Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/d95f15-2a2d-465b-a822-c8ee46648dbf/1/l2umIpxFnXaV01KbEgfiwpsIQrE.mft
File: l2umIpxFnXaV01KbEgfiwpsIQrE.mft (raw, json)
Hash identifier: Z7o+GyPxyTe1SI6oTsshy4UX1g9sOGdcLHtubgyxccQ=
Subject key identifier: 81:A4:86:59:A7:61:16:67:DB:B3:B5:05:1E:66:7D:5B:EA:71:D7:8E
Authority key identifier: 97:6B:A6:22:9C:45:9D:76:95:D3:52:9B:12:07:E2:C2:9B:08:42:B1
Certificate issuer: /CN=976ba6229c459d7695d3529b1207e2c29b0842b1
Certificate serial: 0194BBCE67E00B2F888226930EBEDD5AB4D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l2umIpxFnXaV01KbEgfiwpsIQrE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/d95f15-2a2d-465b-a822-c8ee46648dbf/1/l2umIpxFnXaV01KbEgfiwpsIQrE.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 10:00:53 +0000
Manifest this update: Fri 31 Jan 2025 10:00:53 +0000
Manifest next update: Sat 01 Feb 2025 10:00:53 +0000
Files and hashes: 1: 8i_tvPtWf70i2EmSEMpvUHFIlh0.roa (hash: 5i+xKeAIrkPv9y5KV9LM5WC3PSC5H7SyU1nhMQB9nho=)
2: l2umIpxFnXaV01KbEgfiwpsIQrE.crl (hash: VPvgVCowp/r8HxQuXVSw+AFy4J6h1lyBAdUOKjoDKGM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:67:e0:0b:2f:88:82:26:93:0e:be:dd:5a:b4:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=976ba6229c459d7695d3529b1207e2c29b0842b1
Validity
Not Before: Jan 31 10:00:53 2025 GMT
Not After : Feb 1 10:00:53 2025 GMT
Subject: CN=81a48659a7611667dbb3b5051e667d5bea71d78e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d8:9c:76:5d:81:7d:c4:11:34:9a:b3:7d:e3:
98:fe:1b:9b:56:bb:09:19:2e:9a:63:45:95:5c:42:
90:ba:cf:cf:31:36:5c:93:f0:87:97:81:e6:52:33:
f3:ed:05:ca:c6:cc:cc:97:58:6d:16:64:20:b3:f5:
f0:a4:50:71:18:15:0f:ef:ac:78:54:96:ac:4f:28:
27:ea:3f:ea:94:5c:8e:46:21:02:12:bd:30:e5:29:
d3:58:d2:6e:9f:ee:4f:b1:a2:27:17:b0:36:d9:04:
85:f1:c2:d6:35:87:af:34:9f:94:5b:e0:86:0e:82:
d5:21:88:67:c3:38:12:05:48:f4:94:8d:a4:d0:65:
ca:5e:d6:40:cb:1e:c7:de:71:21:35:3e:4c:5b:f6:
2a:9d:2b:39:1f:5a:0a:e5:e0:15:f7:ba:c8:bf:a8:
8c:ef:6a:4c:d7:1a:6a:9a:bf:61:b5:52:b0:29:3c:
cb:e6:e0:c7:0f:a0:61:f9:e6:17:5a:fb:79:a6:5b:
eb:83:68:b1:f2:a0:2a:8f:60:c7:e9:45:a4:cd:76:
ef:ea:d2:7d:1c:13:4f:90:9d:6e:91:29:f4:fc:9f:
99:ef:43:2a:06:de:17:c6:bb:ea:c0:d1:ce:c5:bc:
1e:43:dc:7f:f3:76:18:de:ac:26:63:68:a0:ec:ef:
c7:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:A4:86:59:A7:61:16:67:DB:B3:B5:05:1E:66:7D:5B:EA:71:D7:8E
X509v3 Authority Key Identifier:
keyid:97:6B:A6:22:9C:45:9D:76:95:D3:52:9B:12:07:E2:C2:9B:08:42:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l2umIpxFnXaV01KbEgfiwpsIQrE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/d95f15-2a2d-465b-a822-c8ee46648dbf/1/l2umIpxFnXaV01KbEgfiwpsIQrE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/d95f15-2a2d-465b-a822-c8ee46648dbf/1/l2umIpxFnXaV01KbEgfiwpsIQrE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:fa:a2:06:04:e5:5f:44:21:84:af:8c:6a:2e:d1:80:c4:af:
df:2d:2e:ba:dd:4d:76:10:c1:b9:5c:b4:1f:e9:75:f2:1e:e2:
f6:af:7f:04:12:ee:d5:c5:3f:45:02:05:f0:9d:db:34:65:9a:
05:39:3c:1d:35:68:5c:cc:12:ba:2d:44:6c:06:ee:9e:bb:88:
58:64:cf:b6:fb:35:a5:ca:77:51:e8:b6:c1:5d:aa:cc:04:1a:
72:39:ef:1f:71:1c:99:38:4d:03:53:73:36:c2:ec:14:7d:29:
37:ed:2f:20:01:12:da:c9:a0:83:3f:1a:8b:e4:5a:f9:ae:ab:
cf:2d:b1:58:0d:9f:34:ce:29:6b:96:70:8e:d0:2b:ab:83:3e:
c2:4e:7f:11:f0:e8:5a:75:0a:ca:36:ca:c4:c6:56:e1:25:a4:
66:fa:f6:4e:da:b8:f1:b7:11:b1:11:c8:f4:fd:be:b6:37:3e:
a8:6d:91:b9:21:ae:bc:4f:3e:ef:23:a2:92:d4:81:ae:0c:5d:
7a:bf:04:82:d7:41:6c:80:36:58:83:45:f3:e0:8f:8b:fd:92:
69:3a:1f:76:55:62:fc:af:d9:fd:98:80:5a:22:a4:84:71:db:
5c:64:ba:17:cd:64:22:b3:6b:b1:3d:59:53:77:45:c0:0d:85:
06:9c:83:35
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zmfgCy+IgiaTDr7dWrTVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3NmJhNjIyOWM0NTlkNzY5NWQzNTI5YjEyMDdlMmMyOWIw
ODQyYjEwHhcNMjUwMTMxMTAwMDUzWhcNMjUwMjAxMTAwMDUzWjAzMTEwLwYDVQQD
Eyg4MWE0ODY1OWE3NjExNjY3ZGJiM2I1MDUxZTY2N2Q1YmVhNzFkNzhlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArticdl2BfcQRNJqzfeOY/hubVrsJ
GS6aY0WVXEKQus/PMTZck/CHl4HmUjPz7QXKxszMl1htFmQgs/XwpFBxGBUP76x4
VJasTygn6j/qlFyORiECEr0w5SnTWNJun+5PsaInF7A22QSF8cLWNYevNJ+UW+CG
DoLVIYhnwzgSBUj0lI2k0GXKXtZAyx7H3nEhNT5MW/YqnSs5H1oK5eAV97rIv6iM
72pM1xpqmr9htVKwKTzL5uDHD6Bh+eYXWvt5plvrg2ix8qAqj2DH6UWkzXbv6tJ9
HBNPkJ1ukSn0/J+Z70MqBt4XxrvqwNHOxbweQ9x/83YY3qwmY2ig7O/HgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIGkhlmnYRZn27O1BR5mfVvqcdeOMB8GA1UdIwQY
MBaAFJdrpiKcRZ12ldNSmxIH4sKbCEKxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbDJ1bUlweEZuWGFWMDFLYkVnZml3cHNJUXJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC9kOTVmMTUtMmEyZC00NjViLWE4MjIt
YzhlZTQ2NjQ4ZGJmLzEvbDJ1bUlweEZuWGFWMDFLYkVnZml3cHNJUXJFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZC9kOTVmMTUtMmEyZC00NjViLWE4MjItYzhlZTQ2NjQ4ZGJm
LzEvbDJ1bUlweEZuWGFWMDFLYkVnZml3cHNJUXJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALPqiBgTl
X0QhhK+Mai7RgMSv3y0uut1NdhDBuVy0H+l18h7i9q9/BBLu1cU/RQIF8J3bNGWa
BTk8HTVoXMwSui1EbAbunruIWGTPtvs1pcp3Uei2wV2qzAQacjnvH3EcmThNA1Nz
NsLsFH0pN+0vIAES2smggz8ai+Ra+a6rzy2xWA2fNM4pa5ZwjtArq4M+wk5/EfDo
WnUKyjbKxMZW4SWkZvr2Ttq48bcRsRHI9P2+tjc+qG2RuSGuvE8+7yOiktSBrgxd
er8EgtdBbIA2WINF8+CPi/2SaTofdlVi/K/Z/ZiAWiKkhHHbXGS6F81kIrNrsT1Z
U3dFwA2FBpyDNQ==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:47:00 2025 by rpki-client