Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/1a472f-a137-42c9-ac9f-4c2c0c8f2462/1/leN5E1KsgsnSB0NCTNxhcAlvT68.mft
File: leN5E1KsgsnSB0NCTNxhcAlvT68.mft (raw, json)
Hash identifier: wEwnpOouUQEWOwdJBD+2bmZcMUhX+I6XB+446oRNndY=
Subject key identifier: C4:4C:13:2A:40:8B:58:88:6F:A7:81:DE:73:70:49:91:C0:45:7F:B7
Authority key identifier: 95:E3:79:13:52:AC:82:C9:D2:07:43:42:4C:DC:61:70:09:6F:4F:AF
Certificate issuer: /CN=95e3791352ac82c9d20743424cdc6170096f4faf
Certificate serial: 0194BBCEE6C0CCA31B71B98CEE327C88EF26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/leN5E1KsgsnSB0NCTNxhcAlvT68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/1a472f-a137-42c9-ac9f-4c2c0c8f2462/1/leN5E1KsgsnSB0NCTNxhcAlvT68.mft
Manifest number: 1426
Signing time: Fri 31 Jan 2025 10:01:26 +0000
Manifest this update: Fri 31 Jan 2025 10:01:26 +0000
Manifest next update: Sat 01 Feb 2025 10:01:26 +0000
Files and hashes: 1: leN5E1KsgsnSB0NCTNxhcAlvT68.crl (hash: +Nohlhzd5N7IHNXq+J7/JHm6pCerp3MwCq8IJ429MHE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:e6:c0:cc:a3:1b:71:b9:8c:ee:32:7c:88:ef:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95e3791352ac82c9d20743424cdc6170096f4faf
Validity
Not Before: Jan 31 10:01:26 2025 GMT
Not After : Feb 1 10:01:26 2025 GMT
Subject: CN=c44c132a408b58886fa781de73704991c0457fb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:4a:6e:b1:6d:27:eb:5c:e3:6b:95:ab:ea:39:
23:64:68:96:6e:54:58:1d:45:6c:e7:2a:15:38:3a:
b5:8b:67:14:c0:ad:e8:10:2d:25:57:d6:03:0e:5b:
c2:21:61:09:a2:cc:ba:97:44:bb:2c:26:11:ff:e1:
e0:62:62:fb:4c:2c:ff:25:a5:c0:09:fd:3e:f9:82:
17:1e:b0:88:28:73:39:24:7e:34:84:b8:7d:d1:68:
4f:c0:de:93:a4:af:82:16:39:27:dd:32:b0:a2:b8:
17:50:f5:4e:4f:35:39:e9:a1:c0:62:91:58:41:16:
16:d2:a0:4d:a7:6b:5d:1f:d0:b0:d1:07:3e:02:92:
79:11:5c:14:5b:73:8d:96:89:b2:8d:8c:32:1b:0b:
44:78:b8:3d:a7:c8:78:76:66:8f:08:ee:72:36:03:
8f:ec:d9:20:27:49:21:99:7b:e6:94:29:c6:a7:fb:
2b:a2:ef:62:a0:69:55:99:18:8c:10:78:38:26:1c:
3b:ca:6b:91:b3:88:91:01:75:ae:25:e5:4e:dd:df:
5a:e2:fd:f7:de:ee:e3:be:c1:54:c3:7c:04:95:a3:
92:10:1d:30:07:4f:26:15:f0:6d:eb:26:20:b5:26:
9e:5a:16:ee:e9:00:a7:cb:fa:7c:69:97:ae:65:d6:
a1:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:4C:13:2A:40:8B:58:88:6F:A7:81:DE:73:70:49:91:C0:45:7F:B7
X509v3 Authority Key Identifier:
keyid:95:E3:79:13:52:AC:82:C9:D2:07:43:42:4C:DC:61:70:09:6F:4F:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/leN5E1KsgsnSB0NCTNxhcAlvT68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/1a472f-a137-42c9-ac9f-4c2c0c8f2462/1/leN5E1KsgsnSB0NCTNxhcAlvT68.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/1a472f-a137-42c9-ac9f-4c2c0c8f2462/1/leN5E1KsgsnSB0NCTNxhcAlvT68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:60:71:8e:53:da:2e:bd:0e:27:15:31:57:f2:cf:43:10:66:
dd:28:ff:37:5c:08:e3:19:53:f9:d0:f9:d9:d8:7e:e3:bb:ed:
2c:4f:2a:f4:28:8e:04:c5:0f:7c:7b:77:1f:4e:24:18:72:4c:
a2:05:0d:3d:95:69:2a:4c:c6:33:85:61:77:de:5b:9b:b4:09:
68:cc:38:10:bc:18:48:6a:88:a9:27:76:55:87:35:f3:62:1f:
a3:5c:48:ce:e7:f3:9c:aa:10:26:47:47:b3:2f:4a:6d:99:aa:
53:a0:ac:d8:fc:f6:db:c1:83:0c:27:c8:a2:7e:16:6d:6c:d2:
78:97:4d:45:41:e6:24:71:d8:e1:2f:44:49:07:82:5a:b8:78:
9b:73:f7:06:44:b7:af:10:be:77:e8:98:35:6e:67:6f:a5:ec:
9a:90:c1:96:3b:c4:4a:dc:38:33:68:e3:95:45:b9:12:90:59:
0a:63:76:1b:5c:5e:bd:e8:95:cb:20:ca:3a:b7:42:cd:0b:59:
33:70:96:c0:77:c1:6b:68:50:41:2d:b2:c7:a1:b2:94:d7:34:
24:fc:bc:14:d1:07:48:96:75:b7:02:26:cd:78:a1:54:f6:84:
da:d5:ee:02:be:64:1d:9e:2a:40:1d:05:43:de:d7:88:06:5b:
9e:28:52:a7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zubAzKMbcbmM7jJ8iO8mMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1ZTM3OTEzNTJhYzgyYzlkMjA3NDM0MjRjZGM2MTcwMDk2
ZjRmYWYwHhcNMjUwMTMxMTAwMTI2WhcNMjUwMjAxMTAwMTI2WjAzMTEwLwYDVQQD
EyhjNDRjMTMyYTQwOGI1ODg4NmZhNzgxZGU3MzcwNDk5MWMwNDU3ZmI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnUpusW0n61zja5Wr6jkjZGiWblRY
HUVs5yoVODq1i2cUwK3oEC0lV9YDDlvCIWEJosy6l0S7LCYR/+HgYmL7TCz/JaXA
Cf0++YIXHrCIKHM5JH40hLh90WhPwN6TpK+CFjkn3TKworgXUPVOTzU56aHAYpFY
QRYW0qBNp2tdH9Cw0Qc+ApJ5EVwUW3ONlomyjYwyGwtEeLg9p8h4dmaPCO5yNgOP
7NkgJ0khmXvmlCnGp/srou9ioGlVmRiMEHg4Jhw7ymuRs4iRAXWuJeVO3d9a4v33
3u7jvsFUw3wElaOSEB0wB08mFfBt6yYgtSaeWhbu6QCny/p8aZeuZdah+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMRMEypAi1iIb6eB3nNwSZHARX+3MB8GA1UdIwQY
MBaAFJXjeRNSrILJ0gdDQkzcYXAJb0+vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbGVONUUxS3Nnc25TQjBOQ1ROeGhjQWx2VDY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi8xYTQ3MmYtYTEzNy00MmM5LWFjOWYt
NGMyYzBjOGYyNDYyLzEvbGVONUUxS3Nnc25TQjBOQ1ROeGhjQWx2VDY4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi8xYTQ3MmYtYTEzNy00MmM5LWFjOWYtNGMyYzBjOGYyNDYy
LzEvbGVONUUxS3Nnc25TQjBOQ1ROeGhjQWx2VDY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc2BxjlPa
Lr0OJxUxV/LPQxBm3Sj/N1wI4xlT+dD52dh+47vtLE8q9CiOBMUPfHt3H04kGHJM
ogUNPZVpKkzGM4Vhd95bm7QJaMw4ELwYSGqIqSd2VYc182Ifo1xIzufznKoQJkdH
sy9KbZmqU6Cs2Pz228GDDCfIon4WbWzSeJdNRUHmJHHY4S9ESQeCWrh4m3P3BkS3
rxC+d+iYNW5nb6XsmpDBljvEStw4M2jjlUW5EpBZCmN2G1xeveiVyyDKOrdCzQtZ
M3CWwHfBa2hQQS2yx6GylNc0JPy8FNEHSJZ1twImzXihVPaE2tXuAr5kHZ4qQB0F
Q97XiAZbnihSpw==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:41:51 2025 by rpki-client