki-client