Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/eac86b-6e91-4bbe-a203-67ac97118cac/1/2Lkq9Et5_ArPZBA-tfszepHuzZo.mft
File: 2Lkq9Et5_ArPZBA-tfszepHuzZo.mft (raw, json)
Hash identifier: OwYKIIv1/7LaykOH64IV8IiBC2yiZM/V01AjkMIRuKE=
Subject key identifier: E7:52:22:16:2F:76:80:4E:21:FB:5C:77:FF:20:F8:F8:44:43:65:E1
Authority key identifier: D8:B9:2A:F4:4B:79:FC:0A:CF:64:10:3E:B5:FB:33:7A:91:EE:CD:9A
Certificate issuer: /CN=d8b92af44b79fc0acf64103eb5fb337a91eecd9a
Certificate serial: 0194BBCEFB395901DA25A4FB6AF2C1B1EAF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Lkq9Et5_ArPZBA-tfszepHuzZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/eac86b-6e91-4bbe-a203-67ac97118cac/1/2Lkq9Et5_ArPZBA-tfszepHuzZo.mft
Manifest number: 0AD5
Signing time: Fri 31 Jan 2025 10:01:31 +0000
Manifest this update: Fri 31 Jan 2025 10:01:31 +0000
Manifest next update: Sat 01 Feb 2025 10:01:31 +0000
Files and hashes: 1: 2Lkq9Et5_ArPZBA-tfszepHuzZo.crl (hash: D+5vOGTVtaZPOV0SK6ExYjzlp6S+6AO7qCkPgbzhXgc=)
2: 7kBeMxQr55u4jzjtTCDEYGM6EEQ.roa (hash: 3w7GhztTuWSS7ow4ABWJ4t+Vqt8iLOefb3FlbZATOr8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:fb:39:59:01:da:25:a4:fb:6a:f2:c1:b1:ea:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8b92af44b79fc0acf64103eb5fb337a91eecd9a
Validity
Not Before: Jan 31 10:01:31 2025 GMT
Not After : Feb 1 10:01:31 2025 GMT
Subject: CN=e75222162f76804e21fb5c77ff20f8f8444365e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:06:1c:3e:f6:a7:37:9e:00:ae:50:a5:1d:e6:
12:bd:48:3c:a1:89:9b:63:05:99:d5:9b:d0:2d:3c:
58:61:46:50:a0:a6:b1:50:b5:6a:ba:a8:1c:87:d0:
97:5f:bd:6f:8d:0c:d3:9c:41:13:da:1a:28:fc:b6:
22:02:35:fd:2e:35:38:fa:83:4a:c3:8c:3b:7e:4c:
bf:78:6f:76:fd:cb:c4:e7:75:44:d2:4f:ab:d8:23:
9d:40:b4:65:a7:57:e7:9b:df:88:18:e4:ad:3a:f0:
d9:6c:fe:62:ac:46:2c:78:bd:78:02:b1:7b:1f:96:
0b:f1:17:71:1e:4c:3f:df:01:7d:bd:4d:33:ab:b4:
25:03:77:b5:58:65:ed:0e:a8:3b:9e:1c:70:cf:8c:
2a:68:25:b8:1c:95:ef:a2:02:6a:f2:2e:e9:6f:dc:
af:aa:88:92:c0:3f:8e:f9:b3:d5:57:62:ba:a3:52:
b2:53:94:6b:05:b8:92:7d:52:3e:d5:15:37:42:b8:
61:c4:1c:e9:99:fe:25:68:21:13:3a:53:87:f3:5b:
66:2b:f0:62:09:c6:34:20:cc:9c:f8:c2:db:ab:52:
0c:8a:9a:88:26:ef:fd:1f:93:6c:72:7e:1b:56:11:
11:7f:c8:bb:0f:04:53:de:9c:0d:99:d6:4c:1a:dd:
3a:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:52:22:16:2F:76:80:4E:21:FB:5C:77:FF:20:F8:F8:44:43:65:E1
X509v3 Authority Key Identifier:
keyid:D8:B9:2A:F4:4B:79:FC:0A:CF:64:10:3E:B5:FB:33:7A:91:EE:CD:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Lkq9Et5_ArPZBA-tfszepHuzZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/eac86b-6e91-4bbe-a203-67ac97118cac/1/2Lkq9Et5_ArPZBA-tfszepHuzZo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/eac86b-6e91-4bbe-a203-67ac97118cac/1/2Lkq9Et5_ArPZBA-tfszepHuzZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:2c:f2:3f:10:16:62:19:2b:91:96:d7:57:65:b9:83:f9:4b:
