Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/443c4f-6406-4041-ac13-393ad25eb340/1/lKnqqdcbfFHJtLvqaBmzf_UpHVk.mft
File: lKnqqdcbfFHJtLvqaBmzf_UpHVk.mft (raw, json)
Hash identifier: V2EuhCLDxoWCP+kG14E2GDSdRmXtG7dxtTYCkLacxKE=
Subject key identifier: 52:61:2B:93:7F:12:F3:7D:E0:50:0C:72:D5:6A:14:5F:52:21:75:BD
Authority key identifier: 94:A9:EA:A9:D7:1B:7C:51:C9:B4:BB:EA:68:19:B3:7F:F5:29:1D:59
Certificate issuer: /CN=94a9eaa9d71b7c51c9b4bbea6819b37ff5291d59
Certificate serial: 0194BD85295FDD3FC4A2B43E5599AC0A62F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lKnqqdcbfFHJtLvqaBmzf_UpHVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/443c4f-6406-4041-ac13-393ad25eb340/1/lKnqqdcbfFHJtLvqaBmzf_UpHVk.mft
Manifest number: 0141
Signing time: Fri 31 Jan 2025 18:00:08 +0000
Manifest this update: Fri 31 Jan 2025 18:00:08 +0000
Manifest next update: Sat 01 Feb 2025 18:00:08 +0000
Files and hashes: 1: 0aj2iC8UozSayvcd0gVttauRXrk.roa (hash: 58D9vVvqyItBf62Z1ii/QTTlH8NhErcObr48aTP7eUU=)
2: lKnqqdcbfFHJtLvqaBmzf_UpHVk.crl (hash: T8o8HzqPh0Lx8c+DzpUJ/uNkNlw7SNt8+kaExlO/oE4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:29:5f:dd:3f:c4:a2:b4:3e:55:99:ac:0a:62:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94a9eaa9d71b7c51c9b4bbea6819b37ff5291d59
Validity
Not Before: Jan 31 18:00:08 2025 GMT
Not After : Feb 1 18:00:08 2025 GMT
Subject: CN=52612b937f12f37de0500c72d56a145f522175bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:f3:b6:f9:61:da:8e:64:ed:e6:36:43:8b:5d:
93:7d:8b:61:07:1e:3b:c0:97:db:b3:2c:d5:7d:9e:
88:c0:90:52:85:d2:0c:49:47:b4:33:64:3f:09:ad:
02:79:8e:2a:38:db:82:fb:d7:ec:f8:34:37:d6:fa:
be:b8:3f:45:81:9a:ce:af:c9:e2:5c:f5:b4:13:fa:
43:96:12:a5:70:78:8e:10:2f:06:ac:c3:6e:dc:d5:
9f:6b:7a:f1:93:bb:94:c5:d4:ad:35:93:2a:8e:02:
9c:49:53:b4:29:05:d3:cb:43:71:9d:5d:c2:55:0a:
5a:b6:59:d5:bc:5b:1f:ab:38:cc:3a:0d:ab:d9:f0:
87:c3:22:d5:59:96:e8:8a:fd:ce:a4:b7:00:0c:90:
cf:6e:b2:7c:dc:2a:97:d4:f1:4b:31:e0:64:83:4d:
33:31:d8:2e:a4:44:ad:10:48:75:68:dd:26:4e:13:
e1:fe:e2:a3:c2:ee:01:18:92:30:eb:21:c5:11:a6:
28:5f:22:24:59:fe:e7:6a:53:fd:9e:2c:49:ad:5c:
2e:82:2a:61:26:34:36:b8:2b:2d:e1:ea:53:00:a3:
30:04:40:02:24:c8:86:a8:60:5d:ea:f6:77:6d:f7:
6d:cd:5e:a7:1f:53:b3:85:c5:55:60:7d:34:40:99:
95:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:61:2B:93:7F:12:F3:7D:E0:50:0C:72:D5:6A:14:5F:52:21:75:BD
X509v3 Authority Key Identifier:
keyid:94:A9:EA:A9:D7:1B:7C:51:C9:B4:BB:EA:68:19:B3:7F:F5:29:1D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lKnqqdcbfFHJtLvqaBmzf_UpHVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/443c4f-6406-4041-ac13-393ad25eb340/1/lKnqqdcbfFHJtLvqaBmzf_UpHVk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/443c4f-6406-4041-ac13-393ad25eb340/1/lKnqqdcbfFHJtLvqaBmzf_UpHVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:ce:bc:ef:27:a5:4a:27:e0:d2:a0:ab:28:aa:b8:29:28:1e:
