Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/328fab-4ebc-4e1f-840e-bc424349a16e/1/lF79bEd4Br1rRSZ1WNaCj-7GHqY.mft
File: lF79bEd4Br1rRSZ1WNaCj-7GHqY.mft (raw, json)
Hash identifier: j/9ZmDghpYfI+pqWmADuQRtUfULWwBQukcyuJLzHUII=
Subject key identifier: 27:29:75:C0:EF:C9:99:78:90:EF:D3:7F:E7:BD:E0:A7:2A:B2:1A:E0
Authority key identifier: 94:5E:FD:6C:47:78:06:BD:6B:45:26:75:58:D6:82:8F:EE:C6:1E:A6
Certificate issuer: /CN=945efd6c477806bd6b45267558d6828feec61ea6
Certificate serial: 0194BC04BD3E38B97D8E15B3779D6F029B32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lF79bEd4Br1rRSZ1WNaCj-7GHqY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/328fab-4ebc-4e1f-840e-bc424349a16e/1/lF79bEd4Br1rRSZ1WNaCj-7GHqY.mft
Manifest number: 10F9
Signing time: Fri 31 Jan 2025 11:00:14 +0000
Manifest this update: Fri 31 Jan 2025 11:00:14 +0000
Manifest next update: Sat 01 Feb 2025 11:00:14 +0000
Files and hashes: 1: 7Jg06ldxKlvbz-CEYbOTLWDbPQE.roa (hash: pFruh1e8rswIQqQRB2tI9O+JmHtlnpYn4xJr1wtjctA=)
2: lF79bEd4Br1rRSZ1WNaCj-7GHqY.crl (hash: jtLQ11AuBecZGsUCABX1IbF/ROJCJDXstNONweK5/vc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:bd:3e:38:b9:7d:8e:15:b3:77:9d:6f:02:9b:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=945efd6c477806bd6b45267558d6828feec61ea6
Validity
Not Before: Jan 31 11:00:14 2025 GMT
Not After : Feb 1 11:00:14 2025 GMT
Subject: CN=272975c0efc9997890efd37fe7bde0a72ab21ae0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:f3:42:68:85:10:81:6b:42:39:7b:79:bf:ca:
76:8b:a3:e2:e7:2c:d0:d2:a1:d9:68:b6:97:03:26:
04:ec:1b:a5:3d:88:19:6b:96:2a:31:64:cf:66:df:
45:b6:31:5a:68:4b:df:1f:44:d5:b9:ad:0a:2e:3a:
73:7e:9e:b7:de:33:48:70:1f:52:11:43:e4:f2:71:
02:35:5a:9b:5e:b7:b3:b7:39:df:3a:c1:4d:81:6d:
75:2c:a3:fd:b0:53:a7:3e:84:76:40:75:b4:ee:bc:
66:d8:62:6a:f6:8f:cc:a7:84:4c:b8:31:34:08:fb:
68:33:a5:dd:52:1a:5a:92:f8:6b:45:33:5b:02:e0:
b0:1d:60:a8:d9:2b:59:f1:f3:ad:1b:67:cb:fe:35:
a3:65:c8:0c:4a:05:23:78:45:8a:49:df:15:49:9b:
0b:84:19:54:6a:c3:75:92:a8:80:cc:65:48:1f:41:
6b:03:09:35:a2:b4:b6:2f:ad:ed:77:f4:48:50:e7:
7c:59:42:34:e8:9a:79:5f:35:ac:4f:5b:2a:01:21:
e4:98:75:ae:eb:44:8c:23:da:9a:a3:1a:b7:b5:cf:
3b:47:76:f2:c7:5f:f8:a6:f8:80:48:d7:5d:3f:7e:
38:9c:10:74:96:68:ba:0f:25:25:8b:06:35:32:8e:
07:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:29:75:C0:EF:C9:99:78:90:EF:D3:7F:E7:BD:E0:A7:2A:B2:1A:E0
X509v3 Authority Key Identifier:
keyid:94:5E:FD:6C:47:78:06:BD:6B:45:26:75:58:D6:82:8F:EE:C6:1E:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lF79bEd4Br1rRSZ1WNaCj-7GHqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/328fab-4ebc-4e1f-840e-bc424349a16e/1/lF79bEd4Br1rRSZ1WNaCj-7GHqY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/328fab-4ebc-4e1f-840e-bc424349a16e/1/lF79bEd4Br1rRSZ1WNaCj-7GHqY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:18:51:d6:d0:65:5d:a4:64:90:97:e0:76:b7:0b:a5:39:0d:
cf:07:dd:76:6c:2a:e8:20:77:b5:a4:a0:5b:cb:cc:64:66:e2:
16:9a:90:5e:8b:e9:77:9d:26:58:d5:c8:7d:a6:b4:19:2f:10:
ca:dc:bf:38:3c:bf:10:fa:6a:3f:1a:32:c0:d2:1e:c8:ad:15:
07:48:c1:df:42:22:28:a9:ef:f1:05:a3:aa:51:f8:72:ac:cf:
25:be:a0:d5:54:12:ba:20:ef:a3:16:ce:04:81:6b:ab:c3:26:
c4:94:3b:7b:75:80:d5:19:bf:b4:84:56:60:2b:8b:29:ca:7f:
23:a2:a5:59:36:4b:c7:2a:1c:7c:9a:3e:a9:2c:6b:4b:ce:50:
cc:dc:f1:de:bf:55:4f:56:52:10:9c:b6:bb:dd:f2:90:36:2b:
3a:7e:4a:45:b1:80:7f:9f:05:09:99:fd:82:93:bb:d4:86:96:
6b:1a:86:ae:9d:3c:92:40:f8:d7:f7:26:50:5e:0b:6f:81:90:
e9:93:0a:08:61:0d:ab:4a:0b:0b:06:3d:cf:f1:9d:17:79:d3:
00:d3:70:de:c4:f7:b1:91:da:de:c9:d4:fa:c4:19:cc:6f:b0:
55:c8:d3:fe:be:9a:59:63:be:29:05:df:3d:f0:f5:3b:ea:ce:
e2:3d:0d:64
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8BL0+OLl9jhWzd51vApsyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0NWVmZDZjNDc3ODA2YmQ2YjQ1MjY3NTU4ZDY4MjhmZWVj
NjFlYTYwHhcNMjUwMTMxMTEwMDE0WhcNMjUwMjAxMTEwMDE0WjAzMTEwLwYDVQQD
EygyNzI5NzVjMGVmYzk5OTc4OTBlZmQzN2ZlN2JkZTBhNzJhYjIxYWUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwvNCaIUQgWtCOXt5v8p2i6Pi5yzQ
0qHZaLaXAyYE7BulPYgZa5YqMWTPZt9FtjFaaEvfH0TVua0KLjpzfp633jNIcB9S
EUPk8nECNVqbXreztznfOsFNgW11LKP9sFOnPoR2QHW07rxm2GJq9o/Mp4RMuDE0
CPtoM6XdUhpakvhrRTNbAuCwHWCo2StZ8fOtG2fL/jWjZcgMSgUjeEWKSd8VSZsL
hBlUasN1kqiAzGVIH0FrAwk1orS2L63td/RIUOd8WUI06Jp5XzWsT1sqASHkmHWu
60SMI9qaoxq3tc87R3byx1/4pviASNddP344nBB0lmi6DyUliwY1Mo4H0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCcpdcDvyZl4kO/Tf+e94KcqshrgMB8GA1UdIwQY
MBaAFJRe/WxHeAa9a0UmdVjWgo/uxh6mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbEY3OWJFZDRCcjFyUlNaMVdOYUNqLTdHSHFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS8zMjhmYWItNGViYy00ZTFmLTg0MGUt
YmM0MjQzNDlhMTZlLzEvbEY3OWJFZDRCcjFyUlNaMVdOYUNqLTdHSHFZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS8zMjhmYWItNGViYy00ZTFmLTg0MGUtYmM0MjQzNDlhMTZl
LzEvbEY3OWJFZDRCcjFyUlNaMVdOYUNqLTdHSHFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvRhR1tBl
XaRkkJfgdrcLpTkNzwfddmwq6CB3taSgW8vMZGbiFpqQXovpd50mWNXIfaa0GS8Q
yty/ODy/EPpqPxoywNIeyK0VB0jB30IiKKnv8QWjqlH4cqzPJb6g1VQSuiDvoxbO
BIFrq8MmxJQ7e3WA1Rm/tIRWYCuLKcp/I6KlWTZLxyocfJo+qSxrS85QzNzx3r9V
T1ZSEJy2u93ykDYrOn5KRbGAf58FCZn9gpO71IaWaxqGrp08kkD41/cmUF4Lb4GQ
6ZMKCGENq0oLCwY9z/GdF3nTANNw3sT3sZHa3snU+sQZzG+wVcjT/r6aWWO+KQXf
PfD1O+rO4j0NZA==
-----END CERTIFICATE-----
Generated at Mon Apr 28 09:10:27 2025 by rpki-client