Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/09263c-a5cc-44d6-91c4-61802d9c9344/1/lXbbt2mVtJUKhsXwfKjbPrSWePY.mft
File: lXbbt2mVtJUKhsXwfKjbPrSWePY.mft (raw, json)
Hash identifier: F6wbRYWo1ksHGQ5NU0SQvYOTQ/ATTmXZ2uSNSoj/Lyk=
Subject key identifier: 00:D0:56:CD:62:36:E8:A3:36:81:EF:AE:C2:63:A3:97:21:32:D4:1F
Authority key identifier: 95:76:DB:B7:69:95:B4:95:0A:86:C5:F0:7C:A8:DB:3E:B4:96:78:F6
Certificate issuer: /CN=9576dbb76995b4950a86c5f07ca8db3eb49678f6
Certificate serial: 0194BC7305E93C5F7385D4DE3E07B7E0A076
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lXbbt2mVtJUKhsXwfKjbPrSWePY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/09263c-a5cc-44d6-91c4-61802d9c9344/1/lXbbt2mVtJUKhsXwfKjbPrSWePY.mft
Manifest number: 016A
Signing time: Fri 31 Jan 2025 13:00:42 +0000
Manifest this update: Fri 31 Jan 2025 13:00:42 +0000
Manifest next update: Sat 01 Feb 2025 13:00:42 +0000
Files and hashes: 1: lXbbt2mVtJUKhsXwfKjbPrSWePY.crl (hash: 8vwZhlWnXAE9z63Tuyff72mcanigVCptcN2qVdq2lrI=)
2: wOkYAGqpSPBGigfUEv7El852HGA.roa (hash: jGAVgltAX4k1B+fH3k6Z7JMTyuIFNv8n6kIlzZB4Zww=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:05:e9:3c:5f:73:85:d4:de:3e:07:b7:e0:a0:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9576dbb76995b4950a86c5f07ca8db3eb49678f6
Validity
Not Before: Jan 31 13:00:42 2025 GMT
Not After : Feb 1 13:00:42 2025 GMT
Subject: CN=00d056cd6236e8a33681efaec263a3972132d41f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:bf:0e:36:c2:bf:ec:c1:e3:17:3d:81:1c:07:
c4:34:19:b0:f2:ec:f6:4c:1d:1d:c1:41:43:4f:27:
84:54:13:e0:1c:39:e6:f5:42:45:4e:f6:ef:60:31:
2e:55:c4:1e:68:e2:a9:21:82:af:3b:28:a8:78:ab:
ed:58:55:a3:d4:2c:c7:dc:c6:fa:c3:23:34:2a:e1:
0a:b1:a9:58:29:27:b7:e8:92:bd:b6:a9:cb:33:c3:
e2:1a:c3:45:73:88:e6:b5:79:06:cd:e8:25:4a:34:
38:87:6d:35:d4:3d:fd:ac:91:4e:d5:6f:51:a0:0a:
63:39:bc:b1:a7:70:7f:33:69:8f:30:d6:2f:47:e8:
d8:3a:34:aa:f8:ec:fb:3e:b8:e3:4f:c5:49:18:e5:
a7:09:d3:0b:e0:7b:33:14:f2:a4:ee:f5:27:6e:5b:
83:e5:df:35:d8:3f:e9:0d:f8:bc:dc:3c:21:e0:62:
a7:7f:a4:f1:9f:a3:10:86:7a:30:5b:c5:39:52:d8:
c3:f2:92:89:f9:09:96:52:ab:14:0e:41:62:8a:36:
7b:94:76:24:70:77:8d:76:c3:f9:bf:38:e8:b5:8e:
f0:99:26:9f:bf:45:b8:78:05:e5:75:2a:15:79:fa:
d1:6f:df:b2:79:7c:d3:6f:2b:c6:82:19:2e:64:4b:
3f:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:D0:56:CD:62:36:E8:A3:36:81:EF:AE:C2:63:A3:97:21:32:D4:1F
X509v3 Authority Key Identifier:
keyid:95:76:DB:B7:69:95:B4:95:0A:86:C5:F0:7C:A8:DB:3E:B4:96:78:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lXbbt2mVtJUKhsXwfKjbPrSWePY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/09263c-a5cc-44d6-91c4-61802d9c9344/1/lXbbt2mVtJUKhsXwfKjbPrSWePY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/09263c-a5cc-44d6-91c4-61802d9c9344/1/lXbbt2mVtJUKhsXwfKjbPrSWePY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:1a:e4:37:22:61:b6:9a:ab:74:de:31:7d:cb:17:e7:8b:70:
31:9c:95:77:55:ca:e3:8f:d7:0b:39:eb:c6:5e:c3:60:40:ca:
a8:b4:1c:2d:f6:41:13:5e:a6:d4:8f:48:0f:c3:a9:e0:b1:c5:
77:d2:dd:16:82:6b:a1:d9:0c:e5:76:f2:24:2c:ae:c3:4f:1d:
e6:02:f5:92:51:aa:37:a9:b7:cf:4f:3e:fe:4e:e5:29:1a:c4:
05:57:04:da:2d:63:ca:5c:25:fd:6f:21:c4:ad:a8:bd:35:8e:
7e:c5:2c:83:0a:94:5e:69:a9:b0:2a:82:09:10:dc:7a:12:fb:
bb:48:58:05:5e:1e:fa:01:29:02:2f:6c:49:f0:04:69:09:33:
40:dc:6c:6b:64:bc:3b:97:f6:df:02:36:f3:76:26:28:3b:af:
4a:da:95:b2:63:6e:64:84:5a:d4:99:b3:07:73:00:b0:34:35:
a1:9e:07:ce:5f:3d:0e:de:6c:3b:a4:22:66:8f:c6:1f:a1:f8:
69:50:eb:b3:ec:ab:31:1f:cf:9c:af:ca:3e:55:1d:61:38:7b:
69:f3:43:f7:b8:ed:7f:96:aa:c5:75:77:0b:9a:96:1e:1b:4c:
6f:f6:ea:08:df:91:7b:56:79:5b:2f:6b:53:28:9c:c0:a8:44:
69:de:6f:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:44:51 2025 by rpki-client