3b:f6:c6:e3:25:67:17:38:3c:b2:bb:7a:e8:cf:bc:66:8a:42:
a3:32:0b:b7:80:d4:2f:8f:7a:90:3f:50:41:9b:51:8a:ea:a9:
bb:a8:5d:fd:68:fd:cd:b7:5f:2e:06:d6:61:b3:dd:e5:d4:ad:
1b:fa:e9:f6:5a:02:97:56:74:96:b3:b1:5a:36:65:be:59:e9:
ab:84:cb:86:0e:d3:b5:e6:11:0a:0e:19:93:dd:29:96:da:b9:
6f:55:37:1b:eb:28:68:d2:28:79:ae:4f:fc:c4:8e:c0:0b:08:
26:58:e1:b0:b0:a7:d4:31:9b:4a:ab:cc:77:51:06:6d:11:11:
86:0b:fb:0b:79:74:85:89:af:f0:4a:cb:6d:bc:6d:68:28:c4:
ca:ac:d5:97:8a:31:e8:99:e8:4f:cd:3a:38:62:bc:d4:31:7b:
38:51:a1:39:b3:b7:2d:02:c0:99:88:86:a8:4d:b0:46:56:90:
77:d7:79:8f:02:e2:37:86:72:98:38:96:3a:97:fb:5c:0c:b9:
44:19:4a:f0:9c:32:0d:bb:e8:89:02:b2:64:ba:5a:5c:14:38:
08:d9:18:1c:24:36:bb:02:1b:d8:04:13:35:62:f5:ce:59:d3:
68:de:31:69
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9hSlf3T/EorQ+VZmsCmLyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0YTllYWE5ZDcxYjdjNTFjOWI0YmJlYTY4MTliMzdmZjUy
OTFkNTkwHhcNMjUwMTMxMTgwMDA4WhcNMjUwMjAxMTgwMDA4WjAzMTEwLwYDVQQD
Eyg1MjYxMmI5MzdmMTJmMzdkZTA1MDBjNzJkNTZhMTQ1ZjUyMjE3NWJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1PO2+WHajmTt5jZDi12TfYthBx47
wJfbsyzVfZ6IwJBShdIMSUe0M2Q/Ca0CeY4qONuC+9fs+DQ31vq+uD9FgZrOr8ni
XPW0E/pDlhKlcHiOEC8GrMNu3NWfa3rxk7uUxdStNZMqjgKcSVO0KQXTy0NxnV3C
VQpatlnVvFsfqzjMOg2r2fCHwyLVWZboiv3OpLcADJDPbrJ83CqX1PFLMeBkg00z
MdgupEStEEh1aN0mThPh/uKjwu4BGJIw6yHFEaYoXyIkWf7nalP9nixJrVwugiph
JjQ2uCst4epTAKMwBEACJMiGqGBd6vZ3bfdtzV6nH1OzhcVVYH00QJmVOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFJhK5N/EvN94FAMctVqFF9SIXW9MB8GA1UdIwQY
MBaAFJSp6qnXG3xRybS76mgZs3/1KR1ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbEtucXFkY2JmRkhKdEx2cWFCbXpmX1VwSFZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi80NDNjNGYtNjQwNi00MDQxLWFjMTMt
MzkzYWQyNWViMzQwLzEvbEtucXFkY2JmRkhKdEx2cWFCbXpmX1VwSFZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi80NDNjNGYtNjQwNi00MDQxLWFjMTMtMzkzYWQyNWViMzQw
LzEvbEtucXFkY2JmRkhKdEx2cWFCbXpmX1VwSFZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWs687yel
Sifg0qCrKKq4KSgeO/bG4yVnFzg8srt66M+8ZopCozILt4DUL496kD9QQZtRiuqp
u6hd/Wj9zbdfLgbWYbPd5dStG/rp9loCl1Z0lrOxWjZlvlnpq4TLhg7TteYRCg4Z
k90pltq5b1U3G+soaNIoea5P/MSOwAsIJljhsLCn1DGbSqvMd1EGbRERhgv7C3l0
hYmv8ErLbbxtaCjEyqzVl4ox6JnoT806OGK81DF7OFGhObO3LQLAmYiGqE2wRlaQ
d9d5jwLiN4ZymDiWOpf7XAy5RBlK8JwyDbvoiQKyZLpaXBQ4CNkYHCQ2uwIb2AQT
NWL1zlnTaN4xaQ==
-----END CERTIFICATE-----
Generated at Fri Apr 25 03:08:49 2025 by rpki-client