Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/ad2782-f53a-4bb4-b8d7-6466d483459c/1/lvgJYTh33quHSpQB0VbbFP9NKBQ.mft
File: lvgJYTh33quHSpQB0VbbFP9NKBQ.mft (raw, json)
Hash identifier: 1X7BQsX46ijIi31o6aR9YeSqYQlqX9HeQeJJTwXmcb0=
Subject key identifier: 23:B5:83:EB:0D:50:D6:53:CD:54:E0:4D:92:A2:39:98:DD:2A:72:75
Authority key identifier: 96:F8:09:61:38:77:DE:AB:87:4A:94:01:D1:56:DB:14:FF:4D:28:14
Certificate issuer: /CN=96f809613877deab874a9401d156db14ff4d2814
Certificate serial: 0194BC04CA7411BFA23EEDA88676E2D07A33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lvgJYTh33quHSpQB0VbbFP9NKBQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/ad2782-f53a-4bb4-b8d7-6466d483459c/1/lvgJYTh33quHSpQB0VbbFP9NKBQ.mft
Manifest number: 0FC3
Signing time: Fri 31 Jan 2025 11:00:18 +0000
Manifest this update: Fri 31 Jan 2025 11:00:18 +0000
Manifest next update: Sat 01 Feb 2025 11:00:18 +0000
Files and hashes: 1: lvgJYTh33quHSpQB0VbbFP9NKBQ.crl (hash: MftVCiVKbEDN3gtFPWqsxYyAw51ICpGw/DXc5gt5YTM=)
2: pvaPM5j3-BPWJpSuaWFE01jgVBg.roa (hash: vcFvxHEzp1YnutqV+Bq+p/f/FPwpa1xjzTG6Rie7rFY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:ca:74:11:bf:a2:3e:ed:a8:86:76:e2:d0:7a:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96f809613877deab874a9401d156db14ff4d2814
Validity
Not Before: Jan 31 11:00:18 2025 GMT
Not After : Feb 1 11:00:18 2025 GMT
Subject: CN=23b583eb0d50d653cd54e04d92a23998dd2a7275
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:07:78:05:91:3f:26:6d:50:e8:6d:64:64:c8:
d9:c3:fe:c7:2d:f4:67:98:91:79:3f:cf:0e:7e:51:
e8:94:51:f3:d6:1f:50:de:a8:5e:3b:39:6f:7d:48:
2b:dd:79:2c:0a:fd:48:21:ee:21:fb:e8:f7:5f:2e:
d6:a3:a4:c3:d8:0d:7a:72:e6:da:4f:a3:71:9c:2b:
4e:3a:fe:66:52:81:fe:a4:0d:9e:b2:76:d4:c4:85:
f4:d6:89:92:21:60:8b:0f:37:be:10:b1:2c:f3:da:
6b:24:4b:c1:2c:aa:f6:80:11:db:a5:7f:cf:88:39:
c2:06:38:77:74:99:6a:9e:ed:e2:21:a2:ce:32:8c:
36:fd:d3:be:bc:70:a3:fa:d7:ac:d3:c1:f8:c7:61:
38:4d:44:32:d4:0e:29:76:6a:ce:22:a5:76:fb:d5:
b7:ce:8f:ae:dc:f0:80:83:96:b3:f6:ed:f8:25:33:
95:7b:0a:aa:c8:b5:ba:09:51:2e:e9:33:5f:aa:70:
26:02:a4:94:bf:3e:11:12:cb:ca:73:7a:22:f4:73:
ac:4d:3d:ab:0f:52:e8:eb:81:95:48:64:f8:22:4b:
ee:70:72:ea:64:6a:4d:15:54:68:57:55:4d:3a:40:
34:f2:90:e4:de:6a:66:b4:98:af:62:8a:98:c9:8e:
a1:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:B5:83:EB:0D:50:D6:53:CD:54:E0:4D:92:A2:39:98:DD:2A:72:75
X509v3 Authority Key Identifier:
keyid:96:F8:09:61:38:77:DE:AB:87:4A:94:01:D1:56:DB:14:FF:4D:28:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lvgJYTh33quHSpQB0VbbFP9NKBQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/ad2782-f53a-4bb4-b8d7-6466d483459c/1/lvgJYTh33quHSpQB0VbbFP9NKBQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/ad2782-f53a-4bb4-b8d7-6466d483459c/1/lvgJYTh33quHSpQB0VbbFP9NKBQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:e2:34:d4:b5:0a:22:ab:03:dc:58:4a:4d:8c:51:35:0f:bb:
0f:1a:6c:82:ca:34:9b:1c:9f:20:1b:95:d6:ca:98:c6:e1:eb:
e5:1d:3b:03:8a:f0:50:f1:7b:b1:b8:1b:9c:d8:2b:43:00:9c:
ab:8c:22:83:35:47:c9:2c:78:38:ec:8a:07:a6:ba:89:88:59:
5a:40:09:27:d9:bf:88:1d:10:6c:b3:0a:60:b2:e2:c3:e5:36:
ca:73:1a:3d:a4:a9:e4:09:2b:49:b5:da:81:cf:d4:eb:d4:52:
61:7c:67:b6:4d:ed:ca:32:4d:a8:e5:ff:bc:6a:83:6e:3a:1d:
ee:c5:ff:74:85:8f:a4:fe:5e:7f:f5:b3:4b:f3:16:f1:4d:2e:
3b:f6:76:8e:4f:7e:6a:97:03:5a:44:8e:15:42:7a:12:c9:d3:
56:6f:6e:f0:75:1d:22:0e:37:2f:6c:2e:f9:66:fd:20:9f:59:
5f:0f:34:f1:03:7c:15:1e:fd:e3:e7:ac:d3:aa:41:f4:89:22:
5a:e5:0f:6a:30:c6:f7:2d:25:d2:63:0b:d0:03:bf:64:35:84:
a4:3b:a2:4d:73:b3:0e:db:43:d1:10:f6:f7:41:c0:89:99:13:
d8:69:6b:39:df:ce:2c:af:81:2d:f8:f2:9e:51:87:2e:4c:f7:
54:20:27:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 06:02:41 2025 by rpki-client