Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/3f9b22-c1e3-4de9-b69c-45f829c6dd11/1/llRz1oVy6iI4vdh1r6cloEBd5IM.mft
File: llRz1oVy6iI4vdh1r6cloEBd5IM.mft (raw, json)
Hash identifier: kCPtg6tWyJGudlJeVjS5qpt5QABaOPXu4cizdawu90w=
Subject key identifier: 02:CB:AD:FA:70:8E:21:E8:9B:50:0F:8E:16:D9:97:3C:66:16:A6:A4
Authority key identifier: 96:54:73:D6:85:72:EA:22:38:BD:D8:75:AF:A7:25:A0:40:5D:E4:83
Certificate issuer: /CN=965473d68572ea2238bdd875afa725a0405de483
Certificate serial: 0194BD4EADE117D2E0EC4162171CE02AFAF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/llRz1oVy6iI4vdh1r6cloEBd5IM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/3f9b22-c1e3-4de9-b69c-45f829c6dd11/1/llRz1oVy6iI4vdh1r6cloEBd5IM.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 17:00:37 +0000
Manifest this update: Fri 31 Jan 2025 17:00:37 +0000
Manifest next update: Sat 01 Feb 2025 17:00:37 +0000
Files and hashes: 1: 83Gu0dtJuFZBe-loHFuPr5SJG_w.roa (hash: l+GbA3n02i+93pQcKbKkJrx1sOkT1XRYSXqoN31in0w=)
2: llRz1oVy6iI4vdh1r6cloEBd5IM.crl (hash: kBGTr5J3Tc6g06b4WWbtzdrCgXYEB4Be8P64fae+LxM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:ad:e1:17:d2:e0:ec:41:62:17:1c:e0:2a:fa:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=965473d68572ea2238bdd875afa725a0405de483
Validity
Not Before: Jan 31 17:00:37 2025 GMT
Not After : Feb 1 17:00:37 2025 GMT
Subject: CN=02cbadfa708e21e89b500f8e16d9973c6616a6a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:a3:8f:05:df:d1:d0:5c:14:72:76:82:1a:70:
d7:23:a8:ee:b5:5d:73:0d:86:bc:66:26:c8:f7:84:
af:fb:35:81:8c:a7:46:f0:74:aa:ed:06:5b:3c:8d:
26:d0:63:e5:cf:b1:4f:4c:81:d9:1b:6a:1d:02:bc:
73:c0:bd:24:e2:dc:5f:b9:3d:6d:11:7d:78:23:76:
01:fd:17:77:b9:f8:54:d6:5a:a3:47:98:7a:0d:2d:
8f:6a:37:e2:b8:97:70:44:5c:bd:09:47:0c:0b:e7:
25:86:41:c3:f9:03:36:aa:3a:dd:16:c2:85:9a:22:
90:8d:5f:6e:47:3c:9e:91:c3:e0:5e:12:e1:22:a6:
d5:41:ab:c6:fb:df:5c:10:dc:d3:ca:9e:60:5d:1c:
81:ce:2d:e0:2b:6e:cc:32:a2:50:10:c1:b0:60:85:
f6:ff:e4:47:60:e0:1a:77:21:03:fe:dc:f3:8f:1e:
29:81:5b:46:38:0d:68:42:0c:06:2e:92:9d:0e:c6:
86:13:31:71:aa:59:ab:3c:36:85:e2:7c:25:5c:5f:
04:28:25:98:48:67:7f:5e:b4:b0:d5:d6:be:86:bc:
59:76:01:05:b0:9b:5a:07:eb:6d:05:c0:e8:54:aa:
d5:1a:b5:38:74:90:c2:dc:e7:04:3d:6f:33:72:b9:
33:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:CB:AD:FA:70:8E:21:E8:9B:50:0F:8E:16:D9:97:3C:66:16:A6:A4
X509v3 Authority Key Identifier:
keyid:96:54:73:D6:85:72:EA:22:38:BD:D8:75:AF:A7:25:A0:40:5D:E4:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/llRz1oVy6iI4vdh1r6cloEBd5IM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/3f9b22-c1e3-4de9-b69c-45f829c6dd11/1/llRz1oVy6iI4vdh1r6cloEBd5IM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/3f9b22-c1e3-4de9-b69c-45f829c6dd11/1/llRz1oVy6iI4vdh1r6cloEBd5IM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:74:a9:d9:c9:e7:37:1a:ca:9e:e3:f6:79:cf:1b:60:dc:21:
e3:c9:7f:53:c4:63:b4:f2:4b:11:5c:4b:45:8d:b5:31:59:ea:
79:d8:11:7e:51:8c:0c:0f:97:fc:41:21:ed:4c:90:eb:a1:f6:
f2:8a:42:3d:f9:73:9e:ea:44:3f:f6:e7:ad:28:69:ec:83:ce:
b6:2a:1d:96:6f:4c:86:e8:79:f9:58:23:05:e0:22:d5:98:9b:
51:2f:b9:e9:25:6f:77:71:33:7c:46:61:38:9d:17:1d:8e:de:
1a:be:fe:9e:9c:6b:ac:08:15:06:e9:70:64:b3:b0:63:89:87:
5b:df:ea:82:65:35:6b:7c:2e:a4:fb:51:b0:15:51:f7:68:7d:
93:53:3f:15:cc:97:f2:38:d2:a8:58:cf:fd:9a:91:13:c5:ea:
9d:df:ff:11:0b:a7:a2:4f:7f:23:5d:8d:74:76:c5:90:f4:ee:
58:a8:00:2a:b0:2d:ac:bf:d6:d2:21:29:5a:3f:2c:03:25:01:
62:75:e8:da:6e:78:7d:ff:e6:5d:77:1e:ea:2d:5a:3f:ca:c3:
b7:db:c0:7e:01:ac:54:de:af:f4:bb:ef:7a:2b:d1:f8:55:60:
97:3e:3e:33:47:cf:bf:f2:f7:5b:ef:60:0e:6d:ab:f3:72:83:
64:36:4c:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:40:24 2025 by rpki-client