Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/b06fe0-3690-437d-8924-071daa05dabf/1/L_tkHTyi7BFX9HcyF4nOwMxfKaQ.mft
File: L_tkHTyi7BFX9HcyF4nOwMxfKaQ.mft (raw, json)
Hash identifier: 2uFYcucj8JNS6mVq9LF0/SNfFsczg/Wn+KenmtGdYa8=
Subject key identifier: EF:05:F1:96:5D:C2:63:74:1C:41:5B:04:F7:21:AC:F4:20:27:11:B0
Authority key identifier: 2F:FB:64:1D:3C:A2:EC:11:57:F4:77:32:17:89:CE:C0:CC:5F:29:A4
Certificate issuer: /CN=2ffb641d3ca2ec1157f477321789cec0cc5f29a4
Certificate serial: 0194BC72CC4F6F7A01867BD647D05E4EB8FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L_tkHTyi7BFX9HcyF4nOwMxfKaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/b06fe0-3690-437d-8924-071daa05dabf/1/L_tkHTyi7BFX9HcyF4nOwMxfKaQ.mft
Manifest number: 04D8
Signing time: Fri 31 Jan 2025 13:00:27 +0000
Manifest this update: Fri 31 Jan 2025 13:00:27 +0000
Manifest next update: Sat 01 Feb 2025 13:00:27 +0000
Files and hashes: 1: L_tkHTyi7BFX9HcyF4nOwMxfKaQ.crl (hash: 3XqdGQb+W73Ch7kbRrPks9H6lcmHQcVfYMOzMvgZCek=)
2: upvfUH_YjoaPJNTn3nKwVUkJlqc.roa (hash: GMdb4SO6ufP1WGhwXYRzniR/Z7eY9kD3nmj07BQxDnQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:cc:4f:6f:7a:01:86:7b:d6:47:d0:5e:4e:b8:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ffb641d3ca2ec1157f477321789cec0cc5f29a4
Validity
Not Before: Jan 31 13:00:27 2025 GMT
Not After : Feb 1 13:00:27 2025 GMT
Subject: CN=ef05f1965dc263741c415b04f721acf4202711b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:3a:fc:dd:12:c9:a8:46:7c:e2:fd:c7:bd:bd:
5f:2f:d3:37:10:91:c7:fa:78:b5:64:f6:bb:9f:31:
6a:ba:e5:b3:3a:f5:01:a9:ff:92:ee:af:c9:64:8e:
51:a2:4d:c3:47:17:65:f2:43:5f:34:72:e4:1c:4b:
78:81:11:e0:b6:27:6d:81:f2:a6:b6:ab:af:cc:c9:
10:cc:a7:06:e6:3c:e5:01:f6:40:97:7e:d4:6c:ac:
8c:77:67:ed:35:e4:36:fb:04:bd:79:fa:3a:08:46:
ab:f3:c9:04:53:a0:7c:67:be:fb:fc:2a:60:bb:74:
c3:90:8a:16:6f:34:77:88:eb:a1:98:bb:4c:e2:fe:
b8:bc:65:1f:8d:a8:82:54:64:8f:e5:d4:9f:81:3a:
89:63:f6:b5:18:cf:3d:1b:17:eb:bf:26:1f:98:64:
92:25:cd:a9:5a:29:2b:23:c0:57:ec:38:19:31:7f:
e3:1e:18:5d:92:2a:33:91:b4:15:19:67:e2:91:a8:
53:71:14:43:c3:11:74:0c:a1:b6:c9:38:31:8e:d3:
93:05:82:e9:90:01:16:3f:eb:58:26:f7:bf:02:0c:
62:e6:99:ce:0f:90:e7:9f:12:cc:76:9e:04:8a:32:
df:d1:db:70:60:d8:8a:7b:cc:1f:92:aa:2b:2a:4f:
c4:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:05:F1:96:5D:C2:63:74:1C:41:5B:04:F7:21:AC:F4:20:27:11:B0
X509v3 Authority Key Identifier:
keyid:2F:FB:64:1D:3C:A2:EC:11:57:F4:77:32:17:89:CE:C0:CC:5F:29:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L_tkHTyi7BFX9HcyF4nOwMxfKaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/b06fe0-3690-437d-8924-071daa05dabf/1/L_tkHTyi7BFX9HcyF4nOwMxfKaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/b06fe0-3690-437d-8924-071daa05dabf/1/L_tkHTyi7BFX9HcyF4nOwMxfKaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:76:31:88:9d:cd:33:f5:2a:b1:d8:72:10:5d:a1:68:91:38:
85:0c:dc:20:ef:f9:ea:a0:2e:63:0e:e6:eb:92:e9:7a:ff:9b:
f0:69:3f:9c:47:3a:7f:87:d2:30:72:f2:d2:50:f4:1b:9c:da:
f1:94:14:43:bf:a2:2f:98:d6:0f:dc:0d:25:94:a2:54:33:fc:
8c:b9:e9:4a:44:d5:69:3b:73:41:c1:d9:34:18:bf:62:10:49:
41:a0:0c:06:01:78:72:ef:98:c3:19:9e:5a:a9:f3:ce:44:97:
37:19:26:be:92:a1:bf:49:ec:e0:86:45:bd:b0:15:1e:88:cf:
8e:78:76:be:b5:cc:12:ea:e2:df:83:ee:4e:1d:4d:d9:45:6d:
77:5d:1a:1f:22:a6:45:3b:4e:52:4c:12:80:2d:1b:6d:3b:01:
0f:e2:71:90:66:03:9c:97:a2:67:e5:80:b1:0b:c0:18:04:72:
c1:e7:c0:29:22:2f:f7:7d:d2:a8:37:e2:ed:4c:8a:81:9e:55:
d5:6d:c9:79:63:f1:e0:dd:4a:55:b7:64:9a:66:68:b8:de:b7:
72:3d:f9:0f:24:43:63:a1:0b:2a:20:81:db:03:6a:ad:44:cb:
99:fb:f2:c6:ec:08:2b:fb:fb:5f:8a:7a:01:ec:cd:de:29:0f:
4c:1e:05:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:04 2025 by rpki-client