Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/a53bb6-66c0-4861-b288-2a6372e054d2/1/LkvU7cop1Ocr6GztC3rWUsfSYck.mft
File: LkvU7cop1Ocr6GztC3rWUsfSYck.mft (raw, json)
Hash identifier: XDti/XwyXiUzl6wl92kw22pgiQAt/OdEGC6Yh9CGBgQ=
Subject key identifier: 52:B3:11:D0:5C:99:CD:A9:68:86:DC:A5:D5:11:1E:41:07:4F:7E:A2
Authority key identifier: 2E:4B:D4:ED:CA:29:D4:E7:2B:E8:6C:ED:0B:7A:D6:52:C7:D2:61:C9
Certificate issuer: /CN=2e4bd4edca29d4e72be86ced0b7ad652c7d261c9
Certificate serial: 0194BD8574C436F8059D729FC1C682DCD783
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LkvU7cop1Ocr6GztC3rWUsfSYck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/a53bb6-66c0-4861-b288-2a6372e054d2/1/LkvU7cop1Ocr6GztC3rWUsfSYck.mft
Manifest number: 1433
Signing time: Fri 31 Jan 2025 18:00:27 +0000
Manifest this update: Fri 31 Jan 2025 18:00:27 +0000
Manifest next update: Sat 01 Feb 2025 18:00:27 +0000
Files and hashes: 1: 9cXZNBVPbFK7YgwhAS48hqVN3Q8.roa (hash: P8nablk4XjPWocUs0+w/NDTZnQaNhHciAel+enfRgUQ=)
2: GJ7X3NXNPspZEiv4IaMeRbRsKjQ.roa (hash: +RNCIDZL3jBzsc6WtooEau4eUrswSESksvuz73mPQ2Q=)
3: LkvU7cop1Ocr6GztC3rWUsfSYck.crl (hash: +Fl2rd/0yrUDPhFRmOzy11fswK9osa/PnahhuUvEVjc=)
4: g2LuFjEhsXOpJYmb2qeJVNKQyUw.roa (hash: gXxbZRZ22rqSRTpziJlqNBg77T4+7Pe2wPiUn7l87EQ=)
5: kEq9Sa-aYq3KR4A40M5VyPd54wg.roa (hash: UxvV1YF4/u8pr981HOY28yhkvm5jpeElKKL/ei/Iusw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:74:c4:36:f8:05:9d:72:9f:c1:c6:82:dc:d7:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e4bd4edca29d4e72be86ced0b7ad652c7d261c9
Validity
Not Before: Jan 31 18:00:27 2025 GMT
Not After : Feb 1 18:00:27 2025 GMT
Subject: CN=52b311d05c99cda96886dca5d5111e41074f7ea2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d6:08:1a:0a:9e:40:59:47:7f:a1:c8:62:9c:
d5:ab:03:c6:af:c5:b7:9d:c3:de:de:4a:b3:01:f9:
99:ff:85:f7:80:3e:77:5a:ba:95:fa:7a:58:03:9f:
32:cb:a5:16:56:83:d5:64:a1:10:4b:ea:76:54:86:
b6:b5:25:74:7c:16:4a:d2:c5:5d:bc:63:f8:2c:02:
3c:74:26:ac:b8:1b:24:92:6a:b1:9c:d2:39:a9:60:
1b:b3:24:66:55:51:33:b8:56:33:d8:67:0d:59:c1:
a5:8b:71:2e:6b:2e:d0:05:c1:3c:cb:c5:d5:b5:a4:
68:3e:f4:06:65:9a:4c:37:01:1d:28:36:fb:cf:2f:
38:d4:db:89:b3:8b:9b:68:bd:e6:d4:da:0e:28:9f:
d1:e9:fd:0e:11:91:9a:c7:f9:62:bb:25:1c:3a:78:
db:9e:21:44:6a:58:56:bf:52:64:37:92:85:e9:c5:
c7:48:72:46:b3:f0:70:65:ff:f8:27:75:d1:df:80:
3e:27:a3:9d:c8:f2:2a:df:07:6d:a4:f1:ef:ae:af:
41:50:8b:33:2c:90:ef:17:e1:2c:ac:b4:6f:fa:e7:
aa:ec:de:c4:42:f1:9f:2e:05:1b:ed:96:99:9b:92:
4f:b0:32:14:0c:4e:48:a2:be:ae:c0:d4:1f:de:36:
c7:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:B3:11:D0:5C:99:CD:A9:68:86:DC:A5:D5:11:1E:41:07:4F:7E:A2
X509v3 Authority Key Identifier:
keyid:2E:4B:D4:ED:CA:29:D4:E7:2B:E8:6C:ED:0B:7A:D6:52:C7:D2:61:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LkvU7cop1Ocr6GztC3rWUsfSYck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/a53bb6-66c0-4861-b288-2a6372e054d2/1/LkvU7cop1Ocr6GztC3rWUsfSYck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/a53bb6-66c0-4861-b288-2a6372e054d2/1/LkvU7cop1Ocr6GztC3rWUsfSYck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:a2:1e:4f:96:9a:59:1f:9d:70:91:ba:f7:81:07:ab:89:8a:
11:d5:9c:06:6f:35:70:31:1b:ac:15:22:b0:41:c8:ab:ce:56:
96:b5:50:67:75:4d:4e:1a:b3:70:a4:14:5d:51:11:06:b2:00:
3b:e5:c9:7b:c7:e2:3a:16:30:5d:23:ae:82:5b:68:75:84:29:
00:46:18:35:fd:f3:1a:5d:24:94:4c:3f:41:af:55:0e:78:bf:
d6:31:a0:dd:e7:0b:8a:ce:f6:af:29:ea:ec:be:c1:be:a8:29:
04:f6:a7:3b:86:08:8f:1f:93:14:e1:b1:4b:ee:5d:97:3a:3f:
2d:ac:84:e4:cd:fd:2f:48:b4:56:5a:62:8b:aa:30:54:91:61:
81:56:dc:5d:d9:5b:3b:91:bf:7c:98:9c:1b:1c:51:fe:12:ec:
bd:c1:fe:a5:6e:7e:9e:c3:51:bc:09:41:2d:e3:da:93:22:b4:
57:4d:72:ef:ef:2d:93:66:ae:cd:a6:52:1a:a3:c3:00:3b:33:
4b:91:c9:ee:10:62:cf:45:87:3f:53:c0:e8:2f:9e:9a:af:25:
14:cf:f8:98:39:53:b2:04:45:ba:33:a6:39:a6:45:a9:59:bc:
7d:12:0a:52:2d:9b:d7:01:24:ff:e1:d8:a7:cd:1a:59:04:5f:
ab:6e:9b:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:43:30 2025 by rpki-client