Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/a4d09f-29df-44ea-a7b1-0a0aaeaee4f1/1/LgqTM_k8ylRP2r4up6ZzilSvdZ4.mft
File: LgqTM_k8ylRP2r4up6ZzilSvdZ4.mft (raw, json)
Hash identifier: oPFKZjKyTiD4t9kjtJ7QW92TfboFCzHI+PbGeQbTMRw=
Subject key identifier: D7:1B:BD:5F:19:A7:4A:83:9D:1C:36:D1:23:13:DA:F8:E3:6A:E4:B9
Authority key identifier: 2E:0A:93:33:F9:3C:CA:54:4F:DA:BE:2E:A7:A6:73:8A:54:AF:75:9E
Certificate issuer: /CN=2e0a9333f93cca544fdabe2ea7a6738a54af759e
Certificate serial: 0194BD17EB49D39C36DBC1E59862E2CAB66C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LgqTM_k8ylRP2r4up6ZzilSvdZ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/a4d09f-29df-44ea-a7b1-0a0aaeaee4f1/1/LgqTM_k8ylRP2r4up6ZzilSvdZ4.mft
Manifest number: 04CB
Signing time: Fri 31 Jan 2025 16:00:48 +0000
Manifest this update: Fri 31 Jan 2025 16:00:48 +0000
Manifest next update: Sat 01 Feb 2025 16:00:48 +0000
Files and hashes: 1: 86xyLg9Vhu1lk5RReT6Rdf_tmoI.roa (hash: j1UEYdI/3BGkPHWxLGmlianOUX6y8XMwomdD1NaeQqE=)
2: DNGDsibsMhX2Jm35ON8Z46A3KTk.roa (hash: IiQeZ36+XfzMEhi+j/AEKPMJtu/iUB+BlQw1Cz0Efws=)
3: LgqTM_k8ylRP2r4up6ZzilSvdZ4.crl (hash: EvTiRHAQNqRAIdIAxAkVZQg3RhTwjUxLafKirI4X6yw=)
4: jvqaPKegN_TBTkX1iGxxtfLozMg.roa (hash: XuER/cHOoxfeKVPHA4CmD36sE1MXBYBHja2ydtJkaoY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:eb:49:d3:9c:36:db:c1:e5:98:62:e2:ca:b6:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e0a9333f93cca544fdabe2ea7a6738a54af759e
Validity
Not Before: Jan 31 16:00:48 2025 GMT
Not After : Feb 1 16:00:48 2025 GMT
Subject: CN=d71bbd5f19a74a839d1c36d12313daf8e36ae4b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:d1:a8:22:7b:ab:6a:ac:8f:67:67:53:d2:2f:
98:93:7c:a4:da:04:44:51:8c:3e:cd:94:87:4d:e5:
49:c6:de:1d:e7:8e:bf:ad:15:ed:2d:9e:27:6f:8c:
b1:4a:08:7f:3a:9d:16:5d:a2:98:d3:fd:2e:64:b8:
17:80:1c:92:30:5e:2e:8d:30:4f:ca:27:7d:59:12:
a5:fb:13:8e:27:dd:be:05:72:a9:b1:d0:26:e1:21:
d7:f2:f3:cd:cb:27:38:68:36:b4:44:09:be:a5:e4:
91:03:15:0a:ba:7d:ae:e4:b5:ad:c8:4e:1c:cc:fd:
ce:03:65:6f:3f:bc:09:9f:0b:f0:27:d6:f8:fa:70:
09:34:f5:4c:10:bd:0f:5d:28:45:7c:7d:bb:67:26:
97:91:6c:d5:c5:61:4e:96:79:f0:99:33:67:b1:58:
14:e5:42:4a:83:d8:02:26:d5:cf:8c:b5:d4:a8:58:
bf:38:02:5e:3d:f0:ad:13:b9:e6:43:3e:57:03:5a:
2d:1a:91:73:86:dd:b7:62:86:54:55:58:34:db:25:
26:a3:46:18:5e:c6:ee:8f:72:37:6c:54:3e:67:40:
d0:8e:49:a9:e9:19:ca:6a:bc:3a:64:2f:5c:d6:af:
87:c7:19:eb:36:ec:0a:aa:c6:99:91:7e:32:05:ff:
7c:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:1B:BD:5F:19:A7:4A:83:9D:1C:36:D1:23:13:DA:F8:E3:6A:E4:B9
X509v3 Authority Key Identifier:
