Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/a4cd0d-af14-49c3-9481-35479c54dcbd/1/L-QXNib0YCZA6NTpa1ShoJar54s.mft
File: L-QXNib0YCZA6NTpa1ShoJar54s.mft (raw, json)
Hash identifier: aRT73wCwRWM5lxCTdHbEhGvHC78hrg4aovu2X/fohOg=
Subject key identifier: 7C:F9:8A:3D:EA:62:DA:40:9E:F3:DB:CB:C6:CA:92:CC:FA:9F:3C:38
Authority key identifier: 2F:E4:17:36:26:F4:60:26:40:E8:D4:E9:6B:54:A1:A0:96:AB:E7:8B
Certificate issuer: /CN=2fe4173626f4602640e8d4e96b54a1a096abe78b
Certificate serial: 0194BCA9F611332935951994349F3D07352B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L-QXNib0YCZA6NTpa1ShoJar54s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/a4cd0d-af14-49c3-9481-35479c54dcbd/1/L-QXNib0YCZA6NTpa1ShoJar54s.mft
Manifest number: 0F18
Signing time: Fri 31 Jan 2025 14:00:42 +0000
Manifest this update: Fri 31 Jan 2025 14:00:42 +0000
Manifest next update: Sat 01 Feb 2025 14:00:42 +0000
Files and hashes: 1: 8PzBSdujNIrE9ZxwXkq7Jh0bBAs.roa (hash: 4Awpnumk+tPfHQxPVq+VsOA860hCJdP+GfTQ/2K+zcA=)
2: L-QXNib0YCZA6NTpa1ShoJar54s.crl (hash: sJ+/KK7yHFyc8M/FsVWcqIiEbxqACtsaVu/Xyop4VFo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:f6:11:33:29:35:95:19:94:34:9f:3d:07:35:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fe4173626f4602640e8d4e96b54a1a096abe78b
Validity
Not Before: Jan 31 14:00:42 2025 GMT
Not After : Feb 1 14:00:42 2025 GMT
Subject: CN=7cf98a3dea62da409ef3dbcbc6ca92ccfa9f3c38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ca:08:ee:13:da:06:67:55:94:79:50:2c:66:
dd:37:fc:cc:9f:9f:81:09:af:cc:38:5f:8e:46:97:
57:94:e3:b5:b4:06:5b:13:d1:49:03:97:b6:cb:81:
50:2f:fd:9c:7a:23:c6:64:32:a7:64:fe:ac:24:6f:
ea:32:f9:fa:61:a8:21:8a:42:b2:b1:45:4f:60:6e:
a7:d0:02:8e:87:29:24:e3:89:bb:44:d3:d8:a2:ae:
5e:5b:f4:35:23:7f:e8:7c:e7:1d:74:9a:2b:ab:ba:
bb:d1:69:0e:6c:ec:c9:05:f8:9e:cc:0e:3a:81:32:
89:04:1e:05:2b:2a:cc:e7:a3:73:ab:d7:d7:42:ca:
94:3f:23:fd:88:9e:40:b6:04:07:38:83:45:68:6f:
e6:a3:4b:85:23:6b:4f:81:ae:81:c4:dc:b7:f5:ad:
39:38:dc:00:47:fb:55:cd:2b:4a:e4:95:c9:f3:6f:
f5:cb:c3:69:16:fb:c1:a6:5a:ef:77:25:bf:55:39:
53:15:7d:6a:1e:3c:57:fa:61:0c:c9:aa:60:ba:6a:
8b:6c:b8:61:73:90:50:f9:b5:00:24:c9:20:fb:e5:
70:f3:e8:24:53:71:8f:64:3b:42:5f:3a:5f:7d:a1:
ac:d6:58:72:e6:f2:d0:a8:09:81:6e:09:56:a0:7b:
b1:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:F9:8A:3D:EA:62:DA:40:9E:F3:DB:CB:C6:CA:92:CC:FA:9F:3C:38
X509v3 Authority Key Identifier:
keyid:2F:E4:17:36:26:F4:60:26:40:E8:D4:E9:6B:54:A1:A0:96:AB:E7:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L-QXNib0YCZA6NTpa1ShoJar54s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/a4cd0d-af14-49c3-9481-35479c54dcbd/1/L-QXNib0YCZA6NTpa1ShoJar54s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/a4cd0d-af14-49c3-9481-35479c54dcbd/1/L-QXNib0YCZA6NTpa1ShoJar54s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:d9:a3:f2:ca:0d:f7:36:b0:19:97:f3:a9:14:94:c0:5c:2f:
a9:f7:77:4e:44:d4:6b:d8:c3:99:ea:b0:71:92:73:e9:4a:8f:
61:b7:3a:fb:f3:85:fb:cb:53:25:61:79:60:87:a9:d1:77:b7:
0f:d1:7f:03:a9:8b:eb:58:b2:23:47:9e:56:c6:23:78:e5:0e:
1c:ba:be:1e:62:1d:be:14:e6:29:b5:18:ef:97:59:53:9e:60:
b5:dc:6d:fc:58:3d:27:9d:08:11:3e:db:76:95:39:c2:7c:72:
65:eb:e4:50:90:11:55:d2:af:41:0f:1e:bf:87:70:35:75:c7:
9d:6a:d6:71:7f:9c:c9:73:33:27:cd:d6:1a:83:6f:61:fc:b6:
08:0f:73:b3:56:a0:22:3a:f4:d1:69:53:51:49:45:00:58:e1:
89:be:a7:f0:5c:e1:cb:a1:6a:a5:6c:62:32:98:a0:02:71:ea:
8e:d5:f6:12:de:04:a3:33:dd:74:2e:bb:49:a4:2c:ed:23:4d:
cf:bb:11:23:d9:9d:1e:27:39:f0:79:2f:a1:5c:03:36:40:a3:
8d:87:3f:ba:49:82:17:da:20:e9:38:d5:4d:e0:72:fd:82:62:
ea:80:cb:ce:d6:d7:f4:9c:62:e3:88:1f:89:64:2f:51:59:a3:
a4:3d:5b:36
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qfYRMyk1lRmUNJ89BzUrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmZTQxNzM2MjZmNDYwMjY0MGU4ZDRlOTZiNTRhMWEwOTZh
YmU3OGIwHhcNMjUwMTMxMTQwMDQyWhcNMjUwMjAxMTQwMDQyWjAzMTEwLwYDVQQD
Eyg3Y2Y5OGEzZGVhNjJkYTQwOWVmM2RiY2JjNmNhOTJjY2ZhOWYzYzM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsMoI7hPaBmdVlHlQLGbdN/zMn5+B
Ca/MOF+ORpdXlOO1tAZbE9FJA5e2y4FQL/2ceiPGZDKnZP6sJG/qMvn6YaghikKy
sUVPYG6n0AKOhykk44m7RNPYoq5eW/Q1I3/ofOcddJorq7q70WkObOzJBfiezA46
gTKJBB4FKyrM56Nzq9fXQsqUPyP9iJ5AtgQHOINFaG/mo0uFI2tPga6BxNy39a05
ONwAR/tVzStK5JXJ82/1y8NpFvvBplrvdyW/VTlTFX1qHjxX+mEMyapgumqLbLhh
c5BQ+bUAJMkg++Vw8+