Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/63eb42-a0e1-4f1c-bcc9-87524014dbfb/1/LFcdaIqlA6LlZrvIdt8LpFXFd-0.mft
File: LFcdaIqlA6LlZrvIdt8LpFXFd-0.mft (raw, json)
Hash identifier: 0WZGtgQWUAPlupvGWxmoNk7xffVrted7F6aGW6HF/yc=
Subject key identifier: A9:24:EA:4C:DB:94:9F:0E:DD:C6:4B:92:90:12:23:4E:BC:E2:47:44
Authority key identifier: 2C:57:1D:68:8A:A5:03:A2:E5:66:BB:C8:76:DF:0B:A4:55:C5:77:ED
Certificate issuer: /CN=2c571d688aa503a2e566bbc876df0ba455c577ed
Certificate serial: 0194BC04EF48C78CEEEAFE7333A4CDE6C1BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LFcdaIqlA6LlZrvIdt8LpFXFd-0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/63eb42-a0e1-4f1c-bcc9-87524014dbfb/1/LFcdaIqlA6LlZrvIdt8LpFXFd-0.mft
Manifest number: 1433
Signing time: Fri 31 Jan 2025 11:00:27 +0000
Manifest this update: Fri 31 Jan 2025 11:00:27 +0000
Manifest next update: Sat 01 Feb 2025 11:00:27 +0000
Files and hashes: 1: LFcdaIqlA6LlZrvIdt8LpFXFd-0.crl (hash: HmHwOLkIS+wXTCewghGNNbLX5gnj1qGAuXB2zUV02Cs=)
2: jw6vhP1XSWL-mJ5DdRhBrk5Uzas.roa (hash: Kw3hAcXjhw+zjLuWTzYjCzsx/BTtTlyQ/NHsrLRcPPw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:ef:48:c7:8c:ee:ea:fe:73:33:a4:cd:e6:c1:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c571d688aa503a2e566bbc876df0ba455c577ed
Validity
Not Before: Jan 31 11:00:27 2025 GMT
Not After : Feb 1 11:00:27 2025 GMT
Subject: CN=a924ea4cdb949f0eddc64b929012234ebce24744
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:b9:7e:4a:69:c5:c5:d2:8a:56:fa:e4:a6:08:
16:25:82:a4:60:cc:e7:2c:c1:ce:1b:8e:7d:d0:d6:
c9:ca:34:c7:35:84:94:39:53:98:e6:57:e3:d4:2c:
dd:6d:fc:25:65:c4:10:03:df:be:19:2e:62:db:48:
fe:1b:a2:d5:97:c9:48:60:6b:62:2e:f5:74:3d:ce:
1e:b4:8e:77:8e:d3:47:04:2e:92:96:fb:7d:90:da:
84:a4:d0:51:59:46:3f:cf:2f:39:7a:83:d6:d4:27:
52:18:1d:97:9c:89:23:fd:d7:ab:c4:5b:da:7c:e0:
bc:ac:62:91:c3:88:a7:c9:e7:2b:81:15:3b:fa:7c:
90:8b:d7:cd:4a:24:b9:41:29:73:4d:d9:77:e7:68:
8c:b7:63:79:82:43:ff:18:40:4d:6f:7e:0d:95:41:
0a:0f:c5:2d:d3:fd:76:77:55:93:a8:d9:1d:78:60:
56:6a:4c:fa:ba:ed:38:08:a2:e3:95:3a:ce:70:23:
4f:f7:83:a1:e4:fa:2c:5f:bd:9b:fc:df:50:08:91:
7c:2f:1e:26:ce:94:1f:75:3c:d2:a4:57:f4:b5:19:
f2:33:9a:af:6c:e9:41:46:fb:b7:2b:17:03:d6:d6:
d4:6c:fd:11:c5:49:29:7e:26:c6:c8:55:7c:2f:a0:
b4:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:24:EA:4C:DB:94:9F:0E:DD:C6:4B:92:90:12:23:4E:BC:E2:47:44
X509v3 Authority Key Identifier:
keyid:2C:57:1D:68:8A:A5:03:A2:E5:66:BB:C8:76:DF:0B:A4:55:C5:77:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LFcdaIqlA6LlZrvIdt8LpFXFd-0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/63eb42-a0e1-4f1c-bcc9-87524014dbfb/1/LFcdaIqlA6LlZrvIdt8LpFXFd-0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/63eb42-a0e1-4f1c-bcc9-87524014dbfb/1/LFcdaIqlA6LlZrvIdt8LpFXFd-0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:7d:f8:31:47:fd:fa:d9:c8:01:81:5c:58:c9:bb:44:05:75:
