Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/d38ec1-d4c6-40fb-ab1d-d202f2a40081/1/LRgVsMncnuIgfslBfN7CvEviPGE.mft
File: LRgVsMncnuIgfslBfN7CvEviPGE.mft (raw, json)
Hash identifier: Go53gkLDn8PN9gN9OHTqGnfHjgWA0O/mbNO2zQprBPk=
Subject key identifier: 58:E9:0F:E4:FF:C9:44:3A:39:E6:AA:6E:D6:30:76:B1:9D:00:13:E4
Authority key identifier: 2D:18:15:B0:C9:DC:9E:E2:20:7E:C9:41:7C:DE:C2:BC:4B:E2:3C:61
Certificate issuer: /CN=2d1815b0c9dc9ee2207ec9417cdec2bc4be23c61
Certificate serial: 0194BBCE225EA8F9AC9C933E2B7EC6076B80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LRgVsMncnuIgfslBfN7CvEviPGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/d38ec1-d4c6-40fb-ab1d-d202f2a40081/1/LRgVsMncnuIgfslBfN7CvEviPGE.mft
Manifest number: 140C
Signing time: Fri 31 Jan 2025 10:00:36 +0000
Manifest this update: Fri 31 Jan 2025 10:00:36 +0000
Manifest next update: Sat 01 Feb 2025 10:00:36 +0000
Files and hashes: 1: LRgVsMncnuIgfslBfN7CvEviPGE.crl (hash: uXuuYoYtSGRmUOSjYPxIh8Vg8RyVFvb7ikoNoFc5BxQ=)
2: PJ1oWEK44Zed3KrYQclwt_PzWxI.roa (hash: ndUhprvQgKRMORI6rgSCOBtWuDBA/APXIOBsxX7wUqU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:22:5e:a8:f9:ac:9c:93:3e:2b:7e:c6:07:6b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d1815b0c9dc9ee2207ec9417cdec2bc4be23c61
Validity
Not Before: Jan 31 10:00:36 2025 GMT
Not After : Feb 1 10:00:36 2025 GMT
Subject: CN=58e90fe4ffc9443a39e6aa6ed63076b19d0013e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:f8:25:c3:9a:4b:af:4e:67:d9:24:27:c1:d8:
d4:c6:2f:59:00:fd:3d:99:89:5f:05:f6:10:3c:21:
e1:2d:71:a9:44:37:2c:61:fb:f0:d3:6e:a6:db:72:
0b:03:96:5b:19:db:0b:ce:dd:92:4c:44:b5:6a:7d:
1e:59:78:c7:75:8a:16:20:b7:42:1d:c9:27:1f:59:
b5:24:33:0a:01:46:c0:2d:e3:a1:43:f5:a1:70:da:
0a:aa:2f:34:ba:ae:b9:87:a5:32:cb:1b:72:6b:d2:
0c:98:7f:f7:dc:ef:40:ad:79:32:c3:58:77:a8:03:
e5:85:3d:f8:15:a9:e4:6b:3d:8a:14:80:9c:c0:78:
67:a6:93:28:17:4d:4e:7e:4d:58:21:fe:cd:7b:1b:
b4:e0:c2:76:60:3b:46:df:35:39:a4:f3:d6:7c:94:
f1:15:22:82:a2:3c:23:39:17:8f:5f:fe:cc:1a:19:
1b:05:0f:b7:fb:f5:24:5c:78:b6:a8:10:b5:3c:02:
b0:79:72:87:e1:34:02:63:02:7a:6b:5b:0c:98:90:
68:50:5a:6c:0f:f3:0c:46:43:31:59:79:94:84:fb:
52:cf:ea:2e:4c:6f:ad:33:81:74:c1:3f:39:01:35:
ed:1c:5a:d7:a5:ba:b0:59:8f:47:88:8b:49:07:18:
04:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:E9:0F:E4:FF:C9:44:3A:39:E6:AA:6E:D6:30:76:B1:9D:00:13:E4
X509v3 Authority Key Identifier:
keyid:2D:18:15:B0:C9:DC:9E:E2:20:7E:C9:41:7C:DE:C2:BC:4B:E2:3C:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRgVsMncnuIgfslBfN7CvEviPGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/d38ec1-d4c6-40fb-ab1d-d202f2a40081/1/LRgVsMncnuIgfslBfN7CvEviPGE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/d38ec1-d4c6-40fb-ab1d-d202f2a40081/1/LRgVsMncnuIgfslBfN7CvEviPGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:4f:2d:05:f0:41:9c:6f:4b:25:c2:17:ea:60:fe:09:61:3a:
