Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/e05975-da8e-460b-9ebb-3fcb5f3f3c59/1/lgYvXdsY-W14SSs1ONd0XMRxSiY.mft
File: lgYvXdsY-W14SSs1ONd0XMRxSiY.mft (raw, json)
Hash identifier: LzSUh9Q1Kjda1t+h+K6kt47MCJAOYvjygh8DNVyF/K8=
Subject key identifier: DA:8B:3B:66:3C:32:E0:06:3D:05:E6:4B:7C:5B:4A:21:1B:60:8F:6F
Authority key identifier: 96:06:2F:5D:DB:18:F9:6D:78:49:2B:35:38:D7:74:5C:C4:71:4A:26
Certificate issuer: /CN=96062f5ddb18f96d78492b3538d7745cc4714a26
Certificate serial: 0194BCAA12CC796800E20005677C3CAF7041
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lgYvXdsY-W14SSs1ONd0XMRxSiY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/e05975-da8e-460b-9ebb-3fcb5f3f3c59/1/lgYvXdsY-W14SSs1ONd0XMRxSiY.mft
Manifest number: 070A
Signing time: Fri 31 Jan 2025 14:00:50 +0000
Manifest this update: Fri 31 Jan 2025 14:00:50 +0000
Manifest next update: Sat 01 Feb 2025 14:00:50 +0000
Files and hashes: 1: 0ullyIWp7EpGBQCcCiGR5TxPcqg.roa (hash: UAfsyLbL4xBCq1a1j/3SJSYRTBP/yK7xgpCpe5svJow=)
2: lgYvXdsY-W14SSs1ONd0XMRxSiY.crl (hash: fIRK/ezKWwa+Pd/VHtpMCkMO872Wr66vMDPGPb6BNkw=)
3: tfoDF7zyFas9gs6WFrVbnqLVtKs.roa (hash: x+5zZ3Gyf9InZ2EuLZGBkdxKiWzA8pOKE0Jk5ZEXWWg=)
4: xqAfntM8EO1_30qa_gcEdVQoM7Q.roa (hash: 7euX35O1FDD/Q1odn5nV4beD52kMDqSTd112vOts20E=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:12:cc:79:68:00:e2:00:05:67:7c:3c:af:70:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96062f5ddb18f96d78492b3538d7745cc4714a26
Validity
Not Before: Jan 31 14:00:50 2025 GMT
Not After : Feb 1 14:00:50 2025 GMT
Subject: CN=da8b3b663c32e0063d05e64b7c5b4a211b608f6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:05:75:92:f0:d8:d7:b2:12:32:95:d4:46:7a:
15:d1:a3:c9:01:81:ae:25:c0:4a:62:33:9b:57:55:
34:eb:36:c2:f5:6a:bf:52:e2:c0:95:b4:37:59:88:
98:8a:57:ca:75:e3:5b:83:65:6b:b4:8e:28:c5:44:
34:15:b2:e3:57:a4:53:d3:78:ba:52:c9:12:02:f5:
d1:74:c3:68:1e:c3:ad:33:b7:ee:85:dc:c1:73:ab:
e1:cc:cf:10:96:2e:41:94:df:dd:07:a9:f0:27:86:
e5:4d:ca:b8:1f:5b:34:ca:e6:48:9a:86:9b:46:67:
1a:9a:cf:d7:db:a7:43:7b:3b:ca:fd:05:c5:29:1a:
ae:46:12:6f:19:15:e7:05:fb:50:11:1a:de:de:d1:
15:1f:ac:4c:19:df:dc:e9:34:bc:a9:6e:29:d9:8f:
13:83:9b:80:d1:68:29:f6:c4:85:e2:b6:c7:b1:a7:
4f:f7:76:24:3c:dc:ae:b9:39:4f:61:46:4d:48:23:
e2:b6:47:61:1e:ea:93:06:19:e9:8a:b5:1d:a8:6e:
f2:bf:4e:8c:d9:44:01:38:6e:1a:58:4b:36:b7:5d:
17:76:79:d3:e2:8d:4d:00:27:3b:00:53:2d:6c:df:
4a:ba:d4:3c:f4:83:bf:0a:30:48:76:0c:83:3f:19:
be:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:8B:3B:66:3C:32:E0:06:3D:05:E6:4B:7C:5B:4A:21:1B:60:8F:6F
X509v3 Authority Key Identifier:
keyid:96:06:2F:5D:DB:18:F9:6D:78:49:2B:35:38:D7:74:5C:C4:71:4A:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lgYvXdsY-W14SSs1ONd0XMRxSiY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/e05975-da8e-460b-9ebb-3fcb5f3f3c59/1/lgYvXdsY-W14SSs1ONd0XMRxSiY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/e05975-da8e-460b-9ebb-3fcb5f3f3c59/1/lgYvXdsY-W14SSs1ONd0XMRxSiY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
dc:c5:df:ed:f2:1b:41:e6:d9:b0:d5:b6:5e:e1:b7:dc:52:30:
ca:d9:68:07:4c:7d:e6:ab:64:53:ec:15:a5:a1:b9:90:22:a2:
e8:e0:42:ee:a6:0a:d7:8c:6f:ac:ae:25:be:38:75:ac:7f:25:
6d:7f:db:de:13:14:12:d9:8b:b3:d1:10:b6:b8:52:ce:88:d3:
2f:b7:b1:a4:2e:3a:dd:c1:dd:2e:41:0c:ca:51:29:64:7a:94:
82:be:50:53:83:d2:9f:e4:a5:b3:d9:47:35:ba:4b:58:2f:1e:
3f:22:9c:fc:38:95:d9:69:68:3c:07:88:9f:25:41:93:64:f7:
b3:31:7e:7d:75:aa:9c:b8:55:25:7b:7f:2d:92:a1:55:ba:8e:
13:4f:53:3b:5e:16:ea:1b:78:20:54:ad:33:17:1e:59:ad:8f:
a9:d4:14:91:9f:75:f8:d6:c0:7e:7a:3f:ce:4e:cb:2d:02:5d:
c1:e8:f0:1e:10:41:09:c2:2e:31:ce:42:d3:55:44:05:79:38:
b2:11:c6:8c:31:2a:ac:63:02:f9:30:8c:8c:7c:2b:0b:b0:4c:
cd:ff:55:7f:0e:e4:bb:33:46:b6:d2:cf:46:03:a1:e4:5b:76:
73:c5:de:14:fb:75:cc:e7:f4:fb:f5:81:ad:8f:f4:6f:2b:3b:
4d:ae:b2:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:47:19 2025 by rpki-client