Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/124dd5-cab0-46ec-be67-42040df3b6af/1/lTK08rR7vhk0oiQIHMN_Fw1ySNI.mft
File: lTK08rR7vhk0oiQIHMN_Fw1ySNI.mft (raw, json)
Hash identifier: rv18gGg1+hfMSXpAv4Io8n9Ync989lLXUt6GVEAG0fY=
Subject key identifier: 69:A9:9F:FB:61:4A:FD:DB:49:60:38:73:9C:D1:12:6F:C2:A5:61:5E
Authority key identifier: 95:32:B4:F2:B4:7B:BE:19:34:A2:24:08:1C:C3:7F:17:0D:72:48:D2
Certificate issuer: /CN=9532b4f2b47bbe1934a224081cc37f170d7248d2
Certificate serial: 0194BCA999AE5A9208CCA7708E2EE91A37F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lTK08rR7vhk0oiQIHMN_Fw1ySNI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/124dd5-cab0-46ec-be67-42040df3b6af/1/lTK08rR7vhk0oiQIHMN_Fw1ySNI.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 14:00:19 +0000
Manifest this update: Fri 31 Jan 2025 14:00:19 +0000
Manifest next update: Sat 01 Feb 2025 14:00:19 +0000
Files and hashes: 1: GjUJtXzmRKM2Vtkil_fh95z7NdM.roa (hash: NJXWhpjg7woXcdhVu/ucxszei5ss2Dto0kjEgZT65S0=)
2: lTK08rR7vhk0oiQIHMN_Fw1ySNI.crl (hash: 5t1jbW845TADHiBjKCFxehjy2Wzb4dlZS6wzBnHUlgA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:99:ae:5a:92:08:cc:a7:70:8e:2e:e9:1a:37:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9532b4f2b47bbe1934a224081cc37f170d7248d2
Validity
Not Before: Jan 31 14:00:19 2025 GMT
Not After : Feb 1 14:00:19 2025 GMT
Subject: CN=69a99ffb614afddb496038739cd1126fc2a5615e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:fc:a6:d3:6b:0b:26:ac:14:77:dc:52:49:25:
35:1f:7b:a6:41:3e:9b:72:ef:7e:35:f3:2e:f0:f2:
28:dc:14:96:07:00:48:18:43:ea:15:8e:1a:01:43:
f3:a6:06:36:19:52:3a:6e:09:0f:e2:72:fb:ab:79:
65:4a:9e:e4:d8:43:27:d3:79:78:da:42:31:49:f1:
64:1d:3e:18:7b:84:36:96:e7:8f:6e:e7:74:f1:01:
6d:cc:50:8f:ff:d8:37:97:f0:31:76:04:9d:be:6f:
cd:28:16:70:10:d9:f3:23:7a:d8:7e:c6:8b:61:6e:
a1:cc:1e:a2:6c:df:ad:5e:5b:2a:8d:95:c7:55:b1:
bd:22:1e:0c:eb:e6:a0:5c:8a:11:d0:f2:02:3a:1b:
c4:b6:1a:6f:bd:38:9a:7e:e6:75:57:b8:48:d9:e1:
f5:2f:82:91:f7:fc:59:47:79:15:16:32:3f:b3:07:
d8:c1:dc:e8:80:f1:a3:44:33:a8:22:ed:ab:a0:32:
78:af:e9:f0:4d:6c:94:39:37:2e:8d:18:45:95:d1:
6d:3e:f5:1b:bb:da:00:4f:80:c3:e3:a6:9f:89:6d:
b5:05:f7:58:4e:e7:d7:9b:2b:1a:ff:fb:76:6d:10:
d5:3e:72:5b:f3:57:8b:89:bf:5d:1e:95:3a:d7:34:
69:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:A9:9F:FB:61:4A:FD:DB:49:60:38:73:9C:D1:12:6F:C2:A5:61:5E
X509v3 Authority Key Identifier:
keyid:95:32:B4:F2:B4:7B:BE:19:34:A2:24:08:1C:C3:7F:17:0D:72:48:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lTK08rR7vhk0oiQIHMN_Fw1ySNI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/124dd5-cab0-46ec-be67-42040df3b6af/1/lTK08rR7vhk0oiQIHMN_Fw1ySNI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/124dd5-cab0-46ec-be67-42040df3b6af/1/lTK08rR7vhk0oiQIHMN_Fw1ySNI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:1a:8b:21:f6:47:69:ba:6a:bd:ca:50:9b:c5:df:68:ab:0c:
51:ef:c4:d0:83:cd:73:18:cb:2c:d9:94:0c:d0:6e:50:da:b5:
73:c4:29:6b:1d:a7:ef:00:f0:4b:c1:b7:b0:89:e9:3a:22:da:
c4:8d:17:6a:23:ab:6c:f6:2b:b8:09:f8:e7:ad:5d:bb:d8:45:
78:39:b7:c3:6a:4c:f7:d2:8a:af:49:67:ca:cc:15:8d:3e:62:
28:da:33:ff:f3:c8:35:bb:3c:26:4e:3a:46:b8:ee:fc:0a:26:
37:60:c1:de:a2:b1:47:96:d0:76:dd:ab:64:ac:83:04:50:c6:
21:3c:78:9c:54:62:93:2b:26:54:03:94:a5:4c:ff:ef:b7:13:
36:38:4a:ae:d0:c0:1a:20:e4:cb:77:81:a3:f1:25:03:aa:6a:
af:aa:cf:42:68:3b:cf:87:9d:5b:6e:82:b8:07:1b:c8:00:86:
5d:b4:47:74:88:f2:c5:f0:85:2a:60:24:f5:42:85:c6:a2:6b:
d4:6c:be:56:3e:ae:66:0f:42:53:82:b3:ad:4c:7f:8d:81:5f:
eb:0c:35:8e:e5:5b:db:99:5f:f3:6c:a8:5e:d7:b2:84:f2:b6:
22:84:e7:5c:92:d4:b1:5b:47:3c:d5:82:f7:c2:c9:18:2a:98:
85:fb:91:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:07:06 2025 by rpki-client