Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/7c97cf-195c-4fc1-95a3-637fa14656de/1/looX4WGWu3qGcY5rK9agfje0DGU.mft
File: looX4WGWu3qGcY5rK9agfje0DGU.mft (raw, json)
Hash identifier: KvqV2FMZCB9CyImmtJLe4xXUkP2OtriS26bUjhgKUF4=
Subject key identifier: 0E:0F:4A:DE:23:BB:BE:0B:F7:5A:8C:5E:F0:5E:97:1B:A6:65:02:D7
Authority key identifier: 96:8A:17:E1:61:96:BB:7A:86:71:8E:6B:2B:D6:A0:7E:37:B4:0C:65
Certificate issuer: /CN=968a17e16196bb7a86718e6b2bd6a07e37b40c65
Certificate serial: 0194BD8533862158161F18DF4C73BF901DCA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/looX4WGWu3qGcY5rK9agfje0DGU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/7c97cf-195c-4fc1-95a3-637fa14656de/1/looX4WGWu3qGcY5rK9agfje0DGU.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 18:00:10 +0000
Manifest this update: Fri 31 Jan 2025 18:00:10 +0000
Manifest next update: Sat 01 Feb 2025 18:00:10 +0000
Files and hashes: 1: DujQDMx3DXEUwl_S25-DE-FhKlg.roa (hash: kc2HgT2zi7ovcfO8xiQnJUXKfZ/NJb+y4s0qXknod8A=)
2: looX4WGWu3qGcY5rK9agfje0DGU.crl (hash: sJhHJPK1gLhl1ypyQnM854b0sX5Wp+CkMM82d+PPFlk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:33:86:21:58:16:1f:18:df:4c:73:bf:90:1d:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=968a17e16196bb7a86718e6b2bd6a07e37b40c65
Validity
Not Before: Jan 31 18:00:10 2025 GMT
Not After : Feb 1 18:00:10 2025 GMT
Subject: CN=0e0f4ade23bbbe0bf75a8c5ef05e971ba66502d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:32:15:55:1e:9b:56:eb:5d:72:92:96:f9:20:
45:15:0e:fc:f6:df:85:94:dd:37:a7:2c:68:65:1c:
ab:00:4e:12:da:9b:d7:c0:bb:c4:89:f7:64:62:cd:
60:10:64:ea:b3:f3:86:46:e6:c0:98:99:9f:fe:b4:
7b:ab:fd:2d:2c:51:59:d5:d0:74:0c:4d:23:a9:8a:
d4:2f:35:d8:9c:fe:bc:74:59:69:85:ff:67:17:42:
20:0b:9a:d9:5d:c8:9c:cc:22:50:09:33:75:72:d5:
8c:0d:07:28:c0:fd:ec:da:b4:a5:3d:ed:51:f9:33:
9a:5a:07:c6:5d:53:d4:89:fa:c8:e6:d7:9b:f8:dc:
c1:55:d5:dd:81:a9:70:84:78:82:33:f4:87:75:a3:
dc:16:33:46:74:ae:c4:f4:fc:46:8e:76:1c:9b:3b:
32:f6:44:62:f2:98:20:ff:17:8b:a7:84:d8:a7:fa:
40:e0:fc:bc:c8:fb:09:a7:cf:95:eb:74:ba:88:df:
db:06:8c:33:e9:52:9c:14:47:e3:f3:4e:ad:dc:f0:
09:e0:46:47:7d:30:d4:75:3f:b4:c4:e2:d1:bd:a9:
cd:ed:42:c6:37:0d:b3:6c:64:d1:c5:d8:80:07:f2:
e6:5e:47:10:82:42:26:fc:29:ed:70:f5:22:4e:08:
64:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:0F:4A:DE:23:BB:BE:0B:F7:5A:8C:5E:F0:5E:97:1B:A6:65:02:D7
X509v3 Authority Key Identifier:
keyid:96:8A:17:E1:61:96:BB:7A:86:71:8E:6B:2B:D6:A0:7E:37:B4:0C:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/looX4WGWu3qGcY5rK9agfje0DGU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/7c97cf-195c-4fc1-95a3-637fa14656de/1/looX4WGWu3qGcY5rK9agfje0DGU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/7c97cf-195c-4fc1-95a3-637fa14656de/1/looX4WGWu3qGcY5rK9agfje0DGU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:59:38:65:88:a4:3f:87:67:a1:fd:88:a5:32:67:f4:9d:01:
cb:06:3a:54:98:96:41:4a:2b:9f:d9:1f:a9:97:5b:dd:b1:1d:
dc:16:2d:d6:f0:97:58:8e:c6:80:81:1c:76:c2:0f:df:6e:09:
da:5f:c4:91:59:30:4a:a1:66:5d:49:48:a6:77:78:40:2d:e9:
65:ba:6b:00:d8:14:33:a6:ad:33:a6:54:15:e7:19:8a:7d:66:
55:23:0d:d5:1c:37:0f:1b:42:75:40:b0:cc:5e:7c:72:0f:04:
4b:df:c2:19:10:4a:c8:d5:0b:27:dd:18:16:06:48:9b:88:1a:
60:be:c9:24:a5:09:4c:44:89:4c:b1:01:73:f5:9c:ba:06:c2:
f9:59:6f:eb:64:c1:24:de:9c:e6:9d:57:5b:32:ce:50:f1:73:
77:f4:11:e5:90:5a:89:04:55:cd:7c:c8:b4:04:3c:e3:71:da:
87:6e:1f:54:2d:56:a8:89:e3:02:34:88:61:02:d5:ca:33:26:
6f:2e:25:54:d5:8b:1f:6e:3c:b1:62:2b:08:60:ee:db:fb:30:
b0:26:d2:0a:d7:61:dc:7d:cc:ef:f4:f3:18:bc:e9:05:35:d4:
c6:34:4b:a1:24:bc:cc:17:0c:e4:c2:f8:83:29:2d:f5:46:3f:
cc:46:4a:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:59:29 2025 by rpki-client