Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/95f143-e9cd-4447-abea-fb4eaa5262f7/1/lqSbOF03Of3SQ34K798iUc1dKlE.mft
File: lqSbOF03Of3SQ34K798iUc1dKlE.mft (raw, json)
Hash identifier: 5LiDusOGRp0/cmaZEjshL2pj5xMVeotWMvOf5tWpOoE=
Subject key identifier: 32:E5:B9:55:5A:D0:46:5C:81:4A:88:66:09:0F:B1:07:DC:08:41:78
Authority key identifier: 96:A4:9B:38:5D:37:39:FD:D2:43:7E:0A:EF:DF:22:51:CD:5D:2A:51
Certificate issuer: /CN=96a49b385d3739fdd2437e0aefdf2251cd5d2a51
Certificate serial: 0194BD853C07CA133DAEC3433AAC60935CB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lqSbOF03Of3SQ34K798iUc1dKlE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/95f143-e9cd-4447-abea-fb4eaa5262f7/1/lqSbOF03Of3SQ34K798iUc1dKlE.mft
Manifest number: 6D
Signing time: Fri 31 Jan 2025 18:00:12 +0000
Manifest this update: Fri 31 Jan 2025 18:00:12 +0000
Manifest next update: Sat 01 Feb 2025 18:00:12 +0000
Files and hashes: 1: lqSbOF03Of3SQ34K798iUc1dKlE.crl (hash: Unfr770DnztlH+LqDPAaq2l21/nJSjU/Sz5xatYY/eo=)
2: vubvLlQ2em0JM0_rlFMoFCj2bxQ.roa (hash: zIY6VqnaaG5WqxBxNCQhDT3KHDCVyaR7TcUQuJEUhUA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:3c:07:ca:13:3d:ae:c3:43:3a:ac:60:93:5c:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96a49b385d3739fdd2437e0aefdf2251cd5d2a51
Validity
Not Before: Jan 31 18:00:12 2025 GMT
Not After : Feb 1 18:00:12 2025 GMT
Subject: CN=32e5b9555ad0465c814a8866090fb107dc084178
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:48:96:b9:86:25:43:0f:52:1f:6b:b3:7d:31:
51:64:82:1f:f5:ee:52:25:0d:10:e5:09:8e:19:8c:
5f:c9:30:57:46:e5:93:70:5f:03:ef:99:3c:60:f0:
a9:c1:c9:b7:b0:3f:96:63:1c:7e:f5:06:d1:8f:d3:
94:42:18:51:16:d5:08:d1:b1:a9:7d:25:f7:b5:fe:
73:67:dd:38:a2:50:01:5f:7b:de:c3:66:7e:aa:90:
c6:5a:94:8b:54:c0:48:f0:28:6c:5e:55:7b:d3:97:
49:17:99:10:69:e9:a2:da:f0:5c:b4:f7:b8:7d:7d:
a5:98:b4:84:9b:64:52:3d:57:b5:fb:fd:aa:2a:76:
61:59:e0:fe:1c:ec:41:6e:88:2c:3e:12:e3:97:41:
ee:68:0f:10:e7:db:c8:9c:71:fd:b2:1e:1a:a1:e5:
49:bb:6c:83:5d:d6:41:74:e6:50:c3:24:d0:45:6c:
98:64:77:f1:b3:9f:c3:29:74:1b:bd:51:d8:8b:ea:
4a:f8:29:fc:e4:1b:a5:13:e1:78:df:de:41:16:b0:
a0:46:20:60:a6:6a:09:bc:8e:90:b9:60:16:4b:1e:
88:5d:8e:ae:c2:83:66:5d:85:df:64:00:36:dc:ea:
cc:da:f9:af:00:32:8f:e5:9b:cd:2c:53:4b:ae:10:
74:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:E5:B9:55:5A:D0:46:5C:81:4A:88:66:09:0F:B1:07:DC:08:41:78
X509v3 Authority Key Identifier:
keyid:96:A4:9B:38:5D:37:39:FD:D2:43:7E:0A:EF:DF:22:51:CD:5D:2A:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lqSbOF03Of3SQ34K798iUc1dKlE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/95f143-e9cd-4447-abea-fb4eaa5262f7/1/lqSbOF03Of3SQ34K798iUc1dKlE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/95f143-e9cd-4447-abea-fb4eaa5262f7/1/lqSbOF03Of3SQ34K798iUc1dKlE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:ca:37:7c:8b:e3:93:85:60:77:9b:21:07:9c:eb:88:7a:f0:
99:14:74:91:84:6c:19:bb:3f:b0:d2:9b:18:da:e8:04:82:dc:
e0:c7:84:b7:e2:ea:75:c0:4f:30:41:98:f4:54:6e:fc:77:0a:
39:64:5e:d2:71:44:8a:57:68:ef:b9:4b:d4:5c:fd:c5:f6:5c:
06:4d:56:37:ea:5b:87:2f:39:97:81:76:9e:03:dc:eb:f8:eb:
48:61:a9:35:e7:7c:12:7f:76:85:ea:63:f5:56:bd:7b:9a:a7:
f3:bf:e4:57:27:61:80:4c:84:47:c9:23:a6:21:f7:4c:b2:14:
7f:7d:d8:34:7d:4d:7d:e2:a7:ed:2b:65:db:52:ce:ff:e8:a3:
3b:99:32:72:b7:cb:e9:88:9d:85:ba:a9:86:59:68:df:cf:d1:
42:10:0b:28:04:22:4d:b1:8a:15:76:46:7f:a1:6b:e7:fb:d3:
7a:50:a4:0c:51:0e:50:19:05:27:f7:94:73:04:7c:1c:97:61:
37:31:3a:76:b7:64:79:d9:0f:08:03:e9:a3:06:cb:79:6d:7d:
84:60:6a:a5:93:8b:64:8c:4c:f6:fa:9f:eb:49:9c:da:07:75:
d0:ba:c6:9e:99:b5:b1:67:fd:d9:74:82:3c:f7:3e:99:88:55:
64:00:78:2e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9hTwHyhM9rsNDOqxgk1y0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2YTQ5YjM4NWQzNzM5ZmRkMjQzN2UwYWVmZGYyMjUxY2Q1
ZDJhNTEwHhcNMjUwMTMxMTgwMDEyWhcNMjUwMjAxMTgwMDEyWjAzMTEwLwYDVQQD
EygzMmU1Yjk1NTVhZDA0NjVjODE0YTg4NjYwOTBmYjEwN2RjMDg0MTc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA60iWuYYlQw9SH2uzfTFRZIIf9e5S
JQ0Q5QmOGYxfyTBXRuWTcF8D75k8YPCpwcm3sD+WYxx+9QbRj9OUQhhRFtUI0bGp
fSX3tf5zZ904olABX3vew2Z+qpDGWpSLVMBI8ChsXlV705dJF5kQaemi2vBctPe4
fX2lmLSEm2RSPVe1+/2qKnZhWeD+HOxBbogsPhLjl0HuaA8Q59vInHH9sh4aoeVJ
u2yDXdZBdOZQwyTQRWyYZHfxs5/DKXQbvVHYi+pK+Cn85BulE+F4395BFrCgRiBg
pmoJvI6QuWAWSx6IXY6uwoNmXYXfZAA23OrM2vmvADKP5ZvNLFNLrhB01QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDLluVVa0EZcgUqIZgkPsQfcCEF4MB8GA1UdIwQY
MBaAFJakmzhdNzn90kN+Cu/fIlHNXSpRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbHFTYk9GMDNPZjNTUTM0Szc5OGlVYzFkS2xFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC85NWYxNDMtZTljZC00NDQ3LWFiZWEt
ZmI0ZWFhNTI2MmY3LzEvbHFTYk9GMDNPZjNTUTM0Szc5OGlVYzFkS2xFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNC85NWYxNDMtZTljZC00NDQ3LWFiZWEtZmI0ZWFhNTI2MmY3
LzEvbHFTYk9GMDNPZjNTUTM0Szc5OGlVYzFkS2xFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUso3fIvj
k4Vgd5shB5zriHrwmRR0kYRsGbs/sNKbGNroBILc4MeEt+LqdcBPMEGY9FRu/HcK
OWRe0nFEildo77lL1Fz9xfZcBk1WN+pbhy85l4F2ngPc6/jrSGGpNed8En92hepj
9Va9e5qn87/kVydhgEyER8kjpiH3TLIUf33YNH1NfeKn7Stl21LO/+ijO5kycrfL
6Yidhbqphllo38/RQhALKAQiTbGKFXZGf6Fr5/vTelCkDFEOUBkFJ/eUcwR8HJdh
NzE6drdkedkPCAPpowbLeW19hGBqpZOLZIxM9vqf60mc2gd10LrGnpm1sWf92XSC
PPc+mYhVZAB4Lg==
-----END CERTIFICATE-----
Generated at Fri Apr 25 07:49:38 2025 by rpki-client