Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8c1e49-7dd1-448d-8815-a09266bb4d8c/1/lZ7-bvl3KKQoKuLHsFokBQZXHxw.mft
File: lZ7-bvl3KKQoKuLHsFokBQZXHxw.mft (raw, json)
Hash identifier: JOAoSt+1zqKvm/3NyEl7u9xCHIErK/H8Ei3B/3Km+u4=
Subject key identifier: A1:5A:FE:70:C9:85:62:2E:DF:69:4C:E8:6E:3F:E3:94:5D:6C:CE:AF
Authority key identifier: 95:9E:FE:6E:F9:77:28:A4:28:2A:E2:C7:B0:5A:24:05:06:57:1F:1C
Certificate issuer: /CN=959efe6ef97728a4282ae2c7b05a240506571f1c
Certificate serial: 0194BD4EC5395999CA15510058742CEDFD6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lZ7-bvl3KKQoKuLHsFokBQZXHxw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8c1e49-7dd1-448d-8815-a09266bb4d8c/1/lZ7-bvl3KKQoKuLHsFokBQZXHxw.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 17:00:43 +0000
Manifest this update: Fri 31 Jan 2025 17:00:43 +0000
Manifest next update: Sat 01 Feb 2025 17:00:43 +0000
Files and hashes: 1: be8vZHIQ1O-yMUrEnm-Rt647sVc.roa (hash: pvBuP6PztryvJybpVkIz6/2PBJVRSL6jUXjVeSb3fes=)
2: lZ7-bvl3KKQoKuLHsFokBQZXHxw.crl (hash: p3TjHbyOhXCBK0u6LGClfYp1J+lt3TjGg+yYLRuFuvc=)
3: vrEOBF9ldIypmhQM7-y0wx8mvB4.roa (hash: jx76OmojI/1aknSM7oCZVvVpchbSHerzNk3p0la4Ogw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:c5:39:59:99:ca:15:51:00:58:74:2c:ed:fd:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=959efe6ef97728a4282ae2c7b05a240506571f1c
Validity
Not Before: Jan 31 17:00:43 2025 GMT
Not After : Feb 1 17:00:43 2025 GMT
Subject: CN=a15afe70c985622edf694ce86e3fe3945d6cceaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:71:c0:1a:45:fd:5a:e0:78:68:ee:38:ae:5e:
cf:63:20:4a:16:aa:7f:b0:a3:7f:8d:68:08:72:88:
fe:9a:1b:15:0e:56:5d:2a:6d:43:84:e8:2d:0b:ae:
81:88:f8:48:f7:7b:35:d1:c1:02:ad:a0:80:83:06:
88:05:42:cf:cc:57:64:e5:9a:3f:19:a4:84:16:ec:
5d:42:3c:2b:a1:db:11:cb:93:9f:2c:51:03:23:a3:
8f:43:45:2b:27:0b:15:6f:b5:c0:34:c1:03:89:e4:
ce:06:12:f3:a4:44:41:fd:61:42:ad:1f:c1:0d:f5:
7f:8d:21:40:5e:8e:00:53:d1:ec:1e:92:67:2a:d8:
d7:a1:bb:06:7b:19:51:70:cd:a6:a1:68:f3:e1:60:
a3:40:34:1f:97:c2:aa:31:e0:f0:7e:87:cb:9c:0f:
ef:d9:a8:3e:ce:73:f6:a9:43:a1:ab:f7:a7:58:2d:
66:47:9e:0b:c3:82:60:bc:5a:8d:43:18:da:d5:c9:
25:fb:75:2a:69:f1:ee:92:84:89:df:25:f7:65:6c:
40:43:42:8e:7e:b8:59:bf:59:58:2a:15:51:85:a2:
98:d7:e7:15:a9:96:d9:3d:c6:cd:50:31:53:94:6a:
f5:f7:71:e0:d3:e3:15:1c:ac:1a:76:4c:bf:63:84:
38:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:5A:FE:70:C9:85:62:2E:DF:69:4C:E8:6E:3F:E3:94:5D:6C:CE:AF
X509v3 Authority Key Identifier:
