Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/092b11-1622-4556-8e65-2409aad081d2/1/l-vxSo5U8S3YskU1PfaD4YKglsU.mft
File: l-vxSo5U8S3YskU1PfaD4YKglsU.mft (raw, json)
Hash identifier: clXpOGf6eH+Tyx3L/DSEkA++JaSVw6p9g3gwZI7/LQw=
Subject key identifier: 62:A4:2F:5E:5C:28:AB:1A:58:44:E8:28:16:E8:D5:81:24:68:A5:78
Authority key identifier: 97:EB:F1:4A:8E:54:F1:2D:D8:B2:45:35:3D:F6:83:E1:82:A0:96:C5
Certificate issuer: /CN=97ebf14a8e54f12dd8b245353df683e182a096c5
Certificate serial: 0194BC3C7F3A289826698E992D9204C8CEE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l-vxSo5U8S3YskU1PfaD4YKglsU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/092b11-1622-4556-8e65-2409aad081d2/1/l-vxSo5U8S3YskU1PfaD4YKglsU.mft
Manifest number: 0B5D
Signing time: Fri 31 Jan 2025 12:01:08 +0000
Manifest this update: Fri 31 Jan 2025 12:01:08 +0000
Manifest next update: Sat 01 Feb 2025 12:01:08 +0000
Files and hashes: 1: WOmDR0gkDYsuG9Soke-w2reYe2g.roa (hash: qNbo7JrQ2MwJmZEbIhGXbA+hRsU9tW8mGt+CExNZuso=)
2: l-vxSo5U8S3YskU1PfaD4YKglsU.crl (hash: WeiT4l7l4VlxeFBSCAXVcAGL8TKKLB76PCi9Z+rvKlw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:7f:3a:28:98:26:69:8e:99:2d:92:04:c8:ce:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97ebf14a8e54f12dd8b245353df683e182a096c5
Validity
Not Before: Jan 31 12:01:08 2025 GMT
Not After : Feb 1 12:01:08 2025 GMT
Subject: CN=62a42f5e5c28ab1a5844e82816e8d5812468a578
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:aa:38:73:2a:92:99:b9:c3:d1:a4:38:da:eb:
88:29:69:c1:91:71:ec:a0:f3:51:a3:3f:9c:2b:8f:
1b:bf:2a:9d:3a:32:93:aa:a5:1b:f2:3f:49:d0:7d:
41:cd:55:75:27:6a:9c:5d:d4:62:dc:4d:4a:4b:f0:
38:fd:1c:27:5b:ba:ff:68:5c:2e:7b:be:90:fe:cc:
df:3e:dc:3d:f7:32:43:ab:c3:f9:58:3f:a3:99:24:
3c:84:21:8e:0f:12:aa:7c:71:60:75:ef:f6:12:0c:
2a:5a:9c:ad:8d:cc:ea:f0:b2:f4:c5:e6:b0:74:58:
17:4e:80:02:e1:f9:7b:32:08:3a:87:ef:cd:5f:14:
c1:61:15:d4:4d:11:d2:66:68:74:84:dc:fc:fb:6c:
1e:a8:6c:c1:dd:49:ff:6a:fd:17:62:fb:a5:3e:f0:
cc:cc:29:b6:f5:2a:bd:f3:3b:5c:d0:4f:57:00:f7:
c6:49:62:b2:d0:d6:d4:0a:02:43:d1:98:2a:ee:cf:
64:b9:5d:41:fc:b3:e2:59:a1:82:75:8f:38:dc:f3:
31:e0:a1:08:2e:2a:d8:e5:29:7f:0c:15:26:ee:d6:
4d:4c:82:e6:00:84:db:c0:4b:ef:75:90:0c:d8:12:
15:3b:cb:d0:df:e6:39:59:fb:02:14:b7:c9:93:6a:
22:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:A4:2F:5E:5C:28:AB:1A:58:44:E8:28:16:E8:D5:81:24:68:A5:78
X509v3 Authority Key Identifier:
keyid:97:EB:F1:4A:8E:54:F1:2D:D8:B2:45:35:3D:F6:83:E1:82:A0:96:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l-vxSo5U8S3YskU1PfaD4YKglsU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/092b11-1622-4556-8e65-2409aad081d2/1/l-vxSo5U8S3YskU1PfaD4YKglsU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/092b11-1622-4556-8e65-2409aad081d2/1/l-vxSo5U8S3YskU1PfaD4YKglsU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:5e:85:a8:98:65:90:aa:d8:8f:9b:0d:00:9f:da:b8:48:6e:
