Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/df0d37-4f65-439d-a531-057d7af0aef4/1/Lt7Joglt7BA7ri18N5bg1HCFwgI.mft
File: Lt7Joglt7BA7ri18N5bg1HCFwgI.mft (raw, json)
Hash identifier: dxzbJqXPr8KH3eyHFBWCC+tOt6Slny5qj1s2lRgHygc=
Subject key identifier: 35:A2:C2:0C:A7:2E:F4:B3:DA:B2:87:EE:E1:6E:03:85:28:ED:E3:3B
Authority key identifier: 2E:DE:C9:A2:09:6D:EC:10:3B:AE:2D:7C:37:96:E0:D4:70:85:C2:02
Certificate issuer: /CN=2edec9a2096dec103bae2d7c3796e0d47085c202
Certificate serial: 0194BD85652279C266806B0462055274A3F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lt7Joglt7BA7ri18N5bg1HCFwgI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/df0d37-4f65-439d-a531-057d7af0aef4/1/Lt7Joglt7BA7ri18N5bg1HCFwgI.mft
Manifest number: 0350
Signing time: Fri 31 Jan 2025 18:00:23 +0000
Manifest this update: Fri 31 Jan 2025 18:00:23 +0000
Manifest next update: Sat 01 Feb 2025 18:00:23 +0000
Files and hashes: 1: 1--dh8h3abapBU31_SJb0tICxWyY.roa (hash: gh7e8+8RLdU8Cqp+9LrY341h9N8Mjd03If+6kczgoM8=)
2: Lt7Joglt7BA7ri18N5bg1HCFwgI.crl (hash: YjUE403rvk015Fb0h3zE0KqyNYZkVKbWnS1hmZroky4=)
3: gomnRiII4UUcGSHuI8nXBgSpWmo.roa (hash: Rx7SYdS0kAPSQJ6WBVcTiVGAF8kqx/mt3lPi/ehy1+s=)
4: mv2c9mpu4nsKL2iXSU5ybGfbMyA.roa (hash: n7gKzzkF9393BLuqwZ2ZBCD9txFPO+ZrNkXIbbBUXgI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:65:22:79:c2:66:80:6b:04:62:05:52:74:a3:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2edec9a2096dec103bae2d7c3796e0d47085c202
Validity
Not Before: Jan 31 18:00:23 2025 GMT
Not After : Feb 1 18:00:23 2025 GMT
Subject: CN=35a2c20ca72ef4b3dab287eee16e038528ede33b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:23:51:93:f7:de:3e:0f:06:e5:b6:48:59:e4:
52:0c:57:c9:3d:c3:64:62:df:1b:94:2e:c9:d3:fe:
63:15:96:76:59:78:30:76:f1:2a:db:b4:79:ce:c5:
dd:3b:a9:76:83:be:91:2f:3e:f4:00:cb:38:92:a4:
88:23:a4:85:93:b5:00:39:62:10:ca:49:9b:1b:24:
ba:0f:77:a6:68:51:24:7a:90:6f:1d:ec:d5:58:1c:
b2:ee:07:f9:48:86:fe:cd:1f:11:d3:10:07:74:35:
67:41:05:3d:44:3f:c6:a9:3b:1f:83:f5:1c:84:6d:
af:73:34:14:bd:79:2a:38:98:81:3c:04:27:45:31:
0c:7f:f6:82:1c:17:92:32:67:64:ab:1b:21:f6:34:
08:5b:f8:b9:01:72:c4:b8:b2:1d:8a:f1:01:70:59:
5a:94:6e:d2:2c:42:41:c7:72:a8:d7:df:8d:44:0a:
c7:95:5e:2b:f6:a2:b2:0e:74:82:c9:2c:7a:89:86:
1e:83:ce:ce:3f:42:cd:57:db:c1:1f:ef:22:7f:41:
ec:81:44:e6:a1:88:43:c7:16:78:e0:a6:f3:d5:31:
67:b3:23:7e:45:11:f9:2b:27:ff:df:fb:6a:0c:b9:
c1:ae:e7:8e:33:64:d5:aa:bf:c2:6b:1d:fb:39:d9:
b1:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:A2:C2:0C:A7:2E:F4:B3:DA:B2:87:EE:E1:6E:03:85:28:ED:E3:3B
X509v3 Authority Key Identifier:
keyid:2E:DE:C9:A2:09:6D:EC:10:3B:AE:2D:7C:37:96:E0:D4:70:85:C2:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lt7Joglt7BA7ri18N5bg1HCFwgI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/df0d37-4f65-439d-a531-057d7af0aef4/1/Lt7Joglt7BA7ri18N5bg1HCFwgI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/df0d37-4f65-439d-a531-057d7af0aef4/1/Lt7Joglt7BA7ri18N5bg1HCFwgI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:de:0c:6a:d1:e1:eb:98:83:77:0b:01:18:8e:32:d3:be:0e:
2c:9a:d1:7e:eb:3c:11:c8:0a:7a:8a:b4:42:5b:9d:d3:a2:2c:
03:b3:d7:84:f9:7b:1d:b9:e6:29:a8:46:f4:91:7b:b1:c3:51:
13:be:46:47:bf:d0:d3:9c:4a:41:83:5b:86:cc:a0:09:5f:1f:
8c:6e:88:ab:8f:ba:ea:3b:80:cb:79:f6:70:7f:44:7f:b7:a0:
b1:18:ff:66:2f:ab:ba:16:f1:cb:6a:20:1e:cd:8b:e0:9b:9d:
4b:33:5b:d3:6b:69:76:22:22:34:db:c1:de:e7:99:36:9f:96:
05:52:46:5e:d8:88:8a:da:ab:b7:47:58:2a:a8:be:24:fa:68:
9b:55:90:14:c0:ee:d8:62:ce:08:f3:c5:08:9e:08:d0:69:05:
32:47:30:21:5a:24:7a:56:6f:41:65:a7:30:81:46:4c:49:ef:
2f:9c:3c:b9:57:93:e7:05:d2:13:d7:11:dc:ac:7b:c4:f8:b2:
1f:f6:a0:ac:f1:cd:a7:2e:0c:bd:2d:15:06:1c:0b:af:7b:57:
2e:a0:a0:52:ac:30:d9:28:ac:e5:4d:32:86:87:f6:89:7f:e0:
77:95:5d:26:b0:f1:d5:0f:fe:41:73:0c:e1:f0:4b:da:3c:4d:
5f:b2:9c:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:01:00 2025 by rpki-client