Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/14e920-14a7-41cf-bdd7-57786951b78f/1/Lg1AUXqHO33CrrKNDtai-ZOj100.mft
File: Lg1AUXqHO33CrrKNDtai-ZOj100.mft (raw, json)
Hash identifier: +X2eRIcUGobCtSCtPyro2YwWnILi6hDwBlAHtRHOZAo=
Subject key identifier: 24:5B:6A:28:AC:E6:67:0E:61:F5:CB:20:3D:D7:C9:10:98:24:04:0D
Authority key identifier: 2E:0D:40:51:7A:87:3B:7D:C2:AE:B2:8D:0E:D6:A2:F9:93:A3:D7:4D
Certificate issuer: /CN=2e0d40517a873b7dc2aeb28d0ed6a2f993a3d74d
Certificate serial: 0194BC04A6FBAE20875D776A83E7C3F4AC59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lg1AUXqHO33CrrKNDtai-ZOj100.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/14e920-14a7-41cf-bdd7-57786951b78f/1/Lg1AUXqHO33CrrKNDtai-ZOj100.mft
Manifest number: 1110
Signing time: Fri 31 Jan 2025 11:00:08 +0000
Manifest this update: Fri 31 Jan 2025 11:00:08 +0000
Manifest next update: Sat 01 Feb 2025 11:00:08 +0000
Files and hashes: 1: Lg1AUXqHO33CrrKNDtai-ZOj100.crl (hash: 4jvDSWmUXPp0JoF0AkCDVznb6ROlEyJDUcGxIH0D2r8=)
2: g5xnqTmVEZ7ZlTEWt6r937lOqAI.roa (hash: W28IbFUf6cfPKtxTT1Bs+8ajjdC7s7Nv39N6DzwHNwU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:a6:fb:ae:20:87:5d:77:6a:83:e7:c3:f4:ac:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e0d40517a873b7dc2aeb28d0ed6a2f993a3d74d
Validity
Not Before: Jan 31 11:00:08 2025 GMT
Not After : Feb 1 11:00:08 2025 GMT
Subject: CN=245b6a28ace6670e61f5cb203dd7c9109824040d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:6d:86:16:9b:63:6c:35:1d:3a:83:18:f5:92:
ce:86:47:2c:b1:18:cf:96:2a:3d:bd:0c:f1:c4:28:
4b:97:21:3f:2c:36:ef:5e:cb:0c:9a:21:61:9c:6b:
75:05:d9:0c:f9:a2:d1:a6:f2:bc:d2:f1:d7:04:04:
b0:1c:52:a2:8c:36:68:f1:29:b3:07:87:e7:ac:cc:
ea:a5:1a:f0:b0:65:9a:0f:c2:cc:5d:5e:5a:f8:39:
d1:4b:0b:33:27:1f:f8:a4:c3:51:8f:13:57:e8:65:
c7:cd:a6:e7:9a:68:da:cf:c2:56:0b:9e:ce:fa:36:
8f:f4:ff:bf:e6:e1:3c:4f:68:35:f4:65:2e:b3:49:
38:62:ee:34:0b:6c:c1:df:fb:fc:da:d2:32:fc:a2:
7a:a1:f1:6b:93:93:f8:c6:9f:05:84:ab:fb:2f:ea:
6b:12:2c:16:f3:5d:cb:25:24:b7:05:ce:9f:7a:12:
ef:da:41:c2:d6:8e:9e:bc:72:89:6d:fa:a3:1b:a7:
eb:dc:53:16:59:70:0c:de:de:cd:45:fb:32:25:b9:
d2:c0:c8:2c:ce:5d:4d:cc:10:ac:5c:56:94:20:31:
65:a0:bd:b2:bc:eb:5c:f8:2f:86:d0:24:5e:05:5e:
cd:8b:f6:05:87:cc:06:a0:06:00:65:63:0d:2e:1a:
cb:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:5B:6A:28:AC:E6:67:0E:61:F5:CB:20:3D:D7:C9:10:98:24:04:0D
X509v3 Authority Key Identifier:
keyid:2E:0D:40:51:7A:87:3B:7D:C2:AE:B2:8D:0E:D6:A2:F9:93:A3:D7:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lg1AUXqHO33CrrKNDtai-ZOj100.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/14e920-14a7-41cf-bdd7-57786951b78f/1/Lg1AUXqHO33CrrKNDtai-ZOj100.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/14e920-14a7-41cf-bdd7-57786951b78f/1/Lg1AUXqHO33CrrKNDtai-ZOj100.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:3f:f5:46:dc:8b:e5:3a:9b:13:ca:c0:d0:1f:fc:9d:bb:b7:
19:ed:d3:a7:b6:6c:ee:46:a1:a3:11:e7:d9:ac:cf:77:62:0b:
01:da:8a:45:87:32:31:db:e5:2b:a2:9e:b9:fd:24:ec:83:96:
ff:8b:b6:6c:c2:99:f9:b0:13:50:15:1f:63:af:c6:a1:b9:58:
b4:17:76:19:26:2b:67:d8:c1:8c:fc:8f:b8:d2:45:57:37:16:
7d:6d:80:43:9c:83:bf:24:18:89:cf:f0:f1:ef:f2:79:7f:6b:
11:ad:8e:de:df:db:e1:77:bb:90:d6:b6:51:d4:95:be:63:d5:
35:b4:ba:f9:49:42:58:e0:a0:0b:b6:e9:3e:8b:23:fc:61:9e:
8f:f1:37:28:6b:d6:60:f4:a8:3d:25:82:7b:7d:59:5e:ed:9a:
86:25:0b:68:c1:0a:4f:98:82:16:36:fa:31:8e:c8:12:77:3d:
59:86:92:3d:af:ae:0a:f4:4e:c0:27:f8:e6:3c:5e:59:f2:25:
48:f2:01:f3:57:be:91:d8:43:5c:9b:fb:d9:f7:2f:00:b1:2d:
fa:47:1d:90:61:dc:2c:df:c5:6e:fe:0c:e5:12:28:eb:58:9f:
dc:c1:c6:d7:7c:81:88:e1:1a:b1:98:ed:4d:ef:e8:8b:03:3a:
a5:e5:5d:c5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8BKb7riCHXXdqg+fD9KxZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlMGQ0MDUxN2E4NzNiN2RjMmFlYjI4ZDBlZDZhMmY5OTNh
M2Q3NGQwHhcNMjUwMTMxMTEwMDA4WhcNMjUwMjAxMTEwMDA4WjAzMTEwLwYDVQQD
EygyNDViNmEyOGFjZTY2NzBlNjFmNWNiMjAzZGQ3YzkxMDk4MjQwNDBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxW2GFptjbDUdOoMY9ZLOhkcssRjP
lio9vQzxxChLlyE/LDbvXssMmiFhnGt1BdkM+aLRpvK80vHXBASwHFKijDZo8Smz
B4fnrMzqpRrwsGWaD8LMXV5a+DnRSwszJx/4pMNRjxNX6GXHzabnmmjaz8JWC57O
+jaP9P+/5uE8T2g19GUus0k4Yu40C2zB3/v82tIy/KJ6ofFrk5P4xp8FhKv7L+pr
EiwW813LJSS3Bc6fehLv2kHC1o6evHKJbfqjG6fr3FMWWXAM3t7NRfsyJbnSwMgs
zl1NzBCsXFaUIDFloL2yvOtc+C+G0CReBV7Ni/YFh8wGoAYAZWMNLhrLOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCRbaiis5mcOYfXLID3XyRCYJAQNMB8GA1UdIwQY
MBaAFC4NQFF6hzt9wq6yjQ7WovmTo9dNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTGcxQVVYcUhPMzNDcnJLTkR0YWktWk9qMTAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC8xNGU5MjAtMTRhNy00MWNmLWJkZDct
NTc3ODY5NTFiNzhmLzEvTGcxQVVYcUhPMzNDcnJLTkR0YWktWk9qMTAwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC8xNGU5MjAtMTRhNy00MWNmLWJkZDctNTc3ODY5NTFiNzhm
LzEvTGcxQVVYcUhPMzNDcnJLTkR0YWktWk9qMTAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABz/1RtyL
5TqbE8rA0B/8nbu3Ge3Tp7Zs7kahoxHn2azPd2ILAdqKRYcyMdvlK6Keuf0k7IOW
/4u2bMKZ+bATUBUfY6/GoblYtBd2GSYrZ9jBjPyPuNJFVzcWfW2AQ5yDvyQYic/w
8e/yeX9rEa2O3t/b4Xe7kNa2UdSVvmPVNbS6+UlCWOCgC7bpPosj/GGej/E3KGvW
YPSoPSWCe31ZXu2ahiULaMEKT5iCFjb6MY7IEnc9WYaSPa+uCvROwCf45jxeWfIl
SPIB81e+kdhDXJv72fcvALEt+kcdkGHcLN/Fbv4M5RIo61if3MHG13yBiOEasZjt
Te/oiwM6peVdxQ==
-----END CERTIFICATE-----
Generated at Fri Apr 25 04:28:16 2025 by rpki-client