
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/19c9e1-8543-4f50-acae-e4045d8cfe8f/1/ljoPxHp632KEWtbc1_t2GmwZ_ts.mft
File: ljoPxHp632KEWtbc1_t2GmwZ_ts.mft (raw, json)
Hash identifier: hESRqYuYJ1CK4Zkw7PIt2RAEYpRyMdnLphJWWv/6HCU=
Subject key identifier: 13:2D:9F:FA:01:17:FA:AA:58:0A:69:25:91:3A:15:EF:C2:05:B4:CA
Authority key identifier: 96:3A:0F:C4:7A:7A:DF:62:84:5A:D6:DC:D7:FB:76:1A:6C:19:FE:DB
Certificate issuer: /CN=963a0fc47a7adf62845ad6dcd7fb761a6c19fedb
Certificate serial: 0194BBCEE482495DE0750223AB4AA59C3E68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ljoPxHp632KEWtbc1_t2GmwZ_ts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/19c9e1-8543-4f50-acae-e4045d8cfe8f/1/ljoPxHp632KEWtbc1_t2GmwZ_ts.mft
Manifest number: 0A27
Signing time: Fri 31 Jan 2025 10:01:25 +0000
Manifest this update: Fri 31 Jan 2025 10:01:25 +0000
Manifest next update: Sat 01 Feb 2025 10:01:25 +0000
Files and hashes: 1: flK9dI6qS59uuhUTdI9-Lm32F14.roa (hash: zlQ+q1YmxirUq/y5GYQVkTybydvIz392HoitTR1/bAQ=)
2: ljoPxHp632KEWtbc1_t2GmwZ_ts.crl (hash: J8By8ZD4K+CFDst4FsUO/wMvkATxS9y0N9+Ae8rCyys=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:e4:82:49:5d:e0:75:02:23:ab:4a:a5:9c:3e:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=963a0fc47a7adf62845ad6dcd7fb761a6c19fedb
Validity
Not Before: Jan 31 10:01:25 2025 GMT
Not After : Feb 1 10:01:25 2025 GMT
Subject: CN=132d9ffa0117faaa580a6925913a15efc205b4ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:96:b4:b7:c4:2e:29:3f:d1:d3:74:1a:a1:a1:
ad:bd:d7:12:d0:b3:65:44:bb:96:9f:3a:ce:5d:bc:
24:29:1d:a4:df:14:bb:88:63:dd:80:6b:62:58:c2:
5d:e2:df:fe:8e:4a:7d:eb:98:37:36:df:27:b3:d6:
0a:87:c0:aa:0e:1a:2b:2b:37:5e:cb:9d:74:bb:03:
cd:cb:9b:0f:0b:22:1a:32:8a:33:67:c0:c9:89:d6:
3b:d7:3e:24:a6:0f:c4:5b:83:74:96:8d:cc:11:1a:
e4:58:96:91:38:61:d9:ed:53:7e:74:fe:ae:93:06:
6f:70:df:62:20:5b:ba:13:f0:9f:4f:a6:99:83:3e:
17:cf:c4:6e:c2:4b:02:f1:31:b8:49:58:d7:a6:a7:
62:84:d5:bf:f2:b0:40:40:71:ca:ab:4e:d7:57:00:
a0:e9:9b:51:24:7d:a4:49:4e:93:2b:3b:64:ac:1d:
f9:c2:60:06:fc:58:d3:70:1a:08:4f:5f:1a:d3:a0:
7d:9d:fc:07:49:4f:d1:fe:90:16:a9:84:cf:44:87:
5a:c4:3e:8f:8b:d0:25:49:cf:fe:58:43:19:07:20:
6b:ba:1a:d2:41:f5:ed:a5:9d:3b:5c:0a:87:0c:22:
d2:7f:04:3c:57:a9:23:15:08:74:5d:4d:3d:a6:54:
73:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:2D:9F:FA:01:17:FA:AA:58:0A:69:25:91:3A:15:EF:C2:05:B4:CA
X509v3 Authority Key Identifier:
keyid:96:3A:0F:C4:7A:7A:DF:62:84:5A:D6:DC:D7:FB:76:1A:6C:19:FE:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ljoPxHp632KEWtbc1_t2GmwZ_ts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/19c9e1-8543-4f50-acae-e4045d8cfe8f/1/ljoPxHp632KEWtbc1_t2GmwZ_ts.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/19c9e1-8543-4f50-acae-e4045d8cfe8f/1/ljoPxHp632KEWtbc1_t2GmwZ_ts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cf:62:b2:0a:4e:1e:68:f8:8c:28:82:bd:8c:7a:dc:a1:de:cd:
19:12:ba:39:ef:76:f9:13:d5:9f:f1:69:e6:21:27:dd:70:c9:
a4:fa:74:fb:c3:7e:7d:cb:18:a9:3d:67:bc:57:de:10:4e:50:
cb:d2:95:dd:d6:60:86:ee:ce:87:74:68:25:03:54:7c:3d:7b:
e7:4e:c5:6e:2c:48:5c:b8:63:39:12:b2:0e:35:e8:bc:c2:5b:
a0:bc:b0:42:db:3a:ac:3d:de:61:91:8b:df:fd:83:4c:74:c4:
07:7f:a9:6d:e8:10:79:dc:d8:7a:e5:04:cf:7a:15:16:72:42:
93:85:cc:1b:88:90:8c:33:bc:cc:5b:b9:b4:21:13:2f:17:02:
33:1b:7a:51:aa:fd:16:6e:15:41:14:17:35:cc:e7:eb:dc:a9:
96:91:b8:68:23:b2:70:8c:61:92:4e:da:8d:17:68:65:07:de:
a4:0f:b1:c0:42:8a:a2:c6:3b:56:5a:05:31:cd:ef:7b:bf:49:
81:8a:5f:ef:87:59:a3:8d:c4:34:38:3a:49:a5:18:b4:ec:82:
88:a7:7d:f0:ec:d3:1d:eb:d7:ec:7b:05:dd:1c:d0:5b:77:1f:
e3:82:10:d6:79:96:41:74:5d:9d:f3:a8:ea:08:d6:9d:84:ee:
b1:70:d6:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:51:26 2025 by rpki-client