Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/91431a-b50d-4d50-a6d6-f17f095dd3af/1/lCbTCdDbAt8dfgS7s5MTvR3xM1g.mft
File: lCbTCdDbAt8dfgS7s5MTvR3xM1g.mft (raw, json)
Hash identifier: UZWlnkWTDkWR53O8sKyLjn3eg8aLdNq6UO1VSRXcvUE=
Subject key identifier: EB:A2:8C:5D:8C:85:5B:9C:22:33:5B:B9:45:DF:6A:83:C3:A4:9A:D3
Authority key identifier: 94:26:D3:09:D0:DB:02:DF:1D:7E:04:BB:B3:93:13:BD:1D:F1:33:58
Certificate issuer: /CN=9426d309d0db02df1d7e04bbb39313bd1df13358
Certificate serial: 0194BBCE3EFE7634C51BF1CF8187148A2A73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lCbTCdDbAt8dfgS7s5MTvR3xM1g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/91431a-b50d-4d50-a6d6-f17f095dd3af/1/lCbTCdDbAt8dfgS7s5MTvR3xM1g.mft
Manifest number: 0AB6
Signing time: Fri 31 Jan 2025 10:00:43 +0000
Manifest this update: Fri 31 Jan 2025 10:00:43 +0000
Manifest next update: Sat 01 Feb 2025 10:00:43 +0000
Files and hashes: 1: JXlTdhSRTj5ed6JsXH8jc65Ou3M.roa (hash: ddm9bvtQw1cVvC7zNZuu5Y38UnapRIQ8ZhO6Ib5Ks0o=)
2: lCbTCdDbAt8dfgS7s5MTvR3xM1g.crl (hash: zBjV9vVRMPNEOTZG7sAYrcQQj5HzrTCUYbQ+QRXzeYI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:3e:fe:76:34:c5:1b:f1:cf:81:87:14:8a:2a:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9426d309d0db02df1d7e04bbb39313bd1df13358
Validity
Not Before: Jan 31 10:00:43 2025 GMT
Not After : Feb 1 10:00:43 2025 GMT
Subject: CN=eba28c5d8c855b9c22335bb945df6a83c3a49ad3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:28:ce:71:39:4d:07:00:0a:d9:88:e1:57:26:
7e:f8:b7:b4:95:4f:d1:1e:ee:a1:b3:ea:21:ef:9c:
71:39:80:e8:e6:e8:ff:36:e3:e5:42:30:c7:8f:75:
60:6a:bd:56:5a:43:40:11:6d:44:95:31:80:9f:ac:
65:0d:c7:a9:3d:15:7b:9e:74:38:ca:f8:13:75:d0:
28:e0:86:1a:c7:2d:7b:eb:72:48:ed:13:d5:8b:1b:
eb:d1:bf:f1:99:4a:13:8c:f5:58:11:3e:d9:d4:82:
63:fb:47:61:76:2e:b6:eb:b5:ce:32:61:87:dd:29:
cf:bb:84:0b:dd:eb:05:a4:23:03:01:1c:f5:74:87:
83:c8:8a:11:c3:1f:05:eb:4f:d8:13:e1:97:4b:97:
01:3e:18:23:92:d2:bf:c6:70:0e:44:fb:6e:6f:6f:
79:64:50:a0:8d:a8:12:61:5d:03:f1:15:87:18:b8:
d0:80:a6:52:17:80:a7:fe:d0:44:43:01:f3:32:ad:
32:e6:6a:ac:be:3f:2b:ea:9b:69:68:a2:72:63:a4:
31:94:a3:eb:dd:d4:2f:ba:75:21:c8:b9:47:43:53:
9a:b1:4b:72:a8:7e:87:53:35:0a:6c:b4:6e:23:53:
0e:6b:20:e6:49:29:d4:9b:63:46:61:1f:f8:85:11:
36:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:A2:8C:5D:8C:85:5B:9C:22:33:5B:B9:45:DF:6A:83:C3:A4:9A:D3
X509v3 Authority Key Identifier:
keyid:94:26:D3:09:D0:DB:02:DF:1D:7E:04:BB:B3:93:13:BD:1D:F1:33:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lCbTCdDbAt8dfgS7s5MTvR3xM1g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/91431a-b50d-4d50-a6d6-f17f095dd3af/1/lCbTCdDbAt8dfgS7s5MTvR3xM1g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/91431a-b50d-4d50-a6d6-f17f095dd3af/1/lCbTCdDbAt8dfgS7s5MTvR3xM1g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:18:f6:87:af:30:26:bb:55:17:77:79:d2:ed:77:dc:2b:3f:
