Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/2db683-c9e9-4647-823b-cd403bdee4df/1/lJYuKvp3SPRSZdif0VYktYTnJGY.mft
File: lJYuKvp3SPRSZdif0VYktYTnJGY.mft (raw, json)
Hash identifier: kKW3T9PhH08h5yS9gkCMInKRJ56wHovcEZXSIXb+RDE=
Subject key identifier: 1E:C3:2C:A9:B0:8D:D9:C4:37:A4:D5:32:ED:10:CD:71:F4:D5:96:84
Authority key identifier: 94:96:2E:2A:FA:77:48:F4:52:65:D8:9F:D1:56:24:B5:84:E7:24:66
Certificate issuer: /CN=94962e2afa7748f45265d89fd15624b584e72466
Certificate serial: 0194BC3BFE1FFF2FD77611A724CC1BAF2D94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lJYuKvp3SPRSZdif0VYktYTnJGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/2db683-c9e9-4647-823b-cd403bdee4df/1/lJYuKvp3SPRSZdif0VYktYTnJGY.mft
Manifest number: 11CD
Signing time: Fri 31 Jan 2025 12:00:35 +0000
Manifest this update: Fri 31 Jan 2025 12:00:35 +0000
Manifest next update: Sat 01 Feb 2025 12:00:35 +0000
Files and hashes: 1: 1zPmCa_n4npQByWV57mbbNaogt8.roa (hash: dFtgg8FcI20vmgo3zE4v/V+3CGTP1fI2Dy6va/nig+E=)
2: Mc3-W1zeku0X5cBFpf2q2Rn4I84.roa (hash: sbJ542HmG4Uuavy4d7gZervrEM5rcRvFP/8t5YUQ2Tw=)
3: lJYuKvp3SPRSZdif0VYktYTnJGY.crl (hash: VB4LKY705s82K9jh+IViAvCAcuNpDfgAx8rbBk4uaAE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:fe:1f:ff:2f:d7:76:11:a7:24:cc:1b:af:2d:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94962e2afa7748f45265d89fd15624b584e72466
Validity
Not Before: Jan 31 12:00:35 2025 GMT
Not After : Feb 1 12:00:35 2025 GMT
Subject: CN=1ec32ca9b08dd9c437a4d532ed10cd71f4d59684
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:e5:cb:fd:f2:3d:94:3b:bd:a1:d4:70:c5:0a:
cc:04:bf:d6:1c:52:fc:b1:c8:1f:bd:dd:af:f4:92:
7b:37:3a:3c:90:49:09:a2:5b:88:28:11:88:25:a4:
04:56:08:5e:94:a5:d2:f5:ad:d3:1c:3d:55:35:c2:
a1:e3:29:a8:fe:4f:7d:37:0c:dd:b0:ee:f1:85:c1:
22:b0:c4:49:c0:f6:3d:6c:6c:b8:e7:05:0d:f7:09:
b0:9c:9d:96:61:f7:e7:dc:2b:bb:d1:2b:46:33:96:
25:65:e9:b8:c3:77:97:0f:70:58:bb:a5:a3:bd:ed:
55:74:5a:28:c5:e3:39:f3:d6:26:80:23:69:75:ce:
40:2e:d8:02:d9:a9:27:a9:a4:eb:33:f2:f6:59:be:
c7:bb:84:ba:9b:15:19:4e:08:3a:73:93:24:73:6b:
b6:f6:f9:9c:e9:f3:03:eb:02:02:06:96:c1:8f:72:
17:11:24:bb:9f:10:78:d1:fd:2d:91:d5:26:08:a4:
33:c1:72:5b:f9:f8:ca:06:0b:56:6a:01:5b:43:39:
47:7b:76:d2:45:0a:4d:de:2b:4a:9b:dd:55:28:41:
cf:19:21:42:a8:af:7c:7c:09:8b:12:3f:5d:41:d8:
76:e8:e0:99:9c:2f:d9:d2:38:bc:80:10:fe:21:6e:
d5:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:C3:2C:A9:B0:8D:D9:C4:37:A4:D5:32:ED:10:CD:71:F4:D5:96:84
X509v3 Authority Key Identifier:
keyid:94:96:2E:2A:FA:77:48:F4:52:65:D8:9F:D1:56:24:B5:84:E7:24:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lJYuKvp3SPRSZdif0VYktYTnJGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/2db683-c9e9-4647-823b-cd403bdee4df/1/lJYuKvp3SPRSZdif0VYktYTnJGY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/2db683-c9e9-4647-823b-cd403bdee4df/1/lJYuKvp3SPRSZdif0VYktYTnJGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:e9:1d:74:16:d6:4e:94:6b:0d:2e:02:6c:a6:64:e5:95:4b:
e1:59:24:38:a0:76:7b:dd:e1:19:e0:bb:86:14:ec:7c:05:ce:
cf:df:79:ba:1d:28:e1:d4:f9:d7:2a:95:26:c5:4b:75:5e:f5:
99:9c:12:09:16:bd:a5:f4:fb:ba:51:0c:8e:8f:20:fe:b0:4d:
83:8e:4d:cf:e7:bc:ee:b9:d7:0b:6e:21:d3:9e:ba:e5:8b:04:
9a:2c:23:7e:f8:cf:51:1e:a4:75:68:75:55:7a:6d:4e:cd:8e:
3d:ec:98:ac:ed:63:67:20:a7:93:b1:6e:81:97:a0:38:b3:33:
15:c4:37:dc:23:3d:85:98:47:b2:f7:9d:00:c2:fe:67:96:3b:
51:3a:09:e8:e7:56:23:f0:49:2c:e1:98:16:32:0f:11:10:1a:
1d:eb:eb:3f:76:9b:0b:7f:92:46:ff:56:35:9d:77:39:b1:ad:
46:e6:44:95:05:81:3f:3f:0a:58:2a:c2:dc:08:73:95:76:79:
98:4f:10:af:45:38:a2:97:2e:5b:10:ae:34:51:bd:1d:94:5c:
d3:26:0d:e5:c6:54:7e:62:1d:e2:32:18:11:b9:c7:18:9a:e2:
25:70:b2:24:f2:8d:6b:d9:40:5d:c7:bf:9a:1d:39:35:ad:54:
bf:ea:df:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:09:58 2025 by rpki-client