Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/1ac795-2e93-4056-93d9-684e855d7ddc/1/LgO_8-c1I3MjiWRkff2JOyajs0k.mft
File: LgO_8-c1I3MjiWRkff2JOyajs0k.mft (raw, json)
Hash identifier: 5VPzWFdcFVQt7HAMFqJzVOyo0YpbMzmi8XeKv5DVxig=
Subject key identifier: 58:4C:42:83:E7:B8:E7:51:0F:64:F8:03:87:1F:13:D1:C1:A9:36:83
Authority key identifier: 2E:03:BF:F3:E7:35:23:73:23:89:64:64:7D:FD:89:3B:26:A3:B3:49
Certificate issuer: /CN=2e03bff3e7352373238964647dfd893b26a3b349
Certificate serial: 0194BCA978734A93245655B64EF24A4801D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LgO_8-c1I3MjiWRkff2JOyajs0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/1ac795-2e93-4056-93d9-684e855d7ddc/1/LgO_8-c1I3MjiWRkff2JOyajs0k.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 14:00:10 +0000
Manifest this update: Fri 31 Jan 2025 14:00:10 +0000
Manifest next update: Sat 01 Feb 2025 14:00:10 +0000
Files and hashes: 1: 4Ks29m0KEvqQ2u_x82i2_AGUJYc.roa (hash: LAlVvGEw43G7VBWh8V8Fzw/Vs6vev/GRjzgqnNcn5CU=)
2: LgO_8-c1I3MjiWRkff2JOyajs0k.crl (hash: BI6I7/gMeUJflKQELC3pfKlsRu/+2fnLcfXA9BNS8h0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:78:73:4a:93:24:56:55:b6:4e:f2:4a:48:01:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e03bff3e7352373238964647dfd893b26a3b349
Validity
Not Before: Jan 31 14:00:10 2025 GMT
Not After : Feb 1 14:00:10 2025 GMT
Subject: CN=584c4283e7b8e7510f64f803871f13d1c1a93683
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:a3:bb:38:ef:47:04:f2:0a:b9:7b:04:a8:88:
d1:b6:9a:9e:83:7f:50:3d:6b:39:f5:f1:e3:a3:2d:
74:ba:33:31:72:25:18:fd:d9:00:d3:84:04:58:ff:
5c:c8:4a:38:58:ce:13:29:e4:61:c8:8f:5f:4b:5e:
2e:9e:fa:73:86:b1:9b:ad:16:f6:b1:9c:35:f5:e7:
71:9f:d7:b4:c5:3d:f2:58:2c:0f:19:4a:49:b9:ce:
f0:7d:ce:27:11:7b:49:53:fb:e0:bd:b2:2f:af:35:
45:23:00:4a:0b:45:9e:a4:54:21:c2:5d:76:85:80:
e3:85:88:11:d7:73:5f:aa:aa:b1:46:21:be:a4:58:
9e:f5:6e:e3:35:e6:77:d1:1e:35:92:e6:19:27:21:
4a:66:d5:16:af:05:9c:ff:78:96:c9:50:75:68:9e:
0a:a9:06:f0:09:84:6a:80:31:7f:cb:96:84:14:5c:
3f:4d:4e:72:6e:df:8f:83:8d:1e:6b:68:bb:70:ed:
c4:14:1e:6b:9b:25:65:a8:d9:c7:9e:2c:79:2f:f1:
ee:78:8b:dc:04:27:ad:9c:b9:cb:8b:57:71:c0:ea:
10:7f:e1:a7:6b:61:18:04:b9:01:48:97:1b:62:b9:
f3:e7:af:d2:c2:aa:75:f4:7e:58:b2:a5:48:22:58:
5a:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:4C:42:83:E7:B8:E7:51:0F:64:F8:03:87:1F:13:D1:C1:A9:36:83
X509v3 Authority Key Identifier:
keyid:2E:03:BF:F3:E7:35:23:73:23:89:64:64:7D:FD:89:3B:26:A3:B3:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LgO_8-c1I3MjiWRkff2JOyajs0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/1ac795-2e93-4056-93d9-684e855d7ddc/1/LgO_8-c1I3MjiWRkff2JOyajs0k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/1ac795-2e93-4056-93d9-684e855d7ddc/1/LgO_8-c1I3MjiWRkff2JOyajs0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:17:96:8f:cb:73:a8:20:12:03:85:04:d1:75:be:27:33:d0:
