Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/d6577d-f2d2-4530-b9d2-39eca472668b/1/lxUzy3pnlqxcOCs43PRZ-RdpMfQ.mft
File: lxUzy3pnlqxcOCs43PRZ-RdpMfQ.mft (raw, json)
Hash identifier: mvRp8RTf481/xtXgUqzWXjVtNdbEzbskoXulvVVirF0=
Subject key identifier: 4C:97:1B:35:98:DF:98:4B:2B:94:7D:19:65:14:B2:75:D0:86:D4:09
Authority key identifier: 97:15:33:CB:7A:67:96:AC:5C:38:2B:38:DC:F4:59:F9:17:69:31:F4
Certificate issuer: /CN=971533cb7a6796ac5c382b38dcf459f9176931f4
Certificate serial: 0194BC72C3771EE79BEE65045D75C47624E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lxUzy3pnlqxcOCs43PRZ-RdpMfQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/d6577d-f2d2-4530-b9d2-39eca472668b/1/lxUzy3pnlqxcOCs43PRZ-RdpMfQ.mft
Manifest number: 04D6
Signing time: Fri 31 Jan 2025 13:00:25 +0000
Manifest this update: Fri 31 Jan 2025 13:00:25 +0000
Manifest next update: Sat 01 Feb 2025 13:00:25 +0000
Files and hashes: 1: lxUzy3pnlqxcOCs43PRZ-RdpMfQ.crl (hash: H4CL6mukcD5OoEKwGgp0Bh4jxwwOUcw4XRMwdk0EidM=)
2: tU-16s9tq9lFPI9LdHnUudxWQ80.roa (hash: C3zkVEZCC33fk0KY3UR1pX59nVM27axL5/PozEIPAG8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:c3:77:1e:e7:9b:ee:65:04:5d:75:c4:76:24:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=971533cb7a6796ac5c382b38dcf459f9176931f4
Validity
Not Before: Jan 31 13:00:25 2025 GMT
Not After : Feb 1 13:00:25 2025 GMT
Subject: CN=4c971b3598df984b2b947d196514b275d086d409
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:7b:97:f8:4a:d7:6f:3e:31:c0:53:8a:38:70:
b7:a1:01:c2:91:d5:42:9b:e9:6e:23:d3:31:18:6e:
70:63:8a:bb:43:83:4e:43:4b:d3:cc:e7:48:e3:ed:
47:21:50:38:29:f3:67:f3:50:33:25:87:67:f4:41:
3a:f0:b8:b3:9c:e7:a9:0a:3e:e5:8f:14:5e:0a:e7:
43:4e:4e:44:09:76:17:59:df:f0:d5:3a:21:59:2e:
8e:cd:d1:03:66:60:52:b2:03:74:97:bb:6e:a1:82:
6f:b7:8c:43:4a:97:5b:87:58:28:37:7c:bc:40:bd:
84:50:a7:bc:7b:be:20:38:5d:b4:fa:5e:fd:5f:a4:
9c:75:c1:42:37:ae:d1:7a:71:b4:34:be:46:e9:aa:
73:6e:4a:52:86:91:d2:d1:fa:42:5a:9a:1e:5e:e7:
7b:c1:c2:66:d4:aa:30:a3:6a:b5:0b:e2:b7:5c:5b:
63:0c:05:83:43:3b:d2:4c:3a:90:77:55:f6:4d:60:
d7:15:d2:11:b1:cd:6d:9f:a7:05:b7:40:b1:05:09:
e2:61:03:e1:67:23:72:8d:65:4d:be:69:9a:cf:fe:
ce:04:13:87:97:da:be:74:89:d4:97:dc:46:83:1f:
43:6d:78:e8:ec:ac:e5:f0:99:59:e2:7d:2a:51:fe:
5f:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:97:1B:35:98:DF:98:4B:2B:94:7D:19:65:14:B2:75:D0:86:D4:09
X509v3 Authority Key Identifier:
keyid:97:15:33:CB:7A:67:96:AC:5C:38:2B:38:DC:F4:59:F9:17:69:31:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lxUzy3pnlqxcOCs43PRZ-RdpMfQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/d6577d-f2d2-4530-b9d2-39eca472668b/1/lxUzy3pnlqxcOCs43PRZ-RdpMfQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/d6577d-f2d2-4530-b9d2-39eca472668b/1/lxUzy3pnlqxcOCs43PRZ-RdpMfQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:ed:c1:f3:14:da:32:f5:de:e4:09:16:6a:4c:51:eb:54:42:
ce:78:20:cb:2b:ac:f6:c0:64:2c:79:a7:6e:d9:07:7d:48:31:
5e:ab:ea:d8:69:72:c2:5b:07:2d:dd:27:4e:db:e6:0c:b2:c3:
e0:0b:7e:b8:b0:3a:21:ba:65:bd:39:fd:37:9f:30:21:7d:f0:
28:2f:1f:66:28:0b:be:0a:b3:aa:74:2c:9c:38:a9:43:78:d0:
e5:06:e2:6c:34:6e:39:5f:fb:ad:54:fc:2c:20:c9:be:0b:c5:
95:a8:7c:69:a2:ad:00:91:83:7d:7f:f4:a5:77:31:ca:46:7e:
4e:53:c6:db:2d:de:09:a5:0e:c1:45:d3:e6:c2:8e:2d:15:4e:
74:5e:a2:7a:e7:d8:83:19:8c:c6:81:6c:f9:23:fd:26:57:47:
f0:ff:18:2f:bc:4a:7d:c4:45:86:d5:8c:c2:1d:ae:3f:75:00:
c8:83:25:93:5a:7c:27:af:90:38:e5:c2:67:94:74:d8:69:6e:
bb:9b:32:67:79:81:17:a4:4f:09:b1:74:58:e7:df:96:86:4d:
93:af:a7:b4:5f:b4:69:89:d9:f3:46:f9:23:0a:fa:52:2f:d9:
89:d3:28:c3:50:23:ec:e5:8c:5b:e8:6b:43:5a:23:e4:fc:93:
7e:2a:52:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:21:26 2025 by rpki-client