Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/71fea1-3919-42f7-9e03-e4030fa1b04a/1/LG1mEkNiiA9eTFSFL4N20rnRN_Q.mft
File: LG1mEkNiiA9eTFSFL4N20rnRN_Q.mft (raw, json)
Hash identifier: Y7yFRSfN6aAeJcTrTtRuoR5dKy0Ynj/BpKo8eM5LdGw=
Subject key identifier: A2:DB:48:FF:F8:74:15:DE:97:57:77:C2:61:82:9B:2F:E3:D0:B8:54
Authority key identifier: 2C:6D:66:12:43:62:88:0F:5E:4C:54:85:2F:83:76:D2:B9:D1:37:F4
Certificate issuer: /CN=2c6d66124362880f5e4c54852f8376d2b9d137f4
Certificate serial: 0194BCA9E93EE9AD92EF7B6ADFAD3289C3F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LG1mEkNiiA9eTFSFL4N20rnRN_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/71fea1-3919-42f7-9e03-e4030fa1b04a/1/LG1mEkNiiA9eTFSFL4N20rnRN_Q.mft
Manifest number: 142E
Signing time: Fri 31 Jan 2025 14:00:39 +0000
Manifest this update: Fri 31 Jan 2025 14:00:39 +0000
Manifest next update: Sat 01 Feb 2025 14:00:39 +0000
Files and hashes: 1: C33FXqC7uQt2qAUvryfzquScd9A.roa (hash: KJa1Z8kamyRIOQx92UokNml/luCMeTJPuGt2M/e0fCo=)
2: LG1mEkNiiA9eTFSFL4N20rnRN_Q.crl (hash: Y7EpVkJtPSPT4lJBbOogpbb3thNnCu+TqGcptKz627I=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:e9:3e:e9:ad:92:ef:7b:6a:df:ad:32:89:c3:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c6d66124362880f5e4c54852f8376d2b9d137f4
Validity
Not Before: Jan 31 14:00:39 2025 GMT
Not After : Feb 1 14:00:39 2025 GMT
Subject: CN=a2db48fff87415de975777c261829b2fe3d0b854
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:9c:18:97:88:66:0c:03:12:d4:2a:f1:47:85:
9c:b8:bd:5e:1c:f0:8f:94:76:71:a5:44:a5:25:33:
d8:6f:c6:cf:b0:cd:a2:8c:b3:46:2a:2a:36:fb:58:
18:96:70:1a:5e:a3:a1:7f:f3:a4:f7:15:78:33:8d:
cb:f6:5a:20:28:b6:bf:90:d5:78:17:58:4d:50:a1:
24:dd:4a:a3:b7:cd:56:50:1f:6c:d5:b9:67:5c:08:
48:9c:79:91:fa:55:2a:82:da:8d:89:c9:6e:95:e6:
c4:28:8a:99:4e:47:b6:68:73:d4:71:ee:b1:5c:f3:
2c:8f:2b:cc:8b:a0:16:94:de:98:dc:5e:4d:c3:ea:
4e:d3:63:67:e9:b8:42:06:6a:88:8e:67:63:1d:ab:
4d:50:7a:3e:45:42:dc:4c:62:3f:22:17:28:7d:71:
70:73:72:b4:28:c1:89:24:7a:98:1b:68:b6:2e:e0:
58:30:ad:f0:2a:f1:fb:63:d9:ff:ae:8c:6c:be:e9:
18:02:3a:60:08:54:12:8c:60:0d:42:c1:34:2c:d0:
f3:09:25:18:39:84:99:3f:ae:bb:96:b4:da:3e:96:
52:76:89:b6:4b:0c:6b:97:04:32:da:b1:e9:c1:c1:
dd:84:15:da:3a:93:42:0f:96:64:fd:cc:52:d7:14:
46:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:DB:48:FF:F8:74:15:DE:97:57:77:C2:61:82:9B:2F:E3:D0:B8:54
X509v3 Authority Key Identifier:
keyid:2C:6D:66:12:43:62:88:0F:5E:4C:54:85:2F:83:76:D2:B9:D1:37:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LG1mEkNiiA9eTFSFL4N20rnRN_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/71fea1-3919-42f7-9e03-e4030fa1b04a/1/LG1mEkNiiA9eTFSFL4N20rnRN_Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/71fea1-3919-42f7-9e03-e4030fa1b04a/1/LG1mEkNiiA9eTFSFL4N20rnRN_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:96:09:4b:7b:31:63:43:a1:76:0b:69:55:c9:5f:d5:6e:e4:
