Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/c5f49d-10b0-4818-a0c4-7c0b9b19fcfb/1/LzFLwAp-WuIzSeBUBik6fWBgzaE.mft
File: LzFLwAp-WuIzSeBUBik6fWBgzaE.mft (raw, json)
Hash identifier: N0Awpniv4rfl/+ao16rMzjAGwuH8LjlMXAW7t3fzDPY=
Subject key identifier: 85:B1:70:56:78:5F:CA:E3:1B:CB:5E:AA:A9:80:49:D2:87:41:AD:79
Authority key identifier: 2F:31:4B:C0:0A:7E:5A:E2:33:49:E0:54:06:29:3A:7D:60:60:CD:A1
Certificate issuer: /CN=2f314bc00a7e5ae23349e05406293a7d6060cda1
Certificate serial: 0194BCAA292F90D2A07511089B42D7CE1B1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LzFLwAp-WuIzSeBUBik6fWBgzaE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/c5f49d-10b0-4818-a0c4-7c0b9b19fcfb/1/LzFLwAp-WuIzSeBUBik6fWBgzaE.mft
Manifest number: 10EC
Signing time: Fri 31 Jan 2025 14:00:55 +0000
Manifest this update: Fri 31 Jan 2025 14:00:55 +0000
Manifest next update: Sat 01 Feb 2025 14:00:55 +0000
Files and hashes: 1: 1-d5J5W-VmdNEPvaUUIc9QmXJa7c.roa (hash: WEje3N6tM8UQY4DTr2W4pxQIyOYapcmAGgNCDl+FllM=)
2: LzFLwAp-WuIzSeBUBik6fWBgzaE.crl (hash: i5IOuBIO8IPIM96GrLfdwlhLfMYnic5jGqoJ2iqgBJM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:29:2f:90:d2:a0:75:11:08:9b:42:d7:ce:1b:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f314bc00a7e5ae23349e05406293a7d6060cda1
Validity
Not Before: Jan 31 14:00:55 2025 GMT
Not After : Feb 1 14:00:55 2025 GMT
Subject: CN=85b17056785fcae31bcb5eaaa98049d28741ad79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:b7:53:47:37:10:1d:d6:ae:cf:8a:ee:60:d0:
32:7c:39:0c:85:71:7f:69:02:71:4b:ca:83:2e:88:
d8:c2:75:30:50:75:59:ae:25:b1:41:b6:53:01:9b:
93:82:66:0c:da:97:52:15:8c:97:f7:a9:7a:16:8c:
0f:96:e1:0a:f3:d4:bc:7e:0a:53:a9:23:cc:d7:a9:
3a:82:e0:6b:dc:51:d1:bf:6c:9b:64:6d:65:d9:a6:
c6:4e:02:6e:0f:37:ca:9f:39:ab:af:47:9b:bc:7d:
b5:5b:8f:c3:f4:ee:81:c1:68:c8:eb:2e:70:41:33:
3b:f7:76:80:aa:03:63:68:ad:23:03:b6:bc:db:d4:
43:26:68:3f:f3:b6:5c:b7:da:ed:50:84:2e:70:a0:
97:61:50:7f:7d:c5:eb:cd:f5:b0:29:44:44:a3:16:
2a:01:a1:1c:bc:69:1d:00:0b:07:9c:36:a5:d8:f2:
a2:1a:e9:c3:41:f1:8b:c8:eb:b3:6c:7a:59:54:f3:
da:3f:2a:bd:85:0f:d1:d7:d2:f2:46:17:49:aa:1d:
19:c4:3d:2b:0c:c1:14:fe:5c:4c:17:0d:fa:4a:97:
01:d1:db:85:64:d0:1c:a3:ed:2c:14:65:ee:d3:65:
e5:ac:46:c9:96:29:96:c4:7f:fa:22:46:79:00:38:
ba:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:B1:70:56:78:5F:CA:E3:1B:CB:5E:AA:A9:80:49:D2:87:41:AD:79
X509v3 Authority Key Identifier:
keyid:2F:31:4B:C0:0A:7E:5A:E2:33:49:E0:54:06:29:3A:7D:60:60:CD:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LzFLwAp-WuIzSeBUBik6fWBgzaE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/c5f49d-10b0-4818-a0c4-7c0b9b19fcfb/1/LzFLwAp-WuIzSeBUBik6fWBgzaE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/c5f49d-10b0-4818-a0c4-7c0b9b19fcfb/1/LzFLwAp-WuIzSeBUBik6fWBgzaE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:09:cb:d7:b6:52:84:15:3b:43:66:f7:41:82:47:13:c6:c5:
30:c9:e4:40:93:db:bb:e2:4b:6d:07:7b:8d:05:67:71:35:69:
24:1f:84:9c:0a:d9:5c:9c:93:45:8b:5f:24:99:5e:9d:5d:14:
55:2b:dc:41:bf:f8:d6:ef:49:d8:67:e3:b6:92:f1:4a:f3:97:
ef:6d:47:16:bd:99:71:2e:4e:46:18:f9:d2:48:2b:40:c9:45:
28:f3:4c:6e:a8:c5:f2:c6:77:00:10:be:1b:46:a8:c6:ad:54:
97:43:86:b2:e7:40:90:c9:45:ee:64:19:5d:39:85:32:67:a6:
0a:df:e2:4a:16:65:06:32:65:55:27:99:18:79:e7:ec:e7:bb:
fe:02:0d:1e:d0:61:9c:d8:29:be:34:46:c9:fc:33:39:6d:3c:
57:c9:f1:91:7c:39:18:3d:d4:36:86:ce:cb:f5:4e:20:73:55:
cf:0a:e0:82:c0:7a:bb:ef:2f:89:43:f7:04:8a:7f:2c:ef:85:
c8:99:10:55:ea:2b:8d:91:db:49:cc:5f:f1:8d:1b:98:53:2f:
1e:9e:5e:35:41:7b:21:d5:c5:19:20:b5:c9:9e:00:4b:3a:9a:
31:b4:b7:39:d1:08:62:72:97:b5:d5:53:f8:c9:7b:ba:18:fa:
af:cd:b4:02
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qikvkNKgdREIm0LXzhsaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmMzE0YmMwMGE3ZTVhZTIzMzQ5ZTA1NDA2MjkzYTdkNjA2
MGNkYTEwHhcNMjUwMTMxMTQwMDU1WhcNMjUwMjAxMTQwMDU1WjAzMTEwLwYDVQQD
Eyg4NWIxNzA1Njc4NWZjYWUzMWJjYjVlYWFhOTgwNDlkMjg3NDFhZDc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzbdTRzcQHdauz4ruYNAyfDkMhXF/
aQJxS8qDLojYwnUwUHVZriWxQbZTAZuTgmYM2pdSFYyX96l6FowPluEK89S8fgpT
qSPM16k6guBr3FHRv2ybZG1l2abGTgJuDzfKnzmrr0ebvH21W4/D9O6BwWjI6y5w
QTM793aAqgNjaK0jA7a829RDJmg/87Zct9rtUIQucKCXYVB/fcXrzfWwKUREoxYq
AaEcvGkdAAsHnDal2PKiGunDQfGLyOuzbHpZVPPaPyq9hQ/R19LyRhdJqh0ZxD0r
DMEU/lxMFw36SpcB0duFZNAco+0sFGXu02XlrEbJlimWxH/6IkZ5ADi6mwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIWxcFZ4X8rjG8teqqmASdKHQa15MB8GA1UdIwQY
MBaAFC8xS8AKflriM0ngVAYpOn1gYM2hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTHpGTHdBcC1XdUl6U2VCVUJpazZmV0JnemFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS9jNWY0OWQtMTBiMC00ODE4LWEwYzQt
N2MwYjliMTlmY2ZiLzEvTHpGTHdBcC1XdUl6U2VCVUJpazZmV0JnemFFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OS9jNWY0OWQtMTBiMC00ODE4LWEwYzQtN2MwYjliMTlmY2Zi
LzEvTHpGTHdBcC1XdUl6U2VCVUJpazZmV0JnemFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALgnL17ZS
hBU7Q2b3QYJHE8bFMMnkQJPbu+JLbQd7jQVncTVpJB+EnArZXJyTRYtfJJlenV0U
VSvcQb/41u9J2GfjtpLxSvOX721HFr2ZcS5ORhj50kgrQMlFKPNMbqjF8sZ3ABC+
G0aoxq1Ul0OGsudAkMlF7mQZXTmFMmemCt/iShZlBjJlVSeZGHnn7Oe7/gINHtBh
nNgpvjRGyfwzOW08V8nxkXw5GD3UNobOy/VOIHNVzwrggsB6u+8viUP3BIp/LO+F
yJkQVeorjZHbScxf8Y0bmFMvHp5eNUF7IdXFGSC1yZ4ASzqaMbS3OdEIYnKXtdVT
+Ml7uhj6r820Ag==
-----END CERTIFICATE-----
Generated at Fri Apr 25 01:20:54 2025 by rpki-client