Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/1cbc1e-4d46-4b5b-b249-3208de39c09d/1/lub3fL2hAZh9nfyEvpC2-6Zq3J8.mft
File: lub3fL2hAZh9nfyEvpC2-6Zq3J8.mft (raw, json)
Hash identifier: 091JZamIgoarfvJy14TYWcJYpnn4Jq0PiqvyM7IvccM=
Subject key identifier: 30:58:CC:5C:70:16:2D:6B:53:10:AA:CD:33:C1:99:86:B7:23:2A:E8
Authority key identifier: 96:E6:F7:7C:BD:A1:01:98:7D:9D:FC:84:BE:90:B6:FB:A6:6A:DC:9F
Certificate issuer: /CN=96e6f77cbda101987d9dfc84be90b6fba66adc9f
Certificate serial: 0194BCE0A7954AA6633BEB1ECC405DBCD4C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lub3fL2hAZh9nfyEvpC2-6Zq3J8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/1cbc1e-4d46-4b5b-b249-3208de39c09d/1/lub3fL2hAZh9nfyEvpC2-6Zq3J8.mft
Manifest number: 10FB
Signing time: Fri 31 Jan 2025 15:00:26 +0000
Manifest this update: Fri 31 Jan 2025 15:00:26 +0000
Manifest next update: Sat 01 Feb 2025 15:00:26 +0000
Files and hashes: 1: 6uBRMAdPwa-lKO2ylO9DlsGgsHY.roa (hash: +m2JD+JFXF9SBNg+lpjDT6mDr6YnDMqmBejWjKgStAQ=)
2: X3YTVO9RvUjm8JcGIM_QOFbDRMk.roa (hash: /LRq69RbEzu/WcJsMrD+uXOmPaltuM3v3f2umkTunMY=)
3: aQ92mv4OX0TrGXRhoE4qVRj9Lwg.roa (hash: Sn7Iy1mnHMRUkHR2YiOO0Z7B9rvVJ+lItzyRTfMio1A=)
4: lub3fL2hAZh9nfyEvpC2-6Zq3J8.crl (hash: +Uyv4WZgBbbzF/0VLEYz9NME5YXYhciAL+p83NoCVOA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:a7:95:4a:a6:63:3b:eb:1e:cc:40:5d:bc:d4:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96e6f77cbda101987d9dfc84be90b6fba66adc9f
Validity
Not Before: Jan 31 15:00:26 2025 GMT
Not After : Feb 1 15:00:26 2025 GMT
Subject: CN=3058cc5c70162d6b5310aacd33c19986b7232ae8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:7d:96:b4:53:b0:6a:f8:f1:56:37:bc:23:f2:
be:8e:9e:d1:5d:be:bb:d4:50:49:c7:4a:9e:3a:03:
ea:fd:75:c4:01:17:b1:b5:f9:91:93:a9:25:4f:b1:
0f:e7:21:d0:32:8a:4b:6e:df:e2:93:e4:ba:eb:89:
10:c7:6a:f5:68:da:b7:51:8f:87:b9:ae:e2:5e:9d:
8d:57:f3:4c:3d:60:08:53:d5:5f:db:00:d3:ae:9a:
ca:c0:15:91:94:7a:fb:6d:2f:d7:9c:c5:d6:f3:30:
bc:e7:05:2b:b3:88:cc:00:3d:58:6d:89:29:24:2d:
bc:72:e0:29:44:83:cd:c2:ed:72:c0:19:d1:1e:63:
7e:05:a2:cb:35:5c:b7:73:d0:dd:12:69:6e:92:94:
21:54:16:bf:20:71:2e:78:2f:69:f9:33:43:d7:97:
51:14:af:29:a0:df:c8:ba:2e:7e:6d:b9:b7:ec:7f:
48:32:7b:f9:3e:f0:f1:80:43:43:8e:a1:ea:8e:6e:
4d:8d:20:f2:88:e1:16:f1:11:99:fa:73:ae:47:7f:
50:e5:07:aa:0a:c4:94:0a:1b:53:c1:e1:6d:bd:2b:
bb:9d:e8:99:a6:6a:3f:66:c6:77:73:68:e1:bc:89:
cc:dc:2e:f6:7c:23:31:d7:f4:f7:6c:fd:87:9e:28:
02:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:58:CC:5C:70:16:2D:6B:53:10:AA:CD:33:C1:99:86:B7:23:2A:E8
X509v3 Authority Key Identifier:
