Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/5ea425-af1a-4e30-8bb0-bfa636877e90/1/lkdopthwizYxQ6qIEeXZdoJk718.mft
File: lkdopthwizYxQ6qIEeXZdoJk718.mft (raw, json)
Hash identifier: Me1+tuuJdASTpn4AtkasFxShSObOkNCWZMgvnP6ddi0=
Subject key identifier: 71:69:BC:9E:18:93:33:29:74:96:A7:63:78:F7:C8:81:0A:38:1E:B0
Authority key identifier: 96:47:68:A6:D8:70:8B:36:31:43:AA:88:11:E5:D9:76:82:64:EF:5F
Certificate issuer: /CN=964768a6d8708b363143aa8811e5d9768264ef5f
Certificate serial: 0194BC3C074984EB0C82BE6EF5E1ECB8FFE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lkdopthwizYxQ6qIEeXZdoJk718.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/5ea425-af1a-4e30-8bb0-bfa636877e90/1/lkdopthwizYxQ6qIEeXZdoJk718.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 12:00:38 +0000
Manifest this update: Fri 31 Jan 2025 12:00:38 +0000
Manifest next update: Sat 01 Feb 2025 12:00:38 +0000
Files and hashes: 1: Y_M-V8EEZggpxHGYY_EMcxsEtBk.roa (hash: 6Rgj1vHtvv9h08odpQgGP8Qj63U3c9jYSW+di7UNAlU=)
2: lkdopthwizYxQ6qIEeXZdoJk718.crl (hash: uTg0uRC3jzzYgWHuG2MtW26GjJ01lBnHGPDO8lkJ05s=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:07:49:84:eb:0c:82:be:6e:f5:e1:ec:b8:ff:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=964768a6d8708b363143aa8811e5d9768264ef5f
Validity
Not Before: Jan 31 12:00:38 2025 GMT
Not After : Feb 1 12:00:38 2025 GMT
Subject: CN=7169bc9e189333297496a76378f7c8810a381eb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:15:7f:8b:bc:33:be:30:d0:48:d8:3d:9d:90:
4b:54:73:5d:18:6b:26:d5:79:a5:f7:6d:fb:80:5e:
3c:78:82:89:c9:4d:b1:cb:8f:45:e1:e3:48:a8:90:
55:37:95:68:4d:1f:84:5a:3d:42:1c:b9:e2:b1:46:
76:36:ff:89:12:64:ea:b2:6e:7c:02:ff:2c:2a:fe:
42:b1:02:2d:50:24:86:7b:27:52:9e:84:3c:4b:1e:
c7:52:d1:73:95:f3:96:60:cf:fc:b2:b5:71:a9:b3:
13:ae:6f:67:67:8c:e4:94:e8:26:d7:1f:ab:bb:dc:
32:dc:26:90:54:7a:71:19:52:1f:c0:0d:17:c1:15:
28:9e:0a:5d:5a:40:b6:70:9e:71:72:d2:3a:b6:2d:
24:53:f9:a1:48:20:60:b0:c8:cc:68:be:60:66:b3:
64:2c:b8:91:06:c0:fc:4a:10:de:06:8f:d2:b4:ba:
e8:14:19:0b:33:d0:a7:5f:90:ac:ee:57:d3:fc:00:
7f:71:01:83:bd:c3:6e:cf:7b:b1:9b:89:77:83:57:
16:4e:c9:ef:bb:f5:7a:cb:c4:7c:e2:91:69:b9:91:
54:7f:35:b1:24:80:ae:aa:f5:c2:e6:64:3f:2a:01:
e6:ce:9a:e5:0d:f7:de:15:57:6f:8a:53:97:cf:0d:
40:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:69:BC:9E:18:93:33:29:74:96:A7:63:78:F7:C8:81:0A:38:1E:B0
X509v3 Authority Key Identifier:
keyid:96:47:68:A6:D8:70:8B:36:31:43:AA:88:11:E5:D9:76:82:64:EF:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lkdopthwizYxQ6qIEeXZdoJk718.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/5ea425-af1a-4e30-8bb0-bfa636877e90/1/lkdopthwizYxQ6qIEeXZdoJk718.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/5ea425-af1a-4e30-8bb0-bfa636877e90/1/lkdopthwizYxQ6qIEeXZdoJk718.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:ea:f5:c3:e0:fd:91:69:cd:91:10:b2:52:a8:6f:13:8f:52:
5f:dd:db:d9:e2:7a:20:63:59:7c:84:87:ef:35:4c:90:e8:bc:
13:7b:b1:98:84:f7:3a:44:00:0c:c6:62:ea:08:70:2d:ce:2c:
86:c9:a8:24:ce:d4:01:93:65:5f:1e:1d:b5:c2:0b:c4:24:40:
9c:e0:7d:2b:04:39:68:c4:4e:6e:c9:7a:89:4c:96:02:02:3e:
28:ae:ef:e5:ef:51:11:a1:a3:8b:ec:fc:b8:dc:49:58:82:28:
04:86:97:2c:35:dc:f5:4b:17:b1:d7:8c:30:f9:30:4c:29:32:
5a:4b:be:aa:35:8f:4c:79:3d:71:19:3b:a2:60:38:36:30:ea:
ea:60:eb:6e:ef:fd:3f:60:3c:67:33:fd:82:1f:cb:59:3c:98:
6c:24:db:11:8c:13:a8:ba:d6:b8:d7:23:21:b2:49:3d:ac:7e:
b4:01:b3:0d:5f:d5:90:48:5e:69:89:69:b1:a5:6e:94:ea:f0:
50:65:af:dc:18:ef:52:00:bf:20:dd:e9:7b:6c:69:44:62:04:
47:bd:a1:a7:2f:e7:9f:9e:f7:78:ad:50:2d:53:76:9c:cb:19:
c0:19:ff:30:df:f1:7f:05:b5:a0:93:ba:a5:51:5a:17:8c:48:
15:ec:7e:c4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8PAdJhOsMgr5u9eHsuP/hMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2NDc2OGE2ZDg3MDhiMzYzMTQzYWE4ODExZTVkOTc2ODI2
NGVmNWYwHhcNMjUwMTMxMTIwMDM4WhcNMjUwMjAxMTIwMDM4WjAzMTEwLwYDVQQD
Eyg3MTY5YmM5ZTE4OTMzMzI5NzQ5NmE3NjM3OGY3Yzg4MTBhMzgxZWIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnxV/i7wzvjDQSNg9nZBLVHNdGGsm
1Xml9237gF48eIKJyU2xy49F4eNIqJBVN5VoTR+EWj1CHLnisUZ2Nv+JEmTqsm58
Av8sKv5CsQItUCSGeydSnoQ8Sx7HUtFzlfOWYM/8srVxqbMTrm9nZ4zklOgm1x+r
u9wy3CaQVHpxGVIfwA0XwRUongpdWkC2cJ5xctI6ti0kU/mhSCBgsMjMaL5gZrNk
LLiRBsD8ShDeBo/StLroFBkLM9CnX5Cs7lfT/AB/cQGDvcNuz3uxm4l3g1cWTsnv
u/V6y8R84pFpuZFUfzWxJICuqvXC5mQ/KgHmzprlDffeFVdvilOXzw1AbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHFpvJ4YkzMpdJanY3j3yIEKOB6wMB8GA1UdIwQY
MBaAFJZHaKbYcIs2MUOqiBHl2XaCZO9fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbGtkb3B0aHdpell4UTZxSUVlWFpkb0prNzE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC81ZWE0MjUtYWYxYS00ZTMwLThiYjAt
YmZhNjM2ODc3ZTkwLzEvbGtkb3B0aHdpell4UTZxSUVlWFpkb0prNzE4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OC81ZWE0MjUtYWYxYS00ZTMwLThiYjAtYmZhNjM2ODc3ZTkw
LzEvbGtkb3B0aHdpell4UTZxSUVlWFpkb0prNzE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArer1w+D9
kWnNkRCyUqhvE49SX93b2eJ6IGNZfISH7zVMkOi8E3uxmIT3OkQADMZi6ghwLc4s
hsmoJM7UAZNlXx4dtcILxCRAnOB9KwQ5aMRObsl6iUyWAgI+KK7v5e9REaGji+z8
uNxJWIIoBIaXLDXc9UsXsdeMMPkwTCkyWku+qjWPTHk9cRk7omA4NjDq6mDrbu/9
P2A8ZzP9gh/LWTyYbCTbEYwTqLrWuNcjIbJJPax+tAGzDV/VkEheaYlpsaVulOrw
UGWv3BjvUgC/IN3pe2xpRGIER72hpy/nn573eK1QLVN2nMsZwBn/MN/xfwW1oJO6
pVFaF4xIFex+xA==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:50:37 2025 by rpki-client