Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/edd939-f18a-4165-b728-91a32eff6ccd/1/lTrJeoHHeU5iCA41ueh7QdSxho8.mft
File: lTrJeoHHeU5iCA41ueh7QdSxho8.mft (raw, json)
Hash identifier: jfyX6r8acedUgjPARszBuyqeDFIKVbhlX0vsmFHvgpQ=
Subject key identifier: 64:0E:9D:C5:FE:65:87:6B:E8:07:00:04:B9:8F:43:0C:02:31:5D:3A
Authority key identifier: 95:3A:C9:7A:81:C7:79:4E:62:08:0E:35:B9:E8:7B:41:D4:B1:86:8F
Certificate issuer: /CN=953ac97a81c7794e62080e35b9e87b41d4b1868f
Certificate serial: 0194BBCE2C27ED729EE67D8823568EE53854
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lTrJeoHHeU5iCA41ueh7QdSxho8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/edd939-f18a-4165-b728-91a32eff6ccd/1/lTrJeoHHeU5iCA41ueh7QdSxho8.mft
Manifest number: 13BE
Signing time: Fri 31 Jan 2025 10:00:38 +0000
Manifest this update: Fri 31 Jan 2025 10:00:38 +0000
Manifest next update: Sat 01 Feb 2025 10:00:38 +0000
Files and hashes: 1: D7v-i2Em1A95E4k4o6lvGCl8mqk.roa (hash: xqtDWFhhoatEtwCz7HFHDZQmIK3iuhE2AzGVbExJo/4=)
2: lTrJeoHHeU5iCA41ueh7QdSxho8.crl (hash: z7r54vDAdVmzoo/qAN3NoJyPMmdQBushER50KDyj+4s=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:2c:27:ed:72:9e:e6:7d:88:23:56:8e:e5:38:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=953ac97a81c7794e62080e35b9e87b41d4b1868f
Validity
Not Before: Jan 31 10:00:38 2025 GMT
Not After : Feb 1 10:00:38 2025 GMT
Subject: CN=640e9dc5fe65876be8070004b98f430c02315d3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f6:fe:22:6c:d7:7d:29:db:49:6f:01:ee:f9:
d4:09:4c:07:57:6e:23:02:ce:48:85:0f:03:a6:b7:
43:48:d3:55:6c:de:b5:8e:50:2c:bd:5c:79:4e:d9:
28:11:c2:b2:40:32:30:be:df:cc:7c:af:8a:8f:0b:
a2:89:23:c9:75:c3:96:96:a3:3c:d7:fd:bf:72:db:
dd:76:4b:f6:59:d1:79:83:f5:ba:fc:fe:ae:41:fb:
2a:7b:80:1a:ce:3f:34:2d:bb:44:d0:5a:7c:3e:6d:
19:6b:68:01:1a:02:f2:af:a2:d8:4f:e4:2a:8a:57:
00:56:65:82:28:64:0d:8f:c5:3a:25:48:82:b9:90:
89:64:d0:6f:b7:a2:90:68:a4:64:9f:a0:ef:98:4f:
ed:fb:de:61:6a:de:11:52:e3:0f:6f:73:03:cd:07:
2a:28:8a:53:6c:29:f6:62:5f:0d:97:72:a3:34:be:
ec:14:2b:b0:07:d9:5c:d7:74:41:6d:7e:91:aa:07:
3a:99:4f:2e:df:91:74:52:8d:b6:99:b1:23:f3:47:
a8:9b:3f:32:14:f6:8b:b8:75:61:8a:f6:ef:fa:5a:
7b:88:d4:2d:7f:b5:8f:ec:f6:b4:92:89:47:9b:14:
75:29:88:85:06:0c:6f:a8:5b:dc:8c:e3:10:0c:af:
10:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:0E:9D:C5:FE:65:87:6B:E8:07:00:04:B9:8F:43:0C:02:31:5D:3A
X509v3 Authority Key Identifier:
keyid:95:3A:C9:7A:81:C7:79:4E:62:08:0E:35:B9:E8:7B:41:D4:B1:86:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lTrJeoHHeU5iCA41ueh7QdSxho8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/edd939-f18a-4165-b728-91a32eff6ccd/1/lTrJeoHHeU5iCA41ueh7QdSxho8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/edd939-f18a-4165-b728-91a32eff6ccd/1/lTrJeoHHeU5iCA41ueh7QdSxho8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:b7:6e:1e:8c:4c:1b:f9:0b:e9:b6:7f:25:16:ef:6d:68:bf:
d4:93:44:80:25:70:86:88:df:cc:63:81:c4:d4:fb:71:50:06:
30:c2:66:44:2d:41:c9:95:38:95:e4:dc:15:fe:7d:db:67:9d:
66:dc:f6:d2:f3:a6:f4:9d:5d:42:79:68:24:d6:14:a6:75:25:
41:b2:d4:d1:88:47:81:55:23:2f:8b:bd:b2:a0:23:f1:55:b7:
fc:b9:a3:0d:da:f2:ee:7a:93:1f:87:c1:50:b4:49:b3:5a:6f:
96:b1:32:7d:35:6e:92:3d:f2:62:7f:b1:fe:58:e7:32:30:7e:
4c:a2:55:2d:3a:2d:22:12:09:cf:41:c3:21:21:a2:b2:b4:a1:
b0:66:49:2f:d6:f2:43:b5:f3:ef:2c:79:a3:f1:c4:5a:ec:35:
7a:17:41:b1:7c:32:ee:24:ae:f8:6b:c1:ce:4d:28:87:70:cc:
48:62:49:31:a5:ca:d4:af:54:66:3e:d3:ad:22:28:e9:e3:02:
ae:97:6f:be:af:fb:58:3f:4f:ad:cb:9e:8c:66:b0:ee:6f:92:
06:79:4a:b0:41:30:e1:b7:52:3a:1d:7d:17:51:fd:cd:8f:78:
6e:1a:20:41:4b:b8:59:75:48:91:81:6d:07:d2:04:66:d5:17:
6a:5a:45:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:11:52 2025 by rpki-client