Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/4f10a3-6b21-4805-8e03-931ff3d9df41/1/_LiYPlKfyUm4n6s3A7eVt4sah1w.mft
File: _LiYPlKfyUm4n6s3A7eVt4sah1w.mft (raw, json)
Hash identifier: gxjNWyWxxhOQdQCYjs94aFiayHdhj0TmE9fEkdB6D60=
Subject key identifier: 63:D7:90:F5:D0:FF:98:FF:59:F5:30:01:C0:1A:85:07:81:09:D7:C4
Authority key identifier: FC:B8:98:3E:52:9F:C9:49:B8:9F:AB:37:03:B7:95:B7:8B:1A:87:5C
Certificate issuer: /CN=fcb8983e529fc949b89fab3703b795b78b1a875c
Certificate serial: 0194BD852F2BF36311C2E0DC61F3A15EAE29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_LiYPlKfyUm4n6s3A7eVt4sah1w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/4f10a3-6b21-4805-8e03-931ff3d9df41/1/_LiYPlKfyUm4n6s3A7eVt4sah1w.mft
Manifest number: 0897
Signing time: Fri 31 Jan 2025 18:00:09 +0000
Manifest this update: Fri 31 Jan 2025 18:00:09 +0000
Manifest next update: Sat 01 Feb 2025 18:00:09 +0000
Files and hashes: 1: DiB_b1f0zlqZ4Y9RlICgbOGMJ7o.roa (hash: bx7gORpYBo75Iq/H/h1fyR0wOXDdKfLfUPEbvglKOL4=)
2: _LiYPlKfyUm4n6s3A7eVt4sah1w.crl (hash: xL0Ie5/Ds34MSmC+qFVzGNQVOuhYyiF6SQ6qlmtOp4g=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:2f:2b:f3:63:11:c2:e0:dc:61:f3:a1:5e:ae:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcb8983e529fc949b89fab3703b795b78b1a875c
Validity
Not Before: Jan 31 18:00:09 2025 GMT
Not After : Feb 1 18:00:09 2025 GMT
Subject: CN=63d790f5d0ff98ff59f53001c01a85078109d7c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:95:03:1f:47:2a:e4:18:59:12:4d:0a:63:38:
36:51:e2:22:13:87:c0:b4:bd:83:b0:7b:f5:d1:87:
4e:2f:e0:fc:6e:19:16:eb:96:76:df:6a:03:65:a3:
49:c3:62:42:b7:4d:2a:ad:b4:26:0a:78:e6:7a:83:
b0:a6:ee:66:0d:1e:b2:a6:57:9e:91:28:91:54:6f:
c9:38:5a:d0:c6:94:31:01:ac:1a:83:17:bd:fd:91:
77:39:d4:db:c8:b6:89:e3:1b:2f:5f:0f:a4:74:1c:
d9:0c:1a:87:53:29:7f:46:98:c2:68:4d:d7:49:9c:
1e:b5:7d:25:30:06:97:89:15:60:2b:47:d5:b0:e4:
df:df:5e:3c:ae:d8:7c:5c:6f:86:0a:e5:56:26:1f:
e0:7f:63:b9:79:2a:42:d6:bb:15:58:e6:ed:3e:d0:
76:af:84:35:d7:44:c4:fc:53:ae:49:bf:d9:7a:79:
1d:e6:73:87:c5:79:48:53:92:9c:b7:2c:4c:bc:f5:
c8:fd:bb:73:90:38:8e:25:a2:e8:e8:28:8e:75:d2:
13:fe:ce:8d:47:11:d5:82:46:5e:50:c0:42:be:92:
b6:80:df:9e:cb:de:44:78:f9:31:3c:f5:50:04:d6:
77:2a:ae:35:e2:20:dd:20:98:68:10:89:8e:01:ab:
87:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:D7:90:F5:D0:FF:98:FF:59:F5:30:01:C0:1A:85:07:81:09:D7:C4
X509v3 Authority Key Identifier:
keyid:FC:B8:98:3E:52:9F:C9:49:B8:9F:AB:37:03:B7:95:B7:8B:1A:87:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_LiYPlKfyUm4n6s3A7eVt4sah1w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/4f10a3-6b21-4805-8e03-931ff3d9df41/1/_LiYPlKfyUm4n6s3A7eVt4sah1w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/4f10a3-6b21-4805-8e03-931ff3d9df41/1/_LiYPlKfyUm4n6s3A7eVt4sah1w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:0b:c0:92:75:62:2c:5e:83:03:82:64:97:5e:17:e2:04:e5:
1a:2e:00:c4:a5:ab:91:6d:30:6d:45:c6:09:1e:51:38:55:31:
3d:c5:e5:01:0d:8b:d2:2b:01:ab:0e:3d:0b:b7:4b:38:5e:b0:
94:3f:0c:d7:86:4f:08:6b:a9:76:3a:d3:c9:32:d0:1c:9b:51:
d9:78:3e:58:50:ba:d3:99:26:84:cd:13:92:7e:fd:1d:50:9f:
d6:38:66:7e:8f:c5:a2:99:37:8c:3e:20:28:11:4f:e2:cc:87:
a9:92:74:ac:d3:57:b4:a4:3e:21:23:09:69:80:fb:3c:61:b4:
b6:a7:f5:2b:a6:52:8e:c2:de:2c:e2:d3:5e:cb:d9:c9:e4:74:
d9:7f:2d:f9:c1:9c:fc:eb:1d:38:ce:52:57:c5:3a:5e:35:83:
f4:c7:b9:bb:34:97:4f:1e:bb:8e:6f:26:e7:53:44:a6:35:29:
95:a2:76:13:eb:47:93:2e:20:b2:7c:bb:63:68:0a:38:55:98:
eb:e8:2b:eb:8b:f1:f9:98:1d:60:6a:e7:57:ec:b2:ad:62:1a:
cc:b5:dd:6b:12:d1:d1:ba:29:b1:8c:57:02:26:7c:7d:e5:9f:
dc:b5:e0:ed:b4:9d:5e:f4:0a:cf:82:eb:12:66:89:15:06:11:
b0:52:8e:38
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9hS8r82MRwuDcYfOhXq4pMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjYjg5ODNlNTI5ZmM5NDliODlmYWIzNzAzYjc5NWI3OGIx
YTg3NWMwHhcNMjUwMTMxMTgwMDA5WhcNMjUwMjAxMTgwMDA5WjAzMTEwLwYDVQQD
Eyg2M2Q3OTBmNWQwZmY5OGZmNTlmNTMwMDFjMDFhODUwNzgxMDlkN2M0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtJUDH0cq5BhZEk0KYzg2UeIiE4fA
tL2DsHv10YdOL+D8bhkW65Z232oDZaNJw2JCt00qrbQmCnjmeoOwpu5mDR6yplee
kSiRVG/JOFrQxpQxAawagxe9/ZF3OdTbyLaJ4xsvXw+kdBzZDBqHUyl/RpjCaE3X
SZwetX0lMAaXiRVgK0fVsOTf3148rth8XG+GCuVWJh/gf2O5eSpC1rsVWObtPtB2
r4Q110TE/FOuSb/Zenkd5nOHxXlIU5KctyxMvPXI/btzkDiOJaLo6CiOddIT/s6N
RxHVgkZeUMBCvpK2gN+ey95EePkxPPVQBNZ3Kq414iDdIJhoEImOAauHowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGPXkPXQ/5j/WfUwAcAahQeBCdfEMB8GA1UdIwQY
MBaAFPy4mD5Sn8lJuJ+rNwO3lbeLGodcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX0xpWVBsS2Z5VW00bjZzM0E3ZVZ0NHNhaDF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC80ZjEwYTMtNmIyMS00ODA1LThlMDMt
OTMxZmYzZDlkZjQxLzEvX0xpWVBsS2Z5VW00bjZzM0E3ZVZ0NHNhaDF3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC80ZjEwYTMtNmIyMS00ODA1LThlMDMtOTMxZmYzZDlkZjQx
LzEvX0xpWVBsS2Z5VW00bjZzM0E3ZVZ0NHNhaDF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUwvAknVi
LF6DA4Jkl14X4gTlGi4AxKWrkW0wbUXGCR5ROFUxPcXlAQ2L0isBqw49C7dLOF6w
lD8M14ZPCGupdjrTyTLQHJtR2Xg+WFC605kmhM0Tkn79HVCf1jhmfo/Fopk3jD4g
KBFP4syHqZJ0rNNXtKQ+ISMJaYD7PGG0tqf1K6ZSjsLeLOLTXsvZyeR02X8t+cGc
/OsdOM5SV8U6XjWD9Me5uzSXTx67jm8m51NEpjUplaJ2E+tHky4gsny7Y2gKOFWY
6+gr64vx+ZgdYGrnV+yyrWIazLXdaxLR0bopsYxXAiZ8feWf3LXg7bSdXvQKz4Lr
EmaJFQYRsFKOOA==
-----END CERTIFICATE-----
Generated at Mon Apr 28 09:28:11 2025 by rpki-client