7e:c9:b8:1a:9a:33:2a:7f:f4:1f:40:7c:b3:11:75:5e:04:e7:
4f:3f:2b:ff:0c:22:23:9c:99:d9:30:a8:12:c7:ed:c4:38:9d:
ef:a4:4b:74:c3:e0:b8:de:16:77:79:3e:f6:fd:24:b3:12:2e:
45:59:50:ce:38:92:fa:90:78:7c:8b:fe:0d:0a:aa:c6:0d:e4:
98:73:86:ec:ae:67:38:38:10:f6:5d:19:01:f9:de:ac:84:d1:
74:e9:5b:b5:50:07:cb:e9:de:69:a8:3b:08:04:37:e0:8b:55:
9a:c3:35:c3:18:d2:a7:7f:67:0c:95:2d:92:ce:d1:ca:21:51:
40:87:99:f6:d8:cf:17:a3:d5:b0:98:aa:84:30:3b:d9:fa:96:
b7:64:6c:b2:4d:a9:04:30:85:c7:17:83:f3:bd:9f:0f:c0:40:
55:dd:63:c9:29:a5:bf:b0:c8:5d:09:00:c6:41:fc:c4:ee:5a:
8b:ab:6e:af:3e:28:eb:5b:fa:89:29:58:bb:26:23:8c:c9:db:
3d:a3:e0:ab:54:8e:4f:27:17:cf:f9:c6:94:a7:ba:c2:58:70:
39:ce:95:91:9d:9e:22:38:50:3b:66:b0:6b:84:8f:23:a7:03:
2f:f9:dd:16
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7ziJeqPmsnJM+K37GB2uAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJkMTgxNWIwYzlkYzllZTIyMDdlYzk0MTdjZGVjMmJjNGJl
MjNjNjEwHhcNMjUwMTMxMTAwMDM2WhcNMjUwMjAxMTAwMDM2WjAzMTEwLwYDVQQD
Eyg1OGU5MGZlNGZmYzk0NDNhMzllNmFhNmVkNjMwNzZiMTlkMDAxM2U0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmvglw5pLr05n2SQnwdjUxi9ZAP09
mYlfBfYQPCHhLXGpRDcsYfvw026m23ILA5ZbGdsLzt2STES1an0eWXjHdYoWILdC
HcknH1m1JDMKAUbALeOhQ/WhcNoKqi80uq65h6Uyyxtya9IMmH/33O9ArXkyw1h3
qAPlhT34Fankaz2KFICcwHhnppMoF01Ofk1YIf7Nexu04MJ2YDtG3zU5pPPWfJTx
FSKCojwjORePX/7MGhkbBQ+3+/UkXHi2qBC1PAKweXKH4TQCYwJ6a1sMmJBoUFps
D/MMRkMxWXmUhPtSz+ouTG+tM4F0wT85ATXtHFrXpbqwWY9HiItJBxgEsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFjpD+T/yUQ6OeaqbtYwdrGdABPkMB8GA1UdIwQY
MBaAFC0YFbDJ3J7iIH7JQXzewrxL4jxhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTFJnVnNNbmNudUlnZnNsQmZON0N2RXZpUEdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9kMzhlYzEtZDRjNi00MGZiLWFiMWQt
ZDIwMmYyYTQwMDgxLzEvTFJnVnNNbmNudUlnZnNsQmZON0N2RXZpUEdFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC9kMzhlYzEtZDRjNi00MGZiLWFiMWQtZDIwMmYyYTQwMDgx
LzEvTFJnVnNNbmNudUlnZnNsQmZON0N2RXZpUEdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHU8tBfBB
nG9LJcIX6mD+CWE6fsm4GpozKn/0H0B8sxF1XgTnTz8r/wwiI5yZ2TCoEsftxDid
76RLdMPguN4Wd3k+9v0ksxIuRVlQzjiS+pB4fIv+DQqqxg3kmHOG7K5nODgQ9l0Z
AfnerITRdOlbtVAHy+neaag7CAQ34ItVmsM1wxjSp39nDJUtks7RyiFRQIeZ9tjP
F6PVsJiqhDA72fqWt2Rssk2pBDCFxxeD872fD8BAVd1jySmlv7DIXQkAxkH8xO5a
i6turz4o61v6iSlYuyYjjMnbPaPgq1SOTycXz/nGlKe6wlhwOc6VkZ2eIjhQO2aw
a4SPI6cDL/ndFg==
-----END CERTIFICATE-----
Generated at Fri Apr 25 00:24:28 2025 by rpki-client