Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/0dff12-4e72-430e-9df6-bdaa6fbd4347/1/levYBm8QkMMRnNtp6dTcQNkDBPg.mft
File: levYBm8QkMMRnNtp6dTcQNkDBPg.mft (raw, json)
Hash identifier: g8DHePaiWCF64Lz/TsuiTE60X5vMhMjvrpp1I+qSEVE=
Subject key identifier: 13:7C:73:25:87:5A:59:6F:CC:E4:9D:FB:C5:04:EA:04:0C:A8:ED:12
Authority key identifier: 95:EB:D8:06:6F:10:90:C3:11:9C:DB:69:E9:D4:DC:40:D9:03:04:F8
Certificate issuer: /CN=95ebd8066f1090c3119cdb69e9d4dc40d90304f8
Certificate serial: 0194BD85ADB1EB03AFABA187071F414784F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/levYBm8QkMMRnNtp6dTcQNkDBPg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/0dff12-4e72-430e-9df6-bdaa6fbd4347/1/levYBm8QkMMRnNtp6dTcQNkDBPg.mft
Manifest number: 1432
Signing time: Fri 31 Jan 2025 18:00:42 +0000
Manifest this update: Fri 31 Jan 2025 18:00:42 +0000
Manifest next update: Sat 01 Feb 2025 18:00:42 +0000
Files and hashes: 1: levYBm8QkMMRnNtp6dTcQNkDBPg.crl (hash: 5igTZNz/4VgppOJlVUcSNY33U2robFpLDkpYMzY1rRY=)
2: wRukRujev3BO2RN4ND9D6D63w5k.roa (hash: BYKbibBqJO+JvICBVUX/a9TBtkzvHJs+kP8dXi4jNhk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:ad:b1:eb:03:af:ab:a1:87:07:1f:41:47:84:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95ebd8066f1090c3119cdb69e9d4dc40d90304f8
Validity
Not Before: Jan 31 18:00:42 2025 GMT
Not After : Feb 1 18:00:42 2025 GMT
Subject: CN=137c7325875a596fcce49dfbc504ea040ca8ed12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:b8:86:75:88:ee:ab:1a:c6:af:69:25:d4:ff:
e2:82:4f:b2:cb:0b:68:57:ef:0b:19:1e:3b:b8:1b:
be:93:ee:1c:2b:00:81:3d:c2:03:6e:72:59:46:ed:
cb:fe:99:33:e8:5b:09:e7:86:f3:f0:22:87:8d:dd:
41:55:b1:50:83:ae:36:b0:1a:f7:88:03:14:71:41:
90:bf:76:5d:11:d6:70:b8:4d:bb:17:4d:d4:08:29:
d2:8d:14:c5:60:39:0e:da:ee:6d:0b:b6:5d:20:b7:
cd:53:98:f8:65:b9:25:4f:0e:75:21:72:22:30:a8:
77:b4:6b:5e:b8:35:f4:12:78:7c:b0:a7:c8:23:72:
eb:28:3c:1a:a9:76:9b:57:dc:a0:19:44:22:a0:ee:
69:0d:09:54:7c:c7:6e:f4:37:7e:5a:2e:81:01:20:
fb:3f:96:59:a8:3d:49:42:e0:18:6a:47:59:0f:f6:
3b:86:21:44:02:58:be:25:75:47:f8:a6:22:17:ed:
06:2d:d2:f9:da:a4:49:f0:2b:38:39:30:9c:4e:1b:
ed:00:6a:5f:dd:9c:af:78:83:8e:f3:8c:8f:e9:c8:
74:e0:48:6c:4b:e2:e7:f1:e2:83:b9:b2:c8:33:48:
e0:e7:e5:01:1b:ff:74:7b:e0:65:32:1d:bb:b8:b0:
aa:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:7C:73:25:87:5A:59:6F:CC:E4:9D:FB:C5:04:EA:04:0C:A8:ED:12
X509v3 Authority Key Identifier:
keyid:95:EB:D8:06:6F:10:90:C3:11:9C:DB:69:E9:D4:DC:40:D9:03:04:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/levYBm8QkMMRnNtp6dTcQNkDBPg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/0dff12-4e72-430e-9df6-bdaa6fbd4347/1/levYBm8QkMMRnNtp6dTcQNkDBPg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/0dff12-4e72-430e-9df6-bdaa6fbd4347/1/levYBm8QkMMRnNtp6dTcQNkDBPg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:f4:ac:4d:08:1e:60:5b:b1:2b:42:40:ce:13:7f:fc:68:1b:
46:17:b8:02:14:8c:07:80:d4:7d:50:87:b2:80:5b:03:d2:63:
cc:a9:f6:ba:bc:64:c6:5d:c1:02:7f:ce:49:d1:a0:68:81:02:
70:25:26:64:c6:27:d5:00:6a:12:a4:49:5d:f0:ba:29:35:00:
70:c3:72:92:06:59:de:b6:7b:0f:d9:15:12:6b:f9:e0:85:87:
e2:64:01:2e:88:cd:a8:3d:8d:31:f0:ec:dc:ec:00:43:4e:6b:
cc:df:80:d0:97:bf:88:fa:6d:04:14:93:ed:eb:6a:36:91:1a:
7b:39:69:f6:7b:41:4b:85:9d:2d:89:b3:c7:0c:d8:4b:df:42:
d5:f1:a0:1f:58:84:67:45:32:d0:27:88:da:37:dc:4d:de:37:
e6:83:95:75:f4:73:d5:4b:82:e9:2b:3f:ab:58:e8:f0:bf:51:
17:d6:b0:b3:3f:1c:7e:ae:fa:4d:40:19:14:0b:6c:0d:d1:09:
b3:51:51:eb:ae:d4:10:97:f0:0d:62:13:d3:c6:66:1e:3d:bc:
80:54:c3:6b:24:0a:18:aa:53:e6:39:17:02:a9:2c:69:66:ab:
49:2c:0f:7c:55:55:75:0a:01:f9:fd:18:c9:3d:24:84:bf:6f:
03:10:72:bd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9ha2x6wOvq6GHBx9BR4T3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1ZWJkODA2NmYxMDkwYzMxMTljZGI2OWU5ZDRkYzQwZDkw
MzA0ZjgwHhcNMjUwMTMxMTgwMDQyWhcNMjUwMjAxMTgwMDQyWjAzMTEwLwYDVQQD
EygxMzdjNzMyNTg3NWE1OTZmY2NlNDlkZmJjNTA0ZWEwNDBjYThlZDEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqLiGdYjuqxrGr2kl1P/igk+yywto
V+8LGR47uBu+k+4cKwCBPcIDbnJZRu3L/pkz6FsJ54bz8CKHjd1BVbFQg642sBr3
iAMUcUGQv3ZdEdZwuE27F03UCCnSjRTFYDkO2u5tC7ZdILfNU5j4ZbklTw51IXIi
MKh3tGteuDX0Enh8sKfII3LrKDwaqXabV9ygGUQioO5pDQlUfMdu9Dd+Wi6BASD7
P5ZZqD1JQuAYakdZD/Y7hiFEAli+JXVH+KYiF+0GLdL52qRJ8Cs4OTCcThvtAGpf
3ZyveIOO84yP6ch04EhsS+Ln8eKDubLIM0jg5+UBG/90e+BlMh27uLCq/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBN8cyWHWllvzOSd+8UE6gQMqO0SMB8GA1UdIwQY
MBaAFJXr2AZvEJDDEZzbaenU3EDZAwT4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbGV2WUJtOFFrTU1Sbk50cDZkVGNRTmtEQlBnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC8wZGZmMTItNGU3Mi00MzBlLTlkZjYt
YmRhYTZmYmQ0MzQ3LzEvbGV2WUJtOFFrTU1Sbk50cDZkVGNRTmtEQlBnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC8wZGZmMTItNGU3Mi00MzBlLTlkZjYtYmRhYTZmYmQ0MzQ3
LzEvbGV2WUJtOFFrTU1Sbk50cDZkVGNRTmtEQlBnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARfSsTQge
YFuxK0JAzhN//GgbRhe4AhSMB4DUfVCHsoBbA9JjzKn2urxkxl3BAn/OSdGgaIEC
cCUmZMYn1QBqEqRJXfC6KTUAcMNykgZZ3rZ7D9kVEmv54IWH4mQBLojNqD2NMfDs
3OwAQ05rzN+A0Je/iPptBBST7etqNpEaezlp9ntBS4WdLYmzxwzYS99C1fGgH1iE
Z0Uy0CeI2jfcTd435oOVdfRz1UuC6Ss/q1jo8L9RF9awsz8cfq76TUAZFAtsDdEJ
s1FR667UEJfwDWIT08ZmHj28gFTDayQKGKpT5jkXAqksaWarSSwPfFVVdQoB+f0Y
yT0khL9vAxByvQ==
-----END CERTIFICATE-----
Generated at Fri Apr 25 02:49:26 2025 by rpki-client