Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/d665e6-f95d-4347-8565-d4f5317c5830/1/lrgSHVVt9FNFZVPctFxBQ_TN0hM.mft
File: lrgSHVVt9FNFZVPctFxBQ_TN0hM.mft (raw, json)
Hash identifier: VqUt6P38OjZY0uUszviylhQaDYoRHG0NrFNRclBKj8w=
Subject key identifier: 6A:0D:C2:B2:DC:50:89:BD:85:E5:C3:63:FF:CF:77:8A:91:BA:14:1E
Authority key identifier: 96:B8:12:1D:55:6D:F4:53:45:65:53:DC:B4:5C:41:43:F4:CD:D2:13
Certificate issuer: /CN=96b8121d556df453456553dcb45c4143f4cdd213
Certificate serial: 0194BC3C85DC60466D1B12C3653C41008125
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lrgSHVVt9FNFZVPctFxBQ_TN0hM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/d665e6-f95d-4347-8565-d4f5317c5830/1/lrgSHVVt9FNFZVPctFxBQ_TN0hM.mft
Manifest number: 06AA
Signing time: Fri 31 Jan 2025 12:01:10 +0000
Manifest this update: Fri 31 Jan 2025 12:01:10 +0000
Manifest next update: Sat 01 Feb 2025 12:01:10 +0000
Files and hashes: 1: lrgSHVVt9FNFZVPctFxBQ_TN0hM.crl (hash: IM6dURqDJz8kD7KrZtZ7nQTyMgnI4wkxqhl4vfzAzBg=)
2: qP3YU_S4LUHGi-PUyOS9YdXOrOg.roa (hash: 86gRYjmoaW5iHjfh3rXQG4yuY8yHQt9SBONVBj8bSuQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:85:dc:60:46:6d:1b:12:c3:65:3c:41:00:81:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96b8121d556df453456553dcb45c4143f4cdd213
Validity
Not Before: Jan 31 12:01:10 2025 GMT
Not After : Feb 1 12:01:10 2025 GMT
Subject: CN=6a0dc2b2dc5089bd85e5c363ffcf778a91ba141e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:aa:79:94:3d:18:6e:f7:ab:62:f0:33:b9:cb:
3c:73:54:f0:b8:83:62:d7:8f:1e:b0:3d:01:c0:13:
49:95:67:f0:de:25:01:d8:ec:23:38:d6:7b:fa:5c:
f5:3e:f2:17:2b:2c:3d:d6:a9:54:33:e1:03:02:5b:
28:d2:4c:76:11:71:70:bf:46:87:d4:72:9d:15:0a:
8a:23:d7:67:fd:c5:38:5f:51:a6:bc:e3:b4:67:fa:
c9:e7:78:a1:a2:5c:20:75:aa:7f:4f:89:1d:11:85:
56:0e:4c:60:ba:3f:17:47:57:77:17:0e:e4:dc:2c:
94:44:1a:6a:bb:10:65:5b:f4:0a:4a:ba:d1:c9:eb:
7b:0a:22:3b:f2:bf:0c:b7:43:0a:d9:d2:19:3c:61:
e0:9b:ba:ca:c2:f5:f8:6d:af:3c:a5:5e:2e:85:0d:
b6:ef:de:03:43:16:44:8f:1f:ab:c4:f8:95:f3:f3:
73:1b:75:fc:8b:cb:74:2b:a0:b1:af:40:4b:63:47:
c7:54:28:84:db:48:60:6f:e9:f1:43:83:5e:68:1e:
56:7f:72:0d:1a:87:88:69:c0:41:26:4b:12:ce:5a:
99:82:a2:10:82:33:68:a4:11:cb:f6:a0:a8:01:3e:
fd:7c:b5:21:8d:2d:b6:a4:f0:4c:92:73:0f:11:13:
56:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:0D:C2:B2:DC:50:89:BD:85:E5:C3:63:FF:CF:77:8A:91:BA:14:1E
X509v3 Authority Key Identifier:
keyid:96:B8:12:1D:55:6D:F4:53:45:65:53:DC:B4:5C:41:43:F4:CD:D2:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lrgSHVVt9FNFZVPctFxBQ_TN0hM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/d665e6-f95d-4347-8565-d4f5317c5830/1/lrgSHVVt9FNFZVPctFxBQ_TN0hM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/d665e6-f95d-4347-8565-d4f5317c5830/1/lrgSHVVt9FNFZVPctFxBQ_TN0hM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:56:bf:7a:c2:7e:4a:48:6f:49:96:14:fa:13:32:f9:91:d5:
08:96:da:37:4c:02:16:d2:5f:72:69:57:03:1d:13:86:80:ad:
98:66:90:a5:f0:6e:8f:4b:95:16:d5:5a:7d:11:c9:8c:26:2e:
55:a1:c5:2f:96:5b:f6:08:fe:ac:d1:e8:30:bc:4f:2d:83:78:
e3:0a:3f:e0:c9:51:28:9d:11:e0:e6:ee:99:99:24:96:cb:24:
eb:50:c8:6b:1c:76:03:4c:c5:6c:db:4e:08:e8:36:8b:41:3e:
fd:b0:e2:d5:2e:b3:de:66:5d:4f:0a:c6:85:ff:67:42:93:29:
41:ea:27:35:dd:9a:7f:c1:5f:01:72:ed:96:3e:33:c6:88:f1:
a3:e8:39:26:b7:ff:37:a6:2e:38:f6:e4:b1:5e:26:7c:de:0b:
f1:92:1a:a4:79:7a:3a:20:a9:06:25:51:46:52:b0:09:f2:44:
21:f7:21:83:4c:d4:06:b6:df:26:27:8b:02:2d:73:35:65:76:
23:01:68:fb:38:5a:0d:5c:6c:7b:52:c4:cf:a3:cc:b2:9b:02:
12:15:dc:64:2f:11:4e:dd:43:e8:77:14:70:61:6a:a7:d2:d0:
9d:58:69:8f:2f:0b:37:1e:cd:fb:22:98:4c:fe:78:b8:ac:51:
d1:30:64:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:18:10 2025 by rpki-client