Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/02e962-8ff8-416e-b1ba-a1201cc6e01b/1/ljREADltCvTLeePJRmZnG3s5H1U.mft
File: ljREADltCvTLeePJRmZnG3s5H1U.mft (raw, json)
Hash identifier: 2hfVNeba1YTlpqOCs36o0kw+6BSkIMPR3o2WqaMoxwo=
Subject key identifier: FE:31:20:74:C2:F5:E8:05:8C:5D:68:46:9C:1B:8D:36:97:9B:AD:19
Authority key identifier: 96:34:44:00:39:6D:0A:F4:CB:79:E3:C9:46:66:67:1B:7B:39:1F:55
Certificate issuer: /CN=96344400396d0af4cb79e3c94666671b7b391f55
Certificate serial: 0194BCA9C6D6AA6B75CE3289BC927BC1DA76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ljREADltCvTLeePJRmZnG3s5H1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/02e962-8ff8-416e-b1ba-a1201cc6e01b/1/ljREADltCvTLeePJRmZnG3s5H1U.mft
Manifest number: 0966
Signing time: Fri 31 Jan 2025 14:00:30 +0000
Manifest this update: Fri 31 Jan 2025 14:00:30 +0000
Manifest next update: Sat 01 Feb 2025 14:00:30 +0000
Files and hashes: 1: g64CYQqOAhZ0eSWUTgojppUOmyU.roa (hash: KRvJvpAicOv96+Z1/awJqo3RuCZixmomEl8lk9HVDZo=)
2: ljREADltCvTLeePJRmZnG3s5H1U.crl (hash: kgFfmfLyzgY0KTgGctROfJ7HPTFOPYuTFoO8qLY0W9M=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:c6:d6:aa:6b:75:ce:32:89:bc:92:7b:c1:da:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96344400396d0af4cb79e3c94666671b7b391f55
Validity
Not Before: Jan 31 14:00:30 2025 GMT
Not After : Feb 1 14:00:30 2025 GMT
Subject: CN=fe312074c2f5e8058c5d68469c1b8d36979bad19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:17:31:f1:f3:ff:5a:0d:9f:74:dd:39:86:f5:
e2:0f:b6:9d:6d:d0:df:17:90:20:4d:2f:7b:aa:93:
04:0b:6a:66:49:e7:19:24:30:1c:9e:f7:d6:c1:91:
63:9a:7d:68:ba:4b:a8:32:bb:05:4c:46:93:86:e4:
83:08:4b:54:c9:9d:4c:51:0b:1a:a0:70:68:94:56:
44:cb:86:1d:8f:ab:41:5e:c4:b5:cc:b2:15:ac:76:
85:ff:8a:84:88:49:e4:e0:49:33:f0:c0:47:dd:df:
48:db:33:18:25:a4:97:50:11:ce:3a:9c:36:5e:59:
31:58:c6:56:33:8c:7a:7a:43:c6:1e:9f:4b:f7:92:
75:d7:54:4f:f9:44:59:12:3e:11:38:0e:3d:77:2a:
00:04:a1:91:be:24:94:4c:7e:74:af:43:ee:94:d6:
3f:8b:2e:15:76:55:58:bd:b7:61:91:3c:46:67:02:
a3:0e:89:41:cc:c4:0f:54:45:15:9b:79:60:85:c0:
65:db:6e:bd:3e:4f:da:34:74:3e:c7:93:92:74:10:
dd:db:da:19:ac:35:a5:af:9f:f8:29:70:29:71:b7:
31:5f:ee:53:7b:dc:49:4d:d2:cd:44:9b:77:d4:8a:
92:85:a1:ce:5d:62:63:c0:81:a7:af:a4:e1:2f:8c:
34:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:31:20:74:C2:F5:E8:05:8C:5D:68:46:9C:1B:8D:36:97:9B:AD:19
X509v3 Authority Key Identifier:
keyid:96:34:44:00:39:6D:0A:F4:CB:79:E3:C9:46:66:67:1B:7B:39:1F:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ljREADltCvTLeePJRmZnG3s5H1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/02e962-8ff8-416e-b1ba-a1201cc6e01b/1/ljREADltCvTLeePJRmZnG3s5H1U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/02e962-8ff8-416e-b1ba-a1201cc6e01b/1/ljREADltCvTLeePJRmZnG3s5H1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:b0:1b:e6:33:cc:99:81:2f:e9:3e:fd:c7:33:5b:8a:0d:e2:
b1:0d:d8:4d:ed:ae:60:06:d0:dd:55:9a:93:81:96:3f:d4:a4:
ab:f0:41:5e:55:23:f6:58:2b:0a:c7:8c:76:a5:57:7c:c0:df:
96:0c:0d:52:a5:b0:33:af:08:d1:db:73:64:3e:c9:57:14:bc:
e2:5a:c5:b2:67:27:c2:87:c6:b5:0e:0e:e9:1a:2f:58:d6:a5:
71:60:ab:83:4e:89:89:70:76:17:f9:72:f6:6b:9f:01:7c:07:
c8:2a:ab:71:c5:53:c5:19:6c:ec:66:d8:90:93:1d:6b:ec:53:
b7:12:87:9b:7d:5b:64:83:68:82:80:b7:2a:4e:6d:c2:81:d7:
76:e5:ad:b2:c8:37:37:75:be:c4:a1:c2:cf:a9:fc:6f:1b:3d:
f0:d1:35:8b:6b:98:c0:91:7e:d9:34:fa:0f:8e:69:b6:72:58:
c7:49:cb:10:c1:51:1e:18:3b:3d:77:d6:a3:59:85:29:1c:94:
09:ca:68:cd:88:82:92:dc:04:37:42:4b:d0:02:b8:e4:f4:d9:
6c:44:61:7c:16:d6:56:d5:96:71:83:5c:78:c3:31:8b:63:fe:
93:3c:fc:bd:98:04:81:2d:1f:9e:e1:62:39:d7:15:d0:73:72:
39:18:a3:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:30:43 2025 by rpki-client