18:06:d6:eb:4f:80:94:48:87:27:ee:34:7b:30:59:4d:82:bc:
7c:be:f2:6f:fc:ea:a8:29:99:72:74:d5:67:fd:73:6e:b6:5c:
5a:6a:38:3a:3b:35:42:51:ea:7b:58:6a:7e:59:bb:e4:ac:e4:
17:f1:62:fd:84:2c:d5:11:07:e4:5d:7b:1b:e8:41:72:4d:cc:
b8:81:28:a8:02:17:31:8f:d1:3b:c9:0b:1d:4a:32:25:9e:6f:
f4:eb:e9:79:6f:da:e2:ce:a7:5d:bf:6c:93:00:ff:4a:57:07:
3f:23:4f:6d:74:14:96:81:dd:94:d7:5c:15:53:d2:f4:0a:ef:
41:8c:7d:cb:f6:4d:c8:f5:88:ab:60:ea:5c:38:ae:6f:82:fa:
0c:e2:e1:93:33:bd:92:c5:7f:e9:bd:86:c2:8e:ec:8a:20:31:
25:51:f1:50:80:8c:9c:fe:77:da:89:e7:7f:04:83:d6:01:37:
4a:b1:cc:ed:97:74:2e:e9:c4:cd:e9:54:a6:ac:52:df:4d:ed:
20:87:dd:af:93:c3:cd:dd:f9:ca:36:05:f4:62:ff:61:19:a9:
59:b5:ea:e3:6e:23:79:b7:8f:d7:af:04:9b:bb:9c:f7:a8:2b:
46:29:4b:f9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qXhzSpMkVlW2TvJKSAHXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlMDNiZmYzZTczNTIzNzMyMzg5NjQ2NDdkZmQ4OTNiMjZh
M2IzNDkwHhcNMjUwMTMxMTQwMDEwWhcNMjUwMjAxMTQwMDEwWjAzMTEwLwYDVQQD
Eyg1ODRjNDI4M2U3YjhlNzUxMGY2NGY4MDM4NzFmMTNkMWMxYTkzNjgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0KO7OO9HBPIKuXsEqIjRtpqeg39Q
PWs59fHjoy10ujMxciUY/dkA04QEWP9cyEo4WM4TKeRhyI9fS14unvpzhrGbrRb2
sZw19edxn9e0xT3yWCwPGUpJuc7wfc4nEXtJU/vgvbIvrzVFIwBKC0WepFQhwl12
hYDjhYgR13NfqqqxRiG+pFie9W7jNeZ30R41kuYZJyFKZtUWrwWc/3iWyVB1aJ4K
qQbwCYRqgDF/y5aEFFw/TU5ybt+Pg40ea2i7cO3EFB5rmyVlqNnHnix5L/HueIvc
BCetnLnLi1dxwOoQf+Gna2EYBLkBSJcbYrnz56/Swqp19H5YsqVIIlha7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFhMQoPnuOdRD2T4A4cfE9HBqTaDMB8GA1UdIwQY
MBaAFC4Dv/PnNSNzI4lkZH39iTsmo7NJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTGdPXzgtYzFJM01qaVdSa2ZmMkpPeWFqczBrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS8xYWM3OTUtMmU5My00MDU2LTkzZDkt
Njg0ZTg1NWQ3ZGRjLzEvTGdPXzgtYzFJM01qaVdSa2ZmMkpPeWFqczBrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS8xYWM3OTUtMmU5My00MDU2LTkzZDktNjg0ZTg1NWQ3ZGRj
LzEvTGdPXzgtYzFJM01qaVdSa2ZmMkpPeWFqczBrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFReWj8tz
qCASA4UE0XW+JzPQGAbW60+AlEiHJ+40ezBZTYK8fL7yb/zqqCmZcnTVZ/1zbrZc
Wmo4Ojs1QlHqe1hqflm75KzkF/Fi/YQs1REH5F17G+hBck3MuIEoqAIXMY/RO8kL
HUoyJZ5v9OvpeW/a4s6nXb9skwD/SlcHPyNPbXQUloHdlNdcFVPS9ArvQYx9y/ZN
yPWIq2DqXDiub4L6DOLhkzO9ksV/6b2Gwo7siiAxJVHxUICMnP532onnfwSD1gE3
SrHM7Zd0LunEzelUpqxS303tIIfdr5PDzd35yjYF9GL/YRmpWbXq424jebeP168E
m7uc96grRilL+Q==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:47:18 2025 by rpki-client