Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/46a1b0-10c0-4cf9-9502-10d1734d7b83/1/LTDDBwxuYe3FimTzIz-pf8X1c5s.mft
File: LTDDBwxuYe3FimTzIz-pf8X1c5s.mft (raw, json)
Hash identifier: MckaWvbZiW51/eZt/Vu1oOyN5LOk9neFESSVnX7PImo=
Subject key identifier: 38:38:14:8F:01:6B:53:69:B9:85:D0:7D:70:DF:E7:F4:6D:09:42:F6
Authority key identifier: 2D:30:C3:07:0C:6E:61:ED:C5:8A:64:F3:23:3F:A9:7F:C5:F5:73:9B
Certificate issuer: /CN=2d30c3070c6e61edc58a64f3233fa97fc5f5739b
Certificate serial: 0194BC3C0086601F05BB87889B731D3B4ECC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LTDDBwxuYe3FimTzIz-pf8X1c5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/46a1b0-10c0-4cf9-9502-10d1734d7b83/1/LTDDBwxuYe3FimTzIz-pf8X1c5s.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 12:00:36 +0000
Manifest this update: Fri 31 Jan 2025 12:00:36 +0000
Manifest next update: Sat 01 Feb 2025 12:00:36 +0000
Files and hashes: 1: 8zTP6bF-8Ig21O-GNkBs9OXORp0.roa (hash: 9YznWSa8FHqt+jbmFpmAFvzlfMFLjOXYAA2TeVtspuE=)
2: LTDDBwxuYe3FimTzIz-pf8X1c5s.crl (hash: aavAZ9qHZJGxhGm6waA9gYZTzAZm+D36TvVKfnf10w8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:00:86:60:1f:05:bb:87:88:9b:73:1d:3b:4e:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d30c3070c6e61edc58a64f3233fa97fc5f5739b
Validity
Not Before: Jan 31 12:00:36 2025 GMT
Not After : Feb 1 12:00:36 2025 GMT
Subject: CN=3838148f016b5369b985d07d70dfe7f46d0942f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:83:47:5d:73:ca:31:6c:05:96:ab:a1:cf:01:
8c:f3:bf:ef:38:d1:f4:cf:2b:5e:a3:cb:8d:21:d4:
97:12:ad:21:95:6c:84:81:15:3f:f3:30:f1:db:e7:
7f:d5:a4:71:75:62:71:0b:35:45:b8:57:49:e8:de:
2d:0e:7c:d0:23:4d:6c:4e:1f:da:24:09:af:37:23:
ad:d1:ce:b2:0d:8b:aa:04:67:96:9e:a5:a4:65:f2:
8c:11:0d:31:c4:94:a3:e9:f6:7d:e2:78:8d:29:46:
f6:ed:4f:a9:9b:44:a6:d9:10:4c:50:7b:77:25:ac:
29:38:8c:a5:10:fe:7e:5f:df:a0:d3:b1:2f:77:c4:
60:60:ac:4f:39:a2:7f:0b:bb:83:f0:6b:b5:51:69:
6a:2b:5a:36:f5:d2:28:b4:13:c9:db:ee:1b:a5:94:
cc:34:d7:9d:9f:e3:61:4e:ed:10:da:f7:b5:9f:16:
ff:7d:5f:48:f8:4a:f0:6e:82:11:fa:bc:e9:dd:27:
48:d5:1d:76:ca:1c:1d:b9:b1:5c:07:6f:50:94:fa:
66:fe:50:00:7c:40:c0:14:be:ea:e3:01:ee:15:e2:
f1:3d:63:61:d8:23:17:75:99:0e:5e:f3:b7:ad:30:
50:64:18:68:fd:13:e2:83:98:b6:44:f9:e7:9c:83:
51:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:38:14:8F:01:6B:53:69:B9:85:D0:7D:70:DF:E7:F4:6D:09:42:F6
X509v3 Authority Key Identifier:
keyid:2D:30:C3:07:0C:6E:61:ED:C5:8A:64:F3:23:3F:A9:7F:C5:F5:73:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LTDDBwxuYe3FimTzIz-pf8X1c5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/46a1b0-10c0-4cf9-9502-10d1734d7b83/1/LTDDBwxuYe3FimTzIz-pf8X1c5s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/46a1b0-10c0-4cf9-9502-10d1734d7b83/1/LTDDBwxuYe3FimTzIz-pf8X1c5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:f8:f6:50:bd:00:59:f9:3e:15:44:15:24:b5:a2:56:bd:1d:
