Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/23e16e-943e-4595-9530-a82f658a2aa1/1/lA_4gDMK92KubMBQ3l80tfV7Cwk.mft
File: lA_4gDMK92KubMBQ3l80tfV7Cwk.mft (raw, json)
Hash identifier: cAam7iUERrDYMruNUcPdVx/wUc785GqQUDpUeWw2xA8=
Subject key identifier: A6:4F:F8:F2:CE:BF:BD:89:73:06:5D:1D:D6:A6:DA:BD:96:21:1A:86
Authority key identifier: 94:0F:F8:80:33:0A:F7:62:AE:6C:C0:50:DE:5F:34:B5:F5:7B:0B:09
Certificate issuer: /CN=940ff880330af762ae6cc050de5f34b5f57b0b09
Certificate serial: 0194BC727F4264A223BD69385638224E69AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lA_4gDMK92KubMBQ3l80tfV7Cwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/23e16e-943e-4595-9530-a82f658a2aa1/1/lA_4gDMK92KubMBQ3l80tfV7Cwk.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 13:00:07 +0000
Manifest this update: Fri 31 Jan 2025 13:00:07 +0000
Manifest next update: Sat 01 Feb 2025 13:00:07 +0000
Files and hashes: 1: Ig7bAmoCixyvzZWw9fNKzCj6v2k.roa (hash: ncTt/9AwRWlKLpqD9pHECb0XuKSFb+vSUzQ6KC0mNzw=)
2: lA_4gDMK92KubMBQ3l80tfV7Cwk.crl (hash: RSmo5qZVGqxT3UaTg0xcudrxJeVatlbTeS7xDxHHRz8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:7f:42:64:a2:23:bd:69:38:56:38:22:4e:69:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=940ff880330af762ae6cc050de5f34b5f57b0b09
Validity
Not Before: Jan 31 13:00:07 2025 GMT
Not After : Feb 1 13:00:07 2025 GMT
Subject: CN=a64ff8f2cebfbd8973065d1dd6a6dabd96211a86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:04:23:d8:4d:5b:26:d3:ff:6c:ca:b9:3a:1e:
71:d6:16:82:bd:2c:ac:66:62:e6:b9:2b:db:1e:b1:
da:31:cf:fc:23:af:f7:f5:89:b1:d3:09:e2:1f:36:
48:af:10:45:09:1d:7f:3b:a0:9c:05:af:64:82:40:
ba:11:78:c2:6c:2b:48:b4:14:97:d4:68:ab:ea:d3:
71:30:5f:89:84:1e:4b:56:f1:1b:f3:29:3f:31:fd:
7d:89:81:98:04:c4:3b:91:71:6a:bc:50:5b:93:94:
c2:4f:c3:de:f1:f7:df:ed:3c:83:d9:cc:47:d8:10:
88:b5:4a:1c:de:9a:85:8d:65:dc:19:01:b6:65:1f:
71:f1:4d:75:a7:eb:59:f5:aa:27:f5:42:17:50:62:
ed:f4:19:8d:26:7f:58:2d:8c:d5:24:bf:39:fd:ed:
a4:3f:b0:09:d0:4e:f9:a8:38:f8:e9:20:fe:55:c7:
3b:b1:62:43:bc:d7:4c:2a:52:b3:b3:d7:48:ad:c7:
48:cd:ce:ac:a6:fb:cb:90:4b:e5:29:d8:b6:aa:22:
57:2d:d8:99:a3:14:a8:c5:d3:76:b3:b8:c1:f1:7e:
39:90:bd:7d:df:bb:d6:1d:ca:b3:cf:d3:77:d8:2c:
c3:4e:b8:42:bf:3d:ea:70:8f:53:5e:60:64:f2:d6:
8b:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:4F:F8:F2:CE:BF:BD:89:73:06:5D:1D:D6:A6:DA:BD:96:21:1A:86
X509v3 Authority Key Identifier:
keyid:94:0F:F8:80:33:0A:F7:62:AE:6C:C0:50:DE:5F:34:B5:F5:7B:0B:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lA_4gDMK92KubMBQ3l80tfV7Cwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/23e16e-943e-4595-9530-a82f658a2aa1/1/lA_4gDMK92KubMBQ3l80tfV7Cwk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/23e16e-943e-4595-9530-a82f658a2aa1/1/lA_4gDMK92KubMBQ3l80tfV7Cwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:db:ab:dc:b1:05:43:5b:0b:bd:93:9c:94:bc:93:79:9d:76:
77:dd:07:c1:40:69:9b:35:44:c0:d2:9b:7c:45:0d:3d:84:7a:
79:38:9e:33:af:ae:6c:b7:7b:47:a5:36:c8:d5:48:93:cb:90:
bd:4e:7b:38:1f:7c:0b:9b:6a:1e:6a:e4:b2:38:90:82:c1:b6:
a6:14:56:e7:3d:97:ac:a0:fd:82:27:f0:42:ca:30:f4:2d:49:
f2:20:fd:7a:b3:7e:19:f6:51:22:f0:f3:1f:5a:a1:d2:35:3b:
58:d2:82:39:c7:29:3d:26:06:04:9c:34:7b:94:87:b6:82:8d:
af:25:c0:cf:f1:d1:8e:64:5d:53:de:dd:46:92:8c:03:8e:db:
3e:a6:64:3f:fc:8a:0b:49:e2:0f:dd:ff:ce:b7:28:8e:d0:d8:
77:59:80:b0:27:f1:7b:6c:bf:3f:5a:da:6e:44:73:90:69:a0:
95:25:a5:ae:12:52:2e:03:55:4e:43:82:d5:95:1a:5e:90:8c:
74:8f:c1:4e:a5:23:c0:5d:22:5f:2f:14:07:81:cd:48:f7:e3:
66:2f:f9:1e:d5:6c:28:ac:f9:0e:2a:00:c3:b1:fc:1e:e8:07:
0c:44:cb:c3:aa:03:c8:96:c0:3a:be:cb:f8:20:53:a6:8f:02:
26:b7:73:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 11:25:26 2025 by rpki-client