Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/94b7ba-d12e-4d92-8f31-7ae93fd2ad04/1/ln4P5z7udZt3H7cgI8VKecCmFxc.mft
File: ln4P5z7udZt3H7cgI8VKecCmFxc.mft (raw, json)
Hash identifier: Z/g2nJvRiOL7vx2px/T0+IffGmtbMoH1cvmOUE7Ayew=
Subject key identifier: D5:32:EF:0F:41:C1:92:31:9B:A0:2B:CC:B8:76:E0:43:1E:DD:30:3C
Authority key identifier: 96:7E:0F:E7:3E:EE:75:9B:77:1F:B7:20:23:C5:4A:79:C0:A6:17:17
Certificate issuer: /CN=967e0fe73eee759b771fb72023c54a79c0a61717
Certificate serial: 0194BD17F4207D90618CED1B767162CC3A43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ln4P5z7udZt3H7cgI8VKecCmFxc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/94b7ba-d12e-4d92-8f31-7ae93fd2ad04/1/ln4P5z7udZt3H7cgI8VKecCmFxc.mft
Manifest number: 0203
Signing time: Fri 31 Jan 2025 16:00:51 +0000
Manifest this update: Fri 31 Jan 2025 16:00:51 +0000
Manifest next update: Sat 01 Feb 2025 16:00:51 +0000
Files and hashes: 1: CZTxdymHXJeNj0sHrlYmZG1IiYA.roa (hash: 1N/VlwYAeVpuFdfF49aCJDo/ioVhQJXBgZNT/IfXyjA=)
2: ln4P5z7udZt3H7cgI8VKecCmFxc.crl (hash: eafzE+6poP/Tf9CmfrMZeqwqHbSqJei8V3C2hjgLuLw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:f4:20:7d:90:61:8c:ed:1b:76:71:62:cc:3a:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=967e0fe73eee759b771fb72023c54a79c0a61717
Validity
Not Before: Jan 31 16:00:51 2025 GMT
Not After : Feb 1 16:00:51 2025 GMT
Subject: CN=d532ef0f41c192319ba02bccb876e0431edd303c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:76:db:cd:9e:35:b0:70:f4:53:32:34:86:1f:
3d:33:4e:ed:97:50:ec:3c:9a:a8:51:bd:63:6e:70:
30:05:9e:3e:bb:16:a0:39:8e:db:ea:5b:4d:34:3c:
49:34:05:6d:a1:cb:d3:3c:9c:cd:b7:2a:fd:69:49:
6a:7c:ec:37:2e:a4:4c:83:2a:e7:b9:27:1b:23:a8:
dd:a6:98:63:72:af:52:94:28:29:1e:68:a7:ad:f3:
64:5d:6a:1e:a9:4f:5d:5c:5a:5e:26:4f:8a:28:c9:
27:e1:cf:dc:14:36:0e:29:3b:b2:8e:d9:35:e7:d6:
c9:79:ab:a7:c6:78:d7:67:b0:03:c2:ec:d8:96:0e:
04:f9:4f:50:1d:ed:cf:e9:53:ea:b7:c9:50:13:7d:
de:61:9e:12:00:83:fc:eb:6c:04:ab:ba:a0:f1:e1:
fe:74:df:4b:f8:87:be:2d:73:6a:3c:73:13:47:45:
2c:66:ab:c0:cd:ed:e1:d3:55:0a:dc:5b:09:ec:86:
8a:99:cf:10:30:29:82:7d:a9:03:3f:31:21:00:83:
1d:72:31:75:bd:12:6d:a5:96:b6:23:78:1d:e1:3f:
82:15:36:16:2d:82:c7:33:1f:eb:66:1f:1b:b1:ac:
ca:37:27:3a:15:27:9d:c2:75:55:1d:48:6f:49:a0:
26:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:32:EF:0F:41:C1:92:31:9B:A0:2B:CC:B8:76:E0:43:1E:DD:30:3C
X509v3 Authority Key Identifier:
keyid:96:7E:0F:E7:3E:EE:75:9B:77:1F:B7:20:23:C5:4A:79:C0:A6:17:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ln4P5z7udZt3H7cgI8VKecCmFxc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/94b7ba-d12e-4d92-8f31-7ae93fd2ad04/1/ln4P5z7udZt3H7cgI8VKecCmFxc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/94b7ba-d12e-4d92-8f31-7ae93fd2ad04/1/ln4P5z7udZt3H7cgI8VKecCmFxc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:dd:d5:ca:42:e9:8b:4e:35:75:c2:07:86:b1:a0:c7:4d:86:
63:87:e5:d2:e4:8f:95:96:f4:79:1b:66:61:45:08:c0:11:16:
e9:70:79:f4:75:03:d6:73:cb:a7:e8:c7:c4:69:75:80:85:3e:
48:c5:25:d7:93:6a:f2:3e:9d:f4:f9:28:93:28:5f:ca:bf:13:
76:d9:e3:09:78:12:3b:51:68:21:af:cf:2e:d2:8f:76:56:3a:
d3:6b:ed:77:dc:cf:8a:38:cd:76:21:7b:81:af:4f:61:b3:f0:
e4:4f:25:56:9a:5a:11:7c:ba:08:8c:cb:de:eb:73:be:cc:ad:
d1:a8:f7:ec:d0:6b:d8:de:14:6c:f6:39:92:c7:83:74:29:a1:
5e:76:86:8b:b0:bf:aa:10:ce:22:07:0f:ab:cd:f3:56:e6:ab:
c6:a0:7d:17:d9:ff:20:dd:68:31:a8:e0:7e:56:5f:fd:8a:e9:
e7:3c:ff:8d:f3:aa:8c:6d:c2:7a:44:b7:05:84:fc:24:55:77:
16:6d:ab:60:27:f3:68:10:40:65:d0:d2:5f:14:01:fe:d4:09:
dd:3c:2b:cd:05:80:e6:c0:df:60:a8:09:ca:8a:6c:a8:19:d2:
51:5a:16:2b:d3:35:83:b2:61:a0:42:ed:a7:a9:cd:69:e0:f0:
69:cc:cb:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:08 2025 by rpki-client