4b:14:b8:de:ea:6f:e3:a1:e4:c2:3b:0e:1d:d7:af:4d:af:2a:
fd:83:c0:98:b4:ed:91:26:5b:f7:7d:51:bb:10:46:32:08:f1:
f1:24:86:2f:da:c6:76:d1:e2:a9:6f:f3:92:83:da:ae:2d:b0:
dc:4b:8c:d8:33:1d:43:91:eb:ff:d4:25:4f:ab:f4:fb:e2:00:
ab:bc:d2:55:7f:b1:d2:7c:b4:77:31:6d:70:b8:f7:c3:72:56:
de:1f:f4:df:df:b6:86:8c:38:76:f6:98:0e:35:91:67:9a:e4:
ab:b6:40:0e:17:e6:41:f1:ac:ef:95:b2:10:9c:e8:d9:5d:61:
c8:f0:f9:8a:60:be:11:05:3d:58:73:62:40:39:9d:ed:ec:42:
c7:8e:8b:ca:09:c9:3f:a5:81:e3:ac:50:ce:87:b4:e8:a1:af:
70:8d:59:27:af:af:3f:8f:f5:c1:fb:ee:4a:34:f3:c0:a3:cd:
67:e4:2d:0a:31:5f:2b:62:ee:fd:cf:35:ab:13:da:e4:3a:9d:
58:ac:20:d5:61:b4:ff:18:0b:f5:c0:4a:67:fe:d9:0c:7c:23:
2b:4d:d5:8b:ed:6b:fd:92:e8:ff:51:5e:be:a4:f2:2b:5d:dd:
03:b4:b5:0b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8PACGYB8Fu4eIm3MdO07MMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJkMzBjMzA3MGM2ZTYxZWRjNThhNjRmMzIzM2ZhOTdmYzVm
NTczOWIwHhcNMjUwMTMxMTIwMDM2WhcNMjUwMjAxMTIwMDM2WjAzMTEwLwYDVQQD
EygzODM4MTQ4ZjAxNmI1MzY5Yjk4NWQwN2Q3MGRmZTdmNDZkMDk0MmY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuYNHXXPKMWwFlquhzwGM87/vONH0
zyteo8uNIdSXEq0hlWyEgRU/8zDx2+d/1aRxdWJxCzVFuFdJ6N4tDnzQI01sTh/a
JAmvNyOt0c6yDYuqBGeWnqWkZfKMEQ0xxJSj6fZ94niNKUb27U+pm0Sm2RBMUHt3
JawpOIylEP5+X9+g07Evd8RgYKxPOaJ/C7uD8Gu1UWlqK1o29dIotBPJ2+4bpZTM
NNedn+NhTu0Q2ve1nxb/fV9I+ErwboIR+rzp3SdI1R12yhwdubFcB29QlPpm/lAA
fEDAFL7q4wHuFeLxPWNh2CMXdZkOXvO3rTBQZBho/RPig5i2RPnnnINRFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDg4FI8Ba1NpuYXQfXDf5/RtCUL2MB8GA1UdIwQY
MBaAFC0wwwcMbmHtxYpk8yM/qX/F9XObMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTFREREJ3eHVZZTNGaW1Uekl6LXBmOFgxYzVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS80NmExYjAtMTBjMC00Y2Y5LTk1MDIt
MTBkMTczNGQ3YjgzLzEvTFREREJ3eHVZZTNGaW1Uekl6LXBmOFgxYzVzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS80NmExYjAtMTBjMC00Y2Y5LTk1MDItMTBkMTczNGQ3Yjgz
LzEvTFREREJ3eHVZZTNGaW1Uekl6LXBmOFgxYzVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX/j2UL0A
Wfk+FUQVJLWiVr0dSxS43upv46HkwjsOHdevTa8q/YPAmLTtkSZb931RuxBGMgjx
8SSGL9rGdtHiqW/zkoPari2w3EuM2DMdQ5Hr/9QlT6v0++IAq7zSVX+x0ny0dzFt
cLj3w3JW3h/039+2how4dvaYDjWRZ5rkq7ZADhfmQfGs75WyEJzo2V1hyPD5imC+
EQU9WHNiQDmd7exCx46LygnJP6WB46xQzoe06KGvcI1ZJ6+vP4/1wfvuSjTzwKPN
Z+QtCjFfK2Lu/c81qxPa5DqdWKwg1WG0/xgL9cBKZ/7ZDHwjK03Vi+1r/ZLo/1Fe
vqTyK13dA7S1Cw==
-----END CERTIFICATE-----
Generated at Fri Apr 25 00:48:38 2025 by rpki-client