Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/c1afc6-fd95-4555-8625-3fe469db6626/1/ltkAsLweXxt4xlzYPnog2GNHJrY.mft
File: ltkAsLweXxt4xlzYPnog2GNHJrY.mft (raw, json)
Hash identifier: vmXjXkkY7GVrKwTKw6+W14Z32COq9VFcUj2ub/qh7Ck=
Subject key identifier: 76:4A:BC:AE:49:8C:F5:AC:9E:BF:1F:D1:BC:1E:F1:99:66:AC:30:89
Authority key identifier: 96:D9:00:B0:BC:1E:5F:1B:78:C6:5C:D8:3E:7A:20:D8:63:47:26:B6
Certificate issuer: /CN=96d900b0bc1e5f1b78c65cd83e7a20d8634726b6
Certificate serial: 01951D01D22E8C24C36B5915CC5A9D7CBFC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ltkAsLweXxt4xlzYPnog2GNHJrY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/c1afc6-fd95-4555-8625-3fe469db6626/1/ltkAsLweXxt4xlzYPnog2GNHJrY.mft
Manifest number: 145B
Signing time: Wed 19 Feb 2025 07:00:13 +0000
Manifest this update: Wed 19 Feb 2025 07:00:13 +0000
Manifest next update: Thu 20 Feb 2025 07:00:13 +0000
Files and hashes: 1: EuHqvHYj6jpIyXMv6rjnbEuBkks.roa (hash: egrbWq58qBFkNjLMJRTqcwBt98Q9t2+QyI4RLP6TLkY=)
2: ltkAsLweXxt4xlzYPnog2GNHJrY.crl (hash: BYMG7dhRmNtz7XA3piOUnhwZzx+1KjxMZF+7yQp2paQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:1d:01:d2:2e:8c:24:c3:6b:59:15:cc:5a:9d:7c:bf:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96d900b0bc1e5f1b78c65cd83e7a20d8634726b6
Validity
Not Before: Feb 19 07:00:13 2025 GMT
Not After : Feb 20 07:00:13 2025 GMT
Subject: CN=764abcae498cf5ac9ebf1fd1bc1ef19966ac3089
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:bf:a6:36:a5:d2:cd:f6:8b:a7:bf:27:e9:48:
33:e6:ba:e0:93:af:c5:3f:1a:94:63:82:6e:57:3a:
18:4e:c4:d9:40:6a:7b:41:10:4a:be:b4:49:fd:05:
2e:ba:75:ae:be:d8:04:36:a3:a9:dd:a5:6c:2d:6f:
7d:d0:a6:23:fa:a8:c5:73:60:ab:f6:dc:70:e3:fa:
6f:75:40:8b:82:99:0b:3b:47:a8:c5:27:68:92:b9:
09:53:26:25:4e:ac:fa:92:87:b8:3a:97:a4:74:cb:
f8:49:eb:20:ad:d9:75:0e:01:77:0d:4a:f0:7d:0e:
05:2f:ac:ab:32:91:88:5c:c3:85:4e:b4:a8:30:23:
20:09:c8:d4:c5:ab:80:25:0d:ed:af:c3:e8:aa:e5:
af:77:fd:4b:33:f4:08:c2:63:ee:24:31:86:d5:29:
f0:52:32:be:1c:20:40:ec:05:64:21:09:b2:a1:31:
a0:e6:c3:5e:4e:e1:1c:60:7d:f6:46:8b:cd:6a:b2:
40:50:9b:23:4e:26:ab:d5:85:ca:09:3f:f1:22:30:
42:c7:84:ab:f0:8f:1f:89:db:90:c8:78:77:b0:26:
4d:11:32:1b:63:20:71:ee:4f:4d:a5:af:10:4c:e1:
b5:ba:93:25:31:ff:4e:77:a4:69:9f:54:bb:67:e3:
bf:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:4A:BC:AE:49:8C:F5:AC:9E:BF:1F:D1:BC:1E:F1:99:66:AC:30:89
X509v3 Authority Key Identifier:
keyid:96:D9:00:B0:BC:1E:5F:1B:78:C6:5C:D8:3E:7A:20:D8:63:47:26:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ltkAsLweXxt4xlzYPnog2GNHJrY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c1afc6-fd95-4555-8625-3fe469db6626/1/ltkAsLweXxt4xlzYPnog2GNHJrY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c1afc6-fd95-4555-8625-3fe469db6626/1/ltkAsLweXxt4xlzYPnog2GNHJrY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:ae:11:c4:b5:db:64:37:ea:9f:e1:62:3f:77:f3:0e:13:c1:
