Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/c1afc6-fd95-4555-8625-3fe469db6626/1/ltkAsLweXxt4xlzYPnog2GNHJrY.mft
File: ltkAsLweXxt4xlzYPnog2GNHJrY.mft (raw, json)
Hash identifier: BxVcRV5tAChqiSgmsjKNDUst+1Z3ERbUEnAHh9porSk=
Subject key identifier: 40:5D:62:90:51:E0:54:75:5F:9C:13:1B:34:39:B3:98:11:AD:85:7B
Authority key identifier: 96:D9:00:B0:BC:1E:5F:1B:78:C6:5C:D8:3E:7A:20:D8:63:47:26:B6
Certificate issuer: /CN=96d900b0bc1e5f1b78c65cd83e7a20d8634726b6
Certificate serial: 0194BC7301F0B3F1BA5C738621753E3A52A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ltkAsLweXxt4xlzYPnog2GNHJrY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/c1afc6-fd95-4555-8625-3fe469db6626/1/ltkAsLweXxt4xlzYPnog2GNHJrY.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 13:00:41 +0000
Manifest this update: Fri 31 Jan 2025 13:00:41 +0000
Manifest next update: Sat 01 Feb 2025 13:00:41 +0000
Files and hashes: 1: EuHqvHYj6jpIyXMv6rjnbEuBkks.roa (hash: egrbWq58qBFkNjLMJRTqcwBt98Q9t2+QyI4RLP6TLkY=)
2: ltkAsLweXxt4xlzYPnog2GNHJrY.crl (hash: MpEbm6eWLAx1jfJqA37c3vqK9UsMqk5eI312maOL08A=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:01:f0:b3:f1:ba:5c:73:86:21:75:3e:3a:52:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96d900b0bc1e5f1b78c65cd83e7a20d8634726b6
Validity
Not Before: Jan 31 13:00:41 2025 GMT
Not After : Feb 1 13:00:41 2025 GMT
Subject: CN=405d629051e054755f9c131b3439b39811ad857b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:69:f9:6a:ba:05:30:71:ed:f9:5d:b6:bc:2a:
97:68:dc:7d:58:b2:2a:68:a2:e0:fb:09:99:b2:32:
9b:f9:8c:46:1e:52:89:e2:de:ba:8d:76:46:50:43:
09:44:c3:45:ac:6a:8c:04:06:4e:e1:8f:4e:40:db:
44:9c:cd:0c:8f:b8:70:bd:44:c3:6b:ed:e0:35:23:
4d:fb:d7:12:40:bb:2d:ca:db:ea:c4:61:69:60:75:
9e:45:cd:bc:1c:87:0f:f6:97:8b:0d:d5:56:dd:34:
6d:fc:f8:47:53:8c:80:4c:72:2d:cc:ba:5f:fc:b1:
4e:b0:18:be:d3:60:95:60:30:a8:10:f6:ba:3f:60:
88:d8:87:ff:0f:71:c3:0f:0e:1c:18:04:29:79:2f:
38:62:36:d7:ad:f3:b8:8e:41:1e:9e:04:cd:a6:7d:
64:2d:8b:20:5a:3d:62:4e:66:47:a9:fe:2a:81:1d:
25:c5:ee:dc:8a:50:17:c3:44:2d:3c:c6:d2:a3:29:
91:7c:55:df:45:a4:d7:37:8f:cf:62:ae:3b:fd:0c:
0f:10:da:89:27:c9:eb:16:d3:81:fe:68:6d:36:e6:
21:7c:9e:5f:1e:54:8a:0f:10:11:82:0a:fe:02:66:
b6:10:96:82:81:21:41:dd:ff:b9:65:48:cb:a2:e0:
ed:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:5D:62:90:51:E0:54:75:5F:9C:13:1B:34:39:B3:98:11:AD:85:7B
X509v3 Authority Key Identifier:
keyid:96:D9:00:B0:BC:1E:5F:1B:78:C6:5C:D8:3E:7A:20:D8:63:47:26:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ltkAsLweXxt4xlzYPnog2GNHJrY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c1afc6-fd95-4555-8625-3fe469db6626/1/ltkAsLweXxt4xlzYPnog2GNHJrY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c1afc6-fd95-4555-8625-3fe469db6626/1/ltkAsLweXxt4xlzYPnog2GNHJrY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:10:34:b7:1c:17:20:cb:0d:07:51:3b:c4:1e:6c:a6:c7:26:
a8:cc:38:dc:52:0a:4d:30:57:ad:73:26:3b:9e:73:65:e4:34:
9d:cc:c1:a9:2d:15:be:f1:21:65:fa:3d:71:8c:57:a5:34:a0:
3c:89:31:de:40:2e:63:3a:25:16:b4:12:9e:e5:18:87:54:d7:
39:78:d8:9e:d2:62:70:ca:a6:fc:62:b4:aa:70:54:c0:be:03:
5b:e9:9a:7c:20:74:8b:54:ac:4b:0d:0f:c2:1d:1b:14:4f:f7:
9d:00:e9:46:e1:c8:52:06:bf:1e:20:48:95:33:1a:9e:34:ef:
63:bb:8c:b8:07:15:90:90:6d:53:a8:75:eb:aa:04:57:6e:d8:
1a:92:b1:3b:44:43:6d:22:42:61:e3:e3:8d:f2:44:db:42:fd:
0f:db:19:ca:30:31:a3:a1:56:f9:06:59:df:95:95:97:7c:18:
3d:5a:87:c1:01:3b:03:d5:b7:77:60:c0:bb:db:1d:0a:20:77:
2b:ba:fa:7c:cb:a5:c7:9e:4d:66:c7:8d:91:13:dc:f5:3b:05:
d4:70:3e:b4:c7:38:cf:f6:63:ab:f8:9f:16:be:18:88:b5:af:
fc:86:59:ba:50:92:44:b6:45:71:d3:de:78:ba:92:a0:4e:2d:
b0:1d:93:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:37:53 2025 by rpki-client