keyid:95:9E:FE:6E:F9:77:28:A4:28:2A:E2:C7:B0:5A:24:05:06:57:1F:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lZ7-bvl3KKQoKuLHsFokBQZXHxw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8c1e49-7dd1-448d-8815-a09266bb4d8c/1/lZ7-bvl3KKQoKuLHsFokBQZXHxw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8c1e49-7dd1-448d-8815-a09266bb4d8c/1/lZ7-bvl3KKQoKuLHsFokBQZXHxw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:d5:91:ec:82:c8:a1:02:d7:2d:88:4c:22:76:97:bf:5d:66:
88:3a:22:0b:ad:b7:7e:8a:1e:f7:67:7d:41:8a:db:db:c0:4f:
33:32:a7:c4:78:65:5d:4d:4c:66:8f:a5:82:ba:1a:45:a8:f6:
57:3f:66:c9:b9:e7:77:0d:8b:71:f4:c7:09:fd:2a:6d:b4:fa:
d3:01:d8:72:c0:e1:ca:5d:45:01:d1:76:16:b9:94:78:73:f4:
b7:dd:4c:5e:3d:d4:98:ce:76:e6:a5:64:7e:3b:4a:d4:4a:ef:
44:db:83:6c:7c:62:61:94:28:34:ce:3a:f3:ef:39:e1:a0:b7:
0c:b1:b5:c5:d8:8f:f3:8c:23:2d:b9:cf:b5:0f:19:6a:d7:33:
98:39:53:44:e7:69:b2:46:35:a0:ae:7c:69:1e:70:90:96:4b:
b1:6f:bb:ea:2f:1c:d2:43:31:b8:06:d9:24:5e:4e:55:c5:d3:
ce:25:35:77:64:29:09:f1:aa:a7:b4:31:83:cf:49:96:79:3e:
6f:74:a8:d8:c9:3b:21:fd:84:40:31:db:cd:ff:f0:ca:c0:c9:
8b:89:ea:0b:e5:37:6b:d6:a8:67:56:b4:2c:e6:ee:e5:9e:7e:
ce:4e:76:70:01:5a:12:79:0f:81:0e:86:75:26:d4:ba:ce:60:
bd:5e:bd:e5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9TsU5WZnKFVEAWHQs7f1tMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1OWVmZTZlZjk3NzI4YTQyODJhZTJjN2IwNWEyNDA1MDY1
NzFmMWMwHhcNMjUwMTMxMTcwMDQzWhcNMjUwMjAxMTcwMDQzWjAzMTEwLwYDVQQD
EyhhMTVhZmU3MGM5ODU2MjJlZGY2OTRjZTg2ZTNmZTM5NDVkNmNjZWFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3nHAGkX9WuB4aO44rl7PYyBKFqp/
sKN/jWgIcoj+mhsVDlZdKm1DhOgtC66BiPhI93s10cECraCAgwaIBULPzFdk5Zo/
GaSEFuxdQjwrodsRy5OfLFEDI6OPQ0UrJwsVb7XANMEDieTOBhLzpERB/WFCrR/B
DfV/jSFAXo4AU9HsHpJnKtjXobsGexlRcM2moWjz4WCjQDQfl8KqMeDwfofLnA/v
2ag+znP2qUOhq/enWC1mR54Lw4JgvFqNQxja1ckl+3UqafHukoSJ3yX3ZWxAQ0KO
frhZv1lYKhVRhaKY1+cVqZbZPcbNUDFTlGr193Hg0+MVHKwadky/Y4Q47QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKFa/nDJhWIu32lM6G4/45RdbM6vMB8GA1UdIwQY
MBaAFJWe/m75dyikKCrix7BaJAUGVx8cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbFo3LWJ2bDNLS1FvS3VMSHNGb2tCUVpYSHh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS84YzFlNDktN2RkMS00NDhkLTg4MTUt
YTA5MjY2YmI0ZDhjLzEvbFo3LWJ2bDNLS1FvS3VMSHNGb2tCUVpYSHh3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS84YzFlNDktN2RkMS00NDhkLTg4MTUtYTA5MjY2YmI0ZDhj
LzEvbFo3LWJ2bDNLS1FvS3VMSHNGb2tCUVpYSHh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg9WR7ILI
oQLXLYhMInaXv11miDoiC623fooe92d9QYrb28BPMzKnxHhlXU1MZo+lgroaRaj2
Vz9mybnndw2LcfTHCf0qbbT60wHYcsDhyl1FAdF2FrmUeHP0t91MXj3UmM525qVk
fjtK1ErvRNuDbHxiYZQoNM468+854aC3DLG1xdiP84wjLbnPtQ8ZatczmDlTROdp
skY1oK58aR5wkJZLsW+76i8c0kMxuAbZJF5OVcXTziU1d2QpCfGqp7Qxg89Jlnk+
b3So2Mk7If2EQDHbzf/wysDJi4nqC+U3a9aoZ1a0LObu5Z5+zk52cAFaEnkPgQ6G
dSbUus5gvV695Q==
-----END CERTIFICATE-----
Generated at Mon Apr 28 13:16:20 2025 by rpki-client