Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/09e2f7-e650-4f38-a745-c396200fe0bf/1/lKpBiudwvajvBRax0cYzpn6R84s.mft
File: lKpBiudwvajvBRax0cYzpn6R84s.mft (raw, json)
Hash identifier: 1OiVe5v5h3t+rhwxEefKzPj/9tGs1BPGnIxRDofUrAc=
Subject key identifier: 44:FE:91:FC:E1:A1:61:8C:68:73:FB:B9:F2:42:03:79:2A:C5:50:43
Authority key identifier: 94:AA:41:8A:E7:70:BD:A8:EF:05:16:B1:D1:C6:33:A6:7E:91:F3:8B
Certificate issuer: /CN=94aa418ae770bda8ef0516b1d1c633a67e91f38b
Certificate serial: 0194BBCEF78FA995F73C97DA3F311A21D5C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lKpBiudwvajvBRax0cYzpn6R84s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/09e2f7-e650-4f38-a745-c396200fe0bf/1/lKpBiudwvajvBRax0cYzpn6R84s.mft
Manifest number: 0DF2
Signing time: Fri 31 Jan 2025 10:01:30 +0000
Manifest this update: Fri 31 Jan 2025 10:01:30 +0000
Manifest next update: Sat 01 Feb 2025 10:01:30 +0000
Files and hashes: 1: JDbsNRiv_WMTlViBQXQ3g59gK5M.roa (hash: 5BHapuXzcbpJhpfOa/evo44J0f0F6BTnvXfMcpPhdEU=)
2: lKpBiudwvajvBRax0cYzpn6R84s.crl (hash: TstmrBs+lYm4E81BS1DCPErTlu1U+jfwyDlf56os4NA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:f7:8f:a9:95:f7:3c:97:da:3f:31:1a:21:d5:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94aa418ae770bda8ef0516b1d1c633a67e91f38b
Validity
Not Before: Jan 31 10:01:30 2025 GMT
Not After : Feb 1 10:01:30 2025 GMT
Subject: CN=44fe91fce1a1618c6873fbb9f24203792ac55043
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b7:83:30:42:77:f2:f9:8e:92:c6:b4:a9:2e:
d6:23:84:0f:3b:4f:da:a8:73:b4:6f:21:5a:e7:3c:
ff:53:5e:eb:31:f5:0f:c5:82:cd:19:b8:84:ab:cb:
f2:01:ee:34:af:45:db:5f:33:32:46:a1:4a:f0:cb:
c8:50:5a:aa:0d:e7:d3:25:b2:91:e4:3c:44:f6:0a:
3c:05:a5:a3:24:96:40:f1:78:f8:8e:2d:b6:f4:87:
43:42:10:9a:0e:2e:ab:f7:76:a9:a6:59:eb:39:6c:
75:f6:a8:83:2b:be:5e:23:61:5b:86:1a:c9:df:df:
29:18:4e:11:8d:e2:1a:67:64:bc:3b:03:dc:76:05:
e1:42:7e:2b:a9:cb:f1:ce:3c:45:36:12:7f:5c:43:
3e:6a:17:27:0d:ff:a4:c9:31:93:a2:1f:b1:f1:e6:
74:c4:ca:d8:a1:d7:f7:e6:ac:4e:c6:5f:00:46:3b:
fe:d9:c2:09:6d:b8:ef:00:7f:9c:9f:da:d7:64:1a:
a2:8d:fb:af:c5:0b:d8:fe:50:84:1a:0d:39:26:a6:
47:fc:5c:f1:48:a7:90:ac:cb:83:4c:43:73:7e:8a:
e8:2c:8f:23:8e:4a:38:59:38:cd:8b:79:dc:78:fa:
2b:65:8b:68:30:7b:d7:82:24:89:d1:64:29:09:21:
b3:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:FE:91:FC:E1:A1:61:8C:68:73:FB:B9:F2:42:03:79:2A:C5:50:43
X509v3 Authority Key Identifier:
keyid:94:AA:41:8A:E7:70:BD:A8:EF:05:16:B1:D1:C6:33:A6:7E:91:F3:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lKpBiudwvajvBRax0cYzpn6R84s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/09e2f7-e650-4f38-a745-c396200fe0bf/1/lKpBiudwvajvBRax0cYzpn6R84s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/09e2f7-e650-4f38-a745-c396200fe0bf/1/lKpBiudwvajvBRax0cYzpn6R84s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:49:a4:6b:52:e0:41:fc:72:96:44:95:33:e8:13:12:03:2d:
6e:d0:ed:f1:91:0e:c1:57:24:b8:22:f9:02:7d:a0:ed:39:65:
18:55:6d:d7:6f:44:2d:81:64:c8:51:b6:58:05:68:10:01:ee:
cc:7f:83:d6:f3:1a:d0:e0:7a:f5:8c:e4:88:2b:ec:e2:f9:0b:
47:e9:b9:4a:4c:9f:6f:23:c1:98:38:a3:45:92:24:3b:f5:1a:
1a:39:b8:5a:a6:6d:95:be:2e:b7:ff:c0:f1:a1:a1:69:89:cc:
ac:06:0a:3a:dc:d4:46:22:65:a1:5a:ad:50:1b:f9:53:0a:85:
2a:4e:42:a8:7f:e2:74:9d:8b:be:eb:62:f8:bf:88:f2:07:4e:
32:d0:76:41:04:f4:fa:b9:cd:1a:f2:32:a9:37:96:03:9a:22:
08:c0:65:03:8b:d0:7c:a5:3c:60:46:c7:eb:12:f1:7b:3e:f3:
b1:86:0a:4b:92:65:92:ec:7a:78:75:25:c4:e8:ea:10:62:19:
8b:83:16:46:d4:fe:ee:b6:db:1d:db:f4:43:21:ce:4d:e4:bb:
bb:f4:ad:38:91:cc:78:e5:4b:3d:61:03:b2:a1:7c:5e:5b:d8:
71:f5:44:38:f6:b6:06:76:60:18:ef:43:cb:56:ec:2c:9f:a1:
67:3c:2b:21
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zvePqZX3PJfaPzEaIdXBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0YWE0MThhZTc3MGJkYThlZjA1MTZiMWQxYzYzM2E2N2U5
MWYzOGIwHhcNMjUwMTMxMTAwMTMwWhcNMjUwMjAxMTAwMTMwWjAzMTEwLwYDVQQD
Eyg0NGZlOTFmY2UxYTE2MThjNjg3M2ZiYjlmMjQyMDM3OTJhYzU1MDQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArLeDMEJ38vmOksa0qS7WI4QPO0/a
qHO0byFa5zz/U17rMfUPxYLNGbiEq8vyAe40r0XbXzMyRqFK8MvIUFqqDefTJbKR
5DxE9go8BaWjJJZA8Xj4ji229IdDQhCaDi6r93applnrOWx19qiDK75eI2FbhhrJ
398pGE4RjeIaZ2S8OwPcdgXhQn4rqcvxzjxFNhJ/XEM+ahcnDf+kyTGToh+x8eZ0
xMrYodf35qxOxl8ARjv+2cIJbbjvAH+cn9rXZBqijfuvxQvY/lCEGg05JqZH/Fzx
SKeQrMuDTENzforoLI8jjko4WTjNi3ncePorZYtoMHvXgiSJ0WQpCSGzcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFET+kfzhoWGMaHP7ufJCA3kqxVBDMB8GA1UdIwQY
MBaAFJSqQYrncL2o7wUWsdHGM6Z+kfOLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbEtwQml1ZHd2YWp2QlJheDBjWXpwbjZSODRzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy8wOWUyZjctZTY1MC00ZjM4LWE3NDUt
YzM5NjIwMGZlMGJmLzEvbEtwQml1ZHd2YWp2QlJheDBjWXpwbjZSODRzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy8wOWUyZjctZTY1MC00ZjM4LWE3NDUtYzM5NjIwMGZlMGJm
LzEvbEtwQml1ZHd2YWp2QlJheDBjWXpwbjZSODRzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFkmka1Lg
QfxylkSVM+gTEgMtbtDt8ZEOwVckuCL5An2g7TllGFVt129ELYFkyFG2WAVoEAHu
zH+D1vMa0OB69YzkiCvs4vkLR+m5SkyfbyPBmDijRZIkO/UaGjm4WqZtlb4ut//A
8aGhaYnMrAYKOtzURiJloVqtUBv5UwqFKk5CqH/idJ2Lvuti+L+I8gdOMtB2QQT0
+rnNGvIyqTeWA5oiCMBlA4vQfKU8YEbH6xLxez7zsYYKS5Jlkux6eHUlxOjqEGIZ
i4MWRtT+7rbbHdv0QyHOTeS7u/StOJHMeOVLPWEDsqF8XlvYcfVEOPa2BnZgGO9D
y1bsLJ+hZzwrIQ==
-----END CERTIFICATE-----
Generated at Thu Apr 24 19:07:17 2025 by rpki-client