Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/ea6f61-a9d2-4c6b-b717-1db4ed131bc3/1/lRu0kOCd8UZ-TuxD2PIEhM7oOf4.mft
File: lRu0kOCd8UZ-TuxD2PIEhM7oOf4.mft (raw, json)
Hash identifier: 3WJKacZ0Fsm+KbfDCGqZzBdznydFxaiLffjDFDhtP0o=
Subject key identifier: E8:2B:02:68:A6:21:8B:45:A8:AD:4B:0B:45:DC:0D:36:F8:22:05:F6
Authority key identifier: 95:1B:B4:90:E0:9D:F1:46:7E:4E:EC:43:D8:F2:04:84:CE:E8:39:FE
Certificate issuer: /CN=951bb490e09df1467e4eec43d8f20484cee839fe
Certificate serial: 0194BD17D7E2FD64A508C9E127AE3DCCCF30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lRu0kOCd8UZ-TuxD2PIEhM7oOf4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/ea6f61-a9d2-4c6b-b717-1db4ed131bc3/1/lRu0kOCd8UZ-TuxD2PIEhM7oOf4.mft
Manifest number: 08AC
Signing time: Fri 31 Jan 2025 16:00:43 +0000
Manifest this update: Fri 31 Jan 2025 16:00:43 +0000
Manifest next update: Sat 01 Feb 2025 16:00:43 +0000
Files and hashes: 1: lRu0kOCd8UZ-TuxD2PIEhM7oOf4.crl (hash: ZmjSc2OZwAf97FKNaKO8wnAivGZmsF1QUwdUTumjyu0=)
2: r2nr9uHWjEIdTibij9wAoHFt-FM.roa (hash: 9uPtC9m4AAQGXek/5tdGjDekJKVu5XPicOZ4ymE6WZ0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:d7:e2:fd:64:a5:08:c9:e1:27:ae:3d:cc:cf:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=951bb490e09df1467e4eec43d8f20484cee839fe
Validity
Not Before: Jan 31 16:00:43 2025 GMT
Not After : Feb 1 16:00:43 2025 GMT
Subject: CN=e82b0268a6218b45a8ad4b0b45dc0d36f82205f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:42:23:55:fd:8d:7a:48:06:d9:85:43:64:ee:
85:f9:05:df:cf:14:ac:89:e3:c4:a3:cd:a1:77:95:
b0:7b:39:68:55:17:f0:41:ac:c4:0b:19:5a:f9:8f:
0b:92:5d:eb:eb:f6:c9:c3:06:86:a3:e4:a4:75:d5:
f8:16:c3:93:93:43:ea:c6:c3:30:bb:1a:ae:82:21:
ea:0d:01:31:d4:62:4d:d5:89:4d:17:8f:e1:33:6d:
9c:2a:fb:77:92:aa:48:a7:9d:9a:7e:f5:66:3f:94:
cc:fd:83:8f:53:d9:92:0c:4e:cb:62:65:27:dd:fe:
48:bc:64:2f:01:8a:6b:ba:2a:2a:6a:4b:ee:6f:ab:
ca:db:53:87:f1:ed:d0:95:39:b8:77:0b:27:51:01:
6c:e7:93:e2:8f:ce:53:45:4f:92:63:46:08:d5:7f:
ae:5b:f5:87:d4:fc:78:47:f9:ca:00:42:e8:63:a2:
de:8e:d5:b6:6b:75:7d:57:10:b6:98:91:6e:ca:83:
26:b0:03:e2:7e:cb:d4:08:00:02:29:c3:df:7e:0d:
83:14:cb:f4:0c:e8:be:df:95:30:be:26:b5:3c:f4:
26:59:ac:99:d7:d2:27:73:3a:8f:9c:02:87:cf:f0:
b8:80:61:b4:34:cd:c6:e7:c8:28:1c:d6:94:25:e7:
5e:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:2B:02:68:A6:21:8B:45:A8:AD:4B:0B:45:DC:0D:36:F8:22:05:F6
X509v3 Authority Key Identifier:
keyid:95:1B:B4:90:E0:9D:F1:46:7E:4E:EC:43:D8:F2:04:84:CE:E8:39:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lRu0kOCd8UZ-TuxD2PIEhM7oOf4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/ea6f61-a9d2-4c6b-b717-1db4ed131bc3/1/lRu0kOCd8UZ-TuxD2PIEhM7oOf4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/ea6f61-a9d2-4c6b-b717-1db4ed131bc3/1/lRu0kOCd8UZ-TuxD2PIEhM7oOf4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:3b:c1:0c:0a:1c:f6:9d:8b:18:a1:61:e9:45:bc:81:f7:28:
7c:85:7a:83:00:19:10:eb:d9:92:33:0c:33:62:42:21:15:fa:
50:bd:8a:78:01:27:48:50:99:05:cb:a3:3d:81:36:f8:40:ce:
c4:9b:dc:5d:02:9e:dd:b7:10:74:e8:fa:30:40:56:53:68:a4:
47:ec:47:67:19:54:a5:54:a7:00:da:12:e3:19:61:b8:eb:c0:
f6:09:54:3a:30:8e:6d:e7:29:a2:d0:fe:73:fa:18:b8:8f:56:
06:28:cd:a0:ac:9f:17:a8:71:d0:3a:40:43:a1:c8:73:b6:b1:
32:19:92:ce:86:32:6b:dd:26:c4:06:1f:50:c7:2e:37:af:48:
dd:7a:4d:6f:fb:4e:6d:df:3b:bf:6d:9c:52:8a:e7:13:92:56:
c2:fa:cf:73:44:f9:14:ec:0a:59:e5:9a:49:71:5c:00:c2:93:
08:0d:23:ff:7f:1b:f6:4b:da:4e:64:f9:2f:ca:ec:82:5a:8a:
2c:e7:9a:53:34:d9:f1:8a:08:ab:cd:16:6c:ad:bd:e3:f9:c3:
3f:17:2f:84:35:c6:87:d9:77:45:2a:f6:f6:4d:d9:c4:f5:35:
07:90:e0:7e:03:23:cf:89:d6:f2:d9:2e:0a:b9:4b:4d:1b:3a:
5c:67:55:55
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F9fi/WSlCMnhJ649zM8wMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1MWJiNDkwZTA5ZGYxNDY3ZTRlZWM0M2Q4ZjIwNDg0Y2Vl
ODM5ZmUwHhcNMjUwMTMxMTYwMDQzWhcNMjUwMjAxMTYwMDQzWjAzMTEwLwYDVQQD
EyhlODJiMDI2OGE2MjE4YjQ1YThhZDRiMGI0NWRjMGQzNmY4MjIwNWY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqkIjVf2NekgG2YVDZO6F+QXfzxSs
iePEo82hd5WwezloVRfwQazECxla+Y8Lkl3r6/bJwwaGo+SkddX4FsOTk0PqxsMw
uxqugiHqDQEx1GJN1YlNF4/hM22cKvt3kqpIp52afvVmP5TM/YOPU9mSDE7LYmUn
3f5IvGQvAYpruioqakvub6vK21OH8e3QlTm4dwsnUQFs55Pij85TRU+SY0YI1X+u
W/WH1Px4R/nKAELoY6LejtW2a3V9VxC2mJFuyoMmsAPifsvUCAACKcPffg2DFMv0
DOi+35Uwvia1PPQmWayZ19InczqPnAKHz/C4gGG0NM3G58goHNaUJedeEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOgrAmimIYtFqK1LC0XcDTb4IgX2MB8GA1UdIwQY
MBaAFJUbtJDgnfFGfk7sQ9jyBITO6Dn+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbFJ1MGtPQ2Q4VVotVHV4RDJQSUVoTTdvT2Y0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9lYTZmNjEtYTlkMi00YzZiLWI3MTct
MWRiNGVkMTMxYmMzLzEvbFJ1MGtPQ2Q4VVotVHV4RDJQSUVoTTdvT2Y0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS9lYTZmNjEtYTlkMi00YzZiLWI3MTctMWRiNGVkMTMxYmMz
LzEvbFJ1MGtPQ2Q4VVotVHV4RDJQSUVoTTdvT2Y0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMTvBDAoc
9p2LGKFh6UW8gfcofIV6gwAZEOvZkjMMM2JCIRX6UL2KeAEnSFCZBcujPYE2+EDO
xJvcXQKe3bcQdOj6MEBWU2ikR+xHZxlUpVSnANoS4xlhuOvA9glUOjCObecpotD+
c/oYuI9WBijNoKyfF6hx0DpAQ6HIc7axMhmSzoYya90mxAYfUMcuN69I3XpNb/tO
bd87v22cUornE5JWwvrPc0T5FOwKWeWaSXFcAMKTCA0j/38b9kvaTmT5L8rsglqK
LOeaUzTZ8YoIq80WbK294/nDPxcvhDXGh9l3RSr29k3ZxPU1B5DgfgMjz4nW8tku
CrlLTRs6XGdVVQ==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:47:05 2025 by rpki-client