Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/24000c-b5d2-48dc-b959-e95a2496157e/1/L3oyxzesMHgHR2ppewuva5AEVo4.mft
File: L3oyxzesMHgHR2ppewuva5AEVo4.mft (raw, json)
Hash identifier: RyJ+K/EDakgHlzArnQzZLJ8lewXOSJEqBszOZLlCXmA=
Subject key identifier: 40:E8:D9:45:9F:3C:55:7E:8E:EC:36:C8:C9:46:AA:0B:8C:89:DB:C8
Authority key identifier: 2F:7A:32:C7:37:AC:30:78:07:47:6A:69:7B:0B:AF:6B:90:04:56:8E
Certificate issuer: /CN=2f7a32c737ac307807476a697b0baf6b9004568e
Certificate serial: 0194BC3C106801F2261A63DD4921BE329646
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L3oyxzesMHgHR2ppewuva5AEVo4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/24000c-b5d2-48dc-b959-e95a2496157e/1/L3oyxzesMHgHR2ppewuva5AEVo4.mft
Manifest number: 0271
Signing time: Fri 31 Jan 2025 12:00:40 +0000
Manifest this update: Fri 31 Jan 2025 12:00:40 +0000
Manifest next update: Sat 01 Feb 2025 12:00:40 +0000
Files and hashes: 1: L3oyxzesMHgHR2ppewuva5AEVo4.crl (hash: +tDbaYF24aZ48tGkHRuRAfALDs9URuqwsswMjnz1xG8=)
2: WxBvM9AzXvcGUxLQO7mjVfKZ8SI.roa (hash: MlBmuxBYdT/UhZRE0mpsF297g9H8Aa5t6UDiR3XGbFU=)
3: hGYvey0NL7kedoZnW8NGK9NdHUE.roa (hash: j/gjt7b1AkCBiDU1S/YvmfcXT2lTvik+0pgkIhPCV+w=)
4: zhUAq4pe-9N-dxfCl2d78EjPTb0.roa (hash: uyxGbVsUozb8CGUZeB9rmoW8CVbBZTPJHf+JK7e+rn4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:10:68:01:f2:26:1a:63:dd:49:21:be:32:96:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f7a32c737ac307807476a697b0baf6b9004568e
Validity
Not Before: Jan 31 12:00:40 2025 GMT
Not After : Feb 1 12:00:40 2025 GMT
Subject: CN=40e8d9459f3c557e8eec36c8c946aa0b8c89dbc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:95:c6:98:62:06:42:49:5f:96:b5:b0:2d:09:
ea:33:36:18:72:e5:37:e9:fe:ec:15:0e:86:b4:c9:
49:73:42:56:05:78:06:18:17:df:b9:c3:9d:bc:11:
22:87:96:24:12:49:47:38:44:9e:9a:f3:fc:bd:ce:
ee:da:df:f6:6d:b6:08:49:24:c5:dd:42:e1:da:52:
6b:86:5c:a9:d8:d7:7d:35:eb:5a:ed:9e:92:6c:53:
0f:4e:29:60:f4:27:eb:e8:65:c8:69:c0:38:15:43:
c8:3c:d6:b2:76:d7:0c:b0:06:6a:f1:08:21:81:4e:
3d:20:d1:01:31:62:ff:aa:7c:33:ce:2e:96:21:bd:
eb:25:0f:47:19:fa:5c:07:9c:25:e4:d4:3c:e5:b7:
c7:dd:ca:06:e2:0b:49:21:17:2c:1e:8b:4c:22:f6:
87:ea:29:98:51:a8:ea:57:b1:02:6d:34:cf:c8:36:
77:ac:cc:3f:80:00:63:55:47:2a:5c:96:ec:9c:fc:
ec:69:55:79:2d:2c:c3:c8:b1:92:5c:22:38:80:8d:
af:56:e3:07:2e:fe:6e:3a:02:46:00:46:a4:c9:c1:
e7:67:49:b8:10:69:5f:69:56:8a:15:9d:42:55:67:
2e:49:2a:9c:a2:26:33:8e:84:52:90:e1:46:ef:d4:
e6:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:E8:D9:45:9F:3C:55:7E:8E:EC:36:C8:C9:46:AA:0B:8C:89:DB:C8
X509v3 Authority Key Identifier:
keyid:2F:7A:32:C7:37:AC:30:78:07:47:6A:69:7B:0B:AF:6B:90:04:56:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L3oyxzesMHgHR2ppewuva5AEVo4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/24000c-b5d2-48dc-b959-e95a2496157e/1/L3oyxzesMHgHR2ppewuva5AEVo4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/24000c-b5d2-48dc-b959-e95a2496157e/1/L3oyxzesMHgHR2ppewuva5AEVo4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:f2:c0:39:f5:df:80:60:e1:b9:3e:55:ea:38:85:1e:55:31:
78:12:79:77:93:91:65:ca:54:db:ac:24:7e:bd:a3:48:1e:47:
07:13:79:92:bb:ff:4b:ea:31:df:36:4c:69:01:fc:c8:76:0f:
17:0a:c0:b1:09:bb:89:53:aa:b4:d5:6d:f4:7a:f1:f1:68:83:
85:88:a7:d4:df:82:63:ce:b7:cb:19:7f:35:1a:ed:c6:62:ac:
74:c3:b7:70:7e:9b:51:c2:f5:92:da:56:49:d6:23:08:e4:dc:
35:9e:7c:86:3f:ef:8e:34:24:46:fe:b0:12:bb:1c:7e:59:7b:
ef:15:f3:f4:89:dd:f8:1f:8d:de:ba:d4:c5:cd:ca:66:c7:e9:
0a:7e:e3:d7:7d:19:27:4a:61:3f:ec:e6:58:3d:d8:33:cc:ac:
98:fc:be:04:0b:20:5a:16:af:35:cc:fa:2c:f2:ff:47:3e:ba:
8b:60:a2:af:02:9e:29:6d:16:d5:26:58:ef:10:03:ce:31:7f:
66:bf:52:5c:64:2f:f0:f7:5c:9c:54:80:7e:de:8b:9d:dd:60:
56:19:65:a3:6f:30:bb:4b:88:92:50:b9:b4:ee:d0:c5:0a:03:
18:25:db:49:5f:59:e2:e4:2c:ca:c3:47:88:22:44:88:3e:65:
67:2d:19:73
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8PBBoAfImGmPdSSG+MpZGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmN2EzMmM3MzdhYzMwNzgwNzQ3NmE2OTdiMGJhZjZiOTAw
NDU2OGUwHhcNMjUwMTMxMTIwMDQwWhcNMjUwMjAxMTIwMDQwWjAzMTEwLwYDVQQD
Eyg0MGU4ZDk0NTlmM2M1NTdlOGVlYzM2YzhjOTQ2YWEwYjhjODlkYmM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvpXGmGIGQklflrWwLQnqMzYYcuU3
6f7sFQ6GtMlJc0JWBXgGGBffucOdvBEih5YkEklHOESemvP8vc7u2t/2bbYISSTF
3ULh2lJrhlyp2Nd9Neta7Z6SbFMPTilg9Cfr6GXIacA4FUPIPNaydtcMsAZq8Qgh
gU49INEBMWL/qnwzzi6WIb3rJQ9HGfpcB5wl5NQ85bfH3coG4gtJIRcsHotMIvaH
6imYUajqV7ECbTTPyDZ3rMw/gABjVUcqXJbsnPzsaVV5LSzDyLGSXCI4gI2vVuMH
Lv5uOgJGAEakycHnZ0m4EGlfaVaKFZ1CVWcuSSqcoiYzjoRSkOFG79TmvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEDo2UWfPFV+juw2yMlGqguMidvIMB8GA1UdIwQY
MBaAFC96Msc3rDB4B0dqaXsLr2uQBFaOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTDNveXh6ZXNNSGdIUjJwcGV3dXZhNUFFVm80LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS8yNDAwMGMtYjVkMi00OGRjLWI5NTkt
ZTk1YTI0OTYxNTdlLzEvTDNveXh6ZXNNSGdIUjJwcGV3dXZhNUFFVm80Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS8yNDAwMGMtYjVkMi00OGRjLWI5NTktZTk1YTI0OTYxNTdl
LzEvTDNveXh6ZXNNSGdIUjJwcGV3dXZhNUFFVm80LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHPLAOfXf
gGDhuT5V6jiFHlUxeBJ5d5ORZcpU26wkfr2jSB5HBxN5krv/S+ox3zZMaQH8yHYP
FwrAsQm7iVOqtNVt9Hrx8WiDhYin1N+CY863yxl/NRrtxmKsdMO3cH6bUcL1ktpW
SdYjCOTcNZ58hj/vjjQkRv6wErscfll77xXz9Ind+B+N3rrUxc3KZsfpCn7j130Z
J0phP+zmWD3YM8ysmPy+BAsgWhavNcz6LPL/Rz66i2CirwKeKW0W1SZY7xADzjF/
Zr9SXGQv8PdcnFSAft6Lnd1gVhllo28wu0uIklC5tO7QxQoDGCXbSV9Z4uQsysNH
iCJEiD5lZy0Zcw==
-----END CERTIFICATE-----
Generated at Fri Apr 25 00:59:26 2025 by rpki-client