Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/7f16ea-26d3-457f-92cb-87bc58f34665/1/LkgZCVWUgNJISQ2OHXHDwJOwX-U.mft
File: LkgZCVWUgNJISQ2OHXHDwJOwX-U.mft (raw, json)
Hash identifier: 7tytOnAxzaUXUIgJ6fKHKwgnF387y4Cml1dUYQQ1BaY=
Subject key identifier: 14:11:82:37:E9:D7:7C:C9:0B:8D:D3:BD:EC:09:F3:9B:C4:AD:4C:69
Authority key identifier: 2E:48:19:09:55:94:80:D2:48:49:0D:8E:1D:71:C3:C0:93:B0:5F:E5
Certificate issuer: /CN=2e481909559480d248490d8e1d71c3c093b05fe5
Certificate serial: 0194BCA9D3DD5267D9C92372CC7C884B859F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LkgZCVWUgNJISQ2OHXHDwJOwX-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/7f16ea-26d3-457f-92cb-87bc58f34665/1/LkgZCVWUgNJISQ2OHXHDwJOwX-U.mft
Manifest number: 1426
Signing time: Fri 31 Jan 2025 14:00:33 +0000
Manifest this update: Fri 31 Jan 2025 14:00:33 +0000
Manifest next update: Sat 01 Feb 2025 14:00:33 +0000
Files and hashes: 1: Cb_VZxWIl2cY2o2ZBTucsnEEWjg.roa (hash: /SsWz/hUvU9SGekEx+HWP4EztqAG6V0iTZmAGxcY5SU=)
2: LkgZCVWUgNJISQ2OHXHDwJOwX-U.crl (hash: ALN0ElLcFVWfSZ90dDul9/4NqVfxuLQrpuVcmu1c10k=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:d3:dd:52:67:d9:c9:23:72:cc:7c:88:4b:85:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e481909559480d248490d8e1d71c3c093b05fe5
Validity
Not Before: Jan 31 14:00:33 2025 GMT
Not After : Feb 1 14:00:33 2025 GMT
Subject: CN=14118237e9d77cc90b8dd3bdec09f39bc4ad4c69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:18:f6:c7:30:42:da:c4:0d:73:f7:ba:92:0c:
cf:fc:c4:82:18:58:e7:d4:d2:86:cf:99:18:ea:2f:
ec:e5:b1:55:3a:41:2f:a9:3d:1b:23:1b:56:1b:8c:
98:42:32:64:cd:8b:2e:43:dc:47:f2:58:06:f0:0d:
e5:fd:8d:13:bd:c2:fe:3e:f7:85:71:5d:85:07:fc:
c4:e8:9c:4c:b6:c1:17:a9:d1:f1:e1:21:60:32:5b:
b0:56:67:d1:dd:48:32:5d:f2:14:0f:d9:a2:7c:b1:
d6:ec:20:c2:58:4d:08:39:1f:42:68:06:19:68:b3:
2c:e3:9a:0e:6a:e9:a7:dc:88:7c:7e:5c:08:46:5d:
3d:8c:d6:9c:34:3d:b2:ea:43:bc:12:f2:dd:9b:d7:
58:17:99:df:86:be:4e:7b:51:17:f0:25:c5:4a:42:
51:04:cc:bf:6f:9b:27:5a:7b:b5:38:1a:e6:66:39:
26:51:40:23:ad:4a:e0:8c:6e:ef:18:fc:f5:55:ba:
03:b7:d2:9e:ee:16:ee:a3:a2:d6:a2:ba:e2:b6:03:
a6:5f:7a:e5:07:8d:57:58:d9:86:87:6f:99:06:ff:
82:19:cf:68:e0:5c:23:0c:32:64:eb:ea:4d:ca:71:
c1:5b:10:39:4f:50:07:c4:bf:c4:a1:c2:39:ee:9a:
5e:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:11:82:37:E9:D7:7C:C9:0B:8D:D3:BD:EC:09:F3:9B:C4:AD:4C:69
X509v3 Authority Key Identifier:
keyid:2E:48:19:09:55:94:80:D2:48:49:0D:8E:1D:71:C3:C0:93:B0:5F:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LkgZCVWUgNJISQ2OHXHDwJOwX-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/7f16ea-26d3-457f-92cb-87bc58f34665/1/LkgZCVWUgNJISQ2OHXHDwJOwX-U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/7f16ea-26d3-457f-92cb-87bc58f34665/1/LkgZCVWUgNJISQ2OHXHDwJOwX-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:5b:b8:79:14:d2:d6:c7:80:f0:36:b9:15:5d:af:cd:d0:0d:
dd:0b:0a:03:3d:4f:01:d1:1d:6e:14:38:af:16:94:ee:f1:f0:
cf:d9:64:4f:b4:f1:8c:88:26:10:62:cb:27:53:44:e0:70:a5:
67:63:15:a9:70:92:ab:cd:53:65:21:66:e2:c3:3d:1c:6b:80:
38:61:7b:08:19:4e:96:f6:04:96:9e:c0:cc:c9:49:95:3e:c7:
8e:ec:1c:5d:e8:40:8e:a8:13:30:4c:81:ae:00:8c:72:5e:2c:
ce:80:9c:e6:a1:ad:4a:ab:65:81:d7:a1:7e:71:0d:9d:ec:02:
fd:6a:50:2a:0a:02:e0:25:e9:96:ba:dd:2a:03:f8:98:4e:7e:
02:a3:48:c3:9a:4f:9c:96:93:77:82:89:dd:b6:a5:f2:5e:5b:
f4:7d:8a:d8:73:13:65:6d:d4:8c:ec:28:d5:16:a8:ec:f6:de:
0f:de:1f:d2:7c:fd:23:e5:fd:95:c3:3c:e2:ef:ae:50:08:53:
2c:7a:95:ee:c6:50:fe:a5:7c:03:a4:25:a6:65:ef:e2:ef:59:
c9:1e:41:ab:a5:42:b6:c1:f9:ab:1d:2a:63:fb:6c:4d:80:45:
c1:a0:ca:56:74:a8:4b:7f:22:47:c5:fb:a8:f3:46:f3:4a:c2:
a4:bb:16:22
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qdPdUmfZySNyzHyIS4WfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlNDgxOTA5NTU5NDgwZDI0ODQ5MGQ4ZTFkNzFjM2MwOTNi
MDVmZTUwHhcNMjUwMTMxMTQwMDMzWhcNMjUwMjAxMTQwMDMzWjAzMTEwLwYDVQQD
EygxNDExODIzN2U5ZDc3Y2M5MGI4ZGQzYmRlYzA5ZjM5YmM0YWQ0YzY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvRj2xzBC2sQNc/e6kgzP/MSCGFjn
1NKGz5kY6i/s5bFVOkEvqT0bIxtWG4yYQjJkzYsuQ9xH8lgG8A3l/Y0TvcL+PveF
cV2FB/zE6JxMtsEXqdHx4SFgMluwVmfR3UgyXfIUD9mifLHW7CDCWE0IOR9CaAYZ
aLMs45oOaumn3Ih8flwIRl09jNacND2y6kO8EvLdm9dYF5nfhr5Oe1EX8CXFSkJR
BMy/b5snWnu1OBrmZjkmUUAjrUrgjG7vGPz1VboDt9Ke7hbuo6LWorritgOmX3rl
B41XWNmGh2+ZBv+CGc9o4FwjDDJk6+pNynHBWxA5T1AHxL/EocI57ppeAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBQRgjfp13zJC43TvewJ85vErUxpMB8GA1UdIwQY
MBaAFC5IGQlVlIDSSEkNjh1xw8CTsF/lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTGtnWkNWV1VnTkpJU1EyT0hYSER3Sk93WC1VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi83ZjE2ZWEtMjZkMy00NTdmLTkyY2It
ODdiYzU4ZjM0NjY1LzEvTGtnWkNWV1VnTkpJU1EyT0hYSER3Sk93WC1VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi83ZjE2ZWEtMjZkMy00NTdmLTkyY2ItODdiYzU4ZjM0NjY1
LzEvTGtnWkNWV1VnTkpJU1EyT0hYSER3Sk93WC1VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOFu4eRTS
1seA8Da5FV2vzdAN3QsKAz1PAdEdbhQ4rxaU7vHwz9lkT7TxjIgmEGLLJ1NE4HCl
Z2MVqXCSq81TZSFm4sM9HGuAOGF7CBlOlvYElp7AzMlJlT7HjuwcXehAjqgTMEyB
rgCMcl4szoCc5qGtSqtlgdehfnENnewC/WpQKgoC4CXplrrdKgP4mE5+AqNIw5pP
nJaTd4KJ3bal8l5b9H2K2HMTZW3UjOwo1Rao7PbeD94f0nz9I+X9lcM84u+uUAhT
LHqV7sZQ/qV8A6QlpmXv4u9ZyR5Bq6VCtsH5qx0qY/tsTYBFwaDKVnSoS38iR8X7
qPNG80rCpLsWIg==
-----END CERTIFICATE-----
Generated at Thu Apr 24 19:04:31 2025 by rpki-client