Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/8fb468-fbc5-4a57-a7fe-275c5f731b44/1/mLU7husfGdCufACxMul8A6lL_2E.mft
File: mLU7husfGdCufACxMul8A6lL_2E.mft (raw, json)
Hash identifier: ljaNOiVfaXph0GQ5UHoCsQQCRsyt+iXqkQ7z1s1YRV0=
Subject key identifier: 89:67:D8:9A:22:CC:32:E6:7C:2E:C2:40:6D:9C:3B:8C:B1:85:32:A2
Authority key identifier: 98:B5:3B:86:EB:1F:19:D0:AE:7C:00:B1:32:E9:7C:03:A9:4B:FF:61
Certificate issuer: /CN=98b53b86eb1f19d0ae7c00b132e97c03a94bff61
Certificate serial: 0194BCA9B6DAF2797726D0A479F94A814F38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mLU7husfGdCufACxMul8A6lL_2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/8fb468-fbc5-4a57-a7fe-275c5f731b44/1/mLU7husfGdCufACxMul8A6lL_2E.mft
Manifest number: 11B0
Signing time: Fri 31 Jan 2025 14:00:26 +0000
Manifest this update: Fri 31 Jan 2025 14:00:26 +0000
Manifest next update: Sat 01 Feb 2025 14:00:26 +0000
Files and hashes: 1: mLU7husfGdCufACxMul8A6lL_2E.crl (hash: 4aZ8/BsS3rc8HyJt7yWvUd+u2HcQvGjtbNQTgRZlNiw=)
2: y0QaOJzLaOBuL0b8gdep3z45T1Q.roa (hash: XfEwQqQh0zUkbjw/Ka1eAvvyK361BK9TcqMDxt70nw4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:b6:da:f2:79:77:26:d0:a4:79:f9:4a:81:4f:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98b53b86eb1f19d0ae7c00b132e97c03a94bff61
Validity
Not Before: Jan 31 14:00:26 2025 GMT
Not After : Feb 1 14:00:26 2025 GMT
Subject: CN=8967d89a22cc32e67c2ec2406d9c3b8cb18532a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:3b:09:93:bf:4d:8b:5b:5c:32:a3:23:90:70:
7e:f7:d0:97:14:bb:b3:63:4c:7a:cc:8a:db:f0:5e:
a2:0e:62:a6:ab:0a:d4:fd:30:25:54:90:1a:14:53:
9c:73:39:cc:b5:ec:bf:e6:e8:62:dc:91:65:ee:96:
b0:d0:54:6e:70:ec:e3:a8:7b:ec:00:50:b6:5d:5d:
3e:db:4d:22:7f:20:30:62:22:41:62:59:f5:2f:07:
53:c0:51:7a:69:5e:91:3d:de:bb:b8:c5:75:cf:bd:
3b:64:16:91:e0:54:f7:67:9d:38:0a:db:71:2d:77:
5b:4d:9c:a1:08:ea:5a:fe:e8:2b:79:00:80:68:92:
57:42:c9:d8:e1:ff:de:ba:7f:6c:48:61:47:cb:d6:
b0:3d:c3:52:92:8f:f8:61:a3:05:37:a7:39:b4:83:
33:ad:65:02:07:9c:c4:15:95:f7:d7:08:72:d0:6b:
2b:60:00:53:46:46:4e:6a:d5:2b:c3:77:7d:b2:b4:
5a:28:0d:b6:8f:cb:72:2b:af:82:a2:4b:28:b9:0a:
b6:79:d2:00:b7:20:7a:c9:f9:9c:36:c7:56:03:0b:
45:8b:14:3f:c8:04:e9:0e:22:e7:0a:a9:b4:13:44:
85:90:f6:15:bc:91:df:7f:75:c2:ad:d7:9d:99:1f:
bb:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:67:D8:9A:22:CC:32:E6:7C:2E:C2:40:6D:9C:3B:8C:B1:85:32:A2
X509v3 Authority Key Identifier:
keyid:98:B5:3B:86:EB:1F:19:D0:AE:7C:00:B1:32:E9:7C:03:A9:4B:FF:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mLU7husfGdCufACxMul8A6lL_2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/8fb468-fbc5-4a57-a7fe-275c5f731b44/1/mLU7husfGdCufACxMul8A6lL_2E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/8fb468-fbc5-4a57-a7fe-275c5f731b44/1/mLU7husfGdCufACxMul8A6lL_2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:89:22:29:14:9d:45:58:44:a0:b5:c8:7c:07:e3:5e:15:c0:
ed:b2:ba:8c:2b:82:01:34:da:f0:91:b0:07:42:b9:4c:38:ab:
f3:95:92:56:96:9f:1c:df:c6:aa:d2:1d:27:d1:12:15:b0:5c:
ce:c4:1c:ea:98:69:db:f1:3a:bd:ac:de:98:d3:51:1e:28:39:
c3:1e:b8:fc:1a:14:50:cd:c6:41:4d:89:53:fb:0f:2c:c8:b1:
6c:e0:9f:df:39:67:42:99:82:82:89:e6:ff:77:2c:0d:fa:e4:
9c:cd:83:f1:d3:01:1b:4e:68:08:3d:11:04:17:3b:de:22:c5:
1b:a8:33:21:ce:50:3e:cb:63:cb:7e:6a:32:95:b9:dc:b5:e0:
e7:45:fa:05:31:44:3b:e8:2d:f5:20:9f:60:59:22:c9:25:23:
ca:a4:b9:06:e8:e0:81:89:d0:02:ad:c7:39:63:3c:b8:db:e6:
1f:90:d7:e0:bf:11:52:68:35:4e:3e:d3:70:02:05:f5:17:37:
bf:92:39:26:bc:8e:65:b1:2d:88:aa:13:f6:cc:73:39:84:08:
a4:6f:fd:7d:dc:f3:4b:23:d8:28:ef:71:9f:52:0f:0c:2a:b4:
7d:1a:fb:b9:8d:dd:86:bf:8c:cb:5e:18:90:b7:e2:4b:95:6f:
66:6b:c0:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:32:21 2025 by rpki-client