ef:a1:66:65:7d:7f:6a:41:cc:8f:ba:84:92:67:76:f5:49:28:
c9:97:4b:e9:94:fd:0f:ac:a3:29:61:09:1a:97:79:1e:61:29:
2b:6d:ae:d4:6a:99:8b:0b:c9:97:b8:fc:d7:af:06:be:98:68:
c3:c0:e2:aa:93:05:ed:02:fa:d0:46:ef:fe:b2:50:2e:93:bc:
e7:3e:7d:30:1b:81:ac:19:3e:0e:54:10:ab:b6:ab:4c:21:30:
71:45:3b:f9:87:f3:9a:4a:24:ea:33:f3:e3:46:01:f8:73:31:
59:c0:0c:16:9b:c0:2d:91:2d:ed:10:c9:04:33:10:68:4e:e8:
47:39:bd:aa:b3:8b:3f:87:68:98:59:75:ee:f1:e9:e4:e1:30:
38:41:ce:60:61:96:0a:94:84:ff:a2:ad:76:48:68:20:3e:53:
2e:1d:b0:8a:a7:d1:5e:06:af:4e:20:34:1d:36:2d:de:c7:d2:
17:1f:1c:2b:bc:fa:61:6c:fc:c2:46:9e:d3:93:41:d5:37:d5:
03:b7:e3:8f:94:97:e3:84:9b:88:42:72:dd:3f:aa:5d:5e:46:
d9:7e:cd:ac:a9:5c:8d:a1:0a:e1:30:8e:c3:a7:8b:e0:2a:fb:
98:a2:ad:77
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zj7+djTFG/HPgYcUiipzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0MjZkMzA5ZDBkYjAyZGYxZDdlMDRiYmIzOTMxM2JkMWRm
MTMzNTgwHhcNMjUwMTMxMTAwMDQzWhcNMjUwMjAxMTAwMDQzWjAzMTEwLwYDVQQD
EyhlYmEyOGM1ZDhjODU1YjljMjIzMzViYjk0NWRmNmE4M2MzYTQ5YWQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtijOcTlNBwAK2YjhVyZ++Le0lU/R
Hu6hs+oh75xxOYDo5uj/NuPlQjDHj3Vgar1WWkNAEW1ElTGAn6xlDcepPRV7nnQ4
yvgTddAo4IYaxy1763JI7RPVixvr0b/xmUoTjPVYET7Z1IJj+0dhdi6267XOMmGH
3SnPu4QL3esFpCMDARz1dIeDyIoRwx8F60/YE+GXS5cBPhgjktK/xnAORPtub295
ZFCgjagSYV0D8RWHGLjQgKZSF4Cn/tBEQwHzMq0y5mqsvj8r6ptpaKJyY6QxlKPr
3dQvunUhyLlHQ1OasUtyqH6HUzUKbLRuI1MOayDmSSnUm2NGYR/4hRE2MwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOuijF2MhVucIjNbuUXfaoPDpJrTMB8GA1UdIwQY
MBaAFJQm0wnQ2wLfHX4Eu7OTE70d8TNYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbENiVENkRGJBdDhkZmdTN3M1TVR2UjN4TTFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi85MTQzMWEtYjUwZC00ZDUwLWE2ZDYt
ZjE3ZjA5NWRkM2FmLzEvbENiVENkRGJBdDhkZmdTN3M1TVR2UjN4TTFnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Zi85MTQzMWEtYjUwZC00ZDUwLWE2ZDYtZjE3ZjA5NWRkM2Fm
LzEvbENiVENkRGJBdDhkZmdTN3M1TVR2UjN4TTFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGhj2h68w
JrtVF3d50u133Cs/76FmZX1/akHMj7qEkmd29UkoyZdL6ZT9D6yjKWEJGpd5HmEp
K22u1GqZiwvJl7j8168Gvphow8DiqpMF7QL60Ebv/rJQLpO85z59MBuBrBk+DlQQ
q7arTCEwcUU7+Yfzmkok6jPz40YB+HMxWcAMFpvALZEt7RDJBDMQaE7oRzm9qrOL
P4domFl17vHp5OEwOEHOYGGWCpSE/6KtdkhoID5TLh2wiqfRXgavTiA0HTYt3sfS
Fx8cK7z6YWz8wkae05NB1TfVA7fjj5SX44SbiEJy3T+qXV5G2X7NrKlcjaEK4TCO
w6eL4Cr7mKKtdw==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:42:07 2025 by rpki-client