Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/df3a15-2e49-4d8e-855a-1c2758651efa/1/lxx4swX7ScvUAF1EJ8H2LGpFWmg.mft
File: lxx4swX7ScvUAF1EJ8H2LGpFWmg.mft (raw, json)
Hash identifier: GdHKIZg/OKybnlacCCn8Z5sE5U/skpi/VDtxeRRqESs=
Subject key identifier: 17:B7:FA:5C:6F:12:66:C7:CD:76:B0:13:A8:BE:97:69:C4:CA:06:46
Authority key identifier: 97:1C:78:B3:05:FB:49:CB:D4:00:5D:44:27:C1:F6:2C:6A:45:5A:68
Certificate issuer: /CN=971c78b305fb49cbd4005d4427c1f62c6a455a68
Certificate serial: 0194BD4E3C27E42B7CD5B5B93812C1B6F5B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lxx4swX7ScvUAF1EJ8H2LGpFWmg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/df3a15-2e49-4d8e-855a-1c2758651efa/1/lxx4swX7ScvUAF1EJ8H2LGpFWmg.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 17:00:08 +0000
Manifest this update: Fri 31 Jan 2025 17:00:08 +0000
Manifest next update: Sat 01 Feb 2025 17:00:08 +0000
Files and hashes: 1: Fs8XEPRvhs2sBrhxNlZzi8XKons.roa (hash: C0hFaordL7p5SUJfrTELAa9KIVrov4I7azhDmZ9FUrw=)
2: lxx4swX7ScvUAF1EJ8H2LGpFWmg.crl (hash: /29+xeeoQBq/SYgh90qRgrp1vxMwuVO8BHBfGjJeFbQ=)
3: sId5K04MuNzDrV7JjoafXNRATrU.roa (hash: c9K2d3wbOg2QoEGGWWmmlRXcKof1alf7zD4SEHKIWBQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:3c:27:e4:2b:7c:d5:b5:b9:38:12:c1:b6:f5:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=971c78b305fb49cbd4005d4427c1f62c6a455a68
Validity
Not Before: Jan 31 17:00:08 2025 GMT
Not After : Feb 1 17:00:08 2025 GMT
Subject: CN=17b7fa5c6f1266c7cd76b013a8be9769c4ca0646
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:a7:a0:68:7f:4d:82:5b:c2:fe:75:34:91:32:
3a:03:55:65:fb:66:41:2d:fb:da:14:9f:b5:18:58:
e4:ea:57:98:96:89:c1:15:31:40:53:cc:be:6c:f8:
72:b3:b1:21:b0:3d:6b:82:9b:f2:a1:26:b4:57:9e:
00:75:11:b6:49:dc:cc:7b:8f:f2:fb:c7:64:d8:fd:
f8:d4:c1:1a:46:6b:43:43:4c:c9:17:ef:44:55:d2:
82:6b:49:9b:bd:4d:5f:6c:1a:34:37:62:00:52:de:
66:1c:4d:f9:04:cf:f4:64:11:78:ed:44:24:10:58:
fd:c4:f8:e3:76:fb:67:c5:bc:3b:20:b4:c7:c6:81:
17:d6:5f:fc:74:c5:23:04:c2:78:33:b2:10:35:6a:
7e:35:f8:ec:a9:e3:11:6d:c7:37:34:1f:d2:85:c3:
e9:e5:31:6c:b8:33:75:4b:60:88:3b:24:f3:69:bf:
13:99:a6:3f:5b:28:1e:d0:2e:ca:d0:24:8c:74:ae:
43:7c:99:25:12:28:a5:a6:24:a0:1f:b0:b5:52:14:
6a:84:42:b8:9b:e0:b7:d8:88:88:b6:af:06:6d:35:
1e:a2:fb:06:53:e5:53:e8:07:5c:32:0f:54:37:67:
ce:4a:50:d2:5e:e8:0f:53:29:44:50:0d:8b:32:5f:
e3:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:B7:FA:5C:6F:12:66:C7:CD:76:B0:13:A8:BE:97:69:C4:CA:06:46
X509v3 Authority Key Identifier:
keyid:97:1C:78:B3:05:FB:49:CB:D4:00:5D:44:27:C1:F6:2C:6A:45:5A:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lxx4swX7ScvUAF1EJ8H2LGpFWmg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/df3a15-2e49-4d8e-855a-1c2758651efa/1/lxx4swX7ScvUAF1EJ8H2LGpFWmg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/df3a15-2e49-4d8e-855a-1c2758651efa/1/lxx4swX7ScvUAF1EJ8H2LGpFWmg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:83:8a:68:e6:35:8a:82:8d:3e:c0:4c:e2:4d:31:c6:5e:59:
1d:9b:11:56:81:db:7f:70:3f:6a:fa:d7:cb:11:40:71:b4:3f:
1e:0d:95:df:b1:03:af:67:ae:2c:a4:90:6f:34:88:46:09:d3:
92:64:c4:cb:27:ea:0d:37:bc:e0:fc:19:4b:c8:53:a3:4d:9d:
30:8f:5c:6c:27:bd:c7:81:11:7d:a9:a6:7f:22:17:06:e0:93:
27:c7:15:39:98:af:8b:d5:ee:f2:d3:32:e1:b2:60:79:25:e1:
f0:f6:56:01:a9:f2:e1:f5:08:76:31:8b:92:7a:8f:1a:f2:3c:
2e:44:a1:6a:af:b3:bd:ea:86:b6:83:dc:99:1a:f7:a0:e1:74:
66:6d:fe:1f:bf:d7:aa:81:61:98:0e:42:2b:36:bf:01:73:05:
59:a4:c0:a4:8f:46:88:8c:b1:8d:0d:8f:d5:e8:7b:98:1b:d7:
35:c1:a1:f7:af:eb:fd:85:83:80:29:e5:47:d3:d6:b1:7f:34:
2c:7e:e4:d5:d0:99:3a:c4:f5:d1:12:ed:af:e2:fe:e3:b6:8f:
73:e5:9e:b7:4f:39:fe:58:70:86:24:a7:91:36:d3:9d:77:8d:
04:b8:d5:00:ad:3c:d4:2f:bc:71:8c:25:5c:2a:4a:d3:c4:4b:
b1:ce:5d:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:13:25 2025 by rpki-client