Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/353f3d-6afa-4e31-91a9-5e6a92e7f68f/1/_LteLg_Zgy1zse-Pnkhv_QCz14k.mft
File: _LteLg_Zgy1zse-Pnkhv_QCz14k.mft (raw, json)
Hash identifier: WdUaXZEmAsmcc5LoekTUVW9bEanZ5QYs5R82ITcKrFo=
Subject key identifier: F1:F1:40:2B:BC:33:A8:40:AF:77:72:FC:F9:95:A2:41:FA:ED:40:BD
Authority key identifier: FC:BB:5E:2E:0F:D9:83:2D:73:B1:EF:8F:9E:48:6F:FD:00:B3:D7:89
Certificate issuer: /CN=fcbb5e2e0fd9832d73b1ef8f9e486ffd00b3d789
Certificate serial: 0194BC04F2CE3AAEBB6B0BC43DB177897635
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_LteLg_Zgy1zse-Pnkhv_QCz14k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/353f3d-6afa-4e31-91a9-5e6a92e7f68f/1/_LteLg_Zgy1zse-Pnkhv_QCz14k.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 11:00:28 +0000
Manifest this update: Fri 31 Jan 2025 11:00:28 +0000
Manifest next update: Sat 01 Feb 2025 11:00:28 +0000
Files and hashes: 1: IK8VN_iyq26ReyybdZRgLTbp_h4.roa (hash: dThLkrPmFPQLdA53lP5J5dXCbHy3K9TicE7H7Mr22pg=)
2: _LteLg_Zgy1zse-Pnkhv_QCz14k.crl (hash: d5f1dDphgb75RabLHh6iKzda8uMoW8b0RcY8i/QhIXA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:f2:ce:3a:ae:bb:6b:0b:c4:3d:b1:77:89:76:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcbb5e2e0fd9832d73b1ef8f9e486ffd00b3d789
Validity
Not Before: Jan 31 11:00:28 2025 GMT
Not After : Feb 1 11:00:28 2025 GMT
Subject: CN=f1f1402bbc33a840af7772fcf995a241faed40bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:1d:41:77:12:20:84:75:61:f2:f5:63:ee:8d:
41:ac:89:a8:c5:10:7e:fe:00:ca:28:ab:5c:1b:fd:
3c:61:33:50:6b:7a:78:da:02:0e:ac:e1:9c:02:b6:
6b:cf:cf:87:b7:dc:fe:5b:c9:df:8d:49:88:89:d2:
7f:b0:08:83:93:8d:ca:76:93:8c:4f:b4:f3:ae:88:
ea:9d:7a:88:f7:17:61:af:79:be:b9:ea:48:d0:19:
37:68:bb:d9:4f:78:4f:e1:dd:23:15:63:bb:d0:f3:
0b:16:de:bf:d7:71:40:67:ae:49:85:87:f6:56:9b:
6d:b6:7f:15:83:c6:18:d1:b4:b7:aa:58:4c:83:d1:
2f:e1:c9:ad:34:52:ae:42:3a:b9:a9:f5:15:b2:5b:
67:16:d5:fe:af:28:63:f8:50:83:12:2d:63:e7:d6:
8a:95:44:6b:b5:3e:27:2b:ec:47:51:b2:ae:9d:0d:
fc:19:4b:81:5b:e0:0c:2c:b8:5c:cd:a1:9f:a6:1b:
7f:8c:00:b8:07:0a:e5:77:02:ed:00:2e:7a:ab:2f:
cd:fc:0c:68:33:52:bd:d8:3a:31:b0:b8:2d:78:50:
05:86:cf:f0:24:1c:46:34:b1:68:01:80:18:2e:7e:
a2:91:cf:92:b3:14:63:79:4f:ea:be:dd:20:17:48:
6f:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:F1:40:2B:BC:33:A8:40:AF:77:72:FC:F9:95:A2:41:FA:ED:40:BD
X509v3 Authority Key Identifier:
keyid:FC:BB:5E:2E:0F:D9:83:2D:73:B1:EF:8F:9E:48:6F:FD:00:B3:D7:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_LteLg_Zgy1zse-Pnkhv_QCz14k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/353f3d-6afa-4e31-91a9-5e6a92e7f68f/1/_LteLg_Zgy1zse-Pnkhv_QCz14k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/353f3d-6afa-4e31-91a9-5e6a92e7f68f/1/_LteLg_Zgy1zse-Pnkhv_QCz14k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:68:a4:b6:e6:94:a9:0e:da:1b:b5:39:54:b0:79:9f:8f:16:
34:3a:e6:a0:c3:0d:f7:8b:95:32:b5:db:66:9f:df:bb:1f:1b:
06:32:0f:ca:97:ec:0b:27:07:9e:e5:0b:71:c4:af:31:f1:99:
79:7b:9c:d7:ee:21:03:40:d2:d4:b7:ae:4a:6d:00:fb:a7:83:
43:62:ff:e1:ee:7b:88:96:d4:f8:43:52:d6:7a:b4:65:09:d1:
02:7c:15:64:37:df:14:30:83:8d:24:1f:ab:ce:32:83:f6:09:
78:58:2d:1d:22:c2:04:80:03:81:08:ad:28:91:3b:fe:87:96:
5c:f1:60:f4:34:c3:67:7f:cc:6d:25:7b:95:97:5e:33:00:4e:
09:ea:96:08:02:e2:7c:81:3d:ba:fd:e7:7c:11:2e:bb:87:ed:
5c:7a:3e:10:11:ab:79:b1:68:a7:ae:f5:39:25:e4:52:8d:6f:
1e:94:b4:6e:95:90:4d:92:85:0b:f1:15:0e:91:37:57:b7:c7:
59:28:56:31:37:08:ba:05:47:46:21:d7:de:34:4c:c1:36:2d:
10:ea:b5:30:33:5c:80:5d:4c:9e:d0:b1:8d:cf:f0:32:f3:8a:
5f:ac:1b:8f:43:39:44:ef:de:e1:82:68:20:9e:2b:61:a9:a2:
bc:74:1c:16
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8BPLOOq67awvEPbF3iXY1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjYmI1ZTJlMGZkOTgzMmQ3M2IxZWY4ZjllNDg2ZmZkMDBi
M2Q3ODkwHhcNMjUwMTMxMTEwMDI4WhcNMjUwMjAxMTEwMDI4WjAzMTEwLwYDVQQD
EyhmMWYxNDAyYmJjMzNhODQwYWY3NzcyZmNmOTk1YTI0MWZhZWQ0MGJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuR1BdxIghHVh8vVj7o1BrImoxRB+
/gDKKKtcG/08YTNQa3p42gIOrOGcArZrz8+Ht9z+W8nfjUmIidJ/sAiDk43KdpOM
T7TzrojqnXqI9xdhr3m+uepI0Bk3aLvZT3hP4d0jFWO70PMLFt6/13FAZ65JhYf2
Vptttn8Vg8YY0bS3qlhMg9Ev4cmtNFKuQjq5qfUVsltnFtX+ryhj+FCDEi1j59aK
lURrtT4nK+xHUbKunQ38GUuBW+AMLLhczaGfpht/jAC4BwrldwLtAC56qy/N/Axo
M1K92DoxsLgteFAFhs/wJBxGNLFoAYAYLn6ikc+SsxRjeU/qvt0gF0hvcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPHxQCu8M6hAr3dy/PmVokH67UC9MB8GA1UdIwQY
MBaAFPy7Xi4P2YMtc7Hvj55Ib/0As9eJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX0x0ZUxnX1pneTF6c2UtUG5raHZfUUN6MTRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC8zNTNmM2QtNmFmYS00ZTMxLTkxYTkt
NWU2YTkyZTdmNjhmLzEvX0x0ZUxnX1pneTF6c2UtUG5raHZfUUN6MTRrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC8zNTNmM2QtNmFmYS00ZTMxLTkxYTktNWU2YTkyZTdmNjhm
LzEvX0x0ZUxnX1pneTF6c2UtUG5raHZfUUN6MTRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaGiktuaU
qQ7aG7U5VLB5n48WNDrmoMMN94uVMrXbZp/fux8bBjIPypfsCycHnuULccSvMfGZ
eXuc1+4hA0DS1LeuSm0A+6eDQ2L/4e57iJbU+ENS1nq0ZQnRAnwVZDffFDCDjSQf
q84yg/YJeFgtHSLCBIADgQitKJE7/oeWXPFg9DTDZ3/MbSV7lZdeMwBOCeqWCALi
fIE9uv3nfBEuu4ftXHo+EBGrebFop671OSXkUo1vHpS0bpWQTZKFC/EVDpE3V7fH
WShWMTcIugVHRiHX3jRMwTYtEOq1MDNcgF1MntCxjc/wMvOKX6wbj0M5RO/e4YJo
IJ4rYamivHQcFg==
-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:03 2025 by rpki-client