Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/5be44c-a4f2-4bd0-b5a7-b468838c7fdf/1/LPqiK9ZcrIKFjqCRaG1bO0vjvTk.mft
File: LPqiK9ZcrIKFjqCRaG1bO0vjvTk.mft (raw, json)
Hash identifier: +OpBsnUcHLWHUrsrt3KlI5xua8h8+tVmDNwBFfSjf2w=
Subject key identifier: 89:5C:2E:F2:34:80:0D:EB:3B:D4:B0:7E:9D:F0:FD:F2:59:78:51:88
Authority key identifier: 2C:FA:A2:2B:D6:5C:AC:82:85:8E:A0:91:68:6D:5B:3B:4B:E3:BD:39
Certificate issuer: /CN=2cfaa22bd65cac82858ea091686d5b3b4be3bd39
Certificate serial: 0194BC72FD69AEC4BC0A091369B90138C65E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LPqiK9ZcrIKFjqCRaG1bO0vjvTk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/5be44c-a4f2-4bd0-b5a7-b468838c7fdf/1/LPqiK9ZcrIKFjqCRaG1bO0vjvTk.mft
Manifest number: 0F28
Signing time: Fri 31 Jan 2025 13:00:40 +0000
Manifest this update: Fri 31 Jan 2025 13:00:40 +0000
Manifest next update: Sat 01 Feb 2025 13:00:40 +0000
Files and hashes: 1: 6HQFKIaH-doszFtkd3GkDQ1Wxaw.roa (hash: 1OXXKiYa8WQkCMkAZRnTwQi7yeY/wqvng1D/8Z8Ivmg=)
2: LPqiK9ZcrIKFjqCRaG1bO0vjvTk.crl (hash: 1peK+CpAZKKGa4Ki7PhMrNz1tvS7gM2lk4Xgj9nYvX0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:fd:69:ae:c4:bc:0a:09:13:69:b9:01:38:c6:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cfaa22bd65cac82858ea091686d5b3b4be3bd39
Validity
Not Before: Jan 31 13:00:40 2025 GMT
Not After : Feb 1 13:00:40 2025 GMT
Subject: CN=895c2ef234800deb3bd4b07e9df0fdf259785188
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:16:03:b0:0f:96:a2:f5:23:f6:b2:45:df:3e:
1f:ab:bf:5f:3a:41:48:13:ee:e5:fa:84:f7:ac:28:
af:fd:c7:8b:d9:b1:8c:ab:f9:31:e2:af:f9:be:1f:
84:a6:29:e9:d5:85:f3:62:39:59:2d:1c:9f:0d:3e:
35:b1:51:0a:55:7f:8e:3c:42:4c:6b:d1:92:17:da:
06:6d:04:08:a9:5d:14:36:75:a7:6e:e7:76:0c:f6:
7a:0a:cd:8e:eb:f4:38:e9:87:da:3a:f3:5d:cf:e5:
09:10:da:6e:83:6e:31:61:03:12:c0:2e:1b:2d:b0:
61:f9:61:6d:f0:ec:64:ce:b1:ff:c3:d5:0b:a6:fa:
37:75:1d:eb:05:3d:41:b5:47:49:95:da:10:9a:61:
ab:ad:32:7f:9f:d0:9a:b5:df:cf:79:cd:77:9a:9a:
d3:79:3d:44:e4:73:b2:d2:fe:9d:ec:99:33:4c:ed:
4e:ef:f0:a2:2f:c8:2e:86:4f:8c:4e:64:22:c6:4f:
3f:d0:71:e8:a1:c1:a9:68:6e:5e:96:21:aa:a9:7b:
19:50:f5:78:32:86:65:fd:c2:06:24:79:cd:27:9b:
8e:4f:32:17:b2:b9:4e:0b:f9:2d:c7:65:ec:1b:e0:
e1:78:1b:33:29:9f:43:3c:fc:97:7b:3a:a8:70:29:
f8:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:5C:2E:F2:34:80:0D:EB:3B:D4:B0:7E:9D:F0:FD:F2:59:78:51:88
X509v3 Authority Key Identifier:
keyid:2C:FA:A2:2B:D6:5C:AC:82:85:8E:A0:91:68:6D:5B:3B:4B:E3:BD:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LPqiK9ZcrIKFjqCRaG1bO0vjvTk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/5be44c-a4f2-4bd0-b5a7-b468838c7fdf/1/LPqiK9ZcrIKFjqCRaG1bO0vjvTk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/5be44c-a4f2-4bd0-b5a7-b468838c7fdf/1/LPqiK9ZcrIKFjqCRaG1bO0vjvTk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:97:9c:64:a5:83:ee:14:94:07:5d:a5:66:af:43:22:28:07:
d8:25:f1:40:d0:d9:c3:04:d3:bb:97:51:98:dd:8b:10:db:cb:
8f:4e:45:17:85:1c:e1:f0:15:33:be:60:40:50:f7:86:86:0f:
7f:c7:cd:01:65:d2:4a:26:d3:40:d4:f8:b6:38:e7:17:5f:1d:
5c:7c:80:a3:1b:e5:62:82:40:24:fd:ff:18:f9:11:9f:cd:99:
c8:63:7b:da:b7:e9:63:6c:51:38:6d:70:b0:5d:cb:25:bb:b6:
1d:10:82:5e:12:1d:8d:ea:33:d1:59:6a:ea:b0:90:b8:21:38:
f9:be:9b:ce:e4:3e:95:4e:78:ec:d0:06:df:e8:fb:3d:94:4c:
20:7c:c3:eb:26:c6:c0:27:0c:7a:cf:c5:6c:7c:8e:d4:07:ae:
ab:8e:30:29:eb:2d:51:4e:6c:b6:df:bd:1f:52:39:53:a8:fb:
b9:6c:74:52:71:37:be:35:f4:f1:0e:8d:36:df:ce:bc:3f:0e:
1f:79:23:6e:3e:a9:09:d2:49:88:bc:07:12:20:36:2a:ba:45:
48:09:31:79:63:70:17:11:eb:b4:44:8f:bb:bd:83:4f:3d:c1:
b8:3c:0b:18:07:78:2b:9e:c4:15:91:2b:3e:af:39:4c:f8:3a:
02:04:03:06
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8cv1prsS8CgkTabkBOMZeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJjZmFhMjJiZDY1Y2FjODI4NThlYTA5MTY4NmQ1YjNiNGJl
M2JkMzkwHhcNMjUwMTMxMTMwMDQwWhcNMjUwMjAxMTMwMDQwWjAzMTEwLwYDVQQD
Eyg4OTVjMmVmMjM0ODAwZGViM2JkNGIwN2U5ZGYwZmRmMjU5Nzg1MTg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArhYDsA+WovUj9rJF3z4fq79fOkFI
E+7l+oT3rCiv/ceL2bGMq/kx4q/5vh+Epinp1YXzYjlZLRyfDT41sVEKVX+OPEJM
a9GSF9oGbQQIqV0UNnWnbud2DPZ6Cs2O6/Q46YfaOvNdz+UJENpug24xYQMSwC4b
LbBh+WFt8OxkzrH/w9ULpvo3dR3rBT1BtUdJldoQmmGrrTJ/n9Catd/Pec13mprT
eT1E5HOy0v6d7JkzTO1O7/CiL8guhk+MTmQixk8/0HHoocGpaG5eliGqqXsZUPV4
MoZl/cIGJHnNJ5uOTzIXsrlOC/ktx2XsG+DheBszKZ9DPPyXezqocCn4nQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIlcLvI0gA3rO9Swfp3w/fJZeFGIMB8GA1UdIwQY
MBaAFCz6oivWXKyChY6gkWhtWztL4705MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTFBxaUs5WmNySUtGanFDUmFHMWJPMHZqdlRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS81YmU0NGMtYTRmMi00YmQwLWI1YTct
YjQ2ODgzOGM3ZmRmLzEvTFBxaUs5WmNySUtGanFDUmFHMWJPMHZqdlRrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS81YmU0NGMtYTRmMi00YmQwLWI1YTctYjQ2ODgzOGM3ZmRm
LzEvTFBxaUs5WmNySUtGanFDUmFHMWJPMHZqdlRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI5ecZKWD
7hSUB12lZq9DIigH2CXxQNDZwwTTu5dRmN2LENvLj05FF4Uc4fAVM75gQFD3hoYP
f8fNAWXSSibTQNT4tjjnF18dXHyAoxvlYoJAJP3/GPkRn82ZyGN72rfpY2xROG1w
sF3LJbu2HRCCXhIdjeoz0Vlq6rCQuCE4+b6bzuQ+lU547NAG3+j7PZRMIHzD6ybG
wCcMes/FbHyO1Aeuq44wKestUU5stt+9H1I5U6j7uWx0UnE3vjX08Q6NNt/OvD8O
H3kjbj6pCdJJiLwHEiA2KrpFSAkxeWNwFxHrtESPu72DTz3BuDwLGAd4K57EFZEr
Pq85TPg6AgQDBg==
-----END CERTIFICATE-----
Generated at Fri Apr 25 01:33:51 2025 by rpki-client