Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/f9ed9f-6912-4fbb-957b-d54a1f02bcba/1/lTpF3igHrMRc0lLtQvE4Pbc5fds.mft
File: lTpF3igHrMRc0lLtQvE4Pbc5fds.mft (raw, json)
Hash identifier: +A+aXmD0W2cL3yYjIr5pcGIGhj+W1IlLansdFRaKbfw=
Subject key identifier: 41:59:BC:F3:CB:B4:21:C5:9D:73:63:26:10:F7:53:19:E2:31:7A:9B
Authority key identifier: 95:3A:45:DE:28:07:AC:C4:5C:D2:52:ED:42:F1:38:3D:B7:39:7D:DB
Certificate issuer: /CN=953a45de2807acc45cd252ed42f1383db7397ddb
Certificate serial: 01902F4E86E1E9DBAE928899B33026BAE14C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lTpF3igHrMRc0lLtQvE4Pbc5fds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/f9ed9f-6912-4fbb-957b-d54a1f02bcba/1/lTpF3igHrMRc0lLtQvE4Pbc5fds.mft
Manifest number: 05DC
Signing time: Wed 19 Jun 2024 07:03:13 +0000
Manifest this update: Wed 19 Jun 2024 07:03:13 +0000
Manifest next update: Thu 20 Jun 2024 07:03:13 +0000
Files and hashes: 1: 3J7jJ-jTAe8_vffnLS8zBt6RKUk.roa (hash: nXYewA9s9iPOxk/TPk1GuN26PPgxo4mIythO/zxvl3o=)
2: lTpF3igHrMRc0lLtQvE4Pbc5fds.crl (hash: prghgZAAt1ehJldEnMW/hxEKflJP5TxlC6pw2Tc2CZU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:2f:4e:86:e1:e9:db:ae:92:88:99:b3:30:26:ba:e1:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=953a45de2807acc45cd252ed42f1383db7397ddb
Validity
Not Before: Jun 19 07:03:13 2024 GMT
Not After : Jun 20 07:03:13 2024 GMT
Subject: CN=4159bcf3cbb421c59d73632610f75319e2317a9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:8a:eb:89:59:9c:45:68:1c:42:b3:3c:82:18:
07:ff:50:bb:7d:00:45:b7:58:f4:2a:36:37:d4:f5:
bc:f2:79:80:5f:f0:51:62:dd:14:e9:f7:13:c8:05:
bd:a1:b1:de:be:d6:42:ce:b4:0d:6a:4e:07:98:66:
51:a3:bb:fd:23:e1:db:e8:50:ae:03:7f:d0:be:fc:
f0:83:31:37:5a:7f:78:c6:bb:89:d3:71:3c:dd:f4:
15:9c:f4:1c:8e:0a:ef:82:ed:a1:de:3a:12:aa:cb:
87:f4:97:1f:a1:49:d5:10:21:fc:e7:91:4a:d6:72:
ab:62:4e:4b:fb:ac:43:9c:f7:37:92:9b:b3:7c:08:
0c:bf:09:db:f5:16:9a:9e:62:4c:17:90:61:a4:c8:
bd:65:e9:6d:41:b5:d2:5f:80:ca:0e:0b:5a:76:03:
83:c0:fb:67:2a:28:e2:b6:14:ed:82:65:68:49:67:
48:23:3c:0f:42:17:41:64:09:31:ba:09:f2:a4:64:
52:d8:35:77:4e:ad:af:d7:0d:02:d4:89:97:12:a7:
60:af:ac:7c:93:ac:55:17:67:f9:ce:f3:0c:94:30:
bd:8c:02:68:e5:ab:8c:99:70:41:c7:12:32:57:36:
fb:e6:39:f4:ff:3c:51:45:02:29:a0:b8:7e:87:fd:
4b:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:59:BC:F3:CB:B4:21:C5:9D:73:63:26:10:F7:53:19:E2:31:7A:9B
X509v3 Authority Key Identifier:
keyid:95:3A:45:DE:28:07:AC:C4:5C:D2:52:ED:42:F1:38:3D:B7:39:7D:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lTpF3igHrMRc0lLtQvE4Pbc5fds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/f9ed9f-6912-4fbb-957b-d54a1f02bcba/1/lTpF3igHrMRc0lLtQvE4Pbc5fds.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/f9ed9f-6912-4fbb-957b-d54a1f02bcba/1/lTpF3igHrMRc0lLtQvE4Pbc5fds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:cc:2c:ff:19:d0:b8:a8:17:27:0c:19:25:40:9a:c9:5c:89:
8b:cb:c2:90:80:3a:ef:00:c5:97:31:bc:67:02:a7:09:88:cd:
f9:1d:f3:33:2c:9d:09:58:ae:f4:19:9a:8e:fb:b6:75:42:d4:
3e:92:ed:4f:01:db:ae:5c:e5:8e:dd:2a:fa:5e:0b:78:1c:1f:
08:32:39:77:5a:75:98:2d:71:87:02:23:a9:13:60:49:17:4e:
e7:41:92:e6:72:5b:c7:70:96:14:e7:77:88:fa:65:86:45:02:
5a:cc:3b:80:b1:82:6b:46:01:02:79:cf:3e:9b:be:8a:da:dc:
44:b4:27:e3:27:09:d6:24:a6:fc:83:3d:fe:38:d2:3c:a7:36:
ea:b6:4b:4a:e0:9c:2f:7f:1f:bc:d4:ce:cb:e0:63:d3:72:3a:
d8:86:26:74:4b:9b:47:4c:df:84:15:76:ec:73:45:d9:d4:47:
ba:c5:6a:7e:67:2a:56:d4:e4:11:e5:60:30:2e:51:42:31:9c:
ab:5f:aa:00:84:5e:63:55:42:a6:7e:68:aa:09:e4:35:75:2b:
0e:b7:01:4d:ff:0d:b4:0d:94:23:d3:81:f0:1d:5d:f1:1b:8d:
66:fa:ac:f4:79:e5:5f:32:4c:70:9a:dc:6c:3f:29:19:ec:af:
08:ca:1c:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:15:52 2025 by rpki-client