Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/a33f9a-9bc3-430d-bb7c-5ec794b0e69c/1/LxAoFdJ-ZRF0bUo-n9E1nNmCqGY.mft
File: LxAoFdJ-ZRF0bUo-n9E1nNmCqGY.mft (raw, json)
Hash identifier: 060v5YJr3iQFXL6DeiMcOdKIAUjWc0U05LTG8x7KSl0=
Subject key identifier: 49:FC:B2:6E:72:48:DC:56:E9:9E:FB:C8:10:C7:4E:14:8B:C1:E3:66
Authority key identifier: 2F:10:28:15:D2:7E:65:11:74:6D:4A:3E:9F:D1:35:9C:D9:82:A8:66
Certificate issuer: /CN=2f102815d27e6511746d4a3e9fd1359cd982a866
Certificate serial: 0194BD180870771272D243044DEEAF7F373C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LxAoFdJ-ZRF0bUo-n9E1nNmCqGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/a33f9a-9bc3-430d-bb7c-5ec794b0e69c/1/LxAoFdJ-ZRF0bUo-n9E1nNmCqGY.mft
Manifest number: 08A8
Signing time: Fri 31 Jan 2025 16:00:56 +0000
Manifest this update: Fri 31 Jan 2025 16:00:56 +0000
Manifest next update: Sat 01 Feb 2025 16:00:56 +0000
Files and hashes: 1: LxAoFdJ-ZRF0bUo-n9E1nNmCqGY.crl (hash: JY/M/tFn76FRdoSVMHrP2VGcf7kLUUWoI9ZkbcVQfkE=)
2: lT88CqOH5vwMoi8VUrMFaxJU8J4.roa (hash: S4Errm7narViCee9k3oJgV4xcS7HzGtYGoc+vP+G/zk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:18:08:70:77:12:72:d2:43:04:4d:ee:af:7f:37:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f102815d27e6511746d4a3e9fd1359cd982a866
Validity
Not Before: Jan 31 16:00:56 2025 GMT
Not After : Feb 1 16:00:56 2025 GMT
Subject: CN=49fcb26e7248dc56e99efbc810c74e148bc1e366
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:92:c7:56:24:a3:4f:39:1f:8e:e8:6b:f2:50:
7e:6d:85:4f:57:f7:6e:d2:70:36:1a:7d:1f:27:c2:
03:9f:10:8f:a0:d6:3d:de:f9:0a:5f:28:7e:2a:a9:
d8:6b:59:c8:80:78:b2:4f:e7:9f:d6:89:7f:0d:bd:
e9:f0:88:a7:2d:ea:f0:5b:27:69:6d:87:cb:ac:01:
d4:81:7d:5d:9b:91:76:0c:75:de:b0:32:a3:5a:f0:
c8:32:c1:3d:c7:31:e5:44:ca:67:f3:42:e5:bb:e6:
c5:39:f2:b9:8c:cd:ca:22:5c:d3:71:7d:6e:3e:b5:
d5:86:c8:5c:96:40:08:58:84:51:99:f6:41:55:7c:
05:00:80:ee:0b:2f:d9:d6:e8:9a:2c:ae:c8:a8:12:
e6:e4:e5:76:98:f2:fd:52:18:8b:c3:29:1b:1e:ab:
65:dc:77:f1:0a:8c:88:87:c6:54:25:1b:9e:88:be:
6c:6c:4c:2d:ad:d3:56:d0:da:bd:5c:47:16:18:01:
23:01:ce:fb:2d:22:b1:9b:2b:88:e1:9b:80:84:74:
11:92:69:c7:8d:50:03:0c:2d:93:08:4e:66:87:bd:
79:23:eb:0f:86:25:7a:ef:f8:fb:1d:be:93:65:d1:
33:de:3c:a9:7a:65:a9:d9:f3:53:36:d7:e9:14:f9:
fa:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:FC:B2:6E:72:48:DC:56:E9:9E:FB:C8:10:C7:4E:14:8B:C1:E3:66
X509v3 Authority Key Identifier:
keyid:2F:10:28:15:D2:7E:65:11:74:6D:4A:3E:9F:D1:35:9C:D9:82:A8:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LxAoFdJ-ZRF0bUo-n9E1nNmCqGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a33f9a-9bc3-430d-bb7c-5ec794b0e69c/1/LxAoFdJ-ZRF0bUo-n9E1nNmCqGY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a33f9a-9bc3-430d-bb7c-5ec794b0e69c/1/LxAoFdJ-ZRF0bUo-n9E1nNmCqGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:5e:6d:a9:68:20:a0:5a:41:b0:7c:dd:d1:c1:4e:16:bf:2b:
02:3d:b8:1a:d2:f9:24:68:01:5b:23:86:79:d3:c8:8d:67:c4:
52:3c:77:04:b7:36:89:1b:58:e6:ff:cf:6d:c1:76:9f:e2:f4:
0a:6d:22:a8:6d:96:45:57:5c:2a:c9:e4:f4:70:3c:2e:ed:83:
c5:40:1a:98:f5:14:c5:28:1b:ba:36:81:7d:d5:cf:1d:16:cc:
ad:6b:05:e5:5a:11:37:1d:e5:04:e6:01:f5:a3:92:85:28:ef:
20:13:b0:08:9e:16:d8:23:1d:de:79:1e:cb:49:5d:aa:08:3b:
39:0b:ba:83:8a:8c:2b:7a:c8:a8:fc:34:cc:75:3a:7b:f9:31:
68:90:0f:fd:31:3f:8d:89:b6:36:1a:ea:07:3f:6d:df:63:cd:
5f:c3:6d:be:a3:cb:99:17:0f:42:27:93:6b:19:a5:de:46:77:
21:31:59:69:4d:4a:73:a3:2c:da:84:6a:96:ff:14:eb:ad:a8:
51:0e:ee:94:59:eb:7d:a8:53:8e:fb:47:2b:2d:ef:fe:ea:3e:
85:19:7a:2e:a5:e4:86:c5:9a:6b:c7:7c:3d:6d:5a:9d:68:0d:
82:05:f8:1e:46:1e:8f:9d:d4:d6:9c:1d:15:21:7c:53:26:2e:
59:08:bc:5a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9GAhwdxJy0kMETe6vfzc8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmMTAyODE1ZDI3ZTY1MTE3NDZkNGEzZTlmZDEzNTljZDk4
MmE4NjYwHhcNMjUwMTMxMTYwMDU2WhcNMjUwMjAxMTYwMDU2WjAzMTEwLwYDVQQD
Eyg0OWZjYjI2ZTcyNDhkYzU2ZTk5ZWZiYzgxMGM3NGUxNDhiYzFlMzY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwJLHViSjTzkfjuhr8lB+bYVPV/du
0nA2Gn0fJ8IDnxCPoNY93vkKXyh+KqnYa1nIgHiyT+ef1ol/Db3p8IinLerwWydp
bYfLrAHUgX1dm5F2DHXesDKjWvDIMsE9xzHlRMpn80Llu+bFOfK5jM3KIlzTcX1u
PrXVhshclkAIWIRRmfZBVXwFAIDuCy/Z1uiaLK7IqBLm5OV2mPL9UhiLwykbHqtl
3HfxCoyIh8ZUJRueiL5sbEwtrdNW0Nq9XEcWGAEjAc77LSKxmyuI4ZuAhHQRkmnH
jVADDC2TCE5mh715I+sPhiV67/j7Hb6TZdEz3jypemWp2fNTNtfpFPn6/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEn8sm5ySNxW6Z77yBDHThSLweNmMB8GA1UdIwQY
MBaAFC8QKBXSfmURdG1KPp/RNZzZgqhmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTHhBb0ZkSi1aUkYwYlVvLW45RTFuTm1DcUdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi9hMzNmOWEtOWJjMy00MzBkLWJiN2Mt
NWVjNzk0YjBlNjljLzEvTHhBb0ZkSi1aUkYwYlVvLW45RTFuTm1DcUdZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi9hMzNmOWEtOWJjMy00MzBkLWJiN2MtNWVjNzk0YjBlNjlj
LzEvTHhBb0ZkSi1aUkYwYlVvLW45RTFuTm1DcUdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVV5tqWgg
oFpBsHzd0cFOFr8rAj24GtL5JGgBWyOGedPIjWfEUjx3BLc2iRtY5v/PbcF2n+L0
Cm0iqG2WRVdcKsnk9HA8Lu2DxUAamPUUxSgbujaBfdXPHRbMrWsF5VoRNx3lBOYB
9aOShSjvIBOwCJ4W2CMd3nkey0ldqgg7OQu6g4qMK3rIqPw0zHU6e/kxaJAP/TE/
jYm2NhrqBz9t32PNX8NtvqPLmRcPQieTaxml3kZ3ITFZaU1Kc6Ms2oRqlv8U662o
UQ7ulFnrfahTjvtHKy3v/uo+hRl6LqXkhsWaa8d8PW1anWgNggX4HkYej53U1pwd
FSF8UyYuWQi8Wg==
-----END CERTIFICATE-----
Generated at Mon Apr 28 13:13:14 2025 by rpki-client