Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/cd8269-2b7e-4a78-a9c6-ec7a3603e17e/1/lrEip9unQykwyDH1epQG9zRJxbc.mft
File: lrEip9unQykwyDH1epQG9zRJxbc.mft (raw, json)
Hash identifier: b1vcUQIUUBrrR69qiHFCSbucR92wTcKWu39qAynLHTI=
Subject key identifier: F8:E4:17:65:2A:DB:55:C1:3D:96:10:2F:4F:97:4F:5F:A4:BF:8A:C9
Authority key identifier: 96:B1:22:A7:DB:A7:43:29:30:C8:31:F5:7A:94:06:F7:34:49:C5:B7
Certificate issuer: /CN=96b122a7dba7432930c831f57a9406f73449c5b7
Certificate serial: 0194BD85901C52C3E6019B350233E3F23F8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lrEip9unQykwyDH1epQG9zRJxbc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/cd8269-2b7e-4a78-a9c6-ec7a3603e17e/1/lrEip9unQykwyDH1epQG9zRJxbc.mft
Manifest number: 138F
Signing time: Fri 31 Jan 2025 18:00:34 +0000
Manifest this update: Fri 31 Jan 2025 18:00:34 +0000
Manifest next update: Sat 01 Feb 2025 18:00:34 +0000
Files and hashes: 1: X9lq2TyNxo7WZXjl0jh86V8-l0E.roa (hash: USn0rj/YpeMPKgnpBvU5Anc5Vafiy63ZYOhqIK1Toao=)
2: lrEip9unQykwyDH1epQG9zRJxbc.crl (hash: 7O6MsVC6LaOsMlPjXaSj8E/83x1+FFbzlceokAAVEXk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:90:1c:52:c3:e6:01:9b:35:02:33:e3:f2:3f:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96b122a7dba7432930c831f57a9406f73449c5b7
Validity
Not Before: Jan 31 18:00:34 2025 GMT
Not After : Feb 1 18:00:34 2025 GMT
Subject: CN=f8e417652adb55c13d96102f4f974f5fa4bf8ac9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:02:40:5c:7b:57:f6:81:d0:72:a6:04:e4:b3:
cb:2e:0f:57:1d:b7:ce:af:6c:82:4b:98:50:fa:99:
45:82:3e:1f:05:95:86:60:20:8d:04:69:a4:9f:21:
2a:f3:ae:72:9b:3b:96:4d:31:fe:7b:79:8f:bd:29:
6b:7a:d9:19:d1:cd:96:a4:5a:ad:a2:af:e1:5a:fe:
5f:30:46:aa:2f:72:ff:50:79:8a:3e:77:b1:e1:13:
3b:8d:c9:a4:4e:a5:6e:bb:1f:63:0e:d1:43:08:13:
07:b8:2c:4c:47:8d:46:2a:a4:90:61:3d:aa:75:14:
00:c2:41:8e:2c:d7:dd:f4:d5:77:24:f3:db:85:b4:
21:61:95:85:13:26:af:f0:e1:26:52:12:7a:3a:72:
78:75:22:a9:de:bd:3a:f0:5b:7e:98:9a:08:70:ff:
10:9a:7e:4f:1a:46:99:ec:7d:d1:2e:56:97:3f:37:
9e:6f:49:9d:ee:d2:7f:d2:68:56:66:6f:a6:66:0c:
b1:64:79:c2:12:f6:f0:42:8a:23:26:6a:84:ac:2e:
5f:c4:9e:12:de:7f:d9:b9:3a:f3:9c:65:86:ec:f1:
61:38:9f:f9:10:5b:c2:77:0b:8d:9d:15:65:bb:ab:
b5:58:c0:a0:53:ff:4c:d7:69:c4:74:81:4e:90:e2:
d0:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:E4:17:65:2A:DB:55:C1:3D:96:10:2F:4F:97:4F:5F:A4:BF:8A:C9
X509v3 Authority Key Identifier:
keyid:96:B1:22:A7:DB:A7:43:29:30:C8:31:F5:7A:94:06:F7:34:49:C5:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lrEip9unQykwyDH1epQG9zRJxbc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/cd8269-2b7e-4a78-a9c6-ec7a3603e17e/1/lrEip9unQykwyDH1epQG9zRJxbc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/cd8269-2b7e-4a78-a9c6-ec7a3603e17e/1/lrEip9unQykwyDH1epQG9zRJxbc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:fa:01:11:a9:69:7f:f5:68:4f:09:af:5a:72:b6:5b:22:89:
