Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/9c7aa4-a4c9-447a-8bc1-68c105d2f0db/1/_lyk4qChgOsvKcyIdAqnB7iCHXw.mft
File: _lyk4qChgOsvKcyIdAqnB7iCHXw.mft (raw, json)
Hash identifier: 7+Iv7CbrnSHK12LviZux06uoCkXQDV9tXLt93FlI6ic=
Subject key identifier: 08:11:41:23:A8:01:14:95:67:B1:49:9D:15:4F:A8:1A:9C:AB:0E:AB
Authority key identifier: FE:5C:A4:E2:A0:A1:80:EB:2F:29:CC:88:74:0A:A7:07:B8:82:1D:7C
Certificate issuer: /CN=fe5ca4e2a0a180eb2f29cc88740aa707b8821d7c
Certificate serial: 0194BBCDD1733F36E29044F4060232326ECF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_lyk4qChgOsvKcyIdAqnB7iCHXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/9c7aa4-a4c9-447a-8bc1-68c105d2f0db/1/_lyk4qChgOsvKcyIdAqnB7iCHXw.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 10:00:15 +0000
Manifest this update: Fri 31 Jan 2025 10:00:15 +0000
Manifest next update: Sat 01 Feb 2025 10:00:15 +0000
Files and hashes: 1: _lyk4qChgOsvKcyIdAqnB7iCHXw.crl (hash: tiLXz5BcHxaqunclzY/1c5HRQ/LtDPxPvYM3JrKSACA=)
2: x4aksm8H5U_SoWV9w4ojBxWjtSw.roa (hash: DpLDxBcf+XBzD3AIM/0hCbVFFthMKuVEgRBA/YNYRu0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:d1:73:3f:36:e2:90:44:f4:06:02:32:32:6e:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe5ca4e2a0a180eb2f29cc88740aa707b8821d7c
Validity
Not Before: Jan 31 10:00:15 2025 GMT
Not After : Feb 1 10:00:15 2025 GMT
Subject: CN=08114123a801149567b1499d154fa81a9cab0eab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:03:48:98:77:db:bb:49:30:27:ef:f2:68:4f:
98:44:5b:95:f5:2c:65:ad:87:21:e0:c0:ca:f2:ff:
c6:26:90:f0:0e:a7:7c:a3:12:d6:2c:92:82:89:89:
23:33:4b:42:3c:8e:e4:07:fd:7b:dc:0d:8d:f2:10:
55:2b:4b:a0:a5:e8:1b:a7:d6:35:70:35:11:77:8b:
2c:7d:19:8b:a7:1d:1f:8d:6d:f6:35:62:c0:2f:3a:
05:e2:fa:f7:37:86:97:16:f4:d3:40:9f:72:55:c6:
51:fa:f7:19:d0:f2:9d:4a:77:59:24:60:5b:74:88:
2e:36:3e:94:a3:e8:14:b3:67:cf:17:fd:f4:d3:e8:
08:49:ed:07:c7:c1:25:9e:d9:3c:55:41:b2:3f:2a:
5e:b7:ee:7e:a0:d4:de:eb:4a:a2:01:84:d1:5e:07:
9c:c6:de:42:4c:36:e3:61:0f:73:d3:31:b0:47:71:
80:ee:5b:63:69:4f:25:05:84:3c:17:73:e8:e7:db:
5f:d9:01:05:b3:71:44:dc:1b:0c:e9:92:a9:4e:6d:
ca:6a:5e:5a:6c:a8:71:17:d4:bb:f2:51:28:ae:53:
0e:d1:ea:4d:1f:db:e6:dc:b6:2e:92:e9:2f:7a:bb:
e1:23:16:3c:03:db:26:69:1d:a8:61:3f:39:bb:cc:
05:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:11:41:23:A8:01:14:95:67:B1:49:9D:15:4F:A8:1A:9C:AB:0E:AB
X509v3 Authority Key Identifier:
keyid:FE:5C:A4:E2:A0:A1:80:EB:2F:29:CC:88:74:0A:A7:07:B8:82:1D:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_lyk4qChgOsvKcyIdAqnB7iCHXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/9c7aa4-a4c9-447a-8bc1-68c105d2f0db/1/_lyk4qChgOsvKcyIdAqnB7iCHXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/9c7aa4-a4c9-447a-8bc1-68c105d2f0db/1/_lyk4qChgOsvKcyIdAqnB7iCHXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:1a:be:60:f3:b6:54:24:e7:6e:98:fe:80:45:33:c6:dc:5f:
e1:c8:a1:b2:ca:cd:f1:d8:33:5e:96:78:ef:71:73:08:c8:5c:
26:29:5a:a0:03:27:f1:4b:34:24:9d:c8:19:ee:34:39:c5:55:
15:95:40:85:da:01:a1:b3:f9:eb:50:28:97:4e:ac:00:d1:a1:
cf:bf:41:2d:38:c3:d9:74:0e:2b:c4:d1:46:93:c7:09:f0:7e:
20:68:7e:c6:1e:d6:44:f1:c0:e1:7a:9b:72:6f:35:5e:4d:38:
b6:32:f0:33:a5:ca:57:bc:e6:cf:72:1a:3c:8d:23:35:23:5b:
88:fd:d7:29:ac:19:f1:db:8c:40:3b:3c:75:be:92:6e:68:31:
86:a6:df:c8:82:a7:a1:46:25:b1:78:e1:05:07:11:f3:b1:94:
1d:d5:87:da:81:74:76:f0:46:50:17:77:5d:e4:8b:35:0e:b0:
04:58:0d:c8:b8:58:ef:f0:f6:20:4a:14:ed:5f:87:83:a2:d6:
4b:9b:a7:fb:d1:56:a3:c4:86:65:22:aa:7e:fd:f7:f3:2e:f2:
67:31:e4:29:9f:d6:95:a1:e1:a9:d5:cc:2f:fb:78:3e:18:16:
1d:2c:28:2e:06:fe:52:a3:be:10:cf:e2:19:c3:c0:0b:7f:73:
4f:72:bf:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:04:49 2025 by rpki-client