Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/bd06c4-d937-4dc6-b149-10de8c0f92c8/1/LQ8z4CVL-gOTic0bLO6J7KHdmmA.mft
File: LQ8z4CVL-gOTic0bLO6J7KHdmmA.mft (raw, json)
Hash identifier: pGzBbuY/yjEgthMctLNIVSX4pgluV3QdgIEyVju1J4Y=
Subject key identifier: 31:C6:5B:98:C4:6A:82:07:AB:35:A5:26:A8:91:BE:2D:D6:3E:D4:69
Authority key identifier: 2D:0F:33:E0:25:4B:FA:03:93:89:CD:1B:2C:EE:89:EC:A1:DD:9A:60
Certificate issuer: /CN=2d0f33e0254bfa039389cd1b2cee89eca1dd9a60
Certificate serial: 0194BD17AD5FFD77D5C1E2B1C83821EDC74B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LQ8z4CVL-gOTic0bLO6J7KHdmmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/bd06c4-d937-4dc6-b149-10de8c0f92c8/1/LQ8z4CVL-gOTic0bLO6J7KHdmmA.mft
Manifest number: 03E8
Signing time: Fri 31 Jan 2025 16:00:32 +0000
Manifest this update: Fri 31 Jan 2025 16:00:32 +0000
Manifest next update: Sat 01 Feb 2025 16:00:32 +0000
Files and hashes: 1: LQ8z4CVL-gOTic0bLO6J7KHdmmA.crl (hash: H4r0eecs+TJWeo1IppnMElQwgl+bo7OIgoUvMt1lXfo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:ad:5f:fd:77:d5:c1:e2:b1:c8:38:21:ed:c7:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d0f33e0254bfa039389cd1b2cee89eca1dd9a60
Validity
Not Before: Jan 31 16:00:32 2025 GMT
Not After : Feb 1 16:00:32 2025 GMT
Subject: CN=31c65b98c46a8207ab35a526a891be2dd63ed469
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:84:b6:ec:4b:c2:cc:e7:0e:e1:9b:c8:6a:d1:
eb:5c:da:7a:63:76:9d:40:67:95:af:a5:e7:b1:c3:
22:ac:0e:1b:20:64:72:b6:aa:c5:e6:91:73:09:1c:
b9:15:a9:72:5e:cd:80:c4:54:65:58:c7:ac:13:77:
14:8c:41:f7:3f:ff:b4:e2:8b:2d:de:5e:77:5a:7d:
c0:91:c9:f3:94:0c:68:82:30:ba:55:4e:3f:31:74:
4d:a4:7a:64:6c:53:0a:67:ee:75:d6:b5:ed:4e:ed:
56:28:4b:4e:00:6b:76:e1:e5:95:2e:37:42:65:c5:
82:f1:39:4c:13:a8:f1:fd:44:30:fe:8d:4a:e7:ce:
ac:22:be:e7:4f:6d:94:9b:ff:d6:02:3f:27:20:3c:
6f:d2:e4:3c:ce:0a:3d:61:2d:e1:0c:9e:21:b4:a8:
62:b1:6c:98:9a:4f:a0:38:b1:b2:1b:12:06:48:73:
b5:40:aa:29:71:04:a7:69:91:ae:93:c8:76:af:9e:
a7:c7:e2:2d:ca:0b:4b:59:29:36:db:cb:c3:be:8f:
8e:a0:bf:ed:44:05:5c:39:ff:e8:59:5a:f7:9c:e4:
a2:1d:49:d8:eb:5c:b7:56:57:d7:5d:e8:98:65:19:
dd:f6:57:45:c3:57:24:ea:f4:e0:d3:5b:5c:08:41:
da:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:C6:5B:98:C4:6A:82:07:AB:35:A5:26:A8:91:BE:2D:D6:3E:D4:69
X509v3 Authority Key Identifier:
keyid:2D:0F:33:E0:25:4B:FA:03:93:89:CD:1B:2C:EE:89:EC:A1:DD:9A:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LQ8z4CVL-gOTic0bLO6J7KHdmmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/bd06c4-d937-4dc6-b149-10de8c0f92c8/1/LQ8z4CVL-gOTic0bLO6J7KHdmmA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/bd06c4-d937-4dc6-b149-10de8c0f92c8/1/LQ8z4CVL-gOTic0bLO6J7KHdmmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:4a:77:95:8b:cd:31:42:96:ff:b8:08:83:fb:43:55:30:f3:
d7:8e:79:ce:5f:07:51:36:4b:8c:29:b4:ef:24:d9:9f:60:5a:
d6:f0:8c:62:c4:4b:d2:bf:26:3f:09:ad:d9:3a:00:b8:1c:04:
74:0a:ed:da:02:45:a2:25:95:61:be:0e:20:5b:21:d1:e2:02:
1d:31:55:02:cb:38:0d:21:30:d7:8b:ab:72:01:e0:48:af:c9:
91:64:d3:34:81:5b:67:5f:37:4d:e9:f3:ec:0d:e8:51:dc:bd:
64:ce:46:ab:ba:76:6c:b4:e6:50:4b:1e:d2:17:f2:42:c5:83:
c8:f4:bd:f9:b6:d0:91:bd:a0:c2:b5:17:8e:66:c4:29:0d:99:
6b:f1:5a:a3:cb:32:23:0f:99:aa:81:b1:a6:3a:f6:ac:57:90:
e1:b6:0e:47:cf:fc:a9:09:0f:01:62:6d:1f:84:5c:21:67:45:
e0:df:a4:ce:9b:fb:66:5a:ea:47:00:fa:2c:eb:7e:c1:f3:86:
50:7e:24:67:55:2c:c1:f5:0a:8e:36:3b:89:69:38:32:31:0c:
a6:ed:33:af:8c:31:02:20:da:78:0d:76:0c:36:46:ad:be:2f:
ad:8d:2b:1c:91:4b:0c:3c:40:c4:87:a6:72:28:13:37:9e:14:
aa:f9:2d:7d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F61f/XfVweKxyDgh7cdLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJkMGYzM2UwMjU0YmZhMDM5Mzg5Y2QxYjJjZWU4OWVjYTFk
ZDlhNjAwHhcNMjUwMTMxMTYwMDMyWhcNMjUwMjAxMTYwMDMyWjAzMTEwLwYDVQQD
EygzMWM2NWI5OGM0NmE4MjA3YWIzNWE1MjZhODkxYmUyZGQ2M2VkNDY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsIS27EvCzOcO4ZvIatHrXNp6Y3ad
QGeVr6XnscMirA4bIGRytqrF5pFzCRy5FalyXs2AxFRlWMesE3cUjEH3P/+04ost
3l53Wn3AkcnzlAxogjC6VU4/MXRNpHpkbFMKZ+511rXtTu1WKEtOAGt24eWVLjdC
ZcWC8TlME6jx/UQw/o1K586sIr7nT22Um//WAj8nIDxv0uQ8zgo9YS3hDJ4htKhi
sWyYmk+gOLGyGxIGSHO1QKopcQSnaZGuk8h2r56nx+ItygtLWSk228vDvo+OoL/t
RAVcOf/oWVr3nOSiHUnY61y3VlfXXeiYZRnd9ldFw1ck6vTg01tcCEHa2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDHGW5jEaoIHqzWlJqiRvi3WPtRpMB8GA1UdIwQY
MBaAFC0PM+AlS/oDk4nNGyzuieyh3ZpgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTFE4ejRDVkwtZ09UaWMwYkxPNko3S0hkbW1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi9iZDA2YzQtZDkzNy00ZGM2LWIxNDkt
MTBkZThjMGY5MmM4LzEvTFE4ejRDVkwtZ09UaWMwYkxPNko3S0hkbW1BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi9iZDA2YzQtZDkzNy00ZGM2LWIxNDktMTBkZThjMGY5MmM4
LzEvTFE4ejRDVkwtZ09UaWMwYkxPNko3S0hkbW1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKUp3lYvN
MUKW/7gIg/tDVTDz1455zl8HUTZLjCm07yTZn2Ba1vCMYsRL0r8mPwmt2ToAuBwE
dArt2gJFoiWVYb4OIFsh0eICHTFVAss4DSEw14urcgHgSK/JkWTTNIFbZ183Tenz
7A3oUdy9ZM5Gq7p2bLTmUEse0hfyQsWDyPS9+bbQkb2gwrUXjmbEKQ2Za/Fao8sy
Iw+ZqoGxpjr2rFeQ4bYOR8/8qQkPAWJtH4RcIWdF4N+kzpv7ZlrqRwD6LOt+wfOG
UH4kZ1UswfUKjjY7iWk4MjEMpu0zr4wxAiDaeA12DDZGrb4vrY0rHJFLDDxAxIem
cigTN54UqvktfQ==
-----END CERTIFICATE-----
Generated at Fri Apr 25 01:13:20 2025 by rpki-client