a5:d8:8d:95:8a:24:9f:67:4c:47:7c:08:f3:bb:19:c5:f4:18:
7a:07:b5:5c:c0:0e:37:21:21:0a:21:e1:71:93:3f:1a:11:ce:
c9:77:7c:2d:15:ff:9f:85:24:4d:62:f8:d3:7d:1d:ed:c0:4a:
0c:fc:13:f0:b5:90:c1:70:37:00:95:b7:80:48:e7:da:ed:06:
c9:12:d0:7a:1b:73:b2:1f:48:8c:60:c3:50:4e:6a:c2:af:78:
97:98:eb:3a:fb:7c:2f:28:8f:05:b3:85:e1:04:aa:21:6e:4a:
91:9d:0e:4e:79:75:ee:2d:6f:d4:8f:32:08:c3:e8:1a:e5:e3:
3e:f9:a8:47:e0:39:d6:4a:2d:42:58:9e:05:8f:32:bb:12:c5:
1c:97:46:68:35:97:03:48:31:28:91:76:07:2f:78:27:44:ba:
d2:dd:f6:4a:e2:42:b5:ee:24:f9:1f:78:0e:58:e1:81:7e:29:
17:ca:2d:e1:13:13:70:6f:58:26:ae:b0:3b:4a:d6:ec:82:a6:
08:46:83:77:44:53:b2:a1:da:72:07:2c:ca:08:cc:7d:33:79:
2a:57:75:fb:16:ec:e5:27:ac:06:83:ba:52:ef:c0:80:bf:aa:
f9:93:f0:d0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zvs5WQHaJaT7avLBserwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4YjkyYWY0NGI3OWZjMGFjZjY0MTAzZWI1ZmIzMzdhOTFl
ZWNkOWEwHhcNMjUwMTMxMTAwMTMxWhcNMjUwMjAxMTAwMTMxWjAzMTEwLwYDVQQD
EyhlNzUyMjIxNjJmNzY4MDRlMjFmYjVjNzdmZjIwZjhmODQ0NDM2NWUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1wYcPvanN54ArlClHeYSvUg8oYmb
YwWZ1ZvQLTxYYUZQoKaxULVquqgch9CXX71vjQzTnEET2hoo/LYiAjX9LjU4+oNK
w4w7fky/eG92/cvE53VE0k+r2COdQLRlp1fnm9+IGOStOvDZbP5irEYseL14ArF7
H5YL8RdxHkw/3wF9vU0zq7QlA3e1WGXtDqg7nhxwz4wqaCW4HJXvogJq8i7pb9yv
qoiSwD+O+bPVV2K6o1KyU5RrBbiSfVI+1RU3QrhhxBzpmf4laCETOlOH81tmK/Bi
CcY0IMyc+MLbq1IMipqIJu/9H5Nscn4bVhERf8i7DwRT3pwNmdZMGt06JQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOdSIhYvdoBOIftcd/8g+PhEQ2XhMB8GA1UdIwQY
MBaAFNi5KvRLefwKz2QQPrX7M3qR7s2aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMkxrcTlFdDVfQXJQWkJBLXRmc3plcEh1elpvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9lYWM4NmItNmU5MS00YmJlLWEyMDMt
NjdhYzk3MTE4Y2FjLzEvMkxrcTlFdDVfQXJQWkJBLXRmc3plcEh1elpvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC9lYWM4NmItNmU5MS00YmJlLWEyMDMtNjdhYzk3MTE4Y2Fj
LzEvMkxrcTlFdDVfQXJQWkJBLXRmc3plcEh1elpvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJizyPxAW
YhkrkZbXV2W5g/lLpdiNlYokn2dMR3wI87sZxfQYege1XMAONyEhCiHhcZM/GhHO
yXd8LRX/n4UkTWL4030d7cBKDPwT8LWQwXA3AJW3gEjn2u0GyRLQehtzsh9IjGDD
UE5qwq94l5jrOvt8LyiPBbOF4QSqIW5KkZ0OTnl17i1v1I8yCMPoGuXjPvmoR+A5
1kotQlieBY8yuxLFHJdGaDWXA0gxKJF2By94J0S60t32SuJCte4k+R94DljhgX4p
F8ot4RMTcG9YJq6wO0rW7IKmCEaDd0RTsqHacgcsygjMfTN5Kld1+xbs5SesBoO6
Uu/AgL+q+ZPw0A==
-----END CERTIFICATE-----
Generated at Tue Apr 29 16:43:14 2025 by rpki-client