Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/e5c056-03b1-46a9-b214-78fc3bc28ba1/1/lJgy8CXL76HqG8oMOQtjwXaUjNI.mft
File: lJgy8CXL76HqG8oMOQtjwXaUjNI.mft (raw, json)
Hash identifier: FqiXHJ5YPb7BplIH4LFHrSC56vuxI5to3ScEngJInB4=
Subject key identifier: 04:93:D0:66:1D:BB:15:29:41:26:65:01:DC:BB:7D:5A:43:76:8C:BE
Authority key identifier: 94:98:32:F0:25:CB:EF:A1:EA:1B:CA:0C:39:0B:63:C1:76:94:8C:D2
Certificate issuer: /CN=949832f025cbefa1ea1bca0c390b63c176948cd2
Certificate serial: 0194BD17596B3FB507D8EAA7C42AFCD99238
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lJgy8CXL76HqG8oMOQtjwXaUjNI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/e5c056-03b1-46a9-b214-78fc3bc28ba1/1/lJgy8CXL76HqG8oMOQtjwXaUjNI.mft
Manifest number: 02A5
Signing time: Fri 31 Jan 2025 16:00:11 +0000
Manifest this update: Fri 31 Jan 2025 16:00:11 +0000
Manifest next update: Sat 01 Feb 2025 16:00:11 +0000
Files and hashes: 1: euJQQHPXaEEafjtTEpsACoT0UO8.roa (hash: LMr9+ppvHgb0CfRsIuadMwP8K1TTGxo74gFD8Bmp2bs=)
2: lJgy8CXL76HqG8oMOQtjwXaUjNI.crl (hash: eNyUer/pG2diTy8dGNFdUJhiWlFKwXUG+cLWKGfFfnI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:59:6b:3f:b5:07:d8:ea:a7:c4:2a:fc:d9:92:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=949832f025cbefa1ea1bca0c390b63c176948cd2
Validity
Not Before: Jan 31 16:00:11 2025 GMT
Not After : Feb 1 16:00:11 2025 GMT
Subject: CN=0493d0661dbb152941266501dcbb7d5a43768cbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:59:6d:c0:1c:69:28:9f:b0:57:a5:64:83:3d:
26:36:13:ec:97:af:1d:bc:ba:0f:54:bd:5e:1a:dd:
76:82:72:f7:cf:b8:70:5e:63:11:1f:7d:4b:b4:e6:
5d:4c:1d:a4:91:19:40:12:dc:6f:a2:c0:ac:bd:00:
a9:23:80:9b:71:c9:a4:e3:d1:7e:25:f7:18:83:6d:
32:25:a4:00:40:43:43:69:45:4f:db:77:ea:ab:fe:
cf:c5:f0:e4:e5:2b:0a:70:fc:76:8b:ed:36:06:fa:
e1:45:d8:9a:42:df:f0:7a:44:c7:87:ab:1e:97:f4:
f4:c9:1f:9b:d5:02:4e:2a:db:13:c5:68:09:af:38:
4c:ad:8e:1e:ca:b9:24:7a:3b:87:65:14:67:da:e0:
09:85:0c:f6:75:bb:79:83:2c:78:f4:ac:cf:50:42:
60:f5:c7:6e:00:52:c9:8c:94:5d:22:13:13:01:dc:
9d:09:07:e6:20:a5:19:f8:3e:99:d0:ef:11:25:5c:
20:8a:ad:be:36:d9:18:b3:cd:6a:60:bf:d6:f6:86:
bb:43:ed:bf:49:71:89:ff:57:5d:56:72:07:b3:3d:
2e:f9:a7:1c:70:a0:f7:b2:0a:86:8e:9a:b8:6f:24:
37:b8:ff:ea:88:44:7a:02:60:fe:05:8b:82:9f:53:
57:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:93:D0:66:1D:BB:15:29:41:26:65:01:DC:BB:7D:5A:43:76:8C:BE
X509v3 Authority Key Identifier:
keyid:94:98:32:F0:25:CB:EF:A1:EA:1B:CA:0C:39:0B:63:C1:76:94:8C:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lJgy8CXL76HqG8oMOQtjwXaUjNI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e5c056-03b1-46a9-b214-78fc3bc28ba1/1/lJgy8CXL76HqG8oMOQtjwXaUjNI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e5c056-03b1-46a9-b214-78fc3bc28ba1/1/lJgy8CXL76HqG8oMOQtjwXaUjNI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:76:04:12:03:cc:80:b1:05:b7:7c:38:c6:68:87:62:ef:88:
