Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/df140a-0ac3-4105-b83a-051886d0ed4e/1/lV_PknmKnbswq9K5-im_qIBCIPM.mft
File: lV_PknmKnbswq9K5-im_qIBCIPM.mft (raw, json)
Hash identifier: F/CrA388Q4RHHqQY8Dcy4K25AgvmKOTlwkX5ygtKp1I=
Subject key identifier: EF:A8:FE:43:87:84:0A:96:4B:E5:16:43:87:8E:13:6F:F6:B7:0A:17
Authority key identifier: 95:5F:CF:92:79:8A:9D:BB:30:AB:D2:B9:FA:29:BF:A8:80:42:20:F3
Certificate issuer: /CN=955fcf92798a9dbb30abd2b9fa29bfa8804220f3
Certificate serial: 0194BC04DCE368E58E33E6750944FD9CEA5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lV_PknmKnbswq9K5-im_qIBCIPM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/df140a-0ac3-4105-b83a-051886d0ed4e/1/lV_PknmKnbswq9K5-im_qIBCIPM.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 11:00:22 +0000
Manifest this update: Fri 31 Jan 2025 11:00:22 +0000
Manifest next update: Sat 01 Feb 2025 11:00:22 +0000
Files and hashes: 1: 6qs9s6ZANN0Vr7Mtzl0BbrvUZX0.roa (hash: pQeqqx4HL54a4q+hUpmIGa67TaWduN/H5CstOlna1UE=)
2: EoYtqT19_jZmc_n7cEwpjSGtOsU.roa (hash: hkkAotU6XOY6iCyCcpO+yZgNMC6GRacfrcfYwvynbjI=)
3: hFLTgVwi-T4tOA6wOS4qAN2FLxM.roa (hash: dz5XmeHfe6/lu7MZUkt8y4gu+wWol7zuYfpW+/5fyrM=)
4: lV_PknmKnbswq9K5-im_qIBCIPM.crl (hash: pFV7JnTbFT0abOEr0+et0bLdTYFo5R5Cav09dpPAVL4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:dc:e3:68:e5:8e:33:e6:75:09:44:fd:9c:ea:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=955fcf92798a9dbb30abd2b9fa29bfa8804220f3
Validity
Not Before: Jan 31 11:00:22 2025 GMT
Not After : Feb 1 11:00:22 2025 GMT
Subject: CN=efa8fe4387840a964be51643878e136ff6b70a17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:f4:8b:56:c5:62:7b:2e:92:c0:a1:54:7d:cd:
80:d9:74:8c:5e:64:36:ae:d6:11:13:d8:e7:fe:ab:
70:0b:b7:1a:5b:b2:c3:6f:85:d6:75:43:41:c5:ff:
6a:c8:05:47:00:6d:b5:68:2f:ee:a5:e3:81:29:bd:
c2:4d:50:6e:83:7e:9d:aa:0a:68:ea:07:f0:ac:91:
4e:57:5c:29:10:1f:cb:44:80:27:a1:48:c7:7f:47:
3f:a9:50:73:0b:64:34:a9:8e:6b:86:1d:58:39:b2:
11:7d:10:35:2e:b0:9d:d4:33:63:08:92:f6:b2:51:
eb:f5:ad:2c:3e:0c:12:92:e0:63:e7:f2:dc:b8:83:
06:f4:68:c9:d5:06:b3:7a:4e:1e:bd:22:a6:ef:65:
52:4e:4a:0c:80:2a:7e:12:e1:64:df:57:56:f5:43:
6e:cb:6e:0a:88:95:f2:52:4d:77:4e:7c:21:e5:e6:
16:fa:9c:6d:40:ae:7a:97:3a:b7:20:45:d4:db:93:
0b:03:30:27:22:61:a0:bd:b0:0d:1e:52:61:a5:05:
4f:be:01:dd:0a:37:cd:de:44:7b:2a:42:57:c9:dd:
ff:39:96:d8:d9:4d:81:b8:51:6a:45:4e:a7:a1:f2:
fb:1e:17:e8:1a:2f:1a:f7:b1:19:78:63:1c:b8:ee:
dd:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:A8:FE:43:87:84:0A:96:4B:E5:16:43:87:8E:13:6F:F6:B7:0A:17
X509v3 Authority Key Identifier:
keyid:95:5F:CF:92:79:8A:9D:BB:30:AB:D2:B9:FA:29:BF:A8:80:42:20:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lV_PknmKnbswq9K5-im_qIBCIPM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/df140a-0ac3-4105-b83a-051886d0ed4e/1/lV_PknmKnbswq9K5-im_qIBCIPM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/df140a-0ac3-4105-b83a-051886d0ed4e/1/lV_PknmKnbswq9K5-im_qIBCIPM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:83:7c:84:24:e9:be:66:aa:44:22:03:9b:50:84:0d:e1:43:
59:a7:b5:a9:26:a6:9b:76:08:c7:bd:1a:05:13:4a:f0:01:16:
c8:d5:ba:53:58:92:d4:3f:b6:af:ca:ec:6d:a0:a5:62:56:56:
c7:3d:87:19:74:89:51:98:96:8c:4d:cb:4e:11:af:d0:1b:be:
98:a8:e6:b2:96:aa:29:d2:f0:aa:dd:e9:6d:b9:09:ea:7a:02:
2e:ae:b9:8f:f3:6f:d5:bd:85:09:1b:ac:50:9e:a0:0f:c8:0f:
17:13:e4:64:f5:ff:3e:a8:a5:92:30:85:c7:30:8e:3d:c6:8e:
52:c8:ca:a4:0e:93:72:cd:c3:c9:a1:c0:23:ef:0c:5c:ac:0f:
05:00:4c:f9:c5:46:fc:eb:6b:f8:9d:96:b6:af:90:10:4d:12:
92:2a:4c:50:fc:8c:ed:1f:32:7e:b8:dc:ca:7b:45:a3:70:90:
cc:12:f6:27:94:c8:1c:79:14:de:2e:15:fe:7a:8d:ec:22:e3:
1a:c0:a4:14:0e:00:3a:39:ef:af:38:ea:65:39:e2:2c:04:1d:
49:ca:ef:e7:a9:7e:91:0f:bc:f8:68:92:71:7a:ce:20:51:48:
44:20:5d:29:35:d4:7f:04:6d:a9:7d:27:4f:b5:fb:4d:fc:38:
be:02:51:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:53 2025 by rpki-client