Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/c44389-81b5-455c-85ac-4cd80308171a/1/LoOL9dPe_8At-hhOTw6FEVNeUX0.mft
File: LoOL9dPe_8At-hhOTw6FEVNeUX0.mft (raw, json)
Hash identifier: S2y9AmTCxjZHBIx9GdN8rfEtofQsBmNSEvz6p6c+mDw=
Subject key identifier: 7C:6C:49:40:61:77:BA:5D:FA:62:F3:15:5C:BD:1C:F7:EB:F8:60:E5
Authority key identifier: 2E:83:8B:F5:D3:DE:FF:C0:2D:FA:18:4E:4F:0E:85:11:53:5E:51:7D
Certificate issuer: /CN=2e838bf5d3deffc02dfa184e4f0e8511535e517d
Certificate serial: 0194BD4EC654771ACE7196D1FC4901F0050D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LoOL9dPe_8At-hhOTw6FEVNeUX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/c44389-81b5-455c-85ac-4cd80308171a/1/LoOL9dPe_8At-hhOTw6FEVNeUX0.mft
Manifest number: 0410
Signing time: Fri 31 Jan 2025 17:00:43 +0000
Manifest this update: Fri 31 Jan 2025 17:00:43 +0000
Manifest next update: Sat 01 Feb 2025 17:00:43 +0000
Files and hashes: 1: LoOL9dPe_8At-hhOTw6FEVNeUX0.crl (hash: xAGG43un93txh3eZQ4o6hj2nvqDEk6wASHhiqHUHpXY=)
2: S8Gv615Ih2EECVB1a2b3J3u_PZw.roa (hash: QLn7xaZ0/yy3B92jWZmiyfhzxbYSpkw1Q0HqcssnojQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:c6:54:77:1a:ce:71:96:d1:fc:49:01:f0:05:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e838bf5d3deffc02dfa184e4f0e8511535e517d
Validity
Not Before: Jan 31 17:00:43 2025 GMT
Not After : Feb 1 17:00:43 2025 GMT
Subject: CN=7c6c49406177ba5dfa62f3155cbd1cf7ebf860e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:95:b0:74:f6:61:11:c3:04:9f:fe:08:cd:94:
6d:27:e4:33:6f:b9:b7:8a:86:32:1f:65:80:e0:a2:
90:b1:6f:bf:38:dd:16:79:c5:26:c0:1b:90:d9:f6:
71:44:17:91:d8:a0:b3:27:46:76:65:48:f1:c8:4a:
72:f3:e2:7a:42:c1:b1:f8:47:73:84:c1:66:de:1a:
db:89:e5:8f:15:d4:10:b9:ea:20:70:80:2b:78:3d:
06:cd:8f:07:ad:df:42:38:3f:fa:75:80:a3:6a:ac:
b3:17:1b:9d:34:27:a2:40:1b:92:56:33:3d:a2:84:
53:0f:14:e7:1d:59:88:1b:8c:d7:13:ca:0b:2f:8a:
02:fa:45:ff:58:04:ef:73:fa:62:5e:d9:ed:a5:58:
c0:81:e3:cc:00:00:b5:a0:61:ab:80:be:03:88:8d:
be:2a:42:b4:05:00:19:e7:0a:a4:d3:ba:48:c1:6d:
24:e7:99:0c:61:4b:6b:5a:b9:77:8b:df:e9:67:72:
e2:21:71:c0:6e:9c:ce:c4:6d:d9:c6:70:04:c6:d4:
69:a4:ff:dc:08:d9:c1:8a:d8:48:d3:cb:6e:d6:bf:
f1:cc:1c:d3:14:69:a2:7e:ba:d5:9b:5c:22:0e:00:
90:df:92:08:bb:8f:c7:35:a2:33:3e:9c:92:95:4a:
0f:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:6C:49:40:61:77:BA:5D:FA:62:F3:15:5C:BD:1C:F7:EB:F8:60:E5
X509v3 Authority Key Identifier:
keyid:2E:83:8B:F5:D3:DE:FF:C0:2D:FA:18:4E:4F:0E:85:11:53:5E:51:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LoOL9dPe_8At-hhOTw6FEVNeUX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/c44389-81b5-455c-85ac-4cd80308171a/1/LoOL9dPe_8At-hhOTw6FEVNeUX0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/c44389-81b5-455c-85ac-4cd80308171a/1/LoOL9dPe_8At-hhOTw6FEVNeUX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:a3:1f:52:f4:d3:4c:c9:08:91:ca:2f:91:97:53:38:0b:8d:
