Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/23dc61-7e9d-40b3-91b6-46bd7d794fb6/1/cLGQ1viaQ0zOXLjA1LOKFmne-1k.mft
File: cLGQ1viaQ0zOXLjA1LOKFmne-1k.mft (raw, json)
Hash identifier: +iiyHbK9gKCBh07BLQzLMGM5y66/yopbsU+n2/DmM5w=
Subject key identifier: 5D:BF:41:60:DE:DC:76:20:53:C3:C5:9E:06:15:8B:5C:11:DB:A6:94
Authority key identifier: 70:B1:90:D6:F8:9A:43:4C:CE:5C:B8:C0:D4:B3:8A:16:69:DE:FB:59
Certificate issuer: /CN=70b190d6f89a434cce5cb8c0d4b38a1669defb59
Certificate serial: 0195E15A01FC8C3143406E99E948B1668A14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cLGQ1viaQ0zOXLjA1LOKFmne-1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/23dc61-7e9d-40b3-91b6-46bd7d794fb6/1/cLGQ1viaQ0zOXLjA1LOKFmne-1k.mft
Manifest number: 110B
Signing time: Sat 29 Mar 2025 10:02:06 +0000
Manifest this update: Sat 29 Mar 2025 10:02:06 +0000
Manifest next update: Sun 30 Mar 2025 10:02:06 +0000
Files and hashes: 1: Pmv8pM8XqssRTrBIwYfMIrBu2co.roa (hash: v4JQsWfqUQF/aizb6/kkH5lzSW7tzkWIy4FJVzppxAI=)
2: RQjHthweEF9-820WAQ_PQzmnlEM.roa (hash: nBMPnR4O6VvmGYLIOUpQxt7mk0o9gXGO9uw/qf7b94A=)
3: Wwvcf_CdHRy8gkrOQZUQURuseiI.roa (hash: xkPyebxyoo94+1+QeBv80ewSsDDTwjJTGd/zo7NXJ5g=)
4: cLGQ1viaQ0zOXLjA1LOKFmne-1k.crl (hash: qtFdYZrlLGbWF3AiCR6jjLMsQLn99rwhrXVqWH2mlIk=)
5: lVsIvIm2siK76Iwlc1JEpwaFSPI.roa (hash: TUnieu9UOgS3hw0oaMGHMZ2FiYRQqrhlAMNc6BYERoE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e1:5a:01:fc:8c:31:43:40:6e:99:e9:48:b1:66:8a:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70b190d6f89a434cce5cb8c0d4b38a1669defb59
Validity
Not Before: Mar 29 10:02:06 2025 GMT
Not After : Mar 30 10:02:06 2025 GMT
Subject: CN=5dbf4160dedc762053c3c59e06158b5c11dba694
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:9a:5f:39:60:01:aa:a5:c6:68:50:6b:b6:94:
f5:fd:03:da:1a:4b:8a:7e:58:42:30:0a:e9:f9:99:
95:ea:39:75:92:3b:ad:38:c2:6d:95:c0:77:57:c9:
8b:c2:d6:79:10:c0:27:67:a3:81:b1:85:45:e3:1b:
64:83:cb:fc:33:79:ad:4c:bd:7f:fb:57:08:38:cf:
b7:0b:6b:ac:3a:a7:98:bc:86:64:c1:7f:75:26:dd:
48:14:14:e0:74:68:6a:a4:bb:15:1b:4c:31:c6:25:
14:dd:ff:75:a2:19:a4:d7:72:5c:50:dc:1b:8e:bf:
19:3b:db:a7:4f:56:a2:9f:4a:cc:9d:9c:af:6f:82:
7d:e2:61:ba:e3:e6:2d:e7:33:a6:de:c0:66:77:8d:
76:02:09:d9:57:1a:c1:01:9c:bc:c2:bf:1a:10:1d:
13:71:9c:f5:2a:f9:18:21:f2:ad:dc:a8:3c:10:17:
e4:9c:75:13:93:c0:6d:97:fe:6b:71:66:8b:9a:bb:
63:0e:53:c5:a0:fd:3e:5f:5a:fd:de:6c:87:2e:fe:
67:8b:09:40:02:f0:f3:e5:d1:9a:d9:fd:30:0a:c1:
21:3e:47:bd:08:a1:81:de:28:98:90:e6:28:a1:75:
da:68:a9:61:f7:bc:d2:53:0f:39:a8:a2:db:51:cd:
27:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:BF:41:60:DE:DC:76:20:53:C3:C5:9E:06:15:8B:5C:11:DB:A6:94
X509v3 Authority Key Identifier:
keyid:70:B1:90:D6:F8:9A:43:4C:CE:5C:B8:C0:D4:B3:8A:16:69:DE:FB:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cLGQ1viaQ0zOXLjA1LOKFmne-1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/23dc61-7e9d-40b3-91b6-46bd7d794fb6/1/cLGQ1viaQ0zOXLjA1LOKFmne-1k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/23dc61-7e9d-40b3-91b6-46bd7d794fb6/1/cLGQ1viaQ0zOXLjA1LOKFmne-1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:61:f6:cf:ae:da:43:53:4b:74:dd:73:8c:1e:f1:20:c3:2e:
6f:d7:df:6e:b3:eb:ed:a9:88:b4:65:05:85:1f:36:71:bf:32:
d3:4a:90:a2:1d:9e:a4:9f:a3:9d:43:13:1a:64:0c:20:e1:bd:
c4:3f:bc:71:00:73:67:13:4e:43:f0:09:79:b5:44:17:3a:11:
fe:b3:7e:c3:e4:ef:49:42:3d:fb:8f:3b:98:bf:66:53:b0:56:
8a:46:f2:d0:29:18:3b:3d:a0:29:3e:10:81:32:f8:ef:48:6c:
94:22:8d:60:56:d3:45:f1:af:8b:4e:0f:cd:f1:cc:27:db:6a:
5e:e6:6d:07:3a:fa:d0:15:96:a8:cb:17:1b:a2:d2:3f:2d:05:
c4:85:ce:3e:8e:af:51:4f:1c:28:cf:ce:36:e5:ad:74:53:0e:
be:0b:36:ad:c0:bd:7a:6e:a9:4e:35:57:e4:53:a6:8c:6c:0c:
cd:9a:7c:6a:3a:f0:7f:74:88:8c:38:35:16:f5:74:14:f7:30:
d4:6a:39:d1:0e:09:3d:6e:c4:8d:32:55:03:ae:6a:26:f8:df:
4e:99:07:83:19:39:29:05:88:5f:bf:06:8d:8d:15:c5:91:cb:
a8:13:06:d6:83:0e:42:da:6c:df:6a:1e:18:65:de:c2:79:44:
aa:0d:06:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:38:50 2025 by rpki-client