Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/8c27aa-b500-4c96-84ec-f8be495252b0/1/LokBk3Q73yTdIsPtbyizAxouyAY.mft
File: LokBk3Q73yTdIsPtbyizAxouyAY.mft (raw, json)
Hash identifier: +DckehYOtN7ht8qSin9pHQh3mBjx3UEJhUKII7x6Urk=
Subject key identifier: FD:86:76:05:4A:2A:3C:E0:03:49:E7:5F:83:D8:2F:59:14:7F:E1:A7
Authority key identifier: 2E:89:01:93:74:3B:DF:24:DD:22:C3:ED:6F:28:B3:03:1A:2E:C8:06
Certificate issuer: /CN=2e890193743bdf24dd22c3ed6f28b3031a2ec806
Certificate serial: 0194BD1804DCAA42D9396CE0802F445BE6CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LokBk3Q73yTdIsPtbyizAxouyAY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/8c27aa-b500-4c96-84ec-f8be495252b0/1/LokBk3Q73yTdIsPtbyizAxouyAY.mft
Manifest number: 0FB8
Signing time: Fri 31 Jan 2025 16:00:55 +0000
Manifest this update: Fri 31 Jan 2025 16:00:55 +0000
Manifest next update: Sat 01 Feb 2025 16:00:55 +0000
Files and hashes: 1: 6EZjDJryRoANWPhlSHpMG7n7IU8.roa (hash: 9isLxzfXlIyOPcXFup6Ou1baZV3mC8KRz9wBcZ1Igfs=)
2: LokBk3Q73yTdIsPtbyizAxouyAY.crl (hash: 5dNgJfK6wSPiFgO8peuoNF/bPnVp1Y37/fFzF+nmXeg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:18:04:dc:aa:42:d9:39:6c:e0:80:2f:44:5b:e6:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e890193743bdf24dd22c3ed6f28b3031a2ec806
Validity
Not Before: Jan 31 16:00:55 2025 GMT
Not After : Feb 1 16:00:55 2025 GMT
Subject: CN=fd8676054a2a3ce00349e75f83d82f59147fe1a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ad:d3:ed:0b:8e:b6:19:1d:ff:1f:06:89:84:
54:c4:c3:78:47:c5:31:e8:bb:98:e2:d5:21:9e:25:
38:ab:4d:92:ad:64:9c:7b:c0:70:08:d7:79:d5:46:
23:0c:7d:10:fd:b1:29:cd:7e:6a:37:11:f7:e2:06:
6c:c6:c3:e7:4c:27:59:2a:53:1a:a9:ba:75:92:a8:
b1:d8:82:9a:8e:e2:c1:3e:66:f8:98:e7:40:fa:93:
95:da:97:d8:24:85:36:0c:fc:1f:0a:31:b6:b7:8a:
4d:bd:03:ad:1e:f5:f8:91:2e:65:4e:0b:6a:d7:75:
b6:c3:a3:0c:f6:5a:42:ef:9b:98:d4:3d:f1:03:af:
01:05:81:57:ea:3c:f3:35:4e:ea:82:af:b3:a7:fd:
50:c5:59:82:8a:98:92:7d:4c:2d:26:a7:d2:92:e8:
88:57:86:1c:81:24:82:38:7b:19:81:b4:11:5a:96:
8d:d5:dd:04:91:6a:4e:95:7b:50:50:61:fb:fa:ae:
7b:4e:fd:d5:20:ec:f9:ac:ec:23:db:da:ce:4f:8d:
32:e6:bb:66:fb:b0:86:c8:08:86:75:6f:51:35:46:
02:3e:dc:c2:d5:34:7d:7a:c9:97:12:bb:03:63:53:
9b:42:f1:ea:2f:0f:24:a5:df:ce:50:cc:b0:ae:89:
93:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:86:76:05:4A:2A:3C:E0:03:49:E7:5F:83:D8:2F:59:14:7F:E1:A7
X509v3 Authority Key Identifier:
keyid:2E:89:01:93:74:3B:DF:24:DD:22:C3:ED:6F:28:B3:03:1A:2E:C8:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LokBk3Q73yTdIsPtbyizAxouyAY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/8c27aa-b500-4c96-84ec-f8be495252b0/1/LokBk3Q73yTdIsPtbyizAxouyAY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/8c27aa-b500-4c96-84ec-f8be495252b0/1/LokBk3Q73yTdIsPtbyizAxouyAY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:f1:c2:22:af:1d:b1:82:76:a9:db:b9:2b:63:78:18:6a:26:
54:f3:13:ef:f2:e4:b8:6f:ca:94:a9:76:45:8d:d9:73:a9:23:
45:f0:ef:0e:37:3a:58:5d:d7:47:07:88:b4:8a:89:08:51:21:
11:30:34:9b:dc:71:3b:b2:2b:e5:d1:69:5b:4e:11:66:ef:fc:
c3:b5:a5:9a:79:16:8b:3b:5c:86:5c:26:c4:df:d6:16:bb:bc:
87:89:5e:bd:aa:ac:af:ac:c7:b3:1d:fa:69:0b:2f:99:6f:fc:
9c:a4:5d:b4:cc:eb:d6:12:b6:42:b2:1c:d3:ef:e0:f3:f0:33:
41:0e:2f:8b:3c:4c:17:97:ea:51:a7:be:29:f0:26:83:13:9c:
c2:48:0a:8c:66:2d:e1:ad:6d:8c:1f:cf:7f:4d:db:b5:5e:d9:
3a:f6:6b:48:75:50:e0:bc:e2:5b:fa:e2:ee:01:b4:e4:8d:8b:
04:ba:8d:17:b4:ae:2b:a0:41:ad:d4:e4:ee:ea:1a:46:06:0b:
f0:14:8c:5b:37:b0:94:f9:a4:9a:6b:74:55:6d:76:70:c4:8b:
d0:d7:6c:67:bc:f3:96:6b:40:3b:3d:b5:52:e1:bb:09:35:da:
a0:83:a2:75:98:c1:af:cb:50:42:34:7e:1f:33:f9:c8:98:e9:
75:14:a1:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:48:48 2025 by rpki-client