Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/e5cf67-e296-46e8-919c-473a29ac3363/1/_LVQtxDX8PlLDOQyzw5OlQzE4co.mft
File: _LVQtxDX8PlLDOQyzw5OlQzE4co.mft (raw, json)
Hash identifier: 6UKquWg4DbepcmlzTUT2WhHoSR6S+IOazIXU0F36NRs=
Subject key identifier: 66:2D:F9:A8:3C:3A:97:A2:22:0B:28:7C:EE:92:63:53:A3:F6:6F:0C
Authority key identifier: FC:B5:50:B7:10:D7:F0:F9:4B:0C:E4:32:CF:0E:4E:95:0C:C4:E1:CA
Certificate issuer: /CN=fcb550b710d7f0f94b0ce432cf0e4e950cc4e1ca
Certificate serial: 0194BD8528203C7460A1461E306342429A46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_LVQtxDX8PlLDOQyzw5OlQzE4co.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/e5cf67-e296-46e8-919c-473a29ac3363/1/_LVQtxDX8PlLDOQyzw5OlQzE4co.mft
Manifest number: 0246
Signing time: Fri 31 Jan 2025 18:00:07 +0000
Manifest this update: Fri 31 Jan 2025 18:00:07 +0000
Manifest next update: Sat 01 Feb 2025 18:00:07 +0000
Files and hashes: 1: _LVQtxDX8PlLDOQyzw5OlQzE4co.crl (hash: VLchzen6uzoXM9VZSDdAFx44Bge5SfP5UfYOMSje2Ck=)
2: nFeHU4vrYRFo-11ovr0Tku54r4I.roa (hash: LbVqewnx/HQRoXd8S+Bxr4d2t69NAHQNt9Q/3oZNLT4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:28:20:3c:74:60:a1:46:1e:30:63:42:42:9a:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcb550b710d7f0f94b0ce432cf0e4e950cc4e1ca
Validity
Not Before: Jan 31 18:00:07 2025 GMT
Not After : Feb 1 18:00:07 2025 GMT
Subject: CN=662df9a83c3a97a2220b287cee926353a3f66f0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:c2:9a:fd:78:66:12:67:25:70:4d:3d:df:42:
f7:7b:0f:14:ec:4c:7a:ce:f8:32:f2:6a:e9:12:fa:
d0:1e:01:d9:34:d7:91:06:cc:92:8a:43:a4:48:f8:
ec:38:45:b9:14:8a:b6:8c:73:78:43:a4:04:cc:4a:
1b:60:8f:84:14:99:35:a6:83:5b:5f:7f:6d:a9:87:
72:c6:68:31:68:62:15:9f:e2:e6:b9:28:3b:2e:cb:
4f:80:69:03:e5:a4:78:c0:29:08:3a:04:d7:ef:78:
1c:0a:92:29:99:4c:1e:c4:b5:39:54:d4:18:f5:5d:
9d:64:ba:15:ab:c5:61:df:8d:ef:b4:32:63:b9:36:
d6:a1:e7:15:0b:b3:6f:d6:44:3e:84:f1:30:59:f9:
db:db:e7:77:83:10:06:af:f6:9e:d1:d5:00:90:91:
59:4e:47:52:29:e8:ab:1d:43:f3:b5:b9:86:ea:83:
f8:2b:7f:bc:52:57:8b:ba:0d:a4:ca:30:a7:fe:80:
12:6e:bc:97:84:4d:f3:25:8a:0f:21:53:91:ae:ab:
96:61:0b:56:dc:48:e0:37:8d:6a:3c:d0:f4:ea:d2:
22:86:97:61:60:c5:06:f9:22:17:fd:24:e1:d5:c5:
b2:b0:8a:c3:5a:4e:48:bf:b0:f1:2c:fd:9f:41:e5:
dd:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:2D:F9:A8:3C:3A:97:A2:22:0B:28:7C:EE:92:63:53:A3:F6:6F:0C
X509v3 Authority Key Identifier:
keyid:FC:B5:50:B7:10:D7:F0:F9:4B:0C:E4:32:CF:0E:4E:95:0C:C4:E1:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_LVQtxDX8PlLDOQyzw5OlQzE4co.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/e5cf67-e296-46e8-919c-473a29ac3363/1/_LVQtxDX8PlLDOQyzw5OlQzE4co.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/e5cf67-e296-46e8-919c-473a29ac3363/1/_LVQtxDX8PlLDOQyzw5OlQzE4co.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:bf:d3:cc:1f:b3:4f:16:d4:1f:57:2c:e6:d3:2d:34:7d:aa:
57:da:da:49:4e:c2:eb:ff:42:a3:3c:a5:89:2b:a2:3e:23:23:
15:6b:8d:74:4f:9a:4b:2d:24:c9:12:26:f6:84:60:51:ea:3d:
08:e0:40:6d:3c:72:44:19:7c:54:36:49:01:0b:3b:5e:a1:66:
92:ad:a4:b5:33:db:85:b9:7b:2e:92:f0:f7:9a:48:02:43:cb:
99:be:82:27:e0:73:9b:5f:81:93:45:48:0d:1b:dd:2f:b2:48:
8d:98:57:c8:5b:60:7a:51:fd:dd:07:fb:c6:f8:c3:e1:98:61:
50:9c:c2:d3:15:23:f4:8b:77:28:1d:28:64:f3:35:88:c8:05:
84:6b:df:6e:5d:81:dc:23:95:70:52:39:b7:03:03:d4:ea:49:
72:ed:5e:d1:cf:05:23:a8:05:96:96:47:03:ba:d1:07:81:55:
29:c1:ff:17:c6:dc:a8:db:c1:e4:36:cf:d3:c6:71:7c:5d:1a:
38:3a:56:d9:f3:ac:96:90:ad:f2:71:ed:7c:3a:96:29:d5:7c:
d9:55:96:43:68:66:3e:b7:11:49:8d:05:ee:17:83:8f:2c:f4:
51:29:58:75:dc:5d:c9:bf:3f:c4:0a:fe:d1:0f:e4:64:ce:2d:
c3:99:44:4f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9hSggPHRgoUYeMGNCQppGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjYjU1MGI3MTBkN2YwZjk0YjBjZTQzMmNmMGU0ZTk1MGNj
NGUxY2EwHhcNMjUwMTMxMTgwMDA3WhcNMjUwMjAxMTgwMDA3WjAzMTEwLwYDVQQD
Eyg2NjJkZjlhODNjM2E5N2EyMjIwYjI4N2NlZTkyNjM1M2EzZjY2ZjBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2cKa/XhmEmclcE0930L3ew8U7Ex6
zvgy8mrpEvrQHgHZNNeRBsySikOkSPjsOEW5FIq2jHN4Q6QEzEobYI+EFJk1poNb
X39tqYdyxmgxaGIVn+LmuSg7LstPgGkD5aR4wCkIOgTX73gcCpIpmUwexLU5VNQY
9V2dZLoVq8Vh343vtDJjuTbWoecVC7Nv1kQ+hPEwWfnb2+d3gxAGr/ae0dUAkJFZ
TkdSKeirHUPztbmG6oP4K3+8UleLug2kyjCn/oASbryXhE3zJYoPIVORrquWYQtW
3EjgN41qPND06tIihpdhYMUG+SIX/STh1cWysIrDWk5Iv7DxLP2fQeXd/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGYt+ag8OpeiIgsofO6SY1Oj9m8MMB8GA1UdIwQY
MBaAFPy1ULcQ1/D5SwzkMs8OTpUMxOHKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX0xWUXR4RFg4UGxMRE9ReXp3NU9sUXpFNGNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi9lNWNmNjctZTI5Ni00NmU4LTkxOWMt
NDczYTI5YWMzMzYzLzEvX0xWUXR4RFg4UGxMRE9ReXp3NU9sUXpFNGNvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi9lNWNmNjctZTI5Ni00NmU4LTkxOWMtNDczYTI5YWMzMzYz
LzEvX0xWUXR4RFg4UGxMRE9ReXp3NU9sUXpFNGNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdL/TzB+z
TxbUH1cs5tMtNH2qV9raSU7C6/9CozyliSuiPiMjFWuNdE+aSy0kyRIm9oRgUeo9
COBAbTxyRBl8VDZJAQs7XqFmkq2ktTPbhbl7LpLw95pIAkPLmb6CJ+Bzm1+Bk0VI
DRvdL7JIjZhXyFtgelH93Qf7xvjD4ZhhUJzC0xUj9It3KB0oZPM1iMgFhGvfbl2B
3COVcFI5twMD1OpJcu1e0c8FI6gFlpZHA7rRB4FVKcH/F8bcqNvB5DbP08ZxfF0a
ODpW2fOslpCt8nHtfDqWKdV82VWWQ2hmPrcRSY0F7heDjyz0USlYddxdyb8/xAr+
0Q/kZM4tw5lETw==
-----END CERTIFICATE-----
Generated at Fri Apr 25 07:45:32 2025 by rpki-client