Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/32cc27-9448-437b-9722-dc9b9c6013f6/1/ltlf4tkJQ8kvbCjzsyn4IBXNkq4.mft
File: ltlf4tkJQ8kvbCjzsyn4IBXNkq4.mft (raw, json)
Hash identifier: D0y5WWYNuIZS9WKHbKQDSMyaRNHDz/3cA7wPZEiR+N8=
Subject key identifier: 1A:C2:17:75:9A:10:63:66:11:69:78:8F:82:E2:16:5B:C2:6B:63:0C
Authority key identifier: 96:D9:5F:E2:D9:09:43:C9:2F:6C:28:F3:B3:29:F8:20:15:CD:92:AE
Certificate issuer: /CN=96d95fe2d90943c92f6c28f3b329f82015cd92ae
Certificate serial: 0194BC04E1F8FA9B1226C64D274C53B10ADD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ltlf4tkJQ8kvbCjzsyn4IBXNkq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/32cc27-9448-437b-9722-dc9b9c6013f6/1/ltlf4tkJQ8kvbCjzsyn4IBXNkq4.mft
Manifest number: 0793
Signing time: Fri 31 Jan 2025 11:00:24 +0000
Manifest this update: Fri 31 Jan 2025 11:00:24 +0000
Manifest next update: Sat 01 Feb 2025 11:00:24 +0000
Files and hashes: 1: HmN4gqQ32E9Rqx-4t1qedvdMoH4.roa (hash: LX7NEJ+NlRiJfL2YQ6zxCjTe/Dn2kPvQcp14my1Cmso=)
2: ltlf4tkJQ8kvbCjzsyn4IBXNkq4.crl (hash: sZV87zk+9FJoEhIG/mYjOyv7gwQM7JP2trjJSRnt5EM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:e1:f8:fa:9b:12:26:c6:4d:27:4c:53:b1:0a:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96d95fe2d90943c92f6c28f3b329f82015cd92ae
Validity
Not Before: Jan 31 11:00:24 2025 GMT
Not After : Feb 1 11:00:24 2025 GMT
Subject: CN=1ac217759a1063661169788f82e2165bc26b630c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:84:b9:b7:17:12:04:44:7c:e5:6e:80:aa:33:
d4:f2:c1:f2:36:44:e0:12:c6:5b:96:dc:22:df:93:
e8:d3:b3:5c:f9:6b:38:53:8a:b2:27:33:75:ef:ff:
a2:c3:26:ac:ea:30:6b:c8:93:b2:2b:be:b2:9b:65:
59:75:20:b0:e6:8e:c2:ac:43:a5:e7:ef:1f:6d:a6:
bb:35:e3:28:dc:80:10:86:61:8b:5f:cd:dc:26:99:
1a:37:6f:3e:e1:2e:dd:48:17:33:74:f4:c0:da:aa:
bd:ff:0c:71:3b:d4:89:80:ea:1e:80:9c:73:92:e3:
d5:12:17:8a:ec:c5:ec:f1:f7:ba:ce:ab:c6:19:1d:
37:5a:3e:2e:8d:4a:95:7e:a0:e1:25:ff:98:57:d4:
66:18:c1:f3:0c:61:4b:49:3a:ec:57:90:89:c4:8c:
7c:3b:70:94:13:95:4e:9d:fa:ba:7e:1b:b4:c1:7a:
f7:af:08:07:e5:a1:8d:d9:47:5f:ba:d5:50:fa:3b:
6a:45:30:90:e9:65:d5:ca:e8:93:51:9c:ce:62:5b:
9b:08:b7:6a:e4:55:b9:29:12:97:3e:8e:31:98:34:
50:b8:f8:fb:7a:1d:89:89:ad:f8:9e:0c:b4:fa:cc:
2f:e5:e7:a0:80:dd:26:3a:09:60:0e:37:b8:17:d7:
3e:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:C2:17:75:9A:10:63:66:11:69:78:8F:82:E2:16:5B:C2:6B:63:0C
X509v3 Authority Key Identifier:
keyid:96:D9:5F:E2:D9:09:43:C9:2F:6C:28:F3:B3:29:F8:20:15:CD:92:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ltlf4tkJQ8kvbCjzsyn4IBXNkq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/32cc27-9448-437b-9722-dc9b9c6013f6/1/ltlf4tkJQ8kvbCjzsyn4IBXNkq4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/32cc27-9448-437b-9722-dc9b9c6013f6/1/ltlf4tkJQ8kvbCjzsyn4IBXNkq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:2b:a4:5f:4b:3c:72:04:06:72:ee:82:8f:1b:64:7d:d3:b0:
e9:d6:a9:02:99:3f:84:92:13:20:52:f6:56:b4:3b:26:d4:b8:
60:b1:2f:ea:0b:aa:68:93:32:6e:8d:da:a3:d2:02:d6:b5:7f:
d4:fa:1a:2d:ac:46:93:4a:b7:09:7b:be:de:f4:18:47:a8:58:
7b:a2:ef:8b:01:a4:eb:46:50:0f:d1:29:8e:64:44:12:26:8c:
82:f5:b6:42:7b:22:f5:74:96:b2:6b:76:f0:2a:7a:72:7e:d4:
55:5e:64:db:54:b6:de:e2:f2:06:a6:bd:9a:8d:61:8a:23:97:
57:db:c8:b1:21:d3:8e:4d:fe:ab:48:00:99:3d:b6:9b:04:eb:
49:1e:f6:11:71:db:61:92:1b:2c:13:e1:e5:20:36:ea:fd:63:
4f:2c:01:f1:1a:06:93:3b:a7:92:ed:9c:83:62:85:7a:a8:8c:
3a:af:2c:44:88:1a:79:66:48:6f:0d:1c:48:7c:90:ca:2d:3c:
fe:9d:49:23:4a:c9:e3:17:8f:2d:ca:6b:d5:f8:99:af:93:65:
bd:81:7e:9e:8a:08:80:52:7b:f6:92:b6:ff:db:9a:96:6b:28:
df:05:90:67:82:6f:07:d5:f1:06:67:05:8b:26:98:8b:5f:02:
aa:69:36:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:01:47 2025 by rpki-client