keyid:2E:0A:93:33:F9:3C:CA:54:4F:DA:BE:2E:A7:A6:73:8A:54:AF:75:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LgqTM_k8ylRP2r4up6ZzilSvdZ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a4d09f-29df-44ea-a7b1-0a0aaeaee4f1/1/LgqTM_k8ylRP2r4up6ZzilSvdZ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a4d09f-29df-44ea-a7b1-0a0aaeaee4f1/1/LgqTM_k8ylRP2r4up6ZzilSvdZ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:a8:e2:23:9f:1b:fa:6c:89:f5:a4:fc:58:7a:3d:36:9e:d6:
e3:f2:2e:47:26:a1:d8:b6:7c:53:b4:cb:36:c6:b5:56:ec:5a:
d3:24:79:5e:1f:23:b3:11:5b:60:35:73:a6:01:67:20:60:c8:
f7:6b:1c:81:a7:a2:9e:ba:ab:2b:4a:41:0b:1b:a5:86:1d:1b:
6b:c6:4a:23:aa:44:83:18:f9:c0:45:27:e1:41:67:b4:30:b0:
a1:02:ac:56:eb:fe:36:3d:a7:3b:40:5a:90:5f:e9:a2:62:9e:
64:e8:10:c8:64:5a:d2:a4:55:52:59:7e:0c:20:9a:d3:1a:04:
70:9b:16:13:40:69:55:a9:0c:c5:33:88:c6:04:1e:81:00:c4:
c5:e2:98:b3:1e:a4:76:2b:46:ea:ba:71:5b:9a:42:cf:ef:25:
22:aa:37:4a:a8:d9:d0:3a:5b:c6:89:04:da:c9:18:85:be:44:
dc:84:85:20:fb:a4:f7:15:34:70:c9:d1:52:50:8c:a3:e2:ec:
65:05:68:67:2e:6f:dd:40:ec:db:64:45:04:ec:1a:29:c1:e7:
d7:89:e3:5e:75:9f:2a:60:bf:31:83:4d:7e:1d:24:d7:e8:09:
c1:12:2a:f3:17:4e:4a:f0:54:52:4f:ef:6f:f9:9e:43:9a:c7:
6f:0b:c6:1a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F+tJ05w228HlmGLiyrZsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlMGE5MzMzZjkzY2NhNTQ0ZmRhYmUyZWE3YTY3MzhhNTRh
Zjc1OWUwHhcNMjUwMTMxMTYwMDQ4WhcNMjUwMjAxMTYwMDQ4WjAzMTEwLwYDVQQD
EyhkNzFiYmQ1ZjE5YTc0YTgzOWQxYzM2ZDEyMzEzZGFmOGUzNmFlNGI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhdGoInuraqyPZ2dT0i+Yk3yk2gRE
UYw+zZSHTeVJxt4d546/rRXtLZ4nb4yxSgh/Op0WXaKY0/0uZLgXgBySMF4ujTBP
yid9WRKl+xOOJ92+BXKpsdAm4SHX8vPNyyc4aDa0RAm+peSRAxUKun2u5LWtyE4c
zP3OA2VvP7wJnwvwJ9b4+nAJNPVMEL0PXShFfH27ZyaXkWzVxWFOlnnwmTNnsVgU
5UJKg9gCJtXPjLXUqFi/OAJePfCtE7nmQz5XA1otGpFzht23YoZUVVg02yUmo0YY
Xsbuj3I3bFQ+Z0DQjkmp6RnKarw6ZC9c1q+HxxnrNuwKqsaZkX4yBf98lwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNcbvV8Zp0qDnRw20SMT2vjjauS5MB8GA1UdIwQY
MBaAFC4KkzP5PMpUT9q+Lqemc4pUr3WeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTGdxVE1fazh5bFJQMnI0dXA2WnppbFN2ZFo0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9hNGQwOWYtMjlkZi00NGVhLWE3YjEt
MGEwYWFlYWVlNGYxLzEvTGdxVE1fazh5bFJQMnI0dXA2WnppbFN2ZFo0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy9hNGQwOWYtMjlkZi00NGVhLWE3YjEtMGEwYWFlYWVlNGYx
LzEvTGdxVE1fazh5bFJQMnI0dXA2WnppbFN2ZFo0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl6jiI58b
+myJ9aT8WHo9Np7W4/IuRyah2LZ8U7TLNsa1Vuxa0yR5Xh8jsxFbYDVzpgFnIGDI
92scgaeinrqrK0pBCxulhh0ba8ZKI6pEgxj5wEUn4UFntDCwoQKsVuv+Nj2nO0Ba
kF/pomKeZOgQyGRa0qRVUll+DCCa0xoEcJsWE0BpVakMxTOIxgQegQDExeKYsx6k
ditG6rpxW5pCz+8lIqo3SqjZ0DpbxokE2skYhb5E3ISFIPuk9xU0cMnRUlCMo+Ls
ZQVoZy5v3UDs22RFBOwaKcHn14njXnWfKmC/MYNNfh0k1+gJwRIq8xdOSvBUUk/v
b/meQ5rHbwvGGg==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:14 2025 by rpki-client