Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/1bda7c-9858-43f5-8659-69fc056b2625/1/LJTXDPt-aQGaLgHIfQpdVFpZm1I.mft
File: LJTXDPt-aQGaLgHIfQpdVFpZm1I.mft (raw, json)
Hash identifier: JG+4VNrR16KjPa9FPqczrq8/07vWocaPslT4tMDUyLs=
Subject key identifier: A9:60:C8:F5:F4:4D:69:44:5D:95:79:60:86:97:3F:39:11:9B:76:D8
Authority key identifier: 2C:94:D7:0C:FB:7E:69:01:9A:2E:01:C8:7D:0A:5D:54:5A:59:9B:52
Certificate issuer: /CN=2c94d70cfb7e69019a2e01c87d0a5d545a599b52
Certificate serial: 0194BCE0D69D71291941A0B5FFF546EF367E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LJTXDPt-aQGaLgHIfQpdVFpZm1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/1bda7c-9858-43f5-8659-69fc056b2625/1/LJTXDPt-aQGaLgHIfQpdVFpZm1I.mft
Manifest number: 1298
Signing time: Fri 31 Jan 2025 15:00:39 +0000
Manifest this update: Fri 31 Jan 2025 15:00:39 +0000
Manifest next update: Sat 01 Feb 2025 15:00:39 +0000
Files and hashes: 1: LJTXDPt-aQGaLgHIfQpdVFpZm1I.crl (hash: fBDJQ5rRyv+uk5Nfvoy4GrMuZn96aeRCUi3gxQsizEU=)
2: agNsQzZTBEDdq0mHA6pXoAWEjSs.roa (hash: yo1IjtD18rgfcLanBgul3ssnQbteSiIRgX1ViQ27+PY=)
3: gZ1FhnFtpLTPuY9azcrZRGx5Hqc.roa (hash: L5YlUEOpoSEypGlsqLuJ/bMpvZBGZ9xNe8DU0oLvUww=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:d6:9d:71:29:19:41:a0:b5:ff:f5:46:ef:36:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c94d70cfb7e69019a2e01c87d0a5d545a599b52
Validity
Not Before: Jan 31 15:00:39 2025 GMT
Not After : Feb 1 15:00:39 2025 GMT
Subject: CN=a960c8f5f44d69445d95796086973f39119b76d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:8f:b6:05:71:90:11:ce:81:c9:b8:c0:9f:d0:
7e:58:4c:e1:85:2c:e9:03:3a:d8:95:0a:5f:6a:a5:
01:35:cc:f8:e5:2d:46:a2:c4:92:67:bd:be:4a:6b:
6d:1e:12:73:7b:ee:95:2e:72:ff:19:7b:5c:bf:ed:
ef:be:5c:9e:23:92:88:8b:d4:98:9a:83:12:4a:2a:
f1:48:19:83:dd:12:3e:c7:6e:ff:d5:0c:b4:03:58:
8a:5d:6c:56:40:15:cc:75:9e:08:c3:6e:e2:9c:ec:
bf:a6:b6:85:6c:9d:36:b5:2f:98:4a:cc:99:a5:c1:
f4:8b:cf:b8:13:9e:4b:8d:01:01:a0:91:76:87:31:
23:4a:e5:97:c3:da:34:82:6a:bf:96:9b:7f:4e:13:
b0:35:74:96:9c:46:e1:6e:e5:25:ad:06:fa:96:9f:
d6:66:ff:1d:54:db:81:ac:d0:1b:53:70:bf:b1:8f:
2e:da:60:dd:85:e5:f5:0d:d3:80:76:54:91:1b:ab:
e4:5e:c9:64:3d:a7:a6:30:e6:fd:9c:2b:55:17:2a:
2b:1a:5e:2a:a3:c5:19:74:e2:31:9d:c0:93:3b:e4:
2b:da:7e:6c:f4:c0:d0:23:1a:23:41:16:41:d8:c3:
55:f4:ae:46:b0:6b:d3:6b:bb:d9:39:29:4d:0a:5e:
db:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:60:C8:F5:F4:4D:69:44:5D:95:79:60:86:97:3F:39:11:9B:76:D8
X509v3 Authority Key Identifier:
keyid:2C:94:D7:0C:FB:7E:69:01:9A:2E:01:C8:7D:0A:5D:54:5A:59:9B:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LJTXDPt-aQGaLgHIfQpdVFpZm1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/1bda7c-9858-43f5-8659-69fc056b2625/1/LJTXDPt-aQGaLgHIfQpdVFpZm1I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/1bda7c-9858-43f5-8659-69fc056b2625/1/LJTXDPt-aQGaLgHIfQpdVFpZm1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:9a:9d:ce:d8:ea:cf:b7:56:6d:5d:1a:35:47:b7:53:de:38:
c1:8f:ae:4a:53:2b:07:75:3c:43:18:20:af:38:0d:de:f6:0a:
02:f7:f6:0b:7d:89:31:7a:07:f2:ca:7e:73:a8:37:48:c2:fe:
0b:5f:2b:a6:d9:9f:db:ed:5a:9e:ed:e9:6d:45:53:42:85:a2:
a5:37:11:4c:45:d1:d3:cb:67:41:8a:5a:a2:61:2f:7d:25:24:
24:79:ee:80:3b:f9:fc:71:9e:f7:84:73:38:19:9c:a4:aa:6a:
67:08:e2:6c:d2:aa:3f:f6:bc:f3:fa:9d:17:d5:f1:4f:fb:f7:
d4:b6:20:96:cf:61:15:cd:6e:b9:a6:07:3b:34:f4:65:2e:eb:
3b:d8:12:22:44:87:d9:54:53:68:ca:2c:fd:7e:22:76:fc:4d:
33:8d:42:4d:92:6a:02:9f:15:b4:82:7b:84:3b:da:b5:0f:ac:
66:5a:13:0b:27:71:d1:ac:27:f0:27:1a:4b:fa:cb:ae:d6:02:
81:b0:59:28:cd:ff:a3:61:29:ff:62:89:5c:2e:03:5b:35:9e:
5c:76:e6:2c:30:17:27:dc:2b:06:41:25:b2:2e:65:79:ed:00:
d4:56:3d:a7:c6:b8:03:ce:0f:35:31:87:95:23:6f:5b:7e:4f:
d2:3f:a8:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:35:19 2025 by rpki-client