Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/805533-dbc5-42c0-bc78-575b03344cb1/1/1-LjaYIE3-E5FRTILSjuwSWHSsSs.mft
File: 1-LjaYIE3-E5FRTILSjuwSWHSsSs.mft (raw, json)
Hash identifier: Mfjv/NHFC7vy85jKqGy3SvNZ7f3SLthB4c64rJmhtC0=
Subject key identifier: 0D:CF:9B:3A:C4:2D:93:0B:B1:37:84:74:B6:EF:8A:D6:38:AB:EA:AE
Authority key identifier: F8:B8:DA:60:81:37:F8:4E:45:45:32:0B:4A:3B:B0:49:61:D2:B1:2B
Certificate issuer: /CN=f8b8da608137f84e4545320b4a3bb04961d2b12b
Certificate serial: 0194BD85B6FBEBD3D07256556ECC9C461196
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-LjaYIE3-E5FRTILSjuwSWHSsSs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/805533-dbc5-42c0-bc78-575b03344cb1/1/1-LjaYIE3-E5FRTILSjuwSWHSsSs.mft
Manifest number: 0309
Signing time: Fri 31 Jan 2025 18:00:44 +0000
Manifest this update: Fri 31 Jan 2025 18:00:44 +0000
Manifest next update: Sat 01 Feb 2025 18:00:44 +0000
Files and hashes: 1: 1-LjaYIE3-E5FRTILSjuwSWHSsSs.crl (hash: d27pcDMhQ9qWUAhsMoFVLucfc7hIsPGdNHARa4hpe64=)
2: GwUYPxJQaw648raZgaiMud0BTgo.roa (hash: LGJZt6ikz8yBfuTCs6jZTUAALLEYDfmbRQi7+ExvBNQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:b6:fb:eb:d3:d0:72:56:55:6e:cc:9c:46:11:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8b8da608137f84e4545320b4a3bb04961d2b12b
Validity
Not Before: Jan 31 18:00:44 2025 GMT
Not After : Feb 1 18:00:44 2025 GMT
Subject: CN=0dcf9b3ac42d930bb1378474b6ef8ad638abeaae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:08:8d:3f:71:5e:1c:fe:f7:99:77:4a:3a:a7:
81:03:d1:dc:3d:4a:11:ff:43:d7:20:83:a7:da:af:
10:9e:d5:90:3e:9b:f6:4d:38:7a:ec:b1:4c:ff:45:
82:9f:ad:63:57:54:16:00:3f:32:b5:86:30:fb:24:
1a:2e:21:69:9d:54:96:2c:bb:d4:72:c7:b8:a6:0b:
ab:6a:94:8d:a5:4b:de:02:bb:f1:74:58:5b:83:9b:
a7:5c:8b:ce:ae:1c:74:28:90:2c:7b:35:32:d3:fe:
58:64:f4:bd:93:92:4a:f0:9b:27:b5:4c:56:e6:17:
30:65:d9:5e:96:8b:32:cc:ee:fc:20:94:b3:93:df:
3c:42:b9:da:56:a8:cd:c3:33:b3:5f:ea:56:20:be:
bc:7b:8e:d0:d5:d6:77:33:01:ee:06:d8:76:3d:9a:
30:f3:50:83:f2:27:7e:b9:ad:50:94:c6:d3:88:3d:
7e:6b:b0:ad:a1:d2:c5:2b:63:4b:9b:80:49:c9:42:
55:a0:8b:99:37:b6:77:62:25:81:7f:5e:6e:51:c4:
11:83:9b:0f:cf:4c:04:47:48:73:0c:e4:97:76:76:
25:af:65:4b:58:d6:02:96:77:76:60:46:97:e2:96:
7e:56:1b:ed:2e:69:28:fb:18:a4:1b:55:87:53:b7:
fb:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:CF:9B:3A:C4:2D:93:0B:B1:37:84:74:B6:EF:8A:D6:38:AB:EA:AE
X509v3 Authority Key Identifier:
keyid:F8:B8:DA:60:81:37:F8:4E:45:45:32:0B:4A:3B:B0:49:61:D2:B1:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-LjaYIE3-E5FRTILSjuwSWHSsSs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/805533-dbc5-42c0-bc78-575b03344cb1/1/1-LjaYIE3-E5FRTILSjuwSWHSsSs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/805533-dbc5-42c0-bc78-575b03344cb1/1/1-LjaYIE3-E5FRTILSjuwSWHSsSs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:12:f9:30:51:78:95:2e:69:2f:65:14:8f:ee:ed:9d:5c:bd:
1b:ae:86:94:28:63:c2:d2:b7:9f:fe:b3:39:d8:aa:6d:80:86:
55:a9:a3:91:a8:e2:65:69:82:f8:d9:1b:f5:5d:34:eb:97:b4:
13:2f:d8:6e:bf:f1:8f:b7:ba:41:c0:60:02:7b:58:c5:ab:e9:
02:6e:4e:18:00:57:fa:a9:66:c5:8e:10:b6:3b:7d:74:da:95:
c5:21:12:79:4d:0c:01:a5:77:46:79:42:4d:de:34:f5:ec:ad:
4a:d4:8b:2d:55:0f:e3:1d:42:fc:e3:8f:e4:52:a9:16:09:1f:
c9:5f:52:9c:48:fd:18:0e:e5:32:8f:7a:9b:83:b7:84:ec:58:
ae:38:c1:3c:40:6e:0b:7d:15:36:c1:6a:fc:02:a9:f0:08:e7:
78:ba:8e:8e:ec:27:9c:c7:8e:70:db:6e:05:5b:86:57:37:5f:
e3:1b:44:03:4c:e5:36:6c:aa:c2:0e:82:db:b6:83:b2:b2:1b:
b8:66:c3:16:45:91:58:94:1d:37:b6:cf:b7:6c:71:5d:3e:43:
6f:d2:db:63:4d:33:56:56:25:fb:1c:ab:0e:d3:78:3b:52:e5:
d3:66:ec:2e:b5:e1:9b:1b:6d:c6:3f:62:79:c2:b6:9e:c0:af:
05:46:0a:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:50:29 2025 by rpki-client