Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/ec618f-9f61-4185-ba0d-6e452425a193/1/lFtz335v4RAPHROgfBjVmvIoQow.mft
File: lFtz335v4RAPHROgfBjVmvIoQow.mft (raw, json)
Hash identifier: XhWageLLt5lQNlSqX/qdsumKhwx3Qi580fN7iVjPni8=
Subject key identifier: 40:D5:EC:BC:38:2D:B3:DD:8D:90:16:2D:3D:59:B6:1C:96:3B:46:F6
Authority key identifier: 94:5B:73:DF:7E:6F:E1:10:0F:1D:13:A0:7C:18:D5:9A:F2:28:42:8C
Certificate issuer: /CN=945b73df7e6fe1100f1d13a07c18d59af228428c
Certificate serial: 0194BD859EEFBBD68180ED0E9458BA0DA4E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lFtz335v4RAPHROgfBjVmvIoQow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/ec618f-9f61-4185-ba0d-6e452425a193/1/lFtz335v4RAPHROgfBjVmvIoQow.mft
Manifest number: 12CD
Signing time: Fri 31 Jan 2025 18:00:38 +0000
Manifest this update: Fri 31 Jan 2025 18:00:38 +0000
Manifest next update: Sat 01 Feb 2025 18:00:38 +0000
Files and hashes: 1: JElIcOkDhIb5c2W_nQ-FoPnhPug.roa (hash: b1KlD44TbUaQWj/WgMfaexGt0A0syY3tHrkEIzRunJY=)
2: lFtz335v4RAPHROgfBjVmvIoQow.crl (hash: Af3bLmPCnP/R7cZ/9vLYJ73nRUgK/61aVu0OJKmQTpU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:9e:ef:bb:d6:81:80:ed:0e:94:58:ba:0d:a4:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=945b73df7e6fe1100f1d13a07c18d59af228428c
Validity
Not Before: Jan 31 18:00:38 2025 GMT
Not After : Feb 1 18:00:38 2025 GMT
Subject: CN=40d5ecbc382db3dd8d90162d3d59b61c963b46f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:3d:65:5d:37:ac:ab:f2:18:3f:75:d2:82:63:
97:4a:ce:02:90:05:94:d5:0b:19:63:96:15:2e:a9:
23:c0:bf:0f:98:09:c7:a5:de:a3:fc:b4:04:aa:5c:
3b:e6:fe:d2:b8:b8:66:37:39:54:4a:1f:a6:a8:26:
23:b8:18:3d:15:91:8b:43:c3:c2:a5:ac:b1:77:43:
f0:ed:47:02:dd:b4:9f:b7:4b:64:a8:89:9b:2d:1d:
bf:71:d0:9f:57:8d:65:3f:12:10:e5:60:fc:e0:de:
7d:10:29:fd:7f:58:50:42:5c:2f:ab:07:e5:f4:d1:
a3:f3:f8:b9:68:4b:dd:e4:ac:1c:86:6a:51:e6:c6:
9b:fb:27:48:49:b2:b5:e7:2c:13:57:a8:c3:fe:a5:
55:65:93:1f:76:e0:06:4c:d4:d4:61:9c:fb:1b:6d:
31:f4:bf:ac:1f:5c:18:ca:13:b8:8b:88:13:94:85:
9f:5a:7c:38:92:f5:cb:ea:76:27:9a:0b:47:a3:1d:
93:89:ca:33:b3:4d:0d:8e:82:e3:35:aa:12:35:9f:
93:e4:a0:62:23:0f:7b:51:10:d3:d3:61:d0:c4:e9:
8e:10:c3:57:25:d8:60:af:12:2f:04:c9:a6:fe:4b:
a1:40:ac:67:bb:30:ea:21:ff:34:1e:11:1d:70:02:
9b:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:D5:EC:BC:38:2D:B3:DD:8D:90:16:2D:3D:59:B6:1C:96:3B:46:F6
X509v3 Authority Key Identifier:
keyid:94:5B:73:DF:7E:6F:E1:10:0F:1D:13:A0:7C:18:D5:9A:F2:28:42:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lFtz335v4RAPHROgfBjVmvIoQow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/ec618f-9f61-4185-ba0d-6e452425a193/1/lFtz335v4RAPHROgfBjVmvIoQow.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/ec618f-9f61-4185-ba0d-6e452425a193/1/lFtz335v4RAPHROgfBjVmvIoQow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:41:3f:30:39:83:8c:4e:e6:2f:e1:f6:bd:cc:e0:dd:51:30:
40:c0:56:05:b5:c0:0b:83:e3:18:cb:fd:eb:c6:77:54:e8:e2:
27:b8:67:c0:f1:60:33:09:0f:f1:b8:6e:b8:ef:8a:36:ff:74:
7b:ac:df:1a:f3:ae:a4:70:d5:d5:44:28:dc:8a:c1:b8:6c:96:
55:d9:ee:8c:5b:f9:02:69:11:4c:d0:77:4d:9c:eb:0e:7d:1c:
69:1f:cf:45:45:b7:5a:81:89:00:a3:c5:27:2f:38:85:65:d3:
7e:c1:78:a8:45:e6:c2:fd:bc:f2:c5:ad:37:57:16:c9:47:0e:
76:bf:34:59:4a:81:8f:93:c1:cd:a9:78:11:e3:15:01:f6:60:
3b:f1:97:4f:b2:19:fb:2e:a1:4b:ff:53:44:d1:9c:95:84:4d:
22:db:7f:dd:a7:11:a4:5e:52:96:d5:d5:89:c0:1a:02:ee:d5:
dc:b3:d2:d4:ee:e7:3b:3c:97:2f:1e:de:15:b1:54:c5:2d:89:
b1:f4:fb:c4:52:c4:6d:e2:c3:65:82:c5:3d:80:ab:95:79:f8:
59:7d:b1:5f:56:ea:23:a1:25:78:8e:79:66:58:b8:f2:9a:ae:
d2:a4:5f:56:e4:af:8c:e2:c0:c0:7e:32:c0:82:3e:c7:d0:3d:
2c:b4:0c:75
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9hZ7vu9aBgO0OlFi6DaTpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0NWI3M2RmN2U2ZmUxMTAwZjFkMTNhMDdjMThkNTlhZjIy
ODQyOGMwHhcNMjUwMTMxMTgwMDM4WhcNMjUwMjAxMTgwMDM4WjAzMTEwLwYDVQQD
Eyg0MGQ1ZWNiYzM4MmRiM2RkOGQ5MDE2MmQzZDU5YjYxYzk2M2I0NmY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyj1lXTesq/IYP3XSgmOXSs4CkAWU
1QsZY5YVLqkjwL8PmAnHpd6j/LQEqlw75v7SuLhmNzlUSh+mqCYjuBg9FZGLQ8PC
payxd0Pw7UcC3bSft0tkqImbLR2/cdCfV41lPxIQ5WD84N59ECn9f1hQQlwvqwfl
9NGj8/i5aEvd5KwchmpR5sab+ydISbK15ywTV6jD/qVVZZMfduAGTNTUYZz7G20x
9L+sH1wYyhO4i4gTlIWfWnw4kvXL6nYnmgtHox2Ticozs00NjoLjNaoSNZ+T5KBi
Iw97URDT02HQxOmOEMNXJdhgrxIvBMmm/kuhQKxnuzDqIf80HhEdcAKb7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEDV7Lw4LbPdjZAWLT1ZthyWO0b2MB8GA1UdIwQY
MBaAFJRbc99+b+EQDx0ToHwY1ZryKEKMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbEZ0ejMzNXY0UkFQSFJPZ2ZCalZtdklvUW93LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9lYzYxOGYtOWY2MS00MTg1LWJhMGQt
NmU0NTI0MjVhMTkzLzEvbEZ0ejMzNXY0UkFQSFJPZ2ZCalZtdklvUW93Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC9lYzYxOGYtOWY2MS00MTg1LWJhMGQtNmU0NTI0MjVhMTkz
LzEvbEZ0ejMzNXY0UkFQSFJPZ2ZCalZtdklvUW93LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAckE/MDmD
jE7mL+H2vczg3VEwQMBWBbXAC4PjGMv968Z3VOjiJ7hnwPFgMwkP8bhuuO+KNv90
e6zfGvOupHDV1UQo3IrBuGyWVdnujFv5AmkRTNB3TZzrDn0caR/PRUW3WoGJAKPF
Jy84hWXTfsF4qEXmwv288sWtN1cWyUcOdr80WUqBj5PBzal4EeMVAfZgO/GXT7IZ
+y6hS/9TRNGclYRNItt/3acRpF5SltXVicAaAu7V3LPS1O7nOzyXLx7eFbFUxS2J
sfT7xFLEbeLDZYLFPYCrlXn4WX2xX1bqI6EleI55Zli48pqu0qRfVuSvjOLAwH4y
wII+x9A9LLQMdQ==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:37:54 2025 by rpki-client