e3:8d:73:75:3b:cc:42:52:67:4e:71:65:cb:86:1d:84:09:45:
76:aa:82:79:2f:f4:a7:cf:b8:03:02:42:4f:17:48:1f:8e:aa:
df:3b:15:17:8a:38:ef:dd:32:e4:2c:b0:1d:f7:2d:48:ee:b3:
75:9d:a8:4b:bd:37:de:28:68:db:e3:6b:a5:f4:c5:07:a8:cb:
cf:72:9a:d3:8b:57:23:a6:9d:dc:a6:ff:72:d7:76:19:6e:bf:
b0:cb:aa:69:40:1d:fb:d3:15:36:5c:29:be:78:a9:c1:c1:e8:
44:1b:66:47:be:41:30:f2:29:22:45:04:49:f8:d6:a5:db:9e:
20:4d:f2:8f:4c:20:81:9a:d6:46:90:d4:61:ac:57:ee:20:ab:
32:1c:65:2c:c4:bc:90:22:6d:27:3b:1b:32:a3:4a:b5:6a:6b:
1d:96:63:f6:4e:7e:55:52:c7:7e:ab:aa:fe:a7:74:1c:e9:48:
5d:e1:ef:c8:6a:63:85:8a:7c:a8:ce:b5:22:aa:96:42:c3:c9:
99:3e:95:6b:55:06:f5:d9:62:ab:24:e6:5c:73:51:ee:78:46:
e0:83:f7:c2:8c:27:b5:77:e5:d3:29:ec:66:47:02:57:ce:f5:
8f:24:f3:a6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F1lrP7UH2OqnxCr82ZI4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0OTgzMmYwMjVjYmVmYTFlYTFiY2EwYzM5MGI2M2MxNzY5
NDhjZDIwHhcNMjUwMTMxMTYwMDExWhcNMjUwMjAxMTYwMDExWjAzMTEwLwYDVQQD
EygwNDkzZDA2NjFkYmIxNTI5NDEyNjY1MDFkY2JiN2Q1YTQzNzY4Y2JlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAslltwBxpKJ+wV6Vkgz0mNhPsl68d
vLoPVL1eGt12gnL3z7hwXmMRH31LtOZdTB2kkRlAEtxvosCsvQCpI4Cbccmk49F+
JfcYg20yJaQAQENDaUVP23fqq/7PxfDk5SsKcPx2i+02BvrhRdiaQt/wekTHh6se
l/T0yR+b1QJOKtsTxWgJrzhMrY4eyrkkejuHZRRn2uAJhQz2dbt5gyx49KzPUEJg
9cduAFLJjJRdIhMTAdydCQfmIKUZ+D6Z0O8RJVwgiq2+NtkYs81qYL/W9oa7Q+2/
SXGJ/1ddVnIHsz0u+acccKD3sgqGjpq4byQ3uP/qiER6AmD+BYuCn1NX5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAST0GYduxUpQSZlAdy7fVpDdoy+MB8GA1UdIwQY
MBaAFJSYMvAly++h6hvKDDkLY8F2lIzSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbEpneThDWEw3NkhxRzhvTU9RdGp3WGFVak5JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9lNWMwNTYtMDNiMS00NmE5LWIyMTQt
NzhmYzNiYzI4YmExLzEvbEpneThDWEw3NkhxRzhvTU9RdGp3WGFVak5JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS9lNWMwNTYtMDNiMS00NmE5LWIyMTQtNzhmYzNiYzI4YmEx
LzEvbEpneThDWEw3NkhxRzhvTU9RdGp3WGFVak5JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfHYEEgPM
gLEFt3w4xmiHYu+I441zdTvMQlJnTnFly4YdhAlFdqqCeS/0p8+4AwJCTxdIH46q
3zsVF4o4790y5CywHfctSO6zdZ2oS7033iho2+NrpfTFB6jLz3Ka04tXI6ad3Kb/
ctd2GW6/sMuqaUAd+9MVNlwpvnipwcHoRBtmR75BMPIpIkUESfjWpdueIE3yj0wg
gZrWRpDUYaxX7iCrMhxlLMS8kCJtJzsbMqNKtWprHZZj9k5+VVLHfquq/qd0HOlI
XeHvyGpjhYp8qM61IqqWQsPJmT6Va1UG9dliqyTmXHNR7nhG4IP3wowntXfl0yns
ZkcCV871jyTzpg==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:44:51 2025 by rpki-client