Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/001b9f-e4d8-4dac-bf08-7240c36000d7/1/l5WGA1q-I1acITXjINvRolW4QDQ.mft
File: l5WGA1q-I1acITXjINvRolW4QDQ.mft (raw, json)
Hash identifier: FmtSD7kE0ldtY7jRYhklp499zVU/+EOgUXZ98AJTTnc=
Subject key identifier: 7C:87:29:5F:F9:AF:90:8A:8C:2D:69:15:1A:08:5B:10:B4:68:4C:90
Authority key identifier: 97:95:86:03:5A:BE:23:56:9C:21:35:E3:20:DB:D1:A2:55:B8:40:34
Certificate issuer: /CN=979586035abe23569c2135e320dbd1a255b84034
Certificate serial: 0194BC3C4CF828B11A5F79A6065E30017110
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l5WGA1q-I1acITXjINvRolW4QDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/001b9f-e4d8-4dac-bf08-7240c36000d7/1/l5WGA1q-I1acITXjINvRolW4QDQ.mft
Manifest number: 0E25
Signing time: Fri 31 Jan 2025 12:00:55 +0000
Manifest this update: Fri 31 Jan 2025 12:00:55 +0000
Manifest next update: Sat 01 Feb 2025 12:00:55 +0000
Files and hashes: 1: B8Ry5W4Nd7mGEXHvK2ID6RlaYKg.roa (hash: bjPJdt8d8Rm7Nt6tD0StaYZNVd8a8Vg9VG3eQIsicu8=)
2: l5WGA1q-I1acITXjINvRolW4QDQ.crl (hash: lsNIEpPQnxlO8wx49Um9uuQg1at/j9U1DFexMR9WUSM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:4c:f8:28:b1:1a:5f:79:a6:06:5e:30:01:71:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=979586035abe23569c2135e320dbd1a255b84034
Validity
Not Before: Jan 31 12:00:55 2025 GMT
Not After : Feb 1 12:00:55 2025 GMT
Subject: CN=7c87295ff9af908a8c2d69151a085b10b4684c90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:09:ec:ef:33:d4:e1:41:eb:45:e6:7a:41:b7:
e9:19:16:66:32:6b:18:37:01:0d:42:f9:0b:2d:e3:
8d:06:fe:ef:24:f3:bb:bb:00:a1:46:e8:78:84:e5:
5f:ad:09:25:a4:23:23:30:23:93:d9:5f:69:f1:6f:
39:47:06:c1:40:c8:5d:ab:1e:98:5f:52:6c:91:05:
ea:4f:56:ae:33:f0:90:89:39:0e:8c:e9:d2:15:be:
5a:09:f0:13:7e:14:8d:3c:1a:d0:e4:25:d4:8e:81:
30:d1:52:83:c7:4a:dc:d2:13:11:01:3b:c3:11:34:
2e:8d:33:97:96:74:78:43:21:71:5f:5b:53:1c:b9:
35:bc:48:b8:dd:39:3b:86:8a:20:ad:15:5e:b7:05:
09:48:ea:67:c3:6b:41:6d:8e:0c:1f:38:46:d4:ed:
2c:ff:c4:81:e7:2d:aa:0f:11:40:5c:27:e4:8c:ed:
99:82:e2:85:dd:9a:82:17:e7:53:1b:43:b2:7a:78:
d7:56:7b:66:dd:e6:b1:d0:3f:69:99:b1:39:52:c8:
e7:ff:e1:19:3c:5e:b7:87:c6:ad:08:ab:52:9b:f2:
a5:5a:ae:a2:24:02:21:9b:92:4c:a9:d3:fb:7e:9e:
b0:84:12:1e:6e:fc:50:98:91:03:d8:d1:62:0d:68:
e0:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:87:29:5F:F9:AF:90:8A:8C:2D:69:15:1A:08:5B:10:B4:68:4C:90
X509v3 Authority Key Identifier:
keyid:97:95:86:03:5A:BE:23:56:9C:21:35:E3:20:DB:D1:A2:55:B8:40:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l5WGA1q-I1acITXjINvRolW4QDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/001b9f-e4d8-4dac-bf08-7240c36000d7/1/l5WGA1q-I1acITXjINvRolW4QDQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/001b9f-e4d8-4dac-bf08-7240c36000d7/1/l5WGA1q-I1acITXjINvRolW4QDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:1a:45:49:2c:08:c3:81:d8:df:10:24:5b:0a:45:59:46:b2:
8d:4d:c8:20:58:66:48:a5:df:3c:52:38:39:89:66:a8:96:3c:
6c:e0:23:9b:34:8b:e2:f7:94:de:51:31:7b:5b:cc:fa:5d:8d:
5d:f2:5d:e4:f5:bc:2b:69:b0:6a:34:3d:76:56:80:c7:3c:50:
bc:9d:15:2e:b9:da:0e:bc:19:14:c2:03:0d:1e:86:b5:a1:6e:
3a:fd:44:ac:a5:1f:b1:d8:2e:03:2e:f4:ec:d7:94:47:69:1c:
5d:1a:70:91:4c:85:17:33:c1:0a:ca:69:2f:49:b8:0e:81:17:
37:89:99:7b:8e:60:7d:2a:40:a3:e6:fb:01:72:f2:30:1b:31:
eb:e0:2e:5e:9b:d1:48:ce:f9:4c:eb:de:57:47:e8:73:9f:3b:
0c:46:89:e0:5f:fa:a4:5d:78:a4:2a:4f:82:89:fa:86:55:38:
eb:dd:8b:87:31:9d:f0:f6:a7:a5:2c:87:a1:cf:a4:40:6c:85:
ba:c1:fc:56:ba:b6:28:f6:72:f9:d1:00:55:60:f2:8b:27:00:
ce:58:88:d5:32:8b:67:c9:9d:29:bb:36:93:4f:b0:8f:1b:87:
fb:9d:e4:21:b7:6e:fe:7b:a4:39:22:94:7c:7e:5a:69:b0:6c:
82:0d:4c:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:42:17 2025 by rpki-client