Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/3b0ba6-fc31-4ec6-8161-ad827e3edf6c/1/L1yv1e_S3yybMJu9Xu1HppGJhLA.mft
File: L1yv1e_S3yybMJu9Xu1HppGJhLA.mft (raw, json)
Hash identifier: DBloNDovdUTLCkWCxHDKmkifYVuxL7oYjtTBneOK+Es=
Subject key identifier: D6:49:26:DD:34:9E:78:90:94:4B:79:58:CF:5C:0B:A4:18:B2:A2:30
Authority key identifier: 2F:5C:AF:D5:EF:D2:DF:2C:9B:30:9B:BD:5E:ED:47:A6:91:89:84:B0
Certificate issuer: /CN=2f5cafd5efd2df2c9b309bbd5eed47a6918984b0
Certificate serial: 0195E1226CC01AC1337AED56ED876C0B1FA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L1yv1e_S3yybMJu9Xu1HppGJhLA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/3b0ba6-fc31-4ec6-8161-ad827e3edf6c/1/L1yv1e_S3yybMJu9Xu1HppGJhLA.mft
Manifest number: 14C0
Signing time: Sat 29 Mar 2025 09:01:24 +0000
Manifest this update: Sat 29 Mar 2025 09:01:24 +0000
Manifest next update: Sun 30 Mar 2025 09:01:24 +0000
Files and hashes: 1: L1yv1e_S3yybMJu9Xu1HppGJhLA.crl (hash: E9eDY0E1Q+wAz2t/qYfuoVWLmgy+afO1+W1wr0xU+LY=)
2: X6bUQA_5cf8zbxjRiQVtHpjCxCQ.roa (hash: zu1RgyNxGmH89VrmCcbJJkVVqRZ4t3VoOwmmWEEmDMc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e1:22:6c:c0:1a:c1:33:7a:ed:56:ed:87:6c:0b:1f:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f5cafd5efd2df2c9b309bbd5eed47a6918984b0
Validity
Not Before: Mar 29 09:01:24 2025 GMT
Not After : Mar 30 09:01:24 2025 GMT
Subject: CN=d64926dd349e7890944b7958cf5c0ba418b2a230
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e1:c2:bd:5d:24:0c:2d:1c:22:c4:db:bf:51:
81:13:d7:bc:c3:0c:0a:4a:8a:48:a8:29:22:f9:0d:
04:79:1f:60:4d:dc:ba:87:41:3f:5e:c3:63:82:3b:
0c:84:20:bb:3f:f0:71:e1:50:7f:e0:59:fe:29:5e:
0a:9e:d0:e2:35:13:71:68:86:72:75:66:14:92:4d:
46:96:72:00:ee:e4:61:e7:03:47:b2:d5:87:53:cd:
d8:ab:ef:ea:2c:d1:bb:3d:28:62:f7:16:e5:fc:0c:
6a:7d:1e:2f:07:42:e7:e5:73:43:97:62:f5:58:80:
9d:df:f0:fe:2b:fa:87:ba:57:dc:02:f9:e9:bf:39:
f1:39:1d:9f:67:f3:d1:70:dd:bf:79:61:fd:f1:bf:
b4:2b:ee:a5:14:58:2f:79:85:4f:ca:2a:88:1f:c5:
24:e0:07:6a:80:6b:8b:a0:44:18:de:86:dd:ba:72:
29:8b:ca:f3:2e:0e:54:c6:22:0a:47:89:2a:2b:81:
94:68:8f:25:1a:81:dd:94:ca:a8:b3:a7:4d:d6:21:
ca:21:a3:04:da:59:12:90:a4:da:28:a0:37:05:e4:
d1:cd:59:e9:d8:23:43:aa:c3:57:2a:99:b8:4d:ce:
ee:97:e9:f6:97:da:91:c6:35:5f:b2:62:6c:42:b7:
2e:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:49:26:DD:34:9E:78:90:94:4B:79:58:CF:5C:0B:A4:18:B2:A2:30
X509v3 Authority Key Identifier:
keyid:2F:5C:AF:D5:EF:D2:DF:2C:9B:30:9B:BD:5E:ED:47:A6:91:89:84:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L1yv1e_S3yybMJu9Xu1HppGJhLA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/3b0ba6-fc31-4ec6-8161-ad827e3edf6c/1/L1yv1e_S3yybMJu9Xu1HppGJhLA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/3b0ba6-fc31-4ec6-8161-ad827e3edf6c/1/L1yv1e_S3yybMJu9Xu1HppGJhLA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:2a:d4:3f:5d:ee:10:36:a2:22:68:47:06:51:0a:38:8f:0b:
fd:50:03:99:33:8c:e2:c9:13:72:99:a9:17:98:93:af:6d:22:
ed:88:1a:8e:45:5b:b1:e0:df:49:e6:e0:b8:17:90:bd:ef:9a:
aa:9d:cf:5b:bc:da:6f:47:a9:94:0f:30:b4:cb:2b:14:73:fb:
25:f7:4a:23:d7:bf:ad:44:a1:c3:a1:27:3f:3b:6e:1a:61:99:
8b:f3:f0:93:87:34:47:80:5d:2b:47:2f:90:8c:54:a0:28:93:
0a:61:1f:f3:48:b9:65:e7:35:18:f0:94:56:50:ac:ca:04:9a:
95:0c:b8:c4:81:53:5c:c9:27:8c:0f:31:31:83:d8:a8:51:14:
7e:16:ec:02:62:7d:31:7e:29:b4:ed:7b:55:23:75:60:be:8f:
bb:8e:a1:91:32:cc:b1:86:df:06:2e:3e:1e:b5:e3:68:3a:b3:
62:87:38:12:1c:b9:db:c3:7f:60:31:39:48:21:5e:2a:b1:34:
a0:a1:c5:e8:72:e0:06:99:32:e8:89:66:a1:f9:5d:fb:1b:84:
be:20:0e:d4:65:de:34:4b:08:d8:61:d5:d5:3b:ba:b7:6b:c2:
c0:d9:20:c3:ad:ee:bf:52:66:e4:dc:c1:f9:dc:42:89:4c:71:
5a:03:05:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:41:18 2025 by rpki-client