Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/381b58-7c96-4360-9965-ecf233f8ce82/1/_l1pjs9mrkbt4fyCML--IJbVJFs.mft
File: _l1pjs9mrkbt4fyCML--IJbVJFs.mft (raw, json)
Hash identifier: EgB490xb+cmpNwOegZVmziXOeP+IeVKD5H5cKszClwA=
Subject key identifier: 87:61:28:91:71:36:7A:AE:F4:9F:B5:2B:B6:DF:AB:6B:38:3A:D9:41
Authority key identifier: FE:5D:69:8E:CF:66:AE:46:ED:E1:FC:82:30:BF:BE:20:96:D5:24:5B
Certificate issuer: /CN=fe5d698ecf66ae46ede1fc8230bfbe2096d5245b
Certificate serial: 01938BF73B587D812DB4EE1D0FACC414AF68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_l1pjs9mrkbt4fyCML--IJbVJFs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/381b58-7c96-4360-9965-ecf233f8ce82/1/_l1pjs9mrkbt4fyCML--IJbVJFs.mft
Manifest number: 108A
Signing time: Tue 03 Dec 2024 10:00:55 +0000
Manifest this update: Tue 03 Dec 2024 10:00:55 +0000
Manifest next update: Wed 04 Dec 2024 10:00:55 +0000
Files and hashes: 1: 3ilWmbj21Rn2Fe6QbTFedVruxao.roa (hash: Kh300XJFw4bBHnmjfmzYz8DLdXrJBrOIMUpO3CLF/ZY=)
2: _l1pjs9mrkbt4fyCML--IJbVJFs.crl (hash: 3nxb5Cc3SZ86oEEEMo7jAzqNZWYCxWnwZhEXtM3EiLY=)
3: citk1A7LPcg5sYuvxyt7jmmQj3c.roa (hash: GJQy2gMFB+NYjhirzQ9eTfon2BidsNTMtMbFHzUbgIY=)
4: vGrgBkxABXjSPZU_83SKP0hcRfo.roa (hash: YTGp3CF9GQ9WKugE3ouGM1u2nuidxM5FKOAfHhsldDg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:8b:f7:3b:58:7d:81:2d:b4:ee:1d:0f:ac:c4:14:af:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe5d698ecf66ae46ede1fc8230bfbe2096d5245b
Validity
Not Before: Dec 3 10:00:55 2024 GMT
Not After : Dec 4 10:00:55 2024 GMT
Subject: CN=8761289171367aaef49fb52bb6dfab6b383ad941
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:7f:96:6c:b0:1c:89:80:0f:e1:bf:97:7b:e3:
1e:31:c6:78:68:09:f7:87:94:6c:93:bb:28:7d:c9:
e2:c3:ef:f8:a9:b4:65:ff:1f:de:14:ae:9d:30:f9:
80:95:fd:c5:b2:46:61:0e:9c:ef:18:ea:71:16:87:
4c:ef:54:7e:6a:15:4e:0c:a6:d9:26:2c:ad:b0:fa:
28:78:65:2c:23:ff:17:e8:73:60:2f:48:48:6d:7c:
de:7b:17:0a:67:c5:cf:5d:86:64:61:78:41:72:c9:
c6:bf:7a:32:b7:63:8e:e2:29:2e:59:9b:13:cd:ec:
af:49:cb:14:ec:77:29:85:04:85:84:0f:bd:70:64:
79:7b:16:ae:55:47:36:5b:3c:dd:c2:a6:26:66:27:
9c:11:54:10:69:5a:32:1b:94:f5:e6:9f:ab:93:db:
97:eb:d2:ff:c2:ab:1b:b7:fc:04:6b:fa:a1:a9:53:
eb:6e:84:40:26:72:17:23:f3:a0:1d:31:ab:a1:35:
c7:2a:9d:3d:dc:00:29:a6:0d:be:a3:08:4f:33:13:
b7:22:15:e0:28:47:a3:f2:eb:da:f1:a0:f1:eb:41:
c8:10:7a:b9:5a:ba:7a:6a:0a:c0:d8:d7:a4:81:a1:
24:9c:01:08:0a:d3:6f:b3:34:a4:de:96:40:7b:62:
62:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:61:28:91:71:36:7A:AE:F4:9F:B5:2B:B6:DF:AB:6B:38:3A:D9:41
X509v3 Authority Key Identifier:
keyid:FE:5D:69:8E:CF:66:AE:46:ED:E1:FC:82:30:BF:BE:20:96:D5:24:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_l1pjs9mrkbt4fyCML--IJbVJFs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/381b58-7c96-4360-9965-ecf233f8ce82/1/_l1pjs9mrkbt4fyCML--IJbVJFs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/381b58-7c96-4360-9965-ecf233f8ce82/1/_l1pjs9mrkbt4fyCML--IJbVJFs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:8e:14:09:4b:0f:71:99:86:f9:80:9a:b4:6b:45:c4:47:1c:
d7:67:cc:8b:b2:15:b1:7a:78:75:ab:f5:45:0a:3f:d1:b8:4d:
68:53:c5:0d:07:0c:fc:5e:2d:25:8f:44:5c:e1:19:3c:6d:f5:
bb:d6:d8:b2:8b:0f:7f:ad:ef:30:13:a1:93:38:72:74:d0:26:
e6:a9:dd:1b:23:4b:95:a0:81:51:1c:d0:2a:28:d7:61:a6:3f:
cc:82:83:e9:ff:1e:7e:fe:ee:9e:6c:53:80:38:b0:df:7c:08:
09:68:4e:54:7f:79:6a:09:f8:ac:7a:e3:b9:2c:59:67:6e:3c:
2b:30:0a:a6:7e:c4:19:49:2b:6a:1d:ca:6f:c6:35:d0:18:72:
d0:69:da:10:ff:c6:ca:67:3d:6a:59:35:9d:15:3b:17:2c:8b:
e6:80:91:95:42:98:ad:bd:ef:24:59:a3:80:87:85:ae:94:c5:
2e:98:61:8d:8f:5b:19:f8:14:62:c1:46:e1:a4:e5:f6:06:85:
33:b3:07:66:af:0e:b8:0e:d6:8d:6d:a2:11:c2:7b:f1:de:aa:
3a:f9:57:5e:a8:e4:ac:cd:9c:dc:34:14:23:e7:fb:75:37:51:
5f:5c:d1:ee:bd:f9:04:42:4d:74:fe:da:f2:0d:15:96:3b:d9:
73:10:e8:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 11:02:22 2025 by rpki-client