Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/b2c68e-eb3b-4e01-b50a-a86a24655870/1/LWdqYdz00iK6Zs2hlDD2HmEdiq4.mft
File: LWdqYdz00iK6Zs2hlDD2HmEdiq4.mft (raw, json)
Hash identifier: zxTEaq3GvGU8KZSy9pTryjdFMKV+DmJmkBcUyhVSL/o=
Subject key identifier: D5:D7:22:B1:C5:4B:C0:B2:DF:7F:8B:3F:11:2C:32:DE:4E:E3:14:1B
Authority key identifier: 2D:67:6A:61:DC:F4:D2:22:BA:66:CD:A1:94:30:F6:1E:61:1D:8A:AE
Certificate issuer: /CN=2d676a61dcf4d222ba66cda19430f61e611d8aae
Certificate serial: 0194BD1753B1282561EAC41CFF864124F778
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LWdqYdz00iK6Zs2hlDD2HmEdiq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/b2c68e-eb3b-4e01-b50a-a86a24655870/1/LWdqYdz00iK6Zs2hlDD2HmEdiq4.mft
Manifest number: 0DD3
Signing time: Fri 31 Jan 2025 16:00:10 +0000
Manifest this update: Fri 31 Jan 2025 16:00:10 +0000
Manifest next update: Sat 01 Feb 2025 16:00:10 +0000
Files and hashes: 1: 7QVUt99h4511Posn9SqYvc2xLnE.roa (hash: KZzP7wYv+qefiRKZJehC5hXDNsrAKMVyaBPRSBqjrBQ=)
2: A2pZ4GSYS3kMwEo0-T0NRpkCuHk.roa (hash: tY5Ee/lDMytpmHRZG6292ahYyC+mhzE73yr+WRYQTjo=)
3: LWdqYdz00iK6Zs2hlDD2HmEdiq4.crl (hash: N64AGCuCVvVOKm9qflAU45EoNTtOh4cCEKWTSTFra5g=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:53:b1:28:25:61:ea:c4:1c:ff:86:41:24:f7:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d676a61dcf4d222ba66cda19430f61e611d8aae
Validity
Not Before: Jan 31 16:00:10 2025 GMT
Not After : Feb 1 16:00:10 2025 GMT
Subject: CN=d5d722b1c54bc0b2df7f8b3f112c32de4ee3141b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:f1:6a:a0:ba:be:24:06:3f:30:68:29:c2:43:
c8:39:03:55:b1:59:ac:4b:62:c6:70:de:72:9f:a5:
95:a5:92:78:fc:b0:f3:01:04:6b:70:d5:9f:e8:66:
19:f5:7a:15:20:ad:a4:8c:43:1e:1f:0d:26:89:be:
35:6e:6b:8a:9c:4a:19:54:ab:50:ca:b5:a6:03:f4:
46:6a:f8:23:a2:1d:36:07:72:84:1c:00:fb:0d:98:
42:c9:9a:e4:13:f0:48:07:d4:f5:de:06:71:a4:dd:
06:16:32:a2:03:25:91:6b:d0:85:8b:ed:0d:1c:cb:
4d:4b:dc:6e:3d:25:9f:37:be:ab:8c:0b:81:bd:a9:
fa:bb:ca:4e:0e:c8:92:8e:37:8b:ce:62:62:89:1a:
ff:a6:a3:8b:3a:d6:30:52:28:c2:47:8a:39:1d:f8:
a8:bf:58:a6:51:0b:e1:a5:c1:82:3d:2b:f4:ee:2c:
29:3c:14:6b:71:31:46:e3:ab:64:be:8c:f0:5f:37:
b6:09:37:d6:f5:f0:df:dc:51:8a:aa:aa:37:b4:fb:
82:c8:ee:0f:02:38:69:5a:d0:74:16:37:40:ae:42:
6d:64:2a:58:99:78:6e:5e:26:23:4a:3f:51:fd:e3:
a9:16:5d:f5:00:fe:b2:20:ce:75:1d:58:1b:d0:fe:
fe:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:D7:22:B1:C5:4B:C0:B2:DF:7F:8B:3F:11:2C:32:DE:4E:E3:14:1B
X509v3 Authority Key Identifier:
