Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/b50110-02b0-4235-984f-2d80cb25579a/1/lmAVV4yUjzG_dKHh__1_o-NGAgY.mft
File: lmAVV4yUjzG_dKHh__1_o-NGAgY.mft (raw, json)
Hash identifier: V43nDYg5d3BYLRFISDOOdV+Baqr3Orvww9PDCfhUPOA=
Subject key identifier: 14:56:9D:A4:A7:6E:30:59:36:1C:95:BC:2D:27:C9:FD:A1:4E:51:BA
Authority key identifier: 96:60:15:57:8C:94:8F:31:BF:74:A1:E1:FF:FD:7F:A3:E3:46:02:06
Certificate issuer: /CN=966015578c948f31bf74a1e1fffd7fa3e3460206
Certificate serial: 0194BD4EA6568F3EE8B39EDDEE6AAADE6356
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lmAVV4yUjzG_dKHh__1_o-NGAgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/b50110-02b0-4235-984f-2d80cb25579a/1/lmAVV4yUjzG_dKHh__1_o-NGAgY.mft
Manifest number: 0AB7
Signing time: Fri 31 Jan 2025 17:00:35 +0000
Manifest this update: Fri 31 Jan 2025 17:00:35 +0000
Manifest next update: Sat 01 Feb 2025 17:00:35 +0000
Files and hashes: 1: OE686EGR1IVKz-bx67_ZsH11lHQ.roa (hash: S5Z4RalwztbreTYazKn4Yw+ySxhuT6+PltCXQ/y03p0=)
2: lmAVV4yUjzG_dKHh__1_o-NGAgY.crl (hash: m+XvrKye/qBq6XkoXk/+jiU0/uVBiLTSbsG4MSz47ZE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:a6:56:8f:3e:e8:b3:9e:dd:ee:6a:aa:de:63:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=966015578c948f31bf74a1e1fffd7fa3e3460206
Validity
Not Before: Jan 31 17:00:35 2025 GMT
Not After : Feb 1 17:00:35 2025 GMT
Subject: CN=14569da4a76e3059361c95bc2d27c9fda14e51ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:8a:1c:da:03:f0:fa:eb:42:44:d4:78:ba:38:
ad:b4:70:2a:3d:ac:cb:44:1f:da:e1:d4:04:0d:dd:
9f:b1:6a:21:e3:14:33:17:6f:d5:10:44:48:23:1f:
b9:95:96:53:7c:cc:10:ac:30:73:a6:71:ac:a8:e6:
56:38:19:0b:74:62:88:3c:1c:c8:00:31:cc:38:0b:
a7:d5:37:8d:3f:65:2b:2e:02:10:5f:39:33:6e:37:
d4:fa:ba:f9:3a:ec:ea:7d:4d:88:9a:23:43:c3:59:
ed:73:c2:32:8b:ec:77:44:bd:b1:68:34:cf:52:ad:
9e:3b:80:45:da:8d:ba:f5:ab:ec:0f:7c:10:ed:fd:
8a:3b:05:ec:c4:07:d8:ea:b6:0d:9f:0f:6e:5f:46:
b5:d6:68:ad:d0:31:e4:b4:55:41:7a:9a:69:42:85:
e6:8c:90:82:3e:ac:32:fa:22:5f:be:ac:05:e7:e4:
01:90:48:48:e3:0c:bc:29:b1:1f:c4:d8:61:58:4c:
fd:7c:00:31:10:e3:12:8b:0b:3a:4e:7f:d1:7d:a0:
51:d8:10:87:35:15:07:3e:01:c9:fc:c5:27:a9:bd:
32:7f:0c:f3:9c:f1:9f:21:0d:ab:9b:2d:3b:d7:ed:
61:43:8a:84:3d:67:c0:92:9e:a3:51:10:cc:62:4b:
06:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:56:9D:A4:A7:6E:30:59:36:1C:95:BC:2D:27:C9:FD:A1:4E:51:BA
X509v3 Authority Key Identifier:
keyid:96:60:15:57:8C:94:8F:31:BF:74:A1:E1:FF:FD:7F:A3:E3:46:02:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lmAVV4yUjzG_dKHh__1_o-NGAgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/b50110-02b0-4235-984f-2d80cb25579a/1/lmAVV4yUjzG_dKHh__1_o-NGAgY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/b50110-02b0-4235-984f-2d80cb25579a/1/lmAVV4yUjzG_dKHh__1_o-NGAgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:a6:f3:b2:34:9b:20:35:13:fd:ad:30:0e:22:4d:ca:0f:6c:
87:f0:66:7f:f1:8c:cd:8b:87:11:f8:a7:8a:06:bd:dc:73:97:
11:b0:05:71:4b:f2:f6:79:a4:7d:7c:de:99:e7:68:7d:c3:c5:
c0:ad:4a:30:e3:35:ef:55:8a:e1:82:4e:62:ee:6e:25:bc:c9:
63:c9:68:6d:54:6b:d4:6c:8c:fc:59:26:63:7a:c9:28:dc:a8:
17:b3:47:53:89:a2:83:d9:a8:65:5c:03:0a:d2:64:91:43:54:
fe:ae:10:f4:e8:93:cd:c3:3d:28:35:f8:09:21:49:02:11:ec:
e0:6d:f8:d4:fa:0b:50:fc:6a:57:d8:8e:33:12:de:21:d6:d6:
73:e3:91:ec:c3:90:0b:d7:22:e0:8f:0e:48:18:2f:5a:43:fa:
b6:20:bf:84:ec:fc:9c:bb:e7:b3:4b:7f:8e:9a:ab:9f:f0:47:
3e:50:b6:ac:cc:5c:b4:31:6e:6f:44:25:bf:98:23:c6:e0:7d:
80:5e:eb:aa:aa:e6:c4:21:6b:25:4b:78:54:91:53:cb:bf:16:
c9:52:30:aa:bc:43:85:66:12:84:d6:88:d5:60:08:2c:98:10:
6c:33:7a:79:74:0f:0a:ba:2d:ab:36:7e:13:c6:28:14:a7:86:
9a:39:72:39
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9TqZWjz7os57d7mqq3mNWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2NjAxNTU3OGM5NDhmMzFiZjc0YTFlMWZmZmQ3ZmEzZTM0
NjAyMDYwHhcNMjUwMTMxMTcwMDM1WhcNMjUwMjAxMTcwMDM1WjAzMTEwLwYDVQQD
EygxNDU2OWRhNGE3NmUzMDU5MzYxYzk1YmMyZDI3YzlmZGExNGU1MWJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwIoc2gPw+utCRNR4ujittHAqPazL
RB/a4dQEDd2fsWoh4xQzF2/VEERIIx+5lZZTfMwQrDBzpnGsqOZWOBkLdGKIPBzI
ADHMOAun1TeNP2UrLgIQXzkzbjfU+rr5OuzqfU2ImiNDw1ntc8Iyi+x3RL2xaDTP
Uq2eO4BF2o269avsD3wQ7f2KOwXsxAfY6rYNnw9uX0a11mit0DHktFVBepppQoXm
jJCCPqwy+iJfvqwF5+QBkEhI4wy8KbEfxNhhWEz9fAAxEOMSiws6Tn/RfaBR2BCH
NRUHPgHJ/MUnqb0yfwzznPGfIQ2rmy071+1hQ4qEPWfAkp6jURDMYksGgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBRWnaSnbjBZNhyVvC0nyf2hTlG6MB8GA1UdIwQY
MBaAFJZgFVeMlI8xv3Sh4f/9f6PjRgIGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbG1BVlY0eVVqekdfZEtIaF9fMV9vLU5HQWdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC9iNTAxMTAtMDJiMC00MjM1LTk4NGYt
MmQ4MGNiMjU1NzlhLzEvbG1BVlY0eVVqekdfZEtIaF9fMV9vLU5HQWdZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC9iNTAxMTAtMDJiMC00MjM1LTk4NGYtMmQ4MGNiMjU1Nzlh
LzEvbG1BVlY0eVVqekdfZEtIaF9fMV9vLU5HQWdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANabzsjSb
IDUT/a0wDiJNyg9sh/Bmf/GMzYuHEfiniga93HOXEbAFcUvy9nmkfXzemedofcPF
wK1KMOM171WK4YJOYu5uJbzJY8lobVRr1GyM/FkmY3rJKNyoF7NHU4mig9moZVwD
CtJkkUNU/q4Q9OiTzcM9KDX4CSFJAhHs4G341PoLUPxqV9iOMxLeIdbWc+OR7MOQ
C9ci4I8OSBgvWkP6tiC/hOz8nLvns0t/jpqrn/BHPlC2rMxctDFub0Qlv5gjxuB9
gF7rqqrmxCFrJUt4VJFTy78WyVIwqrxDhWYShNaI1WAILJgQbDN6eXQPCrotqzZ+
E8YoFKeGmjlyOQ==
-----END CERTIFICATE-----
Generated at Thu May 1 10:18:04 2025 by rpki-client