Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/095d5f-2693-4182-9397-cda94fb796d1/1/8lizqXQbQx177NZChrnmvODpddo.mft
File: 8lizqXQbQx177NZChrnmvODpddo.mft (raw, json)
Hash identifier: 3zo2wwsvcipkctRATCexOQRS0MSEDQBcf6H87f/tk1U=
Subject key identifier: 1C:52:1D:D4:35:EB:A4:73:8C:A4:29:F3:C7:B9:65:A4:EA:2F:E2:A8
Authority key identifier: F2:58:B3:A9:74:1B:43:1D:7B:EC:D6:42:86:B9:E6:BC:E0:E9:75:DA
Certificate issuer: /CN=f258b3a9741b431d7becd64286b9e6bce0e975da
Certificate serial: 0194BCE0750ABA3BB62E188507BE21118A73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8lizqXQbQx177NZChrnmvODpddo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/095d5f-2693-4182-9397-cda94fb796d1/1/8lizqXQbQx177NZChrnmvODpddo.mft
Manifest number: 13F9
Signing time: Fri 31 Jan 2025 15:00:14 +0000
Manifest this update: Fri 31 Jan 2025 15:00:14 +0000
Manifest next update: Sat 01 Feb 2025 15:00:14 +0000
Files and hashes: 1: 8lizqXQbQx177NZChrnmvODpddo.crl (hash: bUKt1G771f/jCgX40w6j2K/RCWeijR0xzY69Qkc2r/E=)
2: LSDLxpYG9vUS-ynb5NuKXC0hxwk.roa (hash: iU/GAJxLreLcqJkb0jyy5NFNWuEEVZB548A5w51V+6U=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:75:0a:ba:3b:b6:2e:18:85:07:be:21:11:8a:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f258b3a9741b431d7becd64286b9e6bce0e975da
Validity
Not Before: Jan 31 15:00:14 2025 GMT
Not After : Feb 1 15:00:14 2025 GMT
Subject: CN=1c521dd435eba4738ca429f3c7b965a4ea2fe2a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:bd:02:38:75:ef:2f:f4:8e:0c:40:0c:76:d3:
1f:91:c5:5b:a6:b6:0f:76:e1:cf:bc:4b:e1:f0:42:
d0:69:fe:69:fc:42:0a:0e:33:81:6a:5c:2e:cc:f8:
26:47:94:be:ba:3d:37:eb:29:39:ce:47:2c:7c:0d:
26:74:af:83:45:92:59:2f:8a:ff:b5:24:0b:5a:86:
b4:f3:fe:3c:4a:27:79:ee:c8:0b:fe:94:e0:4c:c6:
72:0f:ca:bc:2d:a9:f1:f5:ca:a5:04:f4:a4:a5:69:
e6:00:74:d3:d1:9d:a2:8c:e4:32:a4:11:b3:b0:94:
51:91:d3:ee:3f:c1:ca:e3:9b:f4:90:08:08:a9:80:
34:f0:a3:34:87:8e:90:8e:31:82:93:8f:0e:2a:16:
a2:7f:f2:23:42:49:77:23:76:db:01:da:7f:8e:06:
f6:b6:71:20:a0:5c:5f:8c:e1:06:ad:49:54:f2:31:
0b:1b:7f:66:35:26:e9:53:22:ed:a1:52:27:f2:ac:
1a:cf:32:4d:a0:c0:d7:68:4b:5e:2a:54:8f:f2:27:
db:d4:1c:f3:66:ee:85:ba:6e:c5:f6:7c:c6:43:ad:
6d:f9:9f:4a:41:2b:d8:29:ea:be:da:53:d0:e7:1c:
cf:44:ae:d1:7e:84:27:63:7f:9f:0f:fd:ff:39:27:
b5:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:52:1D:D4:35:EB:A4:73:8C:A4:29:F3:C7:B9:65:A4:EA:2F:E2:A8
X509v3 Authority Key Identifier:
keyid:F2:58:B3:A9:74:1B:43:1D:7B:EC:D6:42:86:B9:E6:BC:E0:E9:75:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8lizqXQbQx177NZChrnmvODpddo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/095d5f-2693-4182-9397-cda94fb796d1/1/8lizqXQbQx177NZChrnmvODpddo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/095d5f-2693-4182-9397-cda94fb796d1/1/8lizqXQbQx177NZChrnmvODpddo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:02:5e:67:f4:7c:b4:a5:c9:ff:d7:e4:90:68:c9:b7:5a:78:
a0:f7:44:77:98:06:81:dc:97:38:e1:bc:9e:b3:37:59:25:1d:
cc:0a:0b:de:99:3e:86:cc:95:12:9e:f3:6c:f5:35:1b:e9:2b:
49:a5:5e:62:2f:41:0d:6d:90:b3:25:c2:c5:c7:8c:cc:70:60:
de:85:2e:c4:ff:c1:c8:48:37:61:b0:65:75:cb:16:68:18:0f:
05:dc:02:68:30:62:ca:81:35:ac:0a:82:38:a3:a4:e6:86:6c:
27:93:a2:c7:10:f9:45:a2:de:f3:6e:5f:a3:0c:2d:f4:0f:9c:
4a:95:90:ba:4a:9f:3d:00:fe:b9:dc:e4:4f:a6:de:94:6b:b5:
ba:20:ff:6d:59:93:7c:7d:da:c0:21:06:a4:2d:5f:c0:ba:7f:
2e:1c:78:c0:26:9b:40:f3:67:d8:7b:5a:c2:b7:a5:f2:b8:ed:
c3:61:36:51:9e:ed:ba:4a:d7:3b:99:9c:64:37:63:c7:db:dc:
94:75:c7:ef:cf:e4:22:af:ae:86:0e:86:73:06:92:4e:00:fe:
7a:ce:ee:e0:3a:bf:1e:73:ac:96:89:9c:ae:63:2f:93:e9:48:
0d:79:c6:28:97:3f:0b:34:a7:9f:97:02:24:91:68:57:d5:74:
28:cb:75:21
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS84HUKuju2LhiFB74hEYpzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyNThiM2E5NzQxYjQzMWQ3YmVjZDY0Mjg2YjllNmJjZTBl
OTc1ZGEwHhcNMjUwMTMxMTUwMDE0WhcNMjUwMjAxMTUwMDE0WjAzMTEwLwYDVQQD
EygxYzUyMWRkNDM1ZWJhNDczOGNhNDI5ZjNjN2I5NjVhNGVhMmZlMmE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr70COHXvL/SODEAMdtMfkcVbprYP
duHPvEvh8ELQaf5p/EIKDjOBalwuzPgmR5S+uj036yk5zkcsfA0mdK+DRZJZL4r/
tSQLWoa08/48Sid57sgL/pTgTMZyD8q8Lanx9cqlBPSkpWnmAHTT0Z2ijOQypBGz
sJRRkdPuP8HK45v0kAgIqYA08KM0h46QjjGCk48OKhaif/IjQkl3I3bbAdp/jgb2
tnEgoFxfjOEGrUlU8jELG39mNSbpUyLtoVIn8qwazzJNoMDXaEteKlSP8ifb1Bzz
Zu6Fum7F9nzGQ61t+Z9KQSvYKeq+2lPQ5xzPRK7RfoQnY3+fD/3/OSe1MQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBxSHdQ166RzjKQp88e5ZaTqL+KoMB8GA1UdIwQY
MBaAFPJYs6l0G0Mde+zWQoa55rzg6XXaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGxpenFYUWJReDE3N05aQ2hybm12T0RwZGRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi8wOTVkNWYtMjY5My00MTgyLTkzOTct
Y2RhOTRmYjc5NmQxLzEvOGxpenFYUWJReDE3N05aQ2hybm12T0RwZGRvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi8wOTVkNWYtMjY5My00MTgyLTkzOTctY2RhOTRmYjc5NmQx
LzEvOGxpenFYUWJReDE3N05aQ2hybm12T0RwZGRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHAJeZ/R8
tKXJ/9fkkGjJt1p4oPdEd5gGgdyXOOG8nrM3WSUdzAoL3pk+hsyVEp7zbPU1G+kr
SaVeYi9BDW2QsyXCxceMzHBg3oUuxP/ByEg3YbBldcsWaBgPBdwCaDBiyoE1rAqC
OKOk5oZsJ5OixxD5RaLe825fowwt9A+cSpWQukqfPQD+udzkT6belGu1uiD/bVmT
fH3awCEGpC1fwLp/Lhx4wCabQPNn2Htawrel8rjtw2E2UZ7tukrXO5mcZDdjx9vc
lHXH78/kIq+uhg6GcwaSTgD+es7u4Dq/HnOslomcrmMvk+lIDXnGKJc/CzSnn5cC
JJFoV9V0KMt1IQ==
-----END CERTIFICATE-----
Generated at Mon Apr 28 09:22:11 2025 by rpki-client