Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/02240f-e080-4be9-93c4-396fcda6490c/1/lW4xbJg4BMJQHsxavqU6KoO1cyQ.mft
File: lW4xbJg4BMJQHsxavqU6KoO1cyQ.mft (raw, json)
Hash identifier: gmHWpafrvEF5kmKLnE80Mb8JVPFY/LsVQsyJjbph08o=
Subject key identifier: E0:80:FA:8A:1B:3C:C2:34:B7:2F:0A:9B:F6:9E:A7:C5:CE:09:A4:52
Authority key identifier: 95:6E:31:6C:98:38:04:C2:50:1E:CC:5A:BE:A5:3A:2A:83:B5:73:24
Certificate issuer: /CN=956e316c983804c2501ecc5abea53a2a83b57324
Certificate serial: 0194BBCDC46EDDCCC5210B90722A9246EE8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lW4xbJg4BMJQHsxavqU6KoO1cyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/02240f-e080-4be9-93c4-396fcda6490c/1/lW4xbJg4BMJQHsxavqU6KoO1cyQ.mft
Manifest number: 13FA
Signing time: Fri 31 Jan 2025 10:00:12 +0000
Manifest this update: Fri 31 Jan 2025 10:00:12 +0000
Manifest next update: Sat 01 Feb 2025 10:00:12 +0000
Files and hashes: 1: lW4xbJg4BMJQHsxavqU6KoO1cyQ.crl (hash: ReMOzLXfMdA2m6uQw5BWVckgMRj56gwF83V66S/fXbA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:c4:6e:dd:cc:c5:21:0b:90:72:2a:92:46:ee:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=956e316c983804c2501ecc5abea53a2a83b57324
Validity
Not Before: Jan 31 10:00:12 2025 GMT
Not After : Feb 1 10:00:12 2025 GMT
Subject: CN=e080fa8a1b3cc234b72f0a9bf69ea7c5ce09a452
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a7:48:f7:79:7f:59:3d:46:29:98:6b:29:3e:
f4:40:88:6a:4e:f1:60:4e:dd:2a:fb:a4:99:90:37:
c0:d3:2c:ed:72:04:df:40:a9:79:8b:b6:61:d2:c0:
7e:75:37:d8:92:8e:95:7e:34:4e:17:64:c9:f1:e8:
82:5e:35:fa:86:b5:4c:b9:ea:41:03:1e:44:61:a1:
dd:57:ad:0a:05:e9:bc:b0:47:8e:78:c6:94:83:77:
4b:e4:55:57:a5:a8:0d:d6:77:48:13:40:1e:ac:c0:
9a:0c:aa:cc:b9:0c:8e:bc:9c:e8:28:ac:15:3f:51:
ac:44:31:4c:d3:a3:3b:a4:3c:a2:82:71:19:30:86:
30:e9:b0:19:d9:05:37:c7:28:ef:0b:a5:94:52:de:
5e:1a:c1:b5:05:26:1e:85:ef:e6:a3:c7:11:b9:96:
1f:d7:ca:9d:ee:b6:8a:f6:67:50:7f:5c:f8:cc:06:
22:5d:f3:d5:a0:ab:db:ce:7c:87:65:fd:1f:8c:51:
2d:d6:0d:84:1a:3f:6c:aa:f9:b1:1f:54:fc:79:37:
9a:2b:e7:e4:8b:6f:30:1c:03:62:92:be:85:46:a4:
cf:8f:ed:ce:16:40:74:04:6c:36:8e:74:39:cd:17:
1f:a4:24:c5:fb:af:0e:6d:84:b6:ae:4b:f1:94:84:
e5:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:80:FA:8A:1B:3C:C2:34:B7:2F:0A:9B:F6:9E:A7:C5:CE:09:A4:52
X509v3 Authority Key Identifier:
keyid:95:6E:31:6C:98:38:04:C2:50:1E:CC:5A:BE:A5:3A:2A:83:B5:73:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lW4xbJg4BMJQHsxavqU6KoO1cyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/02240f-e080-4be9-93c4-396fcda6490c/1/lW4xbJg4BMJQHsxavqU6KoO1cyQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/02240f-e080-4be9-93c4-396fcda6490c/1/lW4xbJg4BMJQHsxavqU6KoO1cyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:37:69:1d:a8:54:ce:18:8e:f0:c8:da:d7:1b:d6:b0:41:a0:
6d:17:d9:22:97:3c:d0:b1:39:6a:52:da:fa:19:ec:e4:f9:23:
0e:5c:d8:86:f9:d6:ec:3c:13:86:cc:83:ab:bf:f8:17:de:2a:
13:23:67:0e:26:fc:67:40:06:79:bd:59:b6:de:9c:72:30:86:
5f:b2:ef:46:3c:2d:2a:d3:0d:ab:51:4b:cb:d6:e7:c7:0b:68:
e0:f8:ec:10:4e:7a:64:77:2b:0b:94:7f:83:13:04:38:9e:eb:
61:7e:b6:a1:45:4c:0e:c0:87:5d:09:de:4b:4e:61:68:88:92:
4a:7e:59:2d:f3:f8:f0:a4:91:1e:b1:0c:4e:55:cd:80:32:b8:
3c:dc:e3:f8:d6:91:32:e0:f9:fb:01:1c:73:9f:b7:31:ba:b6:
1c:47:b7:50:d8:d4:bb:ea:f4:06:81:2c:70:fd:17:62:d1:fd:
6b:32:53:f5:1b:9f:ad:6a:03:80:60:d9:7d:d2:46:a9:d0:46:
bc:17:19:fd:90:b3:0e:25:be:9f:56:dd:de:62:cd:6a:ef:ca:
0f:73:0e:16:08:41:43:76:b8:ee:ea:a9:63:86:5c:55:02:21:
23:87:01:29:7e:23:0d:10:16:4c:33:8c:7a:ee:49:df:69:41:
13:75:02:79
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zcRu3czFIQuQciqSRu6PMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1NmUzMTZjOTgzODA0YzI1MDFlY2M1YWJlYTUzYTJhODNi
NTczMjQwHhcNMjUwMTMxMTAwMDEyWhcNMjUwMjAxMTAwMDEyWjAzMTEwLwYDVQQD
EyhlMDgwZmE4YTFiM2NjMjM0YjcyZjBhOWJmNjllYTdjNWNlMDlhNDUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtqdI93l/WT1GKZhrKT70QIhqTvFg
Tt0q+6SZkDfA0yztcgTfQKl5i7Zh0sB+dTfYko6VfjROF2TJ8eiCXjX6hrVMuepB
Ax5EYaHdV60KBem8sEeOeMaUg3dL5FVXpagN1ndIE0AerMCaDKrMuQyOvJzoKKwV
P1GsRDFM06M7pDyignEZMIYw6bAZ2QU3xyjvC6WUUt5eGsG1BSYehe/mo8cRuZYf
18qd7raK9mdQf1z4zAYiXfPVoKvbznyHZf0fjFEt1g2EGj9sqvmxH1T8eTeaK+fk
i28wHANikr6FRqTPj+3OFkB0BGw2jnQ5zRcfpCTF+68ObYS2rkvxlITlywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOCA+oobPMI0ty8Km/aep8XOCaRSMB8GA1UdIwQY
MBaAFJVuMWyYOATCUB7MWr6lOiqDtXMkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbFc0eGJKZzRCTUpRSHN4YXZxVTZLb08xY3lRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi8wMjI0MGYtZTA4MC00YmU5LTkzYzQt
Mzk2ZmNkYTY0OTBjLzEvbFc0eGJKZzRCTUpRSHN4YXZxVTZLb08xY3lRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZi8wMjI0MGYtZTA4MC00YmU5LTkzYzQtMzk2ZmNkYTY0OTBj
LzEvbFc0eGJKZzRCTUpRSHN4YXZxVTZLb08xY3lRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXjdpHahU
zhiO8Mja1xvWsEGgbRfZIpc80LE5alLa+hns5PkjDlzYhvnW7DwThsyDq7/4F94q
EyNnDib8Z0AGeb1Ztt6ccjCGX7LvRjwtKtMNq1FLy9bnxwto4PjsEE56ZHcrC5R/
gxMEOJ7rYX62oUVMDsCHXQneS05haIiSSn5ZLfP48KSRHrEMTlXNgDK4PNzj+NaR
MuD5+wEcc5+3Mbq2HEe3UNjUu+r0BoEscP0XYtH9azJT9RufrWoDgGDZfdJGqdBG
vBcZ/ZCzDiW+n1bd3mLNau/KD3MOFghBQ3a47uqpY4ZcVQIhI4cBKX4jDRAWTDOM
eu5J32lBE3UCeQ==
-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:29 2025 by rpki-client