Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/bf70d3-70fa-4a32-809f-2a591c149d7a/1/lhmTYCWfpbNbgpU8Xtl5mSKDQaw.mft
File: lhmTYCWfpbNbgpU8Xtl5mSKDQaw.mft (raw, json)
Hash identifier: LjSQhWgJR3gy+20b8/VB/Q20umtzlh3QzcFU4qBcpyY=
Subject key identifier: 51:2C:9E:20:4B:3F:78:7D:6F:23:29:AA:E1:A0:5B:B4:9B:D0:AC:49
Authority key identifier: 96:19:93:60:25:9F:A5:B3:5B:82:95:3C:5E:D9:79:99:22:83:41:AC
Certificate issuer: /CN=96199360259fa5b35b82953c5ed97999228341ac
Certificate serial: 0194BCA9BA54A6C75E04CB59E2A1CB990052
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lhmTYCWfpbNbgpU8Xtl5mSKDQaw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/bf70d3-70fa-4a32-809f-2a591c149d7a/1/lhmTYCWfpbNbgpU8Xtl5mSKDQaw.mft
Manifest number: 1193
Signing time: Fri 31 Jan 2025 14:00:27 +0000
Manifest this update: Fri 31 Jan 2025 14:00:27 +0000
Manifest next update: Sat 01 Feb 2025 14:00:27 +0000
Files and hashes: 1: 0hGuI9abbnH5IARURiUpnsE2cKk.roa (hash: DuwUAcXW//1k2Md+MdRwDGn9pw5DCw3cr3zSvWu8/Sg=)
2: lhmTYCWfpbNbgpU8Xtl5mSKDQaw.crl (hash: gmbHBr6MLPuf/SvJZkKau9GL9H3dztIzO/kgOwo1Beg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:ba:54:a6:c7:5e:04:cb:59:e2:a1:cb:99:00:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96199360259fa5b35b82953c5ed97999228341ac
Validity
Not Before: Jan 31 14:00:27 2025 GMT
Not After : Feb 1 14:00:27 2025 GMT
Subject: CN=512c9e204b3f787d6f2329aae1a05bb49bd0ac49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a2:7c:f2:46:34:89:40:4d:5b:05:35:c6:d6:
72:a6:d2:dd:c5:b7:8a:bc:28:74:70:e8:54:78:6a:
d4:f8:58:d2:72:56:d9:9a:fc:23:0d:46:0e:02:6f:
af:e6:db:7e:9d:ec:b2:5c:00:80:08:a7:6f:93:73:
8b:35:2b:2d:7a:80:6e:50:b8:f1:8b:77:85:7a:2a:
bb:36:2e:3b:29:bf:16:7e:bf:ce:26:fa:f7:be:ac:
e5:38:26:00:a1:d2:68:79:df:f4:95:5d:da:d3:3b:
eb:42:f1:fa:9c:59:cd:27:38:e2:26:fd:79:75:9a:
17:bb:5b:ce:de:6b:f4:c5:0a:25:26:02:d7:f3:e2:
a0:9b:3f:37:9f:92:6c:fe:c0:09:6d:dc:cd:f5:2b:
15:5d:6a:0c:2d:14:95:0c:63:a3:bf:99:41:99:61:
ef:bc:0d:73:ca:d1:6f:3e:06:9f:d7:3c:6c:81:fb:
77:6f:a2:b8:ae:19:2b:d2:b9:46:0e:b6:9c:96:ae:
36:fd:99:66:19:42:59:59:78:5a:df:f4:22:0e:2c:
2e:cf:8c:60:76:aa:28:eb:f5:6f:84:9b:d4:df:25:
a9:a4:6b:bd:13:79:37:91:2c:34:0d:c5:62:4a:a2:
28:73:32:c9:56:78:64:c3:81:9e:0a:4b:bc:43:9b:
e6:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:2C:9E:20:4B:3F:78:7D:6F:23:29:AA:E1:A0:5B:B4:9B:D0:AC:49
X509v3 Authority Key Identifier:
keyid:96:19:93:60:25:9F:A5:B3:5B:82:95:3C:5E:D9:79:99:22:83:41:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lhmTYCWfpbNbgpU8Xtl5mSKDQaw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/bf70d3-70fa-4a32-809f-2a591c149d7a/1/lhmTYCWfpbNbgpU8Xtl5mSKDQaw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/bf70d3-70fa-4a32-809f-2a591c149d7a/1/lhmTYCWfpbNbgpU8Xtl5mSKDQaw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:46:39:0e:3b:74:7a:e1:36:5e:1b:96:a0:e6:f3:39:26:1f:
0c:0a:43:e5:18:8b:93:22:27:40:94:d9:0d:67:56:f8:b3:f6:
04:48:c5:5c:d8:46:1f:c5:16:73:76:34:9d:a3:09:5d:76:df:
0b:66:32:27:1b:ba:77:5e:5c:5e:ab:6d:cf:bd:2c:88:11:a6:
de:6d:1c:b0:43:4a:36:a4:84:6b:ac:29:6a:9f:30:39:85:49:
ca:7f:fd:0a:9a:26:47:ae:0c:a8:5d:0f:f4:e9:fc:f3:94:7b:
a5:6b:e5:6b:a2:31:f6:46:6a:5b:d3:e8:bf:24:7f:c4:5c:90:
b1:7d:89:c2:7a:ad:e9:19:05:39:bc:5a:c9:22:5a:4c:98:e5:
ab:9b:e7:6a:97:0d:93:39:44:a9:f5:a4:eb:d7:c2:04:8d:7f:
52:1f:fe:d5:bd:7a:9e:3a:86:5b:3a:67:3c:1d:e2:76:36:d3:
4a:e8:e7:e5:4e:8e:be:13:8f:f2:44:e1:45:95:d3:30:c8:0a:
cb:1f:0d:42:a1:1e:20:f8:7f:88:f9:58:8a:3c:d3:67:8c:8b:
b4:91:36:fe:91:56:db:6f:5a:d7:99:2a:19:41:c4:6c:67:a8:
f9:bd:f6:93:1f:ad:fd:73:27:17:8a:6f:41:49:60:3f:02:8e:
37:e9:a6:46
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qbpUpsdeBMtZ4qHLmQBSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2MTk5MzYwMjU5ZmE1YjM1YjgyOTUzYzVlZDk3OTk5MjI4
MzQxYWMwHhcNMjUwMTMxMTQwMDI3WhcNMjUwMjAxMTQwMDI3WjAzMTEwLwYDVQQD
Eyg1MTJjOWUyMDRiM2Y3ODdkNmYyMzI5YWFlMWEwNWJiNDliZDBhYzQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsKJ88kY0iUBNWwU1xtZyptLdxbeK
vCh0cOhUeGrU+FjSclbZmvwjDUYOAm+v5tt+neyyXACACKdvk3OLNSsteoBuULjx
i3eFeiq7Ni47Kb8Wfr/OJvr3vqzlOCYAodJoed/0lV3a0zvrQvH6nFnNJzjiJv15
dZoXu1vO3mv0xQolJgLX8+Kgmz83n5Js/sAJbdzN9SsVXWoMLRSVDGOjv5lBmWHv
vA1zytFvPgaf1zxsgft3b6K4rhkr0rlGDraclq42/ZlmGUJZWXha3/QiDiwuz4xg
dqoo6/VvhJvU3yWppGu9E3k3kSw0DcViSqIoczLJVnhkw4GeCku8Q5vmUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFEsniBLP3h9byMpquGgW7Sb0KxJMB8GA1UdIwQY
MBaAFJYZk2Aln6WzW4KVPF7ZeZkig0GsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbGhtVFlDV2ZwYk5iZ3BVOFh0bDVtU0tEUWF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS9iZjcwZDMtNzBmYS00YTMyLTgwOWYt
MmE1OTFjMTQ5ZDdhLzEvbGhtVFlDV2ZwYk5iZ3BVOFh0bDVtU0tEUWF3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS9iZjcwZDMtNzBmYS00YTMyLTgwOWYtMmE1OTFjMTQ5ZDdh
LzEvbGhtVFlDV2ZwYk5iZ3BVOFh0bDVtU0tEUWF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZkY5Djt0
euE2XhuWoObzOSYfDApD5RiLkyInQJTZDWdW+LP2BEjFXNhGH8UWc3Y0naMJXXbf
C2YyJxu6d15cXqttz70siBGm3m0csENKNqSEa6wpap8wOYVJyn/9CpomR64MqF0P
9On885R7pWvla6Ix9kZqW9PovyR/xFyQsX2Jwnqt6RkFObxaySJaTJjlq5vnapcN
kzlEqfWk69fCBI1/Uh/+1b16njqGWzpnPB3idjbTSujn5U6OvhOP8kThRZXTMMgK
yx8NQqEeIPh/iPlYijzTZ4yLtJE2/pFW229a15kqGUHEbGeo+b32kx+t/XMnF4pv
QUlgPwKON+mmRg==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:47:22 2025 by rpki-client