Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/df4a0a-c33d-4e0e-b15e-cdf4c6b424e1/1/l0417CGA2uvRvz3URAOp4L_LVso.mft
File: l0417CGA2uvRvz3URAOp4L_LVso.mft (raw, json)
Hash identifier: n9Lg6Cxu6jXGHnmGBnyul1v/zV1PAsONQODz7LGMhY4=
Subject key identifier: 28:28:85:43:6E:CC:A8:76:BB:EE:53:97:58:95:A7:29:C9:BF:9D:2B
Authority key identifier: 97:4E:35:EC:21:80:DA:EB:D1:BF:3D:D4:44:03:A9:E0:BF:CB:56:CA
Certificate issuer: /CN=974e35ec2180daebd1bf3dd44403a9e0bfcb56ca
Certificate serial: 0194BD85BC00D1B3C6DC61412BE5C9BEB7BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l0417CGA2uvRvz3URAOp4L_LVso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/df4a0a-c33d-4e0e-b15e-cdf4c6b424e1/1/l0417CGA2uvRvz3URAOp4L_LVso.mft
Manifest number: 039C
Signing time: Fri 31 Jan 2025 18:00:45 +0000
Manifest this update: Fri 31 Jan 2025 18:00:45 +0000
Manifest next update: Sat 01 Feb 2025 18:00:45 +0000
Files and hashes: 1: HxAtI9yKZCbpxH862uX_45QQRAI.roa (hash: 3h+38XAT5SiIVpNs8Lk+14nxc9RTgj1HBur0gfSR11E=)
2: iTGzzeTn1cvcwdDnc9awc3RasYM.roa (hash: sjjJq+xn7szTT9rNnI/9CM+WhOcRe4FfSBvE4+CHiBs=)
3: l0417CGA2uvRvz3URAOp4L_LVso.crl (hash: C4nnWBcPQi2dded8IWoTLx9qSwqe1vZuLIqUYseRjL8=)
4: mIS0nPI2-8GS9nz3OeurDLN52IA.roa (hash: uejnnPF+2WT2M1ad9GcfyaBXXEqrUkkTAENxQmZPOUs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:bc:00:d1:b3:c6:dc:61:41:2b:e5:c9:be:b7:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=974e35ec2180daebd1bf3dd44403a9e0bfcb56ca
Validity
Not Before: Jan 31 18:00:45 2025 GMT
Not After : Feb 1 18:00:45 2025 GMT
Subject: CN=282885436ecca876bbee53975895a729c9bf9d2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:d6:7b:8e:1f:f1:31:ca:24:69:77:89:e2:b8:
72:be:70:29:f9:39:69:02:72:fb:71:68:68:d7:37:
ca:6b:dd:73:5f:d9:49:c9:25:47:76:e3:58:3f:42:
d3:68:bb:7b:50:76:18:cb:3a:2c:80:29:26:b6:fb:
8c:e2:37:4c:d4:84:b8:21:b5:20:e6:93:19:6c:ab:
10:0b:bd:7a:44:d9:7d:16:b9:d6:b9:45:6f:7a:73:
50:8b:19:94:97:f3:aa:02:8f:e2:cc:e9:77:a6:15:
ef:fd:fb:8c:22:bf:1f:76:97:d2:40:c9:c4:11:a6:
0e:ba:c1:69:12:fe:47:b5:6e:ae:85:6e:e7:ce:94:
6b:9b:73:7f:31:c7:eb:2e:32:4c:d8:5d:12:49:83:
76:c1:d8:9e:9b:49:f7:08:04:45:8b:09:09:03:bf:
0e:e7:c9:b8:22:22:71:ad:e7:d2:8b:d4:a6:0e:9a:
b8:2e:3c:1e:af:8a:88:39:31:33:8a:f6:e2:bf:7a:
fd:49:80:57:66:71:ad:e4:ad:73:27:1c:df:c8:d6:
51:34:13:f2:33:c6:ab:1b:bd:51:d8:0e:67:2e:78:
6e:fb:10:ee:f1:7c:18:e0:3d:b1:c1:4a:ae:6e:fc:
d6:ae:b6:98:80:15:68:9f:06:88:da:ef:8b:a8:92:
58:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:28:85:43:6E:CC:A8:76:BB:EE:53:97:58:95:A7:29:C9:BF:9D:2B
X509v3 Authority Key Identifier:
keyid:97:4E:35:EC:21:80:DA:EB:D1:BF:3D:D4:44:03:A9:E0:BF:CB:56:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l0417CGA2uvRvz3URAOp4L_LVso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/df4a0a-c33d-4e0e-b15e-cdf4c6b424e1/1/l0417CGA2uvRvz3URAOp4L_LVso.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/df4a0a-c33d-4e0e-b15e-cdf4c6b424e1/1/l0417CGA2uvRvz3URAOp4L_LVso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:55:5d:ff:35:f0:d1:5f:8b:28:93:fb:1b:bb:83:d3:fd:5b:
0d:fd:09:65:9a:9e:4a:1d:4d:f2:fe:c2:85:a4:4c:0e:e8:3c:
93:0d:ff:37:26:80:20:c6:d2:fa:e7:3e:15:53:77:aa:f5:ad:
76:e3:6d:1a:55:f9:71:a9:d7:b6:f3:e6:97:c5:6d:c6:d2:81:
2e:a1:98:70:a0:e1:e4:3a:ff:f7:da:a6:dc:2f:bc:62:e4:a2:
03:a7:eb:00:49:e1:61:95:5d:4c:02:9a:41:dc:ad:54:bc:79:
8c:08:cb:c6:e0:54:2b:02:17:61:ac:d5:fc:e9:c3:38:2b:43:
80:a5:49:4b:b3:2c:4e:06:3b:d7:b0:de:b9:27:a6:4c:6e:db:
3b:cd:71:35:51:54:33:cd:4d:cc:fb:82:43:db:55:2f:ef:da:
73:b4:3e:90:12:19:93:a5:20:41:90:d1:55:99:e2:d9:a9:4b:
1d:80:a1:49:9c:df:13:d4:9f:ad:a3:19:d8:7c:f2:4a:7d:42:
2c:b8:e8:6b:43:1b:c8:8e:68:35:e2:1a:89:a8:99:d3:97:d8:
c7:21:5d:cf:07:d2:1a:62:b4:8d:f9:83:fb:01:81:06:36:0a:
be:ef:62:15:32:99:c9:be:55:c1:9e:c5:ea:d0:4c:83:a0:5a:
c4:c4:88:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:44:49 2025 by rpki-client