keyid:2D:67:6A:61:DC:F4:D2:22:BA:66:CD:A1:94:30:F6:1E:61:1D:8A:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LWdqYdz00iK6Zs2hlDD2HmEdiq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b2c68e-eb3b-4e01-b50a-a86a24655870/1/LWdqYdz00iK6Zs2hlDD2HmEdiq4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b2c68e-eb3b-4e01-b50a-a86a24655870/1/LWdqYdz00iK6Zs2hlDD2HmEdiq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:4a:ad:1d:9e:54:11:44:66:70:1c:d5:04:64:f0:c4:43:be:
18:1c:93:c6:37:4f:91:3d:5a:99:f8:69:3b:08:72:fb:b9:44:
5a:48:1d:8e:e2:2b:64:20:95:c6:97:9f:1e:ee:5a:fe:c8:79:
92:86:08:a0:12:49:3e:2b:64:01:7d:ad:0e:5e:61:b5:90:fa:
72:2b:3f:4c:69:bb:fb:9b:9d:5c:99:3c:a1:76:5e:1f:15:54:
86:a2:2f:6a:ae:c9:c1:62:d0:be:29:17:51:f1:b2:8c:eb:a2:
e2:5e:7c:80:31:fe:d2:a2:fe:24:d2:5e:70:55:dd:bd:e0:c7:
c2:d3:e3:74:cb:23:6c:68:b4:b4:39:4b:cd:da:5a:7d:03:1b:
1f:4c:d5:d9:4d:3c:a6:b3:9f:45:24:e9:7e:be:4a:88:87:69:
0b:a7:98:59:4e:30:ad:09:8a:2b:d1:23:4f:72:23:22:cf:e4:
80:8b:04:db:98:d9:28:6b:a8:76:3e:29:a7:11:c6:78:9d:08:
fe:67:41:2a:ce:98:0c:23:dc:06:b5:35:5f:0a:97:6a:e5:ac:
24:64:77:43:cc:6c:a7:d1:71:91:4d:96:d0:ab:4b:c4:b4:ac:
ad:d0:80:74:57:e7:ae:dd:aa:6a:61:15:ad:e2:aa:8d:62:70:
a2:b9:db:cc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F1OxKCVh6sQc/4ZBJPd4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJkNjc2YTYxZGNmNGQyMjJiYTY2Y2RhMTk0MzBmNjFlNjEx
ZDhhYWUwHhcNMjUwMTMxMTYwMDEwWhcNMjUwMjAxMTYwMDEwWjAzMTEwLwYDVQQD
EyhkNWQ3MjJiMWM1NGJjMGIyZGY3ZjhiM2YxMTJjMzJkZTRlZTMxNDFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkfFqoLq+JAY/MGgpwkPIOQNVsVms
S2LGcN5yn6WVpZJ4/LDzAQRrcNWf6GYZ9XoVIK2kjEMeHw0mib41bmuKnEoZVKtQ
yrWmA/RGavgjoh02B3KEHAD7DZhCyZrkE/BIB9T13gZxpN0GFjKiAyWRa9CFi+0N
HMtNS9xuPSWfN76rjAuBvan6u8pODsiSjjeLzmJiiRr/pqOLOtYwUijCR4o5Hfio
v1imUQvhpcGCPSv07iwpPBRrcTFG46tkvozwXze2CTfW9fDf3FGKqqo3tPuCyO4P
AjhpWtB0FjdArkJtZCpYmXhuXiYjSj9R/eOpFl31AP6yIM51HVgb0P7+oQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNXXIrHFS8Cy33+LPxEsMt5O4xQbMB8GA1UdIwQY
MBaAFC1namHc9NIiumbNoZQw9h5hHYquMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTFdkcVlkejAwaUs2WnMyaGxERDJIbUVkaXE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS9iMmM2OGUtZWIzYi00ZTAxLWI1MGEt
YTg2YTI0NjU1ODcwLzEvTFdkcVlkejAwaUs2WnMyaGxERDJIbUVkaXE0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOS9iMmM2OGUtZWIzYi00ZTAxLWI1MGEtYTg2YTI0NjU1ODcw
LzEvTFdkcVlkejAwaUs2WnMyaGxERDJIbUVkaXE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE0qtHZ5U
EURmcBzVBGTwxEO+GByTxjdPkT1amfhpOwhy+7lEWkgdjuIrZCCVxpefHu5a/sh5
koYIoBJJPitkAX2tDl5htZD6cis/TGm7+5udXJk8oXZeHxVUhqIvaq7JwWLQvikX
UfGyjOui4l58gDH+0qL+JNJecFXdveDHwtPjdMsjbGi0tDlLzdpafQMbH0zV2U08
prOfRSTpfr5KiIdpC6eYWU4wrQmKK9EjT3IjIs/kgIsE25jZKGuodj4ppxHGeJ0I
/mdBKs6YDCPcBrU1XwqXauWsJGR3Q8xsp9FxkU2W0KtLxLSsrdCAdFfnrt2qamEV
reKqjWJwornbzA==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:44:29 2025 by rpki-client