73:3f:87:ae:65:94:65:17:97:21:73:ed:bd:de:06:6b:ef:21:
9d:e0:e3:9f:90:a0:82:64:8c:39:b2:d3:54:70:90:22:86:f5:
d2:59:4b:69:5a:06:63:01:ed:1d:3e:28:4d:c4:ed:62:92:5f:
19:6a:13:93:2f:1d:48:ab:80:dc:e7:6f:03:82:ec:e8:61:be:
7a:6b:fd:41:3f:b1:90:4a:4f:61:6d:2e:95:dd:11:0a:ae:b5:
a0:9a:bb:70:ee:a4:e0:81:bf:be:5a:0c:b9:4b:22:5f:18:4b:
05:74:1e:73:00:3a:27:1d:15:42:8b:13:5c:02:f1:56:98:af:
55:55:bd:21:c0:1f:16:8b:25:93:a7:c0:35:92:6a:2a:bd:5f:
0e:96:6b:07:2c:b5:bf:b8:a1:29:8e:8b:20:ff:90:4d:da:34:
e0:41:2e:d6:8e:ce:f9:03:7b:41:dd:da:3e:08:e0:39:e5:dd:
92:cf:f9:27:42:1d:fb:92:7a:e7:7f:25:48:da:e8:21:6d:07:
c6:bc:e4:3f:ce:a1:f6:37:73:6c:4c:87:6c:94:c9:52:0a:cc:
37:a9:d5:14:57:d5:fd:a4:1e:95:db:ba:f4:97:84:e9:ba:86:
62:60:0d:2a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9TsZUdxrOcZbR/EkB8AUNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlODM4YmY1ZDNkZWZmYzAyZGZhMTg0ZTRmMGU4NTExNTM1
ZTUxN2QwHhcNMjUwMTMxMTcwMDQzWhcNMjUwMjAxMTcwMDQzWjAzMTEwLwYDVQQD
Eyg3YzZjNDk0MDYxNzdiYTVkZmE2MmYzMTU1Y2JkMWNmN2ViZjg2MGU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlZWwdPZhEcMEn/4IzZRtJ+Qzb7m3
ioYyH2WA4KKQsW+/ON0WecUmwBuQ2fZxRBeR2KCzJ0Z2ZUjxyEpy8+J6QsGx+Edz
hMFm3hrbieWPFdQQueogcIAreD0GzY8Hrd9COD/6dYCjaqyzFxudNCeiQBuSVjM9
ooRTDxTnHVmIG4zXE8oLL4oC+kX/WATvc/piXtntpVjAgePMAAC1oGGrgL4DiI2+
KkK0BQAZ5wqk07pIwW0k55kMYUtrWrl3i9/pZ3LiIXHAbpzOxG3ZxnAExtRppP/c
CNnBithI08tu1r/xzBzTFGmifrrVm1wiDgCQ35IIu4/HNaIzPpySlUoP2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHxsSUBhd7pd+mLzFVy9HPfr+GDlMB8GA1UdIwQY
MBaAFC6Di/XT3v/ALfoYTk8OhRFTXlF9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTG9PTDlkUGVfOEF0LWhoT1R3NkZFVk5lVVgwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC9jNDQzODktODFiNS00NTVjLTg1YWMt
NGNkODAzMDgxNzFhLzEvTG9PTDlkUGVfOEF0LWhoT1R3NkZFVk5lVVgwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC9jNDQzODktODFiNS00NTVjLTg1YWMtNGNkODAzMDgxNzFh
LzEvTG9PTDlkUGVfOEF0LWhoT1R3NkZFVk5lVVgwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALqMfUvTT
TMkIkcovkZdTOAuNcz+HrmWUZReXIXPtvd4Ga+8hneDjn5CggmSMObLTVHCQIob1
0llLaVoGYwHtHT4oTcTtYpJfGWoTky8dSKuA3OdvA4Ls6GG+emv9QT+xkEpPYW0u
ld0RCq61oJq7cO6k4IG/vloMuUsiXxhLBXQecwA6Jx0VQosTXALxVpivVVW9IcAf
Foslk6fANZJqKr1fDpZrByy1v7ihKY6LIP+QTdo04EEu1o7O+QN7Qd3aPgjgOeXd
ks/5J0Id+5J6538lSNroIW0HxrzkP86h9jdzbEyHbJTJUgrMN6nVFFfV/aQeldu6
9JeE6bqGYmANKg==
-----END CERTIFICATE-----
Generated at Fri Apr 25 00:22:57 2025 by rpki-client