Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/600b38-be3d-4a35-8180-d6307e2da9f7/1/lsA1vI-_Z2PIiNs0TSq0rmKUZmU.mft
File: lsA1vI-_Z2PIiNs0TSq0rmKUZmU.mft (raw, json)
Hash identifier: UdsnKlEqvI+S9APtrwJFd7O+wOWgnAzr0WHqwtOt5kg=
Subject key identifier: 31:25:F1:AE:6C:95:6D:6B:98:33:74:6F:9B:D6:B3:02:D3:46:45:D3
Authority key identifier: 96:C0:35:BC:8F:BF:67:63:C8:88:DB:34:4D:2A:B4:AE:62:94:66:65
Certificate issuer: /CN=96c035bc8fbf6763c888db344d2ab4ae62946665
Certificate serial: 0194BD177EA915369D62FF27ADCC982107AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lsA1vI-_Z2PIiNs0TSq0rmKUZmU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/600b38-be3d-4a35-8180-d6307e2da9f7/1/lsA1vI-_Z2PIiNs0TSq0rmKUZmU.mft
Manifest number: 15
Signing time: Fri 31 Jan 2025 16:00:21 +0000
Manifest this update: Fri 31 Jan 2025 16:00:21 +0000
Manifest next update: Sat 01 Feb 2025 16:00:21 +0000
Files and hashes: 1: l8QB-PHUK_LEuNNWFKARbwIaMRU.roa (hash: W02KjqYvETrR9gAMAORKt4swyV9tqxzh/G6YzbTzQpY=)
2: lsA1vI-_Z2PIiNs0TSq0rmKUZmU.crl (hash: 4HQBgLQLBNE7XigA9vKjC/PRMHD3+vobYtfgXsVjvKU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:7e:a9:15:36:9d:62:ff:27:ad:cc:98:21:07:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96c035bc8fbf6763c888db344d2ab4ae62946665
Validity
Not Before: Jan 31 16:00:21 2025 GMT
Not After : Feb 1 16:00:21 2025 GMT
Subject: CN=3125f1ae6c956d6b9833746f9bd6b302d34645d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b7:20:1d:dd:83:d2:3c:2a:89:f1:d4:86:2a:
ef:9e:6c:27:56:78:9e:7b:b4:26:14:ea:eb:02:d5:
98:fd:59:93:b1:28:a9:ac:dd:38:49:78:2b:8a:66:
53:f4:f5:39:fe:c5:5e:40:cf:cd:1d:53:9f:bb:40:
3b:1a:ba:65:6f:26:4e:ed:92:5a:cc:9e:08:c3:90:
fa:b7:4c:54:a1:25:f2:d6:00:91:eb:7a:2f:d6:84:
93:33:82:7f:db:8b:af:bf:7a:7f:7c:c6:1a:99:40:
1b:49:16:4f:b0:de:ef:df:85:e5:32:a5:e0:a8:c7:
40:09:1c:22:3f:06:82:ec:80:79:cd:5e:99:1a:46:
64:c8:cd:bc:98:c0:a9:58:82:41:35:93:b6:1b:17:
11:a0:62:5e:fd:51:fb:a4:5a:2c:d0:f0:d8:16:cc:
ee:33:f5:13:7c:64:18:01:7c:89:47:31:1c:60:42:
df:56:0b:49:4b:6d:50:a7:13:ef:fb:a8:3c:7e:0f:
f4:f3:ae:2c:0f:d3:68:67:f7:98:d6:40:89:53:0a:
b7:34:27:50:f5:8c:3e:d4:71:4f:6a:ac:41:d5:9c:
4c:13:1f:8b:e1:3b:29:f8:0c:90:80:86:35:12:6e:
35:1f:06:fa:69:ce:6b:cd:e5:6a:0f:5d:1c:5c:f0:
1e:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:25:F1:AE:6C:95:6D:6B:98:33:74:6F:9B:D6:B3:02:D3:46:45:D3
X509v3 Authority Key Identifier:
keyid:96:C0:35:BC:8F:BF:67:63:C8:88:DB:34:4D:2A:B4:AE:62:94:66:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lsA1vI-_Z2PIiNs0TSq0rmKUZmU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/600b38-be3d-4a35-8180-d6307e2da9f7/1/lsA1vI-_Z2PIiNs0TSq0rmKUZmU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/600b38-be3d-4a35-8180-d6307e2da9f7/1/lsA1vI-_Z2PIiNs0TSq0rmKUZmU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:32:80:87:76:82:da:8d:f4:fa:65:fa:2f:c2:93:b1:75:a5:
55:92:97:11:50:7a:94:c8:a5:c2:81:69:93:78:2d:3b:19:11:
09:4c:4c:38:d0:24:f5:7a:ea:62:5b:f4:53:fd:97:d6:2d:81:
e7:13:b1:94:37:26:54:e9:e1:45:36:72:01:59:f7:87:b1:2c:
dc:61:49:8a:9e:b5:8a:22:f9:ca:fd:e8:d7:30:0e:7b:3f:b9:
eb:c3:a1:60:05:84:61:94:39:22:fe:5f:ac:12:00:0e:0e:90:
ad:46:3c:2d:5c:2e:a8:61:11:39:ec:a5:24:e7:12:c6:15:95:
3f:6f:c7:91:22:5c:cf:3d:58:fc:e4:83:32:77:c7:2c:6b:e6:
69:30:e0:9f:2a:bf:8e:bc:84:75:cc:68:16:d5:fe:7a:e9:fc:
31:a4:9c:a9:92:e0:4e:c7:71:da:1b:2c:7f:d2:0a:24:9d:18:
bc:00:43:58:71:3d:77:75:66:ac:fb:8c:78:30:cf:f2:99:a0:
7f:75:0b:04:79:e1:d1:f1:a2:2c:0e:a9:f1:b3:68:2b:4e:01:
ec:23:1b:b7:89:69:37:1c:1e:5b:71:da:8d:fc:7c:75:4c:f3:
74:e8:27:08:26:02:7f:7b:ee:e8:e9:de:a8:25:01:52:4c:4f:
e4:b3:ba:a6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F36pFTadYv8nrcyYIQesMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2YzAzNWJjOGZiZjY3NjNjODg4ZGIzNDRkMmFiNGFlNjI5
NDY2NjUwHhcNMjUwMTMxMTYwMDIxWhcNMjUwMjAxMTYwMDIxWjAzMTEwLwYDVQQD
EygzMTI1ZjFhZTZjOTU2ZDZiOTgzMzc0NmY5YmQ2YjMwMmQzNDY0NWQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsLcgHd2D0jwqifHUhirvnmwnVnie
e7QmFOrrAtWY/VmTsSiprN04SXgrimZT9PU5/sVeQM/NHVOfu0A7GrplbyZO7ZJa
zJ4Iw5D6t0xUoSXy1gCR63ov1oSTM4J/24uvv3p/fMYamUAbSRZPsN7v34XlMqXg
qMdACRwiPwaC7IB5zV6ZGkZkyM28mMCpWIJBNZO2GxcRoGJe/VH7pFos0PDYFszu
M/UTfGQYAXyJRzEcYELfVgtJS21QpxPv+6g8fg/0864sD9NoZ/eY1kCJUwq3NCdQ
9Yw+1HFPaqxB1ZxMEx+L4Tsp+AyQgIY1Em41Hwb6ac5rzeVqD10cXPAeFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDEl8a5slW1rmDN0b5vWswLTRkXTMB8GA1UdIwQY
MBaAFJbANbyPv2djyIjbNE0qtK5ilGZlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbHNBMXZJLV9aMlBJaU5zMFRTcTBybUtVWm1VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC82MDBiMzgtYmUzZC00YTM1LTgxODAt
ZDYzMDdlMmRhOWY3LzEvbHNBMXZJLV9aMlBJaU5zMFRTcTBybUtVWm1VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOC82MDBiMzgtYmUzZC00YTM1LTgxODAtZDYzMDdlMmRhOWY3
LzEvbHNBMXZJLV9aMlBJaU5zMFRTcTBybUtVWm1VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAazKAh3aC
2o30+mX6L8KTsXWlVZKXEVB6lMilwoFpk3gtOxkRCUxMONAk9XrqYlv0U/2X1i2B
5xOxlDcmVOnhRTZyAVn3h7Es3GFJip61iiL5yv3o1zAOez+568OhYAWEYZQ5Iv5f
rBIADg6QrUY8LVwuqGEROeylJOcSxhWVP2/HkSJczz1Y/OSDMnfHLGvmaTDgnyq/
jryEdcxoFtX+eun8MaScqZLgTsdx2hssf9IKJJ0YvABDWHE9d3VmrPuMeDDP8pmg
f3ULBHnh0fGiLA6p8bNoK04B7CMbt4lpNxweW3Hajfx8dUzzdOgnCCYCf3vu6One
qCUBUkxP5LO6pg==
-----END CERTIFICATE-----
Generated at Thu Apr 24 19:06:49 2025 by rpki-client