fb:ec:3b:fb:17:e0:a2:4f:98:e0:af:c8:01:18:bf:7d:76:bd:
37:14:b3:ea:40:44:e4:cb:01:dd:42:0f:0a:c9:92:4f:cb:ef:
d4:0a:d5:0f:7d:81:a1:eb:50:57:3f:61:9d:c5:c7:4c:4f:a1:
73:c7:e0:fc:ea:86:a0:e9:ab:68:f3:e6:d3:35:67:cf:c5:72:
43:5c:32:2b:10:42:21:e0:64:5d:f5:da:46:15:64:6b:06:5b:
8f:b1:9c:04:41:d3:3f:e3:52:86:38:91:09:67:f1:dc:96:92:
8d:0d:0d:78:56:35:e8:3d:82:43:2d:e2:97:15:f8:b6:cd:c1:
52:51:44:fb:00:4f:ee:70:ea:13:2a:1e:bd:36:c5:a7:94:b2:
3a:9d:cf:c9:a9:3e:11:13:96:b7:fc:5d:98:97:87:99:5d:a8:
14:c2:1e:60:88:d1:5d:f0:e2:6a:7c:85:6e:9d:55:60:3e:a4:
ca:4c:02:e3:f2:4f:1e:e4:c8:8f:62:b6:8e:4a:5e:79:23:fe:
9c:16:d3:43:f1:de:e2:27:9e:73:46:b4:cc:40:7d:08:c3:60:
2d:0c:e1:12:dd:1a:c7:bb:bc:a2:6d:2c:a0:65:b3:fa:06:d7:
bd:a6:bc:01
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8PH86KJgmaY6ZLZIEyM7nMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3ZWJmMTRhOGU1NGYxMmRkOGIyNDUzNTNkZjY4M2UxODJh
MDk2YzUwHhcNMjUwMTMxMTIwMTA4WhcNMjUwMjAxMTIwMTA4WjAzMTEwLwYDVQQD
Eyg2MmE0MmY1ZTVjMjhhYjFhNTg0NGU4MjgxNmU4ZDU4MTI0NjhhNTc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApKo4cyqSmbnD0aQ42uuIKWnBkXHs
oPNRoz+cK48bvyqdOjKTqqUb8j9J0H1BzVV1J2qcXdRi3E1KS/A4/RwnW7r/aFwu
e76Q/szfPtw99zJDq8P5WD+jmSQ8hCGODxKqfHFgde/2EgwqWpytjczq8LL0xeaw
dFgXToAC4fl7Mgg6h+/NXxTBYRXUTRHSZmh0hNz8+2weqGzB3Un/av0XYvulPvDM
zCm29Sq98ztc0E9XAPfGSWKy0NbUCgJD0Zgq7s9kuV1B/LPiWaGCdY843PMx4KEI
LirY5Sl/DBUm7tZNTILmAITbwEvvdZAM2BIVO8vQ3+Y5WfsCFLfJk2oiOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGKkL15cKKsaWEToKBbo1YEkaKV4MB8GA1UdIwQY
MBaAFJfr8UqOVPEt2LJFNT32g+GCoJbFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbC12eFNvNVU4UzNZc2tVMVBmYUQ0WUtnbHNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS8wOTJiMTEtMTYyMi00NTU2LThlNjUt
MjQwOWFhZDA4MWQyLzEvbC12eFNvNVU4UzNZc2tVMVBmYUQ0WUtnbHNVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS8wOTJiMTEtMTYyMi00NTU2LThlNjUtMjQwOWFhZDA4MWQy
LzEvbC12eFNvNVU4UzNZc2tVMVBmYUQ0WUtnbHNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZl6FqJhl
kKrYj5sNAJ/auEhu++w7+xfgok+Y4K/IARi/fXa9NxSz6kBE5MsB3UIPCsmST8vv
1ArVD32BoetQVz9hncXHTE+hc8fg/OqGoOmraPPm0zVnz8VyQ1wyKxBCIeBkXfXa
RhVkawZbj7GcBEHTP+NShjiRCWfx3JaSjQ0NeFY16D2CQy3ilxX4ts3BUlFE+wBP
7nDqEyoevTbFp5SyOp3Pyak+EROWt/xdmJeHmV2oFMIeYIjRXfDianyFbp1VYD6k
ykwC4/JPHuTIj2K2jkpeeSP+nBbTQ/He4ieec0a0zEB9CMNgLQzhEt0ax7u8om0s
oGWz+gbXvaa8AQ==
-----END CERTIFICATE-----
Generated at Fri Apr 25 10:12:06 2025 by rpki-client