Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/c1afc6-fd95-4555-8625-3fe469db6626/1/ltkAsLweXxt4xlzYPnog2GNHJrY.mft
File: ltkAsLweXxt4xlzYPnog2GNHJrY.mft (raw, json)
Hash identifier: 9NoDQflt+XEW/IWGTspvrzIh0XmTUZH+y0Q8VcpsuYg=
Subject key identifier: 79:64:B6:AA:D0:30:FF:70:0B:5F:46:11:1B:01:7A:85:85:2C:60:DE
Authority key identifier: 96:D9:00:B0:BC:1E:5F:1B:78:C6:5C:D8:3E:7A:20:D8:63:47:26:B6
Certificate issuer: /CN=96d900b0bc1e5f1b78c65cd83e7a20d8634726b6
Certificate serial: 0195154849105FC864DE02AF44BC78637F98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ltkAsLweXxt4xlzYPnog2GNHJrY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/c1afc6-fd95-4555-8625-3fe469db6626/1/ltkAsLweXxt4xlzYPnog2GNHJrY.mft
Manifest number: 1457
Signing time: Mon 17 Feb 2025 19:00:13 +0000
Manifest this update: Mon 17 Feb 2025 19:00:13 +0000
Manifest next update: Tue 18 Feb 2025 19:00:13 +0000
Files and hashes: 1: EuHqvHYj6jpIyXMv6rjnbEuBkks.roa (hash: egrbWq58qBFkNjLMJRTqcwBt98Q9t2+QyI4RLP6TLkY=)
2: ltkAsLweXxt4xlzYPnog2GNHJrY.crl (hash: zcWtJTUDZw79femwt/vOy1FkrfAqVYrq2AVw3Id1TPs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:15:48:49:10:5f:c8:64:de:02:af:44:bc:78:63:7f:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96d900b0bc1e5f1b78c65cd83e7a20d8634726b6
Validity
Not Before: Feb 17 19:00:13 2025 GMT
Not After : Feb 18 19:00:13 2025 GMT
Subject: CN=7964b6aad030ff700b5f46111b017a85852c60de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:a8:5f:11:43:fe:7e:3d:45:78:98:61:ac:eb:
c6:24:56:63:af:c6:ce:82:62:07:7b:9d:88:a5:79:
61:ae:d1:e3:30:58:73:a1:e4:96:27:20:bc:c6:11:
8b:4a:08:60:db:91:fc:c3:1c:13:e7:2d:93:7b:87:
9f:f0:68:ec:75:a9:ac:75:a6:ba:98:c1:56:11:68:
f7:15:33:ed:d2:9c:8b:5e:ea:3c:52:9b:f4:1d:f0:
f8:b9:7e:ee:15:f3:b1:d0:f8:a6:3f:3d:48:2e:b9:
e6:f2:b5:dc:86:0a:06:0e:8d:1d:af:2c:f6:ae:cf:
14:6e:b6:75:7d:b8:70:84:f3:1e:93:70:47:07:28:
d8:1e:5d:c3:15:96:ea:1d:fd:8c:b8:e9:e8:55:fc:
45:b9:ce:3d:d9:24:18:a7:a4:c1:5f:b6:34:b9:25:
88:12:3a:2e:6d:d6:24:b2:0e:cf:d6:c6:15:37:02:
b4:07:92:3e:e3:9c:aa:64:0f:4f:73:e3:22:78:3d:
01:1d:fe:ec:32:93:87:e1:39:b8:51:9e:90:76:49:
4d:bd:46:2c:29:c9:16:d0:3f:4c:bb:e6:9d:be:12:
f2:66:f5:22:d6:82:d1:9e:18:00:59:57:bd:2b:d7:
a4:be:03:df:d1:b3:45:7b:97:9d:7a:9b:eb:3c:92:
23:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:64:B6:AA:D0:30:FF:70:0B:5F:46:11:1B:01:7A:85:85:2C:60:DE
X509v3 Authority Key Identifier:
keyid:96:D9:00:B0:BC:1E:5F:1B:78:C6:5C:D8:3E:7A:20:D8:63:47:26:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ltkAsLweXxt4xlzYPnog2GNHJrY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c1afc6-fd95-4555-8625-3fe469db6626/1/ltkAsLweXxt4xlzYPnog2GNHJrY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c1afc6-fd95-4555-8625-3fe469db6626/1/ltkAsLweXxt4xlzYPnog2GNHJrY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:88:64:b4:46:8d:4b:b8:7f:36:91:ba:f5:e8:34:c3:9f:65:
4f:ba:61:49:87:68:1f:0d:47:65:15:b5:d4:d9:fd:5e:90:9c:
5b:96:5e:5e:e2:ae:5c:29:86:bc:7b:aa:8e:c7:8f:31:ac:1b:
97:54:3c:5c:59:81:3a:b5:01:41:7b:88:f7:43:e2:5a:4e:3c:
95:94:3f:48:a8:9a:99:7b:5e:d0:b2:a8:15:9d:0f:49:1b:67:
db:6a:3f:0c:1a:5c:3a:fb:b5:4b:5e:61:6f:69:29:e4:af:33:
e9:d9:90:a5:4f:60:cf:b4:e1:03:7a:2a:1f:d2:de:2d:1e:4a:
b1:c4:88:18:83:00:ca:15:d0:e2:fd:7b:f2:42:0a:1b:a2:af:
cd:5f:ba:a1:0e:41:28:ef:8b:7f:cb:33:5c:75:7d:e0:a7:21:
03:72:12:44:df:ec:e5:e9:ec:aa:5b:64:31:6f:7d:23:43:23:
08:ff:e1:f6:bc:89:0b:9c:e5:9b:15:3b:63:70:94:0f:0e:eb:
09:88:08:14:68:5c:99:26:80:68:20:25:9c:44:d3:f2:0b:51:
9e:29:a7:27:ff:ba:04:92:8d:0c:ad:ac:81:8d:d5:e1:be:0e:
94:c5:8f:41:32:76:e3:57:c4:15:2d:84:9d:9a:e2:38:74:85:
3f:8b:dd:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 06:26:56 2025 by rpki-client