Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/98aca3-0c7c-4f05-8d03-35c78e70199e/1/lsVsXqVHj003sw82guQ7fi75DZg.mft
File: lsVsXqVHj003sw82guQ7fi75DZg.mft (raw, json)
Hash identifier: H85cNIuJxZj+HNa4J4RpXPaznz3D7YzASMemf6th2JY=
Subject key identifier: DA:B2:22:88:F4:CD:A6:C3:A9:4B:1E:79:84:06:DC:A3:3B:00:5C:62
Authority key identifier: 96:C5:6C:5E:A5:47:8F:4D:37:B3:0F:36:82:E4:3B:7E:2E:F9:0D:98
Certificate issuer: /CN=96c56c5ea5478f4d37b30f3682e43b7e2ef90d98
Certificate serial: 0194BD4E9E8F156045D2ED88DF81AA2052A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lsVsXqVHj003sw82guQ7fi75DZg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/98aca3-0c7c-4f05-8d03-35c78e70199e/1/lsVsXqVHj003sw82guQ7fi75DZg.mft
Manifest number: 0897
Signing time: Fri 31 Jan 2025 17:00:33 +0000
Manifest this update: Fri 31 Jan 2025 17:00:33 +0000
Manifest next update: Sat 01 Feb 2025 17:00:33 +0000
Files and hashes: 1: Jfp2BkUryUy6473OSd5t9xfZXek.roa (hash: /yj9OMbKiB1Ji+Udov4fFjS1PqdNa09sKJHlaeP3Vq8=)
2: lsVsXqVHj003sw82guQ7fi75DZg.crl (hash: uplMIDUqt1h2LnemW5lF5rjV1xDOTuZE7jtABsWLwQM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:9e:8f:15:60:45:d2:ed:88:df:81:aa:20:52:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96c56c5ea5478f4d37b30f3682e43b7e2ef90d98
Validity
Not Before: Jan 31 17:00:33 2025 GMT
Not After : Feb 1 17:00:33 2025 GMT
Subject: CN=dab22288f4cda6c3a94b1e798406dca33b005c62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:69:0a:1a:f1:c2:86:b7:c2:79:b9:b7:f2:1f:
97:ec:1d:60:65:12:97:3b:a4:2d:5c:f5:86:fc:07:
a6:3c:5f:f2:00:68:85:64:0c:7d:49:0f:06:7c:e3:
9b:e9:93:1e:97:72:f2:04:67:27:7c:32:81:c9:d5:
e7:df:31:bd:99:7f:cb:1e:42:95:41:b6:83:e1:23:
be:35:d9:5c:c8:53:b2:09:f5:36:78:05:5b:5d:15:
13:c9:0d:3a:53:89:3f:26:9e:bf:ff:38:15:44:ba:
a0:6b:31:08:f7:4b:ac:85:27:c7:c1:19:01:d1:20:
7b:77:ce:04:17:9e:c4:6f:cc:43:d8:f2:07:b9:30:
f1:31:16:27:08:85:96:ee:68:33:5f:62:b3:de:b1:
75:e1:ec:c7:72:35:45:3e:8b:ad:00:5b:3f:e5:4f:
73:e6:13:cf:22:f4:a2:9f:0d:fd:7a:c5:72:cc:4f:
c9:f6:4f:b9:e2:82:7f:1a:c6:bb:16:a9:b8:2e:58:
7d:47:da:be:ec:72:71:b0:4d:57:65:6b:8e:90:be:
d2:af:56:a2:d8:0d:13:92:25:58:6b:f9:0d:06:19:
0d:3e:2f:73:5e:90:99:83:48:cb:cc:d5:5d:0e:db:
d0:83:97:a9:3a:e2:84:1e:ec:85:27:5e:23:b1:97:
eb:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:B2:22:88:F4:CD:A6:C3:A9:4B:1E:79:84:06:DC:A3:3B:00:5C:62
X509v3 Authority Key Identifier:
keyid:96:C5:6C:5E:A5:47:8F:4D:37:B3:0F:36:82:E4:3B:7E:2E:F9:0D:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lsVsXqVHj003sw82guQ7fi75DZg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/98aca3-0c7c-4f05-8d03-35c78e70199e/1/lsVsXqVHj003sw82guQ7fi75DZg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/98aca3-0c7c-4f05-8d03-35c78e70199e/1/lsVsXqVHj003sw82guQ7fi75DZg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:2d:3f:39:c8:4c:51:2b:cd:f1:00:71:54:f7:ab:d9:ee:4d:
79:b2:88:34:ce:7c:09:41:e7:7b:57:b9:85:41:42:72:84:a2:
f0:3c:05:2e:77:12:33:00:c0:f1:89:7e:b1:97:39:b0:12:e4:
f3:39:60:89:de:f5:7d:18:9c:89:00:7d:43:94:77:89:47:5e:
5c:84:41:73:e5:08:50:f3:ff:28:87:72:7a:22:98:61:1f:c2:
17:a9:c4:93:1a:09:26:43:9d:9c:99:a1:66:b4:3a:9c:ee:e8:
a6:e1:f4:05:80:0c:3d:5c:c7:d3:10:fd:e4:62:31:78:0d:ee:
5a:1b:43:d1:dc:ab:59:73:d5:c2:d4:fb:de:b8:40:63:8f:94:
85:bf:fc:20:db:34:c1:78:19:1f:26:af:a0:9f:5a:87:02:e8:
5a:ac:f6:ce:05:1c:1d:f3:74:a4:10:71:40:ef:6b:8c:c6:0d:
31:69:d8:33:20:ea:13:19:51:91:20:2d:90:fa:08:d1:09:14:
01:c8:a5:80:de:7c:22:32:a2:0c:aa:35:bb:cc:2a:d0:fe:13:
7b:5a:82:58:0f:06:9f:fd:f4:b1:2c:d5:2e:0b:a6:da:27:e2:
3f:a2:10:10:52:ac:40:6f:c1:e9:25:c6:a8:d5:23:ed:7f:a8:
96:cd:43:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:42:55 2025 by rpki-client