Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/cf2f87-8197-4600-a3ab-576ce4101483/1/le0bk9O85ravzekCC4AWe4XGj1s.mft
File: le0bk9O85ravzekCC4AWe4XGj1s.mft (raw, json)
Hash identifier: /d5nD5vxOx4V+NMF3iqsDffdfq999IpmbwTMK47L8o4=
Subject key identifier: 11:D2:A3:D0:EB:D4:38:03:F3:30:76:4C:DD:77:D7:57:0F:A7:84:D6
Authority key identifier: 95:ED:1B:93:D3:BC:E6:B6:AF:CD:E9:02:0B:80:16:7B:85:C6:8F:5B
Certificate issuer: /CN=95ed1b93d3bce6b6afcde9020b80167b85c68f5b
Certificate serial: 0194BC04BE2C8423EE19AFA79CF76D4D0955
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/le0bk9O85ravzekCC4AWe4XGj1s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/cf2f87-8197-4600-a3ab-576ce4101483/1/le0bk9O85ravzekCC4AWe4XGj1s.mft
Manifest number: 0D15
Signing time: Fri 31 Jan 2025 11:00:14 +0000
Manifest this update: Fri 31 Jan 2025 11:00:14 +0000
Manifest next update: Sat 01 Feb 2025 11:00:14 +0000
Files and hashes: 1: le0bk9O85ravzekCC4AWe4XGj1s.crl (hash: x+1zsutQFSSx4j+xVwDdMCBRsqnky9A+wZodjh3hVUY=)
2: sNS8MkZUJtaz5-wbK4r3uIbXR9Y.roa (hash: OLvJxCHm6G2oyD8b+AkUkXYjm6Gprq3IbMPbqUHNmeM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:be:2c:84:23:ee:19:af:a7:9c:f7:6d:4d:09:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95ed1b93d3bce6b6afcde9020b80167b85c68f5b
Validity
Not Before: Jan 31 11:00:14 2025 GMT
Not After : Feb 1 11:00:14 2025 GMT
Subject: CN=11d2a3d0ebd43803f330764cdd77d7570fa784d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:8f:65:42:23:2d:88:20:cf:ac:d0:08:7b:6d:
7d:b9:ac:61:4d:bb:60:62:0c:20:99:e8:e5:37:5d:
a7:42:af:13:ba:5c:20:96:b8:40:7e:49:18:06:b2:
07:12:a0:c7:a6:c2:de:5a:e6:85:f2:f3:47:1b:d5:
8d:d2:1f:90:60:c2:f0:9b:3c:90:ce:6a:ec:b5:ec:
f9:3b:3e:54:ae:73:c2:05:95:6d:ad:d2:3b:ea:c3:
65:16:cb:e7:27:95:0d:1d:22:f0:90:9d:2c:61:4b:
54:e5:40:f2:f1:94:86:24:29:52:54:f2:cc:d1:84:
08:c7:34:66:e3:e3:40:8b:51:72:bd:96:9f:92:95:
da:90:ca:10:74:58:ab:a8:33:c4:8c:d5:90:35:ea:
a0:de:29:16:fc:cd:4d:16:d6:a4:18:b0:60:49:b6:
c3:2c:d5:50:10:84:d3:7f:1b:3e:27:b5:33:a7:22:
4e:91:a9:af:f7:d0:ce:6a:1d:e9:14:04:c1:d4:5a:
75:18:d7:a6:f3:06:2e:6b:72:24:11:19:ed:76:ee:
96:04:e5:5f:3c:dd:3c:fe:37:85:1d:50:54:ab:98:
4f:29:61:a3:7e:ac:b1:7e:7e:fa:40:4c:29:f1:82:
2a:92:f3:1b:60:be:0a:3c:41:2d:5f:52:dd:2f:2a:
a7:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:D2:A3:D0:EB:D4:38:03:F3:30:76:4C:DD:77:D7:57:0F:A7:84:D6
X509v3 Authority Key Identifier:
keyid:95:ED:1B:93:D3:BC:E6:B6:AF:CD:E9:02:0B:80:16:7B:85:C6:8F:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/le0bk9O85ravzekCC4AWe4XGj1s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/cf2f87-8197-4600-a3ab-576ce4101483/1/le0bk9O85ravzekCC4AWe4XGj1s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/cf2f87-8197-4600-a3ab-576ce4101483/1/le0bk9O85ravzekCC4AWe4XGj1s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:a5:06:88:aa:8d:cf:81:91:ce:98:3e:4d:48:78:df:f0:a4:
03:a5:86:95:8b:21:3a:01:f7:2f:e7:e3:08:68:31:c0:9d:63:
d3:61:2b:76:e4:64:26:cf:17:6c:45:6c:25:12:a9:5d:ef:a4:
ea:13:86:67:10:30:03:87:fe:1f:d3:7d:a6:f2:51:51:fb:67:
a4:4f:bd:9c:74:15:d2:41:c4:30:19:ef:0a:91:9e:63:de:cb:
82:da:70:27:a3:47:c6:13:8c:1b:78:89:3f:e5:6c:fa:5c:3e:
df:9a:a6:76:99:7a:f0:9d:32:32:b9:44:45:20:9f:24:f2:82:
49:e5:a0:d3:c6:11:e4:ed:96:c9:21:5b:40:3c:7a:27:f4:6d:
6c:a3:b6:eb:fb:4a:9a:2f:dd:9f:15:d0:21:1f:41:93:e8:df:
e2:4b:c8:25:92:68:af:81:d4:10:da:cc:a8:39:33:4e:7d:ef:
18:fd:fd:79:50:79:74:6f:aa:a6:69:0d:52:df:4a:61:c0:56:
f8:17:07:95:13:e7:84:47:04:0a:47:10:94:19:1f:09:c2:1d:
9d:26:04:ef:ca:b3:17:65:c1:94:64:61:6a:fb:75:c5:16:c7:
2d:dd:8c:9f:bd:a6:9d:a1:3a:aa:a2:fb:bd:a8:38:f2:7c:05:
a6:17:bc:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:56:33 2025 by rpki-client