c8:36:81:04:90:d7:37:9d:90:02:aa:fb:01:2b:19:f3:29:09:
50:c2:5c:8e:d4:c0:71:7b:b9:29:96:8e:1f:aa:f7:8d:ef:d8:
a7:ea:0a:e6:70:b9:c5:ae:d5:dc:f9:f4:71:e7:1e:56:79:fa:
8b:27:ab:bd:70:05:ac:10:e9:31:8a:ec:fc:f3:9d:e6:70:4c:
76:7e:cc:8f:0c:22:e4:15:5b:27:24:7d:96:55:1e:b9:57:e0:
43:1f:fb:97:d4:80:d9:47:15:23:cb:50:8e:ed:d3:fc:9b:31:
b2:cf:f9:be:4f:34:fa:86:80:46:f6:8e:c4:97:95:e6:a7:e2:
a4:20:36:2f:0e:b1:dd:18:d3:f9:5e:14:ab:0d:3b:f0:b5:03:
77:de:31:7c:fb:d2:a5:e6:5b:d5:b5:e3:4c:c7:7f:fc:79:90:
6d:cd:db:aa:5a:f3:71:6f:cf:36:9d:c6:83:2b:82:2b:2c:46:
ce:c2:5d:5e:0e:0a:a0:1f:a3:cd:03:b7:42:9b:ad:da:c0:4c:
53:12:82:3b:d9:eb:fd:4c:cf:9a:16:5f:78:16:76:ca:40:95:
ed:1b:af:4d:36:95:56:10:4c:79:37:7c:18:8c:ee:f0:8f:0a:
49:39:32:bb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9hZAcUsPmAZs1AjPj8j+KMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2YjEyMmE3ZGJhNzQzMjkzMGM4MzFmNTdhOTQwNmY3MzQ0
OWM1YjcwHhcNMjUwMTMxMTgwMDM0WhcNMjUwMjAxMTgwMDM0WjAzMTEwLwYDVQQD
EyhmOGU0MTc2NTJhZGI1NWMxM2Q5NjEwMmY0Zjk3NGY1ZmE0YmY4YWM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArAJAXHtX9oHQcqYE5LPLLg9XHbfO
r2yCS5hQ+plFgj4fBZWGYCCNBGmknyEq865ymzuWTTH+e3mPvSlretkZ0c2WpFqt
oq/hWv5fMEaqL3L/UHmKPnex4RM7jcmkTqVuux9jDtFDCBMHuCxMR41GKqSQYT2q
dRQAwkGOLNfd9NV3JPPbhbQhYZWFEyav8OEmUhJ6OnJ4dSKp3r068Ft+mJoIcP8Q
mn5PGkaZ7H3RLlaXPzeeb0md7tJ/0mhWZm+mZgyxZHnCEvbwQoojJmqErC5fxJ4S
3n/ZuTrznGWG7PFhOJ/5EFvCdwuNnRVlu6u1WMCgU/9M12nEdIFOkOLQAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPjkF2Uq21XBPZYQL0+XT1+kv4rJMB8GA1UdIwQY
MBaAFJaxIqfbp0MpMMgx9XqUBvc0ScW3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbHJFaXA5dW5ReWt3eURIMWVwUUc5elJKeGJjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC9jZDgyNjktMmI3ZS00YTc4LWE5YzYt
ZWM3YTM2MDNlMTdlLzEvbHJFaXA5dW5ReWt3eURIMWVwUUc5elJKeGJjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC9jZDgyNjktMmI3ZS00YTc4LWE5YzYtZWM3YTM2MDNlMTdl
LzEvbHJFaXA5dW5ReWt3eURIMWVwUUc5elJKeGJjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANPoBEalp
f/VoTwmvWnK2WyKJyDaBBJDXN52QAqr7ASsZ8ykJUMJcjtTAcXu5KZaOH6r3je/Y
p+oK5nC5xa7V3Pn0ceceVnn6iyervXAFrBDpMYrs/POd5nBMdn7Mjwwi5BVbJyR9
llUeuVfgQx/7l9SA2UcVI8tQju3T/Jsxss/5vk80+oaARvaOxJeV5qfipCA2Lw6x
3RjT+V4Uqw078LUDd94xfPvSpeZb1bXjTMd//HmQbc3bqlrzcW/PNp3GgyuCKyxG
zsJdXg4KoB+jzQO3Qput2sBMUxKCO9nr/UzPmhZfeBZ2ykCV7RuvTTaVVhBMeTd8
GIzu8I8KSTkyuw==
-----END CERTIFICATE-----
Generated at Fri Apr 25 00:48:30 2025 by rpki-client