53:01:0d:f9:0c:41:4f:41:f6:d3:69:e0:6c:cc:1a:a2:4c:6e:
f5:ee:04:8e:46:b1:a4:cb:3e:7d:ed:b6:b8:98:65:aa:09:2f:
f1:b9:ac:d5:a6:97:d2:4d:ac:ca:68:88:48:e9:28:e9:70:df:
ea:cd:f9:f1:38:13:ad:95:4d:72:5b:3d:98:02:13:d5:01:58:
02:11:e6:b6:a0:c5:e2:eb:cd:66:84:8c:b8:4b:d9:9b:4c:cd:
ca:cb:17:d1:7b:8e:a4:27:f1:25:68:c2:ed:89:0e:49:8f:b7:
fb:ba:c5:28:06:3c:5e:10:b1:ce:13:22:01:e4:ba:59:49:49:
67:e9:7c:eb:22:84:d1:c2:43:6e:15:12:b6:80:45:38:25:66:
04:de:4e:bf:f9:d8:90:b8:d5:d5:37:24:3e:1b:ef:9a:8e:10:
b5:85:f3:71:86:16:dc:e8:f4:d7:53:4c:ac:a7:11:0c:84:85:
76:ed:f7:02:a7:0a:eb:da:c8:cf:03:82:a6:c6:fc:f7:7e:6b:
e8:9a:1f:0a:cb:d4:58:a7:1a:bd:da:fe:67:50:0c:28:89:4a:
d9:fe:2b:f8:bd:bd:b8:7f:16:97:b8:f7:57:10:14:30:0b:a6:
ec:38:d1:73
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8BO9Ix4zu6v5zM6TN5sG9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJjNTcxZDY4OGFhNTAzYTJlNTY2YmJjODc2ZGYwYmE0NTVj
NTc3ZWQwHhcNMjUwMTMxMTEwMDI3WhcNMjUwMjAxMTEwMDI3WjAzMTEwLwYDVQQD
EyhhOTI0ZWE0Y2RiOTQ5ZjBlZGRjNjRiOTI5MDEyMjM0ZWJjZTI0NzQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1rl+SmnFxdKKVvrkpggWJYKkYMzn
LMHOG4590NbJyjTHNYSUOVOY5lfj1CzdbfwlZcQQA9++GS5i20j+G6LVl8lIYGti
LvV0Pc4etI53jtNHBC6Slvt9kNqEpNBRWUY/zy85eoPW1CdSGB2XnIkj/derxFva
fOC8rGKRw4inyecrgRU7+nyQi9fNSiS5QSlzTdl352iMt2N5gkP/GEBNb34NlUEK
D8Ut0/12d1WTqNkdeGBWakz6uu04CKLjlTrOcCNP94Oh5PosX72b/N9QCJF8Lx4m
zpQfdTzSpFf0tRnyM5qvbOlBRvu3KxcD1tbUbP0RxUkpfibGyFV8L6C0BQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKkk6kzblJ8O3cZLkpASI0684kdEMB8GA1UdIwQY
MBaAFCxXHWiKpQOi5Wa7yHbfC6RVxXftMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTEZjZGFJcWxBNkxsWnJ2SWR0OExwRlhGZC0wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy82M2ViNDItYTBlMS00ZjFjLWJjYzkt
ODc1MjQwMTRkYmZiLzEvTEZjZGFJcWxBNkxsWnJ2SWR0OExwRlhGZC0wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy82M2ViNDItYTBlMS00ZjFjLWJjYzktODc1MjQwMTRkYmZi
LzEvTEZjZGFJcWxBNkxsWnJ2SWR0OExwRlhGZC0wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWX34MUf9
+tnIAYFcWMm7RAV1UwEN+QxBT0H202ngbMwaokxu9e4EjkaxpMs+fe22uJhlqgkv
8bms1aaX0k2symiISOko6XDf6s358TgTrZVNcls9mAIT1QFYAhHmtqDF4uvNZoSM
uEvZm0zNyssX0XuOpCfxJWjC7YkOSY+3+7rFKAY8XhCxzhMiAeS6WUlJZ+l86yKE
0cJDbhUStoBFOCVmBN5Ov/nYkLjV1TckPhvvmo4QtYXzcYYW3Oj011NMrKcRDISF
du33AqcK69rIzwOCpsb8935r6JofCsvUWKcavdr+Z1AMKIlK2f4r+L29uH8Wl7j3
VxAUMAum7DjRcw==
-----END CERTIFICATE-----
Generated at Fri Apr 25 00:14:52 2025 by rpki-client