61:b0:d6:aa:08:a4:14:3a:00:89:67:22:cc:5a:12:1b:2e:23:
36:07:ef:06:15:93:91:24:e7:bc:98:f4:42:d8:1d:f7:53:b4:
b5:5b:f8:a4:7d:87:13:45:3b:26:6e:65:66:33:2e:ae:a2:48:
e9:bd:21:97:80:27:50:ce:60:ba:91:f7:50:13:ce:bc:29:33:
23:a5:87:df:ef:a2:83:45:93:9d:56:f5:75:9d:24:9b:0c:d4:
6c:96:0c:96:4e:e0:a7:ab:33:ba:9d:f7:31:ec:00:8f:b2:27:
68:03:db:cf:59:f0:44:21:d1:91:b6:65:5e:b5:e4:36:6f:75:
e6:35:39:d1:e5:ca:36:f3:38:af:20:f2:7b:00:90:c1:65:39:
0b:a0:32:44:bf:ab:5b:fc:ac:72:ad:46:8d:6d:08:cb:7d:c6:
db:03:d6:75:e9:f2:c6:d9:0c:86:25:e9:ed:69:55:43:b8:5c:
39:43:8c:02:d1:e7:d6:35:3e:14:ff:34:31:6c:8a:0c:02:63:
89:58:3d:74:b1:02:00:70:f1:36:0d:17:1b:2e:43:21:26:b2:
9b:b9:b5:5e:49:93:4c:4d:54:cb:13:c7:92:fc:d8:b3:e3:58:
9f:76:58:76
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZUdAdIujCTDa1kVzFqdfL/BMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2ZDkwMGIwYmMxZTVmMWI3OGM2NWNkODNlN2EyMGQ4NjM0
NzI2YjYwHhcNMjUwMjE5MDcwMDEzWhcNMjUwMjIwMDcwMDEzWjAzMTEwLwYDVQQD
Eyg3NjRhYmNhZTQ5OGNmNWFjOWViZjFmZDFiYzFlZjE5OTY2YWMzMDg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu7+mNqXSzfaLp78n6Ugz5rrgk6/F
PxqUY4JuVzoYTsTZQGp7QRBKvrRJ/QUuunWuvtgENqOp3aVsLW990KYj+qjFc2Cr
9txw4/pvdUCLgpkLO0eoxSdokrkJUyYlTqz6koe4OpekdMv4Sesgrdl1DgF3DUrw
fQ4FL6yrMpGIXMOFTrSoMCMgCcjUxauAJQ3tr8PoquWvd/1LM/QIwmPuJDGG1Snw
UjK+HCBA7AVkIQmyoTGg5sNeTuEcYH32RovNarJAUJsjTiar1YXKCT/xIjBCx4Sr
8I8fiduQyHh3sCZNETIbYyBx7k9Npa8QTOG1upMlMf9Od6Rpn1S7Z+O/LQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHZKvK5JjPWsnr8f0bwe8ZlmrDCJMB8GA1UdIwQY
MBaAFJbZALC8Hl8beMZc2D56INhjRya2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbHRrQXNMd2VYeHQ0eGx6WVBub2cyR05ISnJZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC9jMWFmYzYtZmQ5NS00NTU1LTg2MjUt
M2ZlNDY5ZGI2NjI2LzEvbHRrQXNMd2VYeHQ0eGx6WVBub2cyR05ISnJZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC9jMWFmYzYtZmQ5NS00NTU1LTg2MjUtM2ZlNDY5ZGI2NjI2
LzEvbHRrQXNMd2VYeHQ0eGx6WVBub2cyR05ISnJZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZK4RxLXb
ZDfqn+FiP3fzDhPBYbDWqgikFDoAiWcizFoSGy4jNgfvBhWTkSTnvJj0Qtgd91O0
tVv4pH2HE0U7Jm5lZjMurqJI6b0hl4AnUM5gupH3UBPOvCkzI6WH3++ig0WTnVb1
dZ0kmwzUbJYMlk7gp6szup33MewAj7InaAPbz1nwRCHRkbZlXrXkNm915jU50eXK
NvM4ryDyewCQwWU5C6AyRL+rW/yscq1GjW0Iy33G2wPWdenyxtkMhiXp7WlVQ7hc
OUOMAtHn1jU+FP80MWyKDAJjiVg9dLECAHDxNg0XGy5DISaym7m1XkmTTE1UyxPH
kvzYs+NYn3ZYdg==
-----END CERTIFICATE-----
Generated at Sat May 10 23:19:41 2025 by rpki-client