Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/c12436-61be-42e0-ad34-7f8a6750b8d7/1/lu3GgqlEAFEXuP6-1tyLrAYPMpo.mft
File: lu3GgqlEAFEXuP6-1tyLrAYPMpo.mft (raw, json)
Hash identifier: L/W+xHIuhHbo5U+RJsubSMEiaKA/RtSrBDn/GtmTSB0=
Subject key identifier: 74:B7:8D:44:E4:62:50:D2:96:01:DD:49:56:2F:6B:B6:BA:BD:1F:B7
Authority key identifier: 96:ED:C6:82:A9:44:00:51:17:B8:FE:BE:D6:DC:8B:AC:06:0F:32:9A
Certificate issuer: /CN=96edc682a944005117b8febed6dc8bac060f329a
Certificate serial: 0194BC72E373C2AF931E6E7386178BE151E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lu3GgqlEAFEXuP6-1tyLrAYPMpo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/c12436-61be-42e0-ad34-7f8a6750b8d7/1/lu3GgqlEAFEXuP6-1tyLrAYPMpo.mft
Manifest number: 031F
Signing time: Fri 31 Jan 2025 13:00:33 +0000
Manifest this update: Fri 31 Jan 2025 13:00:33 +0000
Manifest next update: Sat 01 Feb 2025 13:00:33 +0000
Files and hashes: 1: GuRsW05KP8iWPMSp7vb_kToeinc.roa (hash: xtfuu25jYNsHOYwVnrJ3v+/nadbPfCZESTGZfRgdXIM=)
2: lu3GgqlEAFEXuP6-1tyLrAYPMpo.crl (hash: 8Rdj+ZzcW0jZRTlW+1fwk2e3y6x+JWC1mRUjiej6Vok=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:e3:73:c2:af:93:1e:6e:73:86:17:8b:e1:51:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96edc682a944005117b8febed6dc8bac060f329a
Validity
Not Before: Jan 31 13:00:33 2025 GMT
Not After : Feb 1 13:00:33 2025 GMT
Subject: CN=74b78d44e46250d29601dd49562f6bb6babd1fb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:47:3d:12:0b:27:a3:e6:57:c1:49:9e:72:b0:
33:78:4e:df:20:bb:0a:3a:ab:2f:f0:68:b9:4b:45:
0e:c3:0a:aa:94:ba:33:dd:e0:c1:9d:dd:58:b0:c5:
08:59:93:85:47:ad:b3:65:c8:b4:2c:4b:71:4e:20:
b0:a4:dc:bb:5d:3a:c6:2e:47:0a:2c:06:56:84:c1:
70:c1:f0:79:67:2c:99:cb:31:61:7f:a1:a5:78:39:
c2:a4:8f:24:fd:a7:ef:6e:3d:48:d4:7c:70:db:30:
14:4e:7e:22:90:9e:c2:fb:f2:10:69:fb:dc:c3:62:
22:3b:8e:93:1e:c6:89:3f:02:89:03:58:73:32:4a:
2b:e3:f2:c2:fc:4a:28:e6:e5:3f:a1:7f:90:98:a8:
2f:2f:e7:3e:0a:db:25:4d:23:78:2c:47:36:be:59:
20:d5:d8:18:34:34:7a:aa:cf:b5:c6:a9:0a:6e:10:
7a:6f:28:4e:d3:bc:f1:f5:3f:10:18:a1:8c:3f:93:
85:16:7c:de:2e:b8:cb:ec:54:68:f8:bc:0a:7f:85:
ae:2b:5e:cc:c1:89:1c:bf:4b:ae:68:6f:62:f5:5b:
26:36:db:ae:64:19:99:a3:ab:41:ac:96:44:41:77:
1f:c7:89:e8:be:ea:09:1b:12:81:b4:a4:32:40:db:
46:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:B7:8D:44:E4:62:50:D2:96:01:DD:49:56:2F:6B:B6:BA:BD:1F:B7
X509v3 Authority Key Identifier:
keyid:96:ED:C6:82:A9:44:00:51:17:B8:FE:BE:D6:DC:8B:AC:06:0F:32:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lu3GgqlEAFEXuP6-1tyLrAYPMpo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c12436-61be-42e0-ad34-7f8a6750b8d7/1/lu3GgqlEAFEXuP6-1tyLrAYPMpo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c12436-61be-42e0-ad34-7f8a6750b8d7/1/lu3GgqlEAFEXuP6-1tyLrAYPMpo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:28:58:90:f6:23:54:7e:39:53:f4:82:21:32:49:4d:ff:03:
50:95:5e:9f:d8:51:71:d5:ad:37:ad:64:2d:b7:2a:82:92:9d:
5b:49:a4:b9:01:51:e0:0d:51:6c:23:58:68:8b:5d:1f:8a:4e:
15:30:ef:48:fb:0e:af:9e:c9:2e:3f:24:2e:f7:2e:9a:bd:f1:
8e:cb:60:86:3c:4d:79:ef:63:11:2f:f4:f9:ce:51:51:9a:93:
df:7a:10:38:ac:25:e1:1f:58:cf:61:b1:fc:9c:cd:09:1b:1b:
2f:a3:33:de:4e:4b:ed:f0:b9:b1:4d:9a:ac:36:9d:4e:46:f4:
8c:62:72:35:11:59:80:4d:9d:92:fb:94:6f:33:7d:2a:7d:c2:
72:da:72:74:db:ca:12:37:37:a5:aa:69:77:bd:fe:c2:b0:13:
ef:a5:34:29:a2:fe:be:b1:b6:3c:4f:9b:74:6b:0f:99:1a:4d:
c8:cc:5e:34:a2:f3:2a:97:f7:07:a1:b9:7b:e6:65:aa:6b:ec:
4a:25:ec:da:58:3f:65:5f:d6:1d:fb:3a:11:45:22:a8:20:3e:
28:fc:39:62:cc:08:10:9c:1e:18:e7:fd:2d:55:38:08:91:d6:
32:fa:57:be:54:18:5d:b9:0b:00:6f:77:2f:b3:53:cc:08:bf:
3e:6a:de:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:36:31 2025 by rpki-client