Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/8dda48-e84b-4ca7-aaf4-f53ef521dbe0/1/lxAsaTrzoJD4-Uuh_QgtsJJOrxI.mft
File: lxAsaTrzoJD4-Uuh_QgtsJJOrxI.mft (raw, json)
Hash identifier: onU5TcdypGdw/YKM84JyMGHQV9bB3/D57K0cODgLkvw=
Subject key identifier: 89:E7:95:7A:FA:35:A1:A0:B7:8E:8D:C1:AF:B6:85:DB:B3:1C:BF:0D
Authority key identifier: 97:10:2C:69:3A:F3:A0:90:F8:F9:4B:A1:FD:08:2D:B0:92:4E:AF:12
Certificate issuer: /CN=97102c693af3a090f8f94ba1fd082db0924eaf12
Certificate serial: 0194BC04E13690C1B4E54BBCAB9DE7920AF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lxAsaTrzoJD4-Uuh_QgtsJJOrxI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/8dda48-e84b-4ca7-aaf4-f53ef521dbe0/1/lxAsaTrzoJD4-Uuh_QgtsJJOrxI.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 11:00:23 +0000
Manifest this update: Fri 31 Jan 2025 11:00:23 +0000
Manifest next update: Sat 01 Feb 2025 11:00:23 +0000
Files and hashes: 1: UADfQRfiU0qMqkC7bWaFEbHeHdA.roa (hash: WP9x47zoRlAi5Co+JqhZvWC2k3pFeOAzkBoA6TCx0aU=)
2: lxAsaTrzoJD4-Uuh_QgtsJJOrxI.crl (hash: S5BQPkv8tWiRVQVXqmK6Y1VKO/C/LZaIEHqqMD/4h+0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:e1:36:90:c1:b4:e5:4b:bc:ab:9d:e7:92:0a:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97102c693af3a090f8f94ba1fd082db0924eaf12
Validity
Not Before: Jan 31 11:00:23 2025 GMT
Not After : Feb 1 11:00:23 2025 GMT
Subject: CN=89e7957afa35a1a0b78e8dc1afb685dbb31cbf0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:3c:ad:79:39:7f:2f:73:f6:2a:6d:c7:53:59:
7a:54:4c:3e:a3:2c:77:0b:34:29:05:9d:c9:96:20:
39:2e:d5:58:47:5f:61:90:c9:62:03:90:7f:7b:ca:
fd:75:c8:ed:74:5b:bb:ef:e0:f6:96:5f:ec:a5:02:
ab:6a:aa:21:d1:b5:12:55:f1:09:22:ce:04:b9:47:
e8:81:b7:95:e4:d1:91:55:38:a7:5c:ae:3d:6a:6a:
b1:bf:5e:6d:89:79:a5:f4:5d:7c:57:c5:ff:a7:76:
0a:56:b8:f5:d2:a4:79:77:cf:ae:4f:4c:58:39:8e:
a6:ad:5b:66:1f:0d:ae:86:c3:58:ce:e0:d1:b8:9f:
36:66:a9:c9:d6:6d:85:62:db:5a:09:77:f6:72:90:
7d:cb:43:ef:f1:b1:22:7a:23:b7:e8:3b:0b:75:80:
79:5d:9e:ac:8f:3f:ae:c6:69:b5:fd:5f:fd:37:d5:
54:5d:0b:3b:d4:d9:b8:a1:0d:c4:09:b8:64:0d:0d:
c0:1f:b5:82:34:c7:7a:50:fd:17:24:97:17:90:5c:
ac:7c:1b:fd:17:0a:24:d1:26:53:36:cf:b9:e6:23:
49:76:85:ec:5c:61:d5:61:5d:ae:01:a9:eb:f5:41:
86:cf:5f:51:6c:74:ea:c6:e5:07:a9:93:48:dc:8f:
7e:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:E7:95:7A:FA:35:A1:A0:B7:8E:8D:C1:AF:B6:85:DB:B3:1C:BF:0D
X509v3 Authority Key Identifier:
keyid:97:10:2C:69:3A:F3:A0:90:F8:F9:4B:A1:FD:08:2D:B0:92:4E:AF:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lxAsaTrzoJD4-Uuh_QgtsJJOrxI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/8dda48-e84b-4ca7-aaf4-f53ef521dbe0/1/lxAsaTrzoJD4-Uuh_QgtsJJOrxI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/8dda48-e84b-4ca7-aaf4-f53ef521dbe0/1/lxAsaTrzoJD4-Uuh_QgtsJJOrxI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:a0:3f:f9:20:f6:55:01:af:20:66:70:52:bb:91:bd:3d:87:
22:5a:91:8c:28:69:aa:63:23:0c:f9:0c:06:be:52:37:0a:2b:
b8:af:5a:42:4f:3a:5b:a9:01:ac:79:d8:f8:6c:67:4d:91:f2:
d2:7e:79:b9:cc:08:48:14:70:5e:bd:71:8f:0d:be:bd:ae:1b:
32:a7:51:64:4d:f7:ae:3e:15:e8:35:ff:db:4c:80:a8:e0:34:
23:00:66:0d:cd:53:f0:57:2d:3e:4d:b1:d3:66:ab:12:f6:c7:
64:4c:20:ad:0a:86:fd:dc:17:9b:4b:83:8f:30:0c:80:f3:53:
cc:f9:0b:2d:cb:88:34:7d:42:7e:f0:a0:b0:1b:3a:86:f3:62:
be:89:88:75:57:48:8f:83:6f:8f:d8:fb:d7:08:2f:e4:80:86:
fa:f1:0b:62:65:eb:6c:f6:c9:a5:d2:14:f1:89:61:1b:0e:55:
6c:04:86:9b:a9:c7:da:e9:d7:a5:99:5a:f6:14:23:bc:01:66:
c1:2e:e4:2a:c8:3a:aa:55:1f:76:37:8c:aa:83:8d:61:1b:91:
5e:64:2d:8e:e9:66:05:a0:6c:8b:3b:4b:69:50:27:82:94:12:
f1:b6:18:3b:a3:66:36:df:12:0d:0c:58:59:26:79:87:03:fc:
12:53:07:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:47:18 2025 by rpki-client