keyid:96:E6:F7:7C:BD:A1:01:98:7D:9D:FC:84:BE:90:B6:FB:A6:6A:DC:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lub3fL2hAZh9nfyEvpC2-6Zq3J8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/1cbc1e-4d46-4b5b-b249-3208de39c09d/1/lub3fL2hAZh9nfyEvpC2-6Zq3J8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/1cbc1e-4d46-4b5b-b249-3208de39c09d/1/lub3fL2hAZh9nfyEvpC2-6Zq3J8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:58:fb:cf:34:ef:c8:03:51:b4:7d:70:5c:80:50:ea:b7:24:
2f:e8:07:8c:c9:f1:8f:55:63:12:65:67:9f:fa:52:03:d8:68:
7c:cb:c8:f7:c6:b5:12:65:d1:db:af:e2:9c:eb:07:1e:19:57:
fd:f8:c7:4d:bc:d6:2d:40:df:29:7b:31:9c:78:d3:58:c2:68:
f0:5f:d5:18:05:17:f9:f8:2b:e4:55:22:62:f3:1f:fd:ca:4b:
ea:e2:bb:1e:af:97:6b:7e:49:1f:da:00:a9:22:8c:e3:3b:7b:
e9:f6:a2:11:86:ab:1c:91:a9:e9:ea:e5:f1:90:b9:84:30:a2:
03:a0:fd:08:69:45:20:71:d4:25:f6:17:c6:d9:58:59:b9:8e:
bd:80:27:b2:11:91:9f:a4:4d:26:9e:3e:15:85:c9:76:4d:23:
b8:37:c7:07:e5:61:eb:cd:24:97:ea:66:dd:31:83:b7:72:e0:
04:e5:5b:87:d1:e6:4f:16:92:51:be:c6:74:ea:3d:b6:c6:00:
dc:7d:cc:bc:7a:18:c0:f1:d6:c5:2d:59:d4:3c:8d:3f:22:44:
46:d6:af:e8:68:d3:2f:08:f7:0d:4c:b2:8b:6c:99:7b:3d:2b:
d7:69:a7:cd:57:08:44:61:7a:6b:9a:b3:7d:ed:0e:11:7f:81:
5b:27:09:f3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS84KeVSqZjO+sezEBdvNTBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2ZTZmNzdjYmRhMTAxOTg3ZDlkZmM4NGJlOTBiNmZiYTY2
YWRjOWYwHhcNMjUwMTMxMTUwMDI2WhcNMjUwMjAxMTUwMDI2WjAzMTEwLwYDVQQD
EygzMDU4Y2M1YzcwMTYyZDZiNTMxMGFhY2QzM2MxOTk4NmI3MjMyYWU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzX2WtFOwavjxVje8I/K+jp7RXb67
1FBJx0qeOgPq/XXEARextfmRk6klT7EP5yHQMopLbt/ik+S664kQx2r1aNq3UY+H
ua7iXp2NV/NMPWAIU9Vf2wDTrprKwBWRlHr7bS/XnMXW8zC85wUrs4jMAD1YbYkp
JC28cuApRIPNwu1ywBnRHmN+BaLLNVy3c9DdEmlukpQhVBa/IHEueC9p+TND15dR
FK8poN/Iui5+bbm37H9IMnv5PvDxgENDjqHqjm5NjSDyiOEW8RGZ+nOuR39Q5Qeq
CsSUChtTweFtvSu7neiZpmo/ZsZ3c2jhvInM3C72fCMx1/T3bP2HnigCxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDBYzFxwFi1rUxCqzTPBmYa3IyroMB8GA1UdIwQY
MBaAFJbm93y9oQGYfZ38hL6QtvumatyfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbHViM2ZMMmhBWmg5bmZ5RXZwQzItNlpxM0o4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi8xY2JjMWUtNGQ0Ni00YjViLWIyNDkt
MzIwOGRlMzljMDlkLzEvbHViM2ZMMmhBWmg5bmZ5RXZwQzItNlpxM0o4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi8xY2JjMWUtNGQ0Ni00YjViLWIyNDktMzIwOGRlMzljMDlk
LzEvbHViM2ZMMmhBWmg5bmZ5RXZwQzItNlpxM0o4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACVj7zzTv
yANRtH1wXIBQ6rckL+gHjMnxj1VjEmVnn/pSA9hofMvI98a1EmXR26/inOsHHhlX
/fjHTbzWLUDfKXsxnHjTWMJo8F/VGAUX+fgr5FUiYvMf/cpL6uK7Hq+Xa35JH9oA
qSKM4zt76faiEYarHJGp6erl8ZC5hDCiA6D9CGlFIHHUJfYXxtlYWbmOvYAnshGR
n6RNJp4+FYXJdk0juDfHB+Vh680kl+pm3TGDt3LgBOVbh9HmTxaSUb7GdOo9tsYA
3H3MvHoYwPHWxS1Z1DyNPyJERtav6GjTLwj3DUyyi2yZez0r12mnzVcIRGF6a5qz
fe0OEX+BWycJ8w==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:14 2025 by rpki-client