Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/f79e8e-6625-45e9-bb9a-96d22861a922/1/LhEuLGHSqA58Q4XGCFjJHXXzHns.mft
File: LhEuLGHSqA58Q4XGCFjJHXXzHns.mft (raw, json)
Hash identifier: NA2Lpz9DsgQpvfrkyXlZqFoUsxJfAlgVdRvYLoizc+I=
Subject key identifier: 03:D0:1A:AF:C3:DB:99:F3:14:94:80:7E:9F:C6:89:C7:00:F7:F6:5A
Authority key identifier: 2E:11:2E:2C:61:D2:A8:0E:7C:43:85:C6:08:58:C9:1D:75:F3:1E:7B
Certificate issuer: /CN=2e112e2c61d2a80e7c4385c60858c91d75f31e7b
Certificate serial: 0194BD854CA1A2634168FD284656EA1E3EC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LhEuLGHSqA58Q4XGCFjJHXXzHns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/f79e8e-6625-45e9-bb9a-96d22861a922/1/LhEuLGHSqA58Q4XGCFjJHXXzHns.mft
Manifest number: 0150
Signing time: Fri 31 Jan 2025 18:00:17 +0000
Manifest this update: Fri 31 Jan 2025 18:00:17 +0000
Manifest next update: Sat 01 Feb 2025 18:00:17 +0000
Files and hashes: 1: LhEuLGHSqA58Q4XGCFjJHXXzHns.crl (hash: kg39peyQZbhHsPzon6LJZHXPikd8t5hPjJ/YSuuQqBY=)
2: YFpTzbdahNIjIhW0WUE8tDsg0Zc.roa (hash: OprTvWEJr5fTT1U7nlN5AwJl1BhfMB+0QQXewnAwVwY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:4c:a1:a2:63:41:68:fd:28:46:56:ea:1e:3e:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e112e2c61d2a80e7c4385c60858c91d75f31e7b
Validity
Not Before: Jan 31 18:00:17 2025 GMT
Not After : Feb 1 18:00:17 2025 GMT
Subject: CN=03d01aafc3db99f31494807e9fc689c700f7f65a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:ff:f9:3d:87:bc:09:00:c7:fd:f8:83:dc:83:
f1:65:35:2e:3b:40:37:19:fb:cf:88:34:84:da:ab:
f0:22:4c:6a:c0:23:69:b4:9d:8b:5b:85:07:d9:d9:
bb:82:f8:0e:39:a9:8d:42:bb:44:ba:1d:20:88:9d:
92:f9:53:ea:73:93:89:45:a7:2e:7a:5b:e0:74:bb:
d7:f1:43:aa:70:3e:a5:ee:24:e5:e3:a3:fc:6c:d2:
cc:d1:4b:8f:51:ad:ef:0b:70:eb:d6:56:05:db:d5:
e3:59:ae:b7:a4:52:0b:f1:d4:60:b8:bf:10:7f:08:
33:02:04:a5:35:0f:31:9f:d4:d6:2f:8e:81:c2:a2:
dc:47:fa:dd:36:d5:b6:95:b7:22:d3:15:ed:26:8b:
17:a9:ee:11:be:1c:76:98:81:f0:45:95:b9:ce:99:
8f:4b:df:a2:78:27:76:b4:ed:96:a7:52:ae:f4:83:
a9:68:16:b3:4e:58:16:9b:6f:5d:a4:0e:56:99:cd:
02:0b:f0:5f:71:04:40:93:66:b9:24:4e:96:d9:dc:
ad:fa:26:be:12:47:5a:d5:e1:5b:10:2e:9f:73:ac:
1a:32:ce:2b:71:a1:13:c9:1d:12:51:dc:68:33:24:
d0:5a:c2:b0:9c:5a:b1:d0:ce:aa:30:52:3a:5f:94:
04:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:D0:1A:AF:C3:DB:99:F3:14:94:80:7E:9F:C6:89:C7:00:F7:F6:5A
X509v3 Authority Key Identifier:
keyid:2E:11:2E:2C:61:D2:A8:0E:7C:43:85:C6:08:58:C9:1D:75:F3:1E:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LhEuLGHSqA58Q4XGCFjJHXXzHns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/f79e8e-6625-45e9-bb9a-96d22861a922/1/LhEuLGHSqA58Q4XGCFjJHXXzHns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/f79e8e-6625-45e9-bb9a-96d22861a922/1/LhEuLGHSqA58Q4XGCFjJHXXzHns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:6f:8a:a2:1b:2c:44:f4:81:88:91:7c:2c:83:62:1d:3b:73:
f8:c6:42:d4:ab:80:e2:8f:a0:d8:f7:8f:b3:f2:de:95:8d:73:
1d:9d:35:84:38:93:86:c7:11:c5:c4:1b:34:d9:c5:b7:90:5c:
a2:4f:43:78:cc:e9:16:30:c3:3d:7a:f3:55:bd:a6:8d:1c:3b:
de:e1:51:5b:6a:ca:1d:59:e4:70:b1:a7:a8:30:84:58:cc:d6:
2b:6b:e5:32:11:f6:89:0d:8f:4d:2b:4d:9e:9f:bb:2e:c0:66:
ac:dc:f5:5c:9a:c3:c6:4a:4a:6f:92:ae:69:58:a8:fd:62:fe:
ef:16:e4:17:8a:de:15:bb:0b:7a:07:81:b3:bc:42:bc:e8:60:
e3:9a:51:6a:53:a8:44:36:5c:ab:99:9b:d6:15:b1:ef:2a:16:
07:9c:cc:ae:d3:f6:c9:9a:97:61:a5:c3:cc:85:8d:4e:d6:e8:
36:d1:9f:36:d6:98:dd:7e:49:68:a1:79:2c:eb:dd:e8:53:a0:
b7:3c:09:4b:9b:14:4f:6d:4f:c7:31:25:fe:9b:ef:49:d2:6d:
4f:ec:9e:d2:ac:1a:51:72:15:b8:8d:db:82:e1:4c:0f:22:fc:
28:82:75:61:6f:b8:8b:40:71:84:78:10:f8:45:64:74:9a:14:
e3:9b:b8:f8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9hUyhomNBaP0oRlbqHj7EMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlMTEyZTJjNjFkMmE4MGU3YzQzODVjNjA4NThjOTFkNzVm
MzFlN2IwHhcNMjUwMTMxMTgwMDE3WhcNMjUwMjAxMTgwMDE3WjAzMTEwLwYDVQQD
EygwM2QwMWFhZmMzZGI5OWYzMTQ5NDgwN2U5ZmM2ODljNzAwZjdmNjVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjP/5PYe8CQDH/fiD3IPxZTUuO0A3
GfvPiDSE2qvwIkxqwCNptJ2LW4UH2dm7gvgOOamNQrtEuh0giJ2S+VPqc5OJRacu
elvgdLvX8UOqcD6l7iTl46P8bNLM0UuPUa3vC3Dr1lYF29XjWa63pFIL8dRguL8Q
fwgzAgSlNQ8xn9TWL46BwqLcR/rdNtW2lbci0xXtJosXqe4Rvhx2mIHwRZW5zpmP
S9+ieCd2tO2Wp1Ku9IOpaBazTlgWm29dpA5Wmc0CC/BfcQRAk2a5JE6W2dyt+ia+
Ekda1eFbEC6fc6waMs4rcaETyR0SUdxoMyTQWsKwnFqx0M6qMFI6X5QEmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAPQGq/D25nzFJSAfp/GiccA9/ZaMB8GA1UdIwQY
MBaAFC4RLixh0qgOfEOFxghYyR118x57MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTGhFdUxHSFNxQTU4UTRYR0NGakpIWFh6SG5zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny9mNzllOGUtNjYyNS00NWU5LWJiOWEt
OTZkMjI4NjFhOTIyLzEvTGhFdUxHSFNxQTU4UTRYR0NGakpIWFh6SG5zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny9mNzllOGUtNjYyNS00NWU5LWJiOWEtOTZkMjI4NjFhOTIy
LzEvTGhFdUxHSFNxQTU4UTRYR0NGakpIWFh6SG5zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARW+Kohss
RPSBiJF8LINiHTtz+MZC1KuA4o+g2PePs/LelY1zHZ01hDiThscRxcQbNNnFt5Bc
ok9DeMzpFjDDPXrzVb2mjRw73uFRW2rKHVnkcLGnqDCEWMzWK2vlMhH2iQ2PTStN
np+7LsBmrNz1XJrDxkpKb5KuaVio/WL+7xbkF4reFbsLegeBs7xCvOhg45pRalOo
RDZcq5mb1hWx7yoWB5zMrtP2yZqXYaXDzIWNTtboNtGfNtaY3X5JaKF5LOvd6FOg
tzwJS5sUT21PxzEl/pvvSdJtT+ye0qwaUXIVuI3bguFMDyL8KIJ1YW+4i0BxhHgQ
+EVkdJoU45u4+A==
-----END CERTIFICATE-----
Generated at Fri Apr 25 02:06:32 2025 by rpki-client