Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/e31f39-c9f4-42c2-a03e-12125312b2a3/1/lYs3Q2qJ-sosT35g-axNR6GZrWY.mft
File: lYs3Q2qJ-sosT35g-axNR6GZrWY.mft (raw, json)
Hash identifier: KLqMdG9cdKnOXf5dIX+Y9DlTbWdXTb2GCW4ccFViKLc=
Subject key identifier: 9A:74:74:68:28:80:9D:76:77:F7:2D:D0:37:DD:DB:36:68:5E:6B:66
Authority key identifier: 95:8B:37:43:6A:89:FA:CA:2C:4F:7E:60:F9:AC:4D:47:A1:99:AD:66
Certificate issuer: /CN=958b37436a89faca2c4f7e60f9ac4d47a199ad66
Certificate serial: 0194BC7290D372D95E3B72CF9E10DAA1297B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lYs3Q2qJ-sosT35g-axNR6GZrWY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/e31f39-c9f4-42c2-a03e-12125312b2a3/1/lYs3Q2qJ-sosT35g-axNR6GZrWY.mft
Manifest number: 1428
Signing time: Fri 31 Jan 2025 13:00:12 +0000
Manifest this update: Fri 31 Jan 2025 13:00:12 +0000
Manifest next update: Sat 01 Feb 2025 13:00:12 +0000
Files and hashes: 1: lYs3Q2qJ-sosT35g-axNR6GZrWY.crl (hash: VLjyyxoGl7vqN48dg1eh3/SHFPkb6n/cPKNIyqmMBQg=)
2: uaazccLN6Mk4sx0EaEhEvn5C3x0.roa (hash: v+tP2jEaMonsS2eBuWt5qEl+U+sbi9qBetOBwIDVmAo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:90:d3:72:d9:5e:3b:72:cf:9e:10:da:a1:29:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=958b37436a89faca2c4f7e60f9ac4d47a199ad66
Validity
Not Before: Jan 31 13:00:12 2025 GMT
Not After : Feb 1 13:00:12 2025 GMT
Subject: CN=9a74746828809d7677f72dd037dddb36685e6b66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:0c:dc:c3:40:f1:ad:3f:b7:1e:75:f4:0a:94:
df:a0:6d:f7:43:78:a2:e2:a8:f1:b0:1d:cf:7d:75:
6a:25:db:72:65:6e:fc:aa:5b:bb:e3:b7:ff:f8:84:
fc:26:86:f2:b0:bb:26:fa:66:13:65:90:b8:e5:cb:
8c:d6:c9:6d:82:a0:a6:82:25:dc:6f:87:d7:c3:63:
06:a6:0f:9f:7b:f8:8a:4f:b9:b5:94:d2:b4:2d:de:
4e:0b:17:08:1e:03:69:48:d9:f7:81:1d:23:01:12:
49:b9:0b:60:be:cb:76:b0:a4:ec:07:92:05:a7:46:
59:4e:54:f9:0a:31:e9:9a:4d:aa:7c:8a:2d:a3:5f:
c6:ca:92:ba:83:c3:de:e4:30:20:3c:6e:1c:5b:c2:
66:1e:fc:ee:a2:a4:04:54:4f:1a:67:4a:f7:54:64:
54:ad:84:c1:8a:82:35:b9:2f:71:f5:94:86:af:1c:
9d:a7:6e:07:0f:5a:ea:0b:b4:8e:2d:58:db:2b:9c:
86:e7:cb:9c:25:6b:9f:76:40:a6:20:27:8b:5f:47:
8c:82:af:d8:a1:be:2e:11:9c:aa:4e:35:6e:fa:9d:
da:62:1f:9f:ee:cf:c3:67:75:97:e3:7e:5d:5c:90:
ef:43:93:1f:c0:8f:2a:ec:77:43:7e:af:03:1b:f4:
25:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:74:74:68:28:80:9D:76:77:F7:2D:D0:37:DD:DB:36:68:5E:6B:66
X509v3 Authority Key Identifier:
keyid:95:8B:37:43:6A:89:FA:CA:2C:4F:7E:60:F9:AC:4D:47:A1:99:AD:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lYs3Q2qJ-sosT35g-axNR6GZrWY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/e31f39-c9f4-42c2-a03e-12125312b2a3/1/lYs3Q2qJ-sosT35g-axNR6GZrWY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/e31f39-c9f4-42c2-a03e-12125312b2a3/1/lYs3Q2qJ-sosT35g-axNR6GZrWY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:2b:5d:1a:d7:13:5e:d8:8c:fc:ec:6c:2e:b5:ad:7e:16:46:
36:54:17:c1:69:4c:82:c8:29:4d:8c:87:8a:d8:99:3f:21:51:
f8:0b:e7:0e:39:52:6b:8e:d4:ff:1b:b2:f6:8c:f9:71:24:f0:
0e:70:03:89:b5:2e:51:0e:f1:59:98:81:c4:94:25:21:7e:b1:
da:91:b6:0d:e1:ec:75:8c:06:42:3b:ac:51:08:86:27:4b:3a:
ca:d4:2b:99:16:fd:07:a9:2e:0b:f5:3f:73:11:95:07:36:83:
01:3c:47:26:77:75:ee:9e:67:82:2e:9b:40:54:63:f8:bd:d1:
f8:4b:ea:cb:c4:54:5d:41:0e:4e:20:60:ef:15:30:46:4c:ea:
25:1f:81:5a:60:f7:1d:5b:59:e9:de:5c:79:18:f3:8c:e7:26:
1f:8b:ec:6f:28:5e:08:68:99:66:b2:f3:c0:22:9b:60:e5:0d:
b8:cc:6b:cc:a5:31:f8:f4:9f:75:35:a5:1b:91:26:b4:65:49:
7d:7e:c1:dd:0b:2d:78:4c:b9:83:d9:d8:f6:ed:5f:2b:f2:74:
1c:21:05:9f:8c:31:aa:0e:e2:41:b3:47:e9:f6:f1:2b:9a:df:
4d:d9:2d:19:49:bc:91:fe:0f:51:c9:fa:68:c0:c2:b6:8e:e4:
68:9f:e7:33
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8cpDTctleO3LPnhDaoSl7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1OGIzNzQzNmE4OWZhY2EyYzRmN2U2MGY5YWM0ZDQ3YTE5
OWFkNjYwHhcNMjUwMTMxMTMwMDEyWhcNMjUwMjAxMTMwMDEyWjAzMTEwLwYDVQQD
Eyg5YTc0NzQ2ODI4ODA5ZDc2NzdmNzJkZDAzN2RkZGIzNjY4NWU2YjY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAowzcw0DxrT+3HnX0CpTfoG33Q3ii
4qjxsB3PfXVqJdtyZW78qlu747f/+IT8JobysLsm+mYTZZC45cuM1sltgqCmgiXc
b4fXw2MGpg+fe/iKT7m1lNK0Ld5OCxcIHgNpSNn3gR0jARJJuQtgvst2sKTsB5IF
p0ZZTlT5CjHpmk2qfIoto1/GypK6g8Pe5DAgPG4cW8JmHvzuoqQEVE8aZ0r3VGRU
rYTBioI1uS9x9ZSGrxydp24HD1rqC7SOLVjbK5yG58ucJWufdkCmICeLX0eMgq/Y
ob4uEZyqTjVu+p3aYh+f7s/DZ3WX435dXJDvQ5MfwI8q7HdDfq8DG/QlrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJp0dGgogJ12d/ct0Dfd2zZoXmtmMB8GA1UdIwQY
MBaAFJWLN0NqifrKLE9+YPmsTUehma1mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbFlzM1EycUotc29zVDM1Zy1heE5SNkdacldZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS9lMzFmMzktYzlmNC00MmMyLWEwM2Ut
MTIxMjUzMTJiMmEzLzEvbFlzM1EycUotc29zVDM1Zy1heE5SNkdacldZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS9lMzFmMzktYzlmNC00MmMyLWEwM2UtMTIxMjUzMTJiMmEz
LzEvbFlzM1EycUotc29zVDM1Zy1heE5SNkdacldZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfStdGtcT
XtiM/OxsLrWtfhZGNlQXwWlMgsgpTYyHitiZPyFR+AvnDjlSa47U/xuy9oz5cSTw
DnADibUuUQ7xWZiBxJQlIX6x2pG2DeHsdYwGQjusUQiGJ0s6ytQrmRb9B6kuC/U/
cxGVBzaDATxHJnd17p5ngi6bQFRj+L3R+Evqy8RUXUEOTiBg7xUwRkzqJR+BWmD3
HVtZ6d5ceRjzjOcmH4vsbyheCGiZZrLzwCKbYOUNuMxrzKUx+PSfdTWlG5EmtGVJ
fX7B3QsteEy5g9nY9u1fK/J0HCEFn4wxqg7iQbNH6fbxK5rfTdktGUm8kf4PUcn6
aMDCto7kaJ/nMw==
-----END CERTIFICATE-----
Generated at Fri Apr 25 00:52:24 2025 by rpki-client