Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/92ecea-3f3c-4baa-834b-126c7b48b847/1/l1yf-mXDybV8VJ5yzW3HAwBbLg4.mft
File: l1yf-mXDybV8VJ5yzW3HAwBbLg4.mft (raw, json)
Hash identifier: ks5mTZP9FYsotZ/XaDeYAuFe1PrGo6+NtJQjU1/uteA=
Subject key identifier: 11:38:AF:C9:4E:55:45:6F:B2:D5:FB:1D:8A:C2:C4:67:F8:E2:A3:A3
Authority key identifier: 97:5C:9F:FA:65:C3:C9:B5:7C:54:9E:72:CD:6D:C7:03:00:5B:2E:0E
Certificate issuer: /CN=975c9ffa65c3c9b57c549e72cd6dc703005b2e0e
Certificate serial: 0194BD854A2D779D92E2DCFAE43EED2D5B67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l1yf-mXDybV8VJ5yzW3HAwBbLg4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/92ecea-3f3c-4baa-834b-126c7b48b847/1/l1yf-mXDybV8VJ5yzW3HAwBbLg4.mft
Manifest number: 062C
Signing time: Fri 31 Jan 2025 18:00:16 +0000
Manifest this update: Fri 31 Jan 2025 18:00:16 +0000
Manifest next update: Sat 01 Feb 2025 18:00:16 +0000
Files and hashes: 1: GbAw3F7MjNJ95C6AZRHjgy4C_8E.roa (hash: hsZPGboOEmxaS9pP8M6WQo5xOeBG/GIeZlXu45Z680A=)
2: iIlmR63znDA0-FxaY6vTy_DKL6M.roa (hash: CIfN4trJPKCVdpMsOe6p8BfBCulrZHS1m+gKQyYsogg=)
3: l1yf-mXDybV8VJ5yzW3HAwBbLg4.crl (hash: DT9sDBAM/7TKsJmhRRvLHmcI6ARyMGghz+Je/GlpRo4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:4a:2d:77:9d:92:e2:dc:fa:e4:3e:ed:2d:5b:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=975c9ffa65c3c9b57c549e72cd6dc703005b2e0e
Validity
Not Before: Jan 31 18:00:16 2025 GMT
Not After : Feb 1 18:00:16 2025 GMT
Subject: CN=1138afc94e55456fb2d5fb1d8ac2c467f8e2a3a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:0c:e5:f1:ae:09:cb:c6:9a:0a:fc:92:9e:2f:
bc:d7:8d:10:c3:84:07:5f:2c:10:ba:50:9e:18:24:
18:6c:dc:63:25:60:a1:30:a9:4a:68:32:c7:d7:21:
30:3e:f0:fb:3e:1f:9a:35:ab:40:b3:49:97:82:25:
dd:1e:40:ec:d0:65:fa:19:2d:d0:54:6f:42:4a:13:
2c:96:76:32:a0:29:8b:5f:ec:75:db:60:4a:6e:63:
83:01:90:a7:98:66:bc:a3:dc:42:38:4e:2d:0d:c9:
a9:be:20:df:5c:e9:ab:70:75:83:dd:fe:52:db:b7:
08:58:4a:c1:ed:6b:a0:9a:d7:43:b3:54:c6:d7:24:
5c:a0:e9:12:db:96:59:39:d0:4b:19:e7:22:18:b1:
a7:ff:1a:b3:82:53:d2:57:66:b8:e6:ba:e4:ac:c2:
a7:a7:33:96:b0:e3:65:30:85:2f:c7:cb:3a:48:28:
b6:7f:7a:d3:38:e0:84:96:6a:7d:e3:83:a6:49:8d:
7f:76:4c:cb:1e:84:80:00:51:1f:b5:1a:31:87:84:
0d:74:3e:f3:5f:89:6f:19:dc:a5:ca:0e:fb:4e:dc:
36:96:86:ae:97:7f:ca:0b:26:5c:fe:86:91:46:06:
c3:f6:f7:14:be:fe:b0:47:61:5a:51:2d:a8:2f:5a:
0a:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:38:AF:C9:4E:55:45:6F:B2:D5:FB:1D:8A:C2:C4:67:F8:E2:A3:A3
X509v3 Authority Key Identifier:
keyid:97:5C:9F:FA:65:C3:C9:B5:7C:54:9E:72:CD:6D:C7:03:00:5B:2E:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l1yf-mXDybV8VJ5yzW3HAwBbLg4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/92ecea-3f3c-4baa-834b-126c7b48b847/1/l1yf-mXDybV8VJ5yzW3HAwBbLg4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/92ecea-3f3c-4baa-834b-126c7b48b847/1/l1yf-mXDybV8VJ5yzW3HAwBbLg4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:ad:6c:99:e7:2d:14:74:27:e8:67:71:48:97:8c:d2:b4:87:
e6:a6:2d:0c:21:7a:e7:c3:3e:44:2b:eb:ae:b9:9b:fe:6f:ac:
bb:1c:06:0d:ba:03:fb:77:47:b1:31:3d:45:da:2b:e6:64:83:
b2:88:1c:6f:dc:5c:4c:54:3c:90:2f:94:d8:ba:f5:3e:54:1f:
78:0e:70:01:e7:d6:55:09:78:ad:5a:7c:73:ac:0a:ff:e7:91:
a6:95:09:8b:3e:2d:1a:95:83:9a:cb:6e:61:23:31:76:40:50:
d4:1f:82:af:d2:b2:42:2d:e4:41:12:96:ec:ba:35:f0:89:07:
ed:75:3c:3f:0b:56:81:d6:c3:a3:cf:b0:f2:23:d1:65:ab:5c:
e1:c8:ed:a7:1e:dc:26:1d:ba:e1:fe:37:50:85:4a:a2:92:a8:
2d:08:16:7d:80:44:89:7b:66:a4:2d:ac:43:9d:5a:5f:df:1e:
85:8d:73:af:bf:5b:88:c8:6e:f6:6d:95:c6:7a:cc:ae:05:92:
26:6d:d3:56:e4:ad:b8:a3:b4:8d:50:79:20:44:4a:31:e1:f8:
91:d2:ab:c2:e7:38:ad:2f:9b:31:cf:dc:b2:f4:9f:eb:e9:2f:
1d:01:6d:b3:28:39:0c:c5:ca:88:46:46:a9:51:fa:4d:64:a7:
03:c2:d8:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:44:36 2025 by rpki-client