ec:24:0f:76:14:d1:d2:89:00:b4:11:e7:3c:21:79:32:7f:fd:
76:14:bd:5c:6e:5c:36:96:14:3c:cb:93:42:dd:2f:03:0d:ef:
f6:cc:bb:f9:0a:58:ed:63:80:79:3a:0d:8b:4c:ae:0f:05:74:
2a:1c:bf:35:8a:34:3e:04:dd:f6:d9:72:c1:4c:6b:08:b9:99:
80:c5:45:06:4e:b0:4f:70:67:ae:51:9a:43:ed:5e:9b:ae:e1:
75:e1:67:74:e4:1d:9f:b2:e5:08:9b:9e:30:f4:fe:ee:7b:79:
86:4c:b3:84:37:b1:dc:4a:5a:9b:b0:f4:92:68:81:c0:ae:42:
c1:25:b6:b3:68:ec:5d:57:7e:10:3b:05:40:45:7d:e9:55:fb:
8f:26:71:64:65:5f:b1:93:84:45:bd:02:12:b8:6f:cc:0f:3c:
5c:41:44:55:b5:a8:a4:09:f5:43:f3:80:14:52:4a:80:27:c8:
d0:05:96:bb:61:87:f8:07:f6:70:e7:53:27:2d:da:2b:40:d3:
50:7a:d9:c8:eb:46:34:fa:56:15:10:65:d9:84:36:48:c4:07:
83:57:d4:25:35:8a:e9:9f:f1:ab:d8:c7:a7:33:db:5b:d1:a0:
53:a6:53:06
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qek+6a2S73tq360yicPwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJjNmQ2NjEyNDM2Mjg4MGY1ZTRjNTQ4NTJmODM3NmQyYjlk
MTM3ZjQwHhcNMjUwMTMxMTQwMDM5WhcNMjUwMjAxMTQwMDM5WjAzMTEwLwYDVQQD
EyhhMmRiNDhmZmY4NzQxNWRlOTc1Nzc3YzI2MTgyOWIyZmUzZDBiODU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw5wYl4hmDAMS1CrxR4WcuL1eHPCP
lHZxpUSlJTPYb8bPsM2ijLNGKio2+1gYlnAaXqOhf/Ok9xV4M43L9logKLa/kNV4
F1hNUKEk3Uqjt81WUB9s1blnXAhInHmR+lUqgtqNiclulebEKIqZTke2aHPUce6x
XPMsjyvMi6AWlN6Y3F5Nw+pO02Nn6bhCBmqIjmdjHatNUHo+RULcTGI/IhcofXFw
c3K0KMGJJHqYG2i2LuBYMK3wKvH7Y9n/roxsvukYAjpgCFQSjGANQsE0LNDzCSUY
OYSZP667lrTaPpZSdom2SwxrlwQy2rHpwcHdhBXaOpNCD5Zk/cxS1xRGRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKLbSP/4dBXel1d3wmGCmy/j0LhUMB8GA1UdIwQY
MBaAFCxtZhJDYogPXkxUhS+DdtK50Tf0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTEcxbUVrTmlpQTllVEZTRkw0TjIwcm5STl9RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS83MWZlYTEtMzkxOS00MmY3LTllMDMt
ZTQwMzBmYTFiMDRhLzEvTEcxbUVrTmlpQTllVEZTRkw0TjIwcm5STl9RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OS83MWZlYTEtMzkxOS00MmY3LTllMDMtZTQwMzBmYTFiMDRh
LzEvTEcxbUVrTmlpQTllVEZTRkw0TjIwcm5STl9RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADZYJS3sx
Y0OhdgtpVclf1W7k7CQPdhTR0okAtBHnPCF5Mn/9dhS9XG5cNpYUPMuTQt0vAw3v
9sy7+QpY7WOAeToNi0yuDwV0Khy/NYo0PgTd9tlywUxrCLmZgMVFBk6wT3BnrlGa
Q+1em67hdeFndOQdn7LlCJueMPT+7nt5hkyzhDex3Epam7D0kmiBwK5CwSW2s2js
XVd+EDsFQEV96VX7jyZxZGVfsZOERb0CErhvzA88XEFEVbWopAn1Q/OAFFJKgCfI
0AWWu2GH+Af2cOdTJy3aK0DTUHrZyOtGNPpWFRBl2YQ2SMQHg1fUJTWK6Z/xq9jH
pzPbW9GgU6ZTBg==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:30 2025 by rpki-client