Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/05ab16-2228-488e-b152-eb0921895714/1/lgxteH5rXrZCSN2aehBlsQU_dFg.mft
File: lgxteH5rXrZCSN2aehBlsQU_dFg.mft (raw, json)
Hash identifier: iycExeZ1ZBAeXchRPDhbxn9Cd2Rjr+aylAtn/E8yHno=
Subject key identifier: AE:62:EC:3C:12:49:1E:E5:66:19:4D:8B:2D:97:F6:73:6B:0A:AF:CA
Authority key identifier: 96:0C:6D:78:7E:6B:5E:B6:42:48:DD:9A:7A:10:65:B1:05:3F:74:58
Certificate issuer: /CN=960c6d787e6b5eb64248dd9a7a1065b1053f7458
Certificate serial: 0194BD17AB0E68EC3C5A222F33FEA1B46BF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lgxteH5rXrZCSN2aehBlsQU_dFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/05ab16-2228-488e-b152-eb0921895714/1/lgxteH5rXrZCSN2aehBlsQU_dFg.mft
Manifest number: 0B8A
Signing time: Fri 31 Jan 2025 16:00:32 +0000
Manifest this update: Fri 31 Jan 2025 16:00:32 +0000
Manifest next update: Sat 01 Feb 2025 16:00:32 +0000
Files and hashes: 1: kBsht6KNIVIdqBo-LjM3rdj9_48.roa (hash: yvy0FENQOdTgUPrF3X0q20Rd17JBcuTbTmhNZ8raWkU=)
2: lgxteH5rXrZCSN2aehBlsQU_dFg.crl (hash: 9AIAfK9vo4tudzMC78xfKtwlyFFMkb7mrIi9PUBnRY8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:ab:0e:68:ec:3c:5a:22:2f:33:fe:a1:b4:6b:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=960c6d787e6b5eb64248dd9a7a1065b1053f7458
Validity
Not Before: Jan 31 16:00:32 2025 GMT
Not After : Feb 1 16:00:32 2025 GMT
Subject: CN=ae62ec3c12491ee566194d8b2d97f6736b0aafca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:7f:5e:e4:48:66:c0:ca:1e:18:ac:28:c4:ea:
6c:20:ba:da:6a:1e:10:21:60:52:1d:d8:53:56:04:
2f:e6:50:2f:6b:3c:d0:a1:33:e5:9c:25:a1:69:5d:
92:f3:ac:df:70:e2:30:a7:8b:97:55:71:2a:31:fc:
1d:2f:04:08:36:cf:74:eb:14:3b:75:65:e0:0d:f7:
63:74:83:de:11:70:4c:9c:6d:e0:7d:ef:ce:79:be:
a3:5f:0f:e3:94:db:c0:a3:a1:11:7c:d2:e9:4a:03:
f6:c2:7e:5b:6e:0b:f2:40:8c:23:be:03:78:84:b1:
92:cb:5e:16:a7:1d:30:77:8a:fa:8e:34:64:41:99:
34:d8:b1:91:82:25:4c:01:15:5b:f7:87:af:62:57:
ae:19:df:ff:c7:f0:e2:c8:7f:56:25:2a:5d:c5:fe:
d9:8d:9b:de:40:10:7f:69:45:c2:83:b4:c3:57:f4:
87:62:a6:53:1f:48:bb:f8:58:7d:db:55:8b:a1:3d:
78:66:8c:c7:b7:f5:1b:1e:91:a5:92:56:05:a9:8d:
b6:e1:bd:26:1d:31:e1:04:95:b2:3e:1f:23:a1:6a:
5e:c5:a1:13:29:01:b8:41:ff:fd:b8:ca:53:8e:aa:
56:f1:46:9c:bb:35:94:48:a4:7a:62:84:24:db:65:
a1:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:62:EC:3C:12:49:1E:E5:66:19:4D:8B:2D:97:F6:73:6B:0A:AF:CA
X509v3 Authority Key Identifier:
keyid:96:0C:6D:78:7E:6B:5E:B6:42:48:DD:9A:7A:10:65:B1:05:3F:74:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lgxteH5rXrZCSN2aehBlsQU_dFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/05ab16-2228-488e-b152-eb0921895714/1/lgxteH5rXrZCSN2aehBlsQU_dFg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/05ab16-2228-488e-b152-eb0921895714/1/lgxteH5rXrZCSN2aehBlsQU_dFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:4f:00:57:10:a9:5c:5c:eb:a1:89:a7:41:b6:95:9c:fd:cc:
3c:5c:1b:d0:7a:0d:46:d1:3b:51:a3:6a:1b:39:72:03:67:1e:
a8:b7:62:10:3a:5d:18:29:11:27:ac:30:28:6a:8d:11:79:46:
66:ee:77:e8:da:3b:fa:11:b3:00:57:4d:f5:7a:d7:35:47:20:
9b:18:d6:56:db:42:c1:af:38:9f:41:12:6f:ef:71:44:3a:ae:
28:01:79:30:a5:3a:22:ab:9f:1a:a8:80:a9:8c:7e:c6:16:cf:
d8:87:95:b8:67:34:2f:13:99:b8:3b:b4:03:15:6c:f1:d1:2d:
e5:c1:ee:f2:51:16:50:58:b3:24:86:d7:be:05:01:5b:b6:bd:
62:b9:58:ea:96:bb:52:9e:fa:80:c7:fb:8a:b1:40:66:69:5f:
31:11:48:7f:ff:f4:5e:f6:51:41:f1:23:ba:c9:d3:88:38:e0:
a6:6c:4e:a9:01:0e:92:79:65:b1:85:5c:d5:e0:69:2b:88:cd:
47:66:33:95:c8:9d:ad:ac:91:b6:46:c6:da:cb:ce:fb:90:a4:
49:3e:18:a2:70:77:28:9a:bb:30:eb:6b:a7:35:8d:5b:a2:29:
45:93:12:2b:f1:3d:f8:a3:0d:2b:a9:cc:ff:cc:62:21:da:d5:
18:2b:41:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:07:20 2025 by rpki-client