Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/c5dc73-9be2-4503-8281-4b350eacc86b/1/L89hnM7Pg29WpyAQ6C-33SQEAvk.mft
File: L89hnM7Pg29WpyAQ6C-33SQEAvk.mft (raw, json)
Hash identifier: N0Z/iSU4tMfSU3vNxCBlKl4E487laDEljcYO4sXUQ/Y=
Subject key identifier: 5D:76:24:22:30:95:0D:91:53:02:7E:39:29:E8:D1:EB:74:11:F7:6A
Authority key identifier: 2F:CF:61:9C:CE:CF:83:6F:56:A7:20:10:E8:2F:B7:DD:24:04:02:F9
Certificate issuer: /CN=2fcf619ccecf836f56a72010e82fb7dd240402f9
Certificate serial: 0194BD1792F20868DE71E79847A256AAF24C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L89hnM7Pg29WpyAQ6C-33SQEAvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/c5dc73-9be2-4503-8281-4b350eacc86b/1/L89hnM7Pg29WpyAQ6C-33SQEAvk.mft
Manifest number: 053F
Signing time: Fri 31 Jan 2025 16:00:26 +0000
Manifest this update: Fri 31 Jan 2025 16:00:26 +0000
Manifest next update: Sat 01 Feb 2025 16:00:26 +0000
Files and hashes: 1: L89hnM7Pg29WpyAQ6C-33SQEAvk.crl (hash: 4urlIi5QS7ZKTauf+BnMKQivUSqXtdrm1Y1Z+y2ruAk=)
2: jCfDa1o9-67BNQODivTRRldEbdY.roa (hash: 8Y6qhIf9Ka0kdUNg/SnNbfjipainSlycgW7SSV7AHSU=)
3: om141KzkG2-4eMZ-f0PthIkpE80.roa (hash: cw3Iskxz7drppI2oVPr2KEtsT6+wW7KALNNnzpIfPOQ=)
4: vA4JTCZBPjorS9CM--5uNxgqUOI.roa (hash: C8BQR0NQXngOUVQVK+k99B0pWs9mjN+aAreX6gH4h2Y=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:92:f2:08:68:de:71:e7:98:47:a2:56:aa:f2:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fcf619ccecf836f56a72010e82fb7dd240402f9
Validity
Not Before: Jan 31 16:00:26 2025 GMT
Not After : Feb 1 16:00:26 2025 GMT
Subject: CN=5d76242230950d9153027e3929e8d1eb7411f76a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:10:d5:85:d5:1b:87:4b:93:bf:c5:aa:ec:d5:
2c:39:7c:06:f0:a7:06:d4:81:13:e5:21:6c:9a:12:
df:61:65:33:28:46:03:ff:fe:39:93:cd:34:10:c1:
d4:5e:6f:66:58:9a:ab:c5:76:77:0f:93:1e:72:82:
bf:8d:c6:ef:f1:09:61:46:67:52:d5:a3:d5:aa:0f:
f6:6f:f0:d3:11:34:70:ec:95:b8:16:62:4f:90:b5:
d1:8c:30:7a:b4:fd:8e:04:0f:84:b5:58:d5:04:74:
13:61:0a:47:8d:0e:04:85:30:10:f9:ec:78:41:40:
fc:40:2f:14:18:87:2f:9e:6f:6d:2f:24:e1:ed:42:
71:1d:82:52:34:b1:a8:cc:80:81:92:04:c3:29:eb:
06:27:fa:77:d1:46:f2:c5:93:7c:48:7b:8d:2d:87:
c7:35:09:5f:be:36:21:0b:c3:86:d2:ba:02:f2:fb:
8c:33:9d:b7:1b:85:e4:14:a2:16:4d:d4:5d:54:d3:
69:63:f0:3e:5b:f7:90:0b:f5:7a:57:e9:83:43:6b:
e0:e2:8f:46:e1:47:ec:05:5a:56:c3:07:1b:5b:be:
5a:d1:00:73:73:e8:1b:bf:b6:06:79:e7:81:30:43:
6f:de:89:1b:81:95:02:aa:3a:c6:97:60:cb:47:87:
0d:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:76:24:22:30:95:0D:91:53:02:7E:39:29:E8:D1:EB:74:11:F7:6A
X509v3 Authority Key Identifier:
keyid:2F:CF:61:9C:CE:CF:83:6F:56:A7:20:10:E8:2F:B7:DD:24:04:02:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L89hnM7Pg29WpyAQ6C-33SQEAvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/c5dc73-9be2-4503-8281-4b350eacc86b/1/L89hnM7Pg29WpyAQ6C-33SQEAvk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/c5dc73-9be2-4503-8281-4b350eacc86b/1/L89hnM7Pg29WpyAQ6C-33SQEAvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:38:f9:d2:d9:6a:f0:a0:e9:33:3f:ac:79:09:80:fa:5a:a1:
3a:70:a9:8b:2d:03:68:da:ed:b6:85:68:e4:a8:76:3c:08:22:
b7:97:3b:3f:e3:bd:14:92:51:a7:60:46:f1:e8:7c:b4:20:1f:
91:93:a8:42:bf:84:48:70:fd:6e:47:30:92:4b:0b:5c:93:51:
96:06:58:d8:83:df:38:63:47:4d:95:53:b3:89:5d:13:ae:b3:
c4:8b:21:bd:d7:33:51:26:4d:3f:f8:15:cc:80:1e:46:e1:b1:
bf:d5:47:3c:06:92:0b:b8:e9:5e:f6:45:71:2e:ac:d2:0b:51:
a6:fb:50:2f:8f:31:3c:e5:c2:3c:e4:e1:30:ed:85:3f:a7:17:
75:19:e2:0c:c6:3e:4c:24:ee:21:2d:92:cc:0b:1c:1b:8c:61:
61:f2:0f:18:3b:35:73:db:2a:ee:ad:d2:d5:8b:33:f3:37:43:
5e:74:24:b0:5e:cb:b5:fe:8c:be:29:5d:ec:82:1a:9f:a4:0d:
bf:a3:cc:22:41:9e:be:9f:ef:29:fd:8d:41:11:fb:f2:57:87:
64:0b:c7:77:ef:66:8f:fa:7d:79:6a:58:16:dc:9e:e3:2a:d6:
1b:f4:e8:a8:b0:68:c5:83:42:55:80:a6:65:c9:79:6f:4a:f0:
11:92:c2:a7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F5LyCGjeceeYR6JWqvJMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmY2Y2MTljY2VjZjgzNmY1NmE3MjAxMGU4MmZiN2RkMjQw
NDAyZjkwHhcNMjUwMTMxMTYwMDI2WhcNMjUwMjAxMTYwMDI2WjAzMTEwLwYDVQQD
Eyg1ZDc2MjQyMjMwOTUwZDkxNTMwMjdlMzkyOWU4ZDFlYjc0MTFmNzZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqxDVhdUbh0uTv8Wq7NUsOXwG8KcG
1IET5SFsmhLfYWUzKEYD//45k800EMHUXm9mWJqrxXZ3D5MecoK/jcbv8QlhRmdS
1aPVqg/2b/DTETRw7JW4FmJPkLXRjDB6tP2OBA+EtVjVBHQTYQpHjQ4EhTAQ+ex4
QUD8QC8UGIcvnm9tLyTh7UJxHYJSNLGozICBkgTDKesGJ/p30UbyxZN8SHuNLYfH
NQlfvjYhC8OG0roC8vuMM523G4XkFKIWTdRdVNNpY/A+W/eQC/V6V+mDQ2vg4o9G
4UfsBVpWwwcbW75a0QBzc+gbv7YGeeeBMENv3okbgZUCqjrGl2DLR4cNcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF12JCIwlQ2RUwJ+OSno0et0EfdqMB8GA1UdIwQY
MBaAFC/PYZzOz4NvVqcgEOgvt90kBAL5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTDg5aG5NN1BnMjlXcHlBUTZDLTMzU1FFQXZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9jNWRjNzMtOWJlMi00NTAzLTgyODEt
NGIzNTBlYWNjODZiLzEvTDg5aG5NN1BnMjlXcHlBUTZDLTMzU1FFQXZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC9jNWRjNzMtOWJlMi00NTAzLTgyODEtNGIzNTBlYWNjODZi
LzEvTDg5aG5NN1BnMjlXcHlBUTZDLTMzU1FFQXZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjjj50tlq
8KDpMz+seQmA+lqhOnCpiy0DaNrttoVo5Kh2PAgit5c7P+O9FJJRp2BG8eh8tCAf
kZOoQr+ESHD9bkcwkksLXJNRlgZY2IPfOGNHTZVTs4ldE66zxIshvdczUSZNP/gV
zIAeRuGxv9VHPAaSC7jpXvZFcS6s0gtRpvtQL48xPOXCPOThMO2FP6cXdRniDMY+
TCTuIS2SzAscG4xhYfIPGDs1c9sq7q3S1Ysz8zdDXnQksF7Ltf6Mvild7IIan6QN
v6PMIkGevp/vKf2NQRH78leHZAvHd+9mj/p9eWpYFtye4yrWG/ToqLBoxYNCVYCm
Zcl5b0rwEZLCpw==
-----END CERTIFICATE-----
Generated at Fri Apr 25 06:32:00 2025 by rpki-client