Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/6c4c26-e34a-4336-90c8-f90ae9966428/1/lH4-X564CJtcqU845lF8-8WyAGM.mft
File: lH4-X564CJtcqU845lF8-8WyAGM.mft (raw, json)
Hash identifier: epkNpdfHgtPwsmPRn+5gG5MBni5uKV2f80n/wRAjuXQ=
Subject key identifier: E1:7C:C4:90:27:5D:D8:E6:0D:68:3A:F6:1A:4F:06:4D:01:EA:E8:2C
Authority key identifier: 94:7E:3E:5F:9E:B8:08:9B:5C:A9:4F:38:E6:51:7C:FB:C5:B2:00:63
Certificate issuer: /CN=947e3e5f9eb8089b5ca94f38e6517cfbc5b20063
Certificate serial: 0194BC7287725EC25D0B15543256067EB105
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lH4-X564CJtcqU845lF8-8WyAGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/6c4c26-e34a-4336-90c8-f90ae9966428/1/lH4-X564CJtcqU845lF8-8WyAGM.mft
Manifest number: 02B9
Signing time: Fri 31 Jan 2025 13:00:09 +0000
Manifest this update: Fri 31 Jan 2025 13:00:09 +0000
Manifest next update: Sat 01 Feb 2025 13:00:09 +0000
Files and hashes: 1: 8JJmvRAktSEG3OdLUZKBNwR6ws0.roa (hash: TC8WkMj5LqYLotUQsIJXNU0W5IJEuyjKyKXTJdzLmbM=)
2: lH4-X564CJtcqU845lF8-8WyAGM.crl (hash: uW22Lf1w/3DxjDDdDH8DdCvrdaNBsKoUaFMK02wCGQY=)
3: zozOOHZMPpO8TU7R7OlzFjX6nTU.roa (hash: DO9vuDN/M4q7UhQA8k+ziHqB7tX/m/+CIduSaenQLlY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:87:72:5e:c2:5d:0b:15:54:32:56:06:7e:b1:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=947e3e5f9eb8089b5ca94f38e6517cfbc5b20063
Validity
Not Before: Jan 31 13:00:09 2025 GMT
Not After : Feb 1 13:00:09 2025 GMT
Subject: CN=e17cc490275dd8e60d683af61a4f064d01eae82c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:c4:5d:63:fe:da:df:f9:cd:e9:c8:57:d1:c3:
48:1d:0f:b2:a4:fa:9e:98:4e:10:5f:96:06:7d:7a:
49:a4:d5:f1:53:88:c6:e5:b1:3d:93:64:7d:0c:8a:
b9:54:d1:e6:8b:19:47:9e:c5:14:49:ba:32:25:50:
42:e9:dc:63:aa:40:94:23:11:20:fd:76:35:42:63:
bb:ae:f5:c5:8e:9e:19:09:00:51:71:9c:ac:48:5a:
59:b1:ce:77:b7:b1:47:90:24:e4:96:74:f6:5f:1b:
f8:ae:51:37:a4:f9:3a:fe:37:51:11:98:29:f2:40:
80:34:da:72:f5:37:e0:23:68:d3:a8:9f:a5:79:25:
0a:4b:c4:76:31:80:95:d5:60:2b:2b:3a:e5:bd:eb:
0b:6e:9f:e6:ad:57:a1:13:53:29:a6:e3:5f:e2:1e:
48:78:60:11:e6:08:5f:7f:37:b4:9a:9a:a2:ea:9d:
d9:29:c5:d0:7a:4e:11:3b:ea:bc:04:a1:ac:fe:e6:
89:e4:4e:b8:3a:55:15:99:36:a7:cc:77:89:a8:c2:
77:d3:2b:7e:7f:c0:db:59:28:6c:f0:b7:43:9b:cf:
0a:69:38:d6:99:29:d6:c1:e5:89:b5:28:9b:89:5e:
8c:4a:b2:86:a8:ce:dc:61:c2:f5:bf:8a:a5:9e:de:
6e:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:7C:C4:90:27:5D:D8:E6:0D:68:3A:F6:1A:4F:06:4D:01:EA:E8:2C
X509v3 Authority Key Identifier:
keyid:94:7E:3E:5F:9E:B8:08:9B:5C:A9:4F:38:E6:51:7C:FB:C5:B2:00:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lH4-X564CJtcqU845lF8-8WyAGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/6c4c26-e34a-4336-90c8-f90ae9966428/1/lH4-X564CJtcqU845lF8-8WyAGM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/6c4c26-e34a-4336-90c8-f90ae9966428/1/lH4-X564CJtcqU845lF8-8WyAGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:b6:b5:aa:98:0c:9b:2f:ee:82:e7:95:a9:1f:93:ac:8a:71:
09:7a:19:a3:6c:84:4e:82:7a:87:16:cb:bc:0a:52:fb:70:aa:
aa:22:d3:59:fc:6b:45:8b:37:95:10:ed:d6:a2:5a:49:e6:6d:
e0:9c:f9:7b:32:7e:3b:c5:67:2b:69:b5:47:b6:4f:e9:7b:31:
5a:20:74:30:83:48:15:e9:a1:59:c3:ed:b9:ed:3c:b5:92:f0:
f6:e6:24:71:ba:e0:64:3d:ea:47:50:9a:7b:db:64:b1:b9:09:
08:8c:28:31:3e:df:0c:81:87:a6:10:12:1a:11:a1:ca:e9:21:
a5:3d:ea:21:aa:09:24:a9:a8:a3:e2:0b:9c:ad:67:c9:73:67:
22:08:fb:b1:91:f3:1f:69:6d:22:b5:91:b2:6f:f2:25:97:e8:
bf:6d:c7:95:87:f4:a6:ab:80:f9:05:00:e5:76:d5:4e:58:52:
57:74:91:22:e8:08:26:42:70:70:7d:9d:3b:2e:85:5d:0d:d9:
51:a5:8a:0e:bf:19:80:f6:53:74:d4:ce:9c:88:90:e4:03:d4:
7a:d8:67:e3:b8:a8:f1:b2:a3:38:03:70:74:21:a5:6e:4c:80:
1b:c3:b8:d0:0e:b2:16:3c:f3:72:3a:0b:cc:a5:26:ae:53:fb:
b0:fb:a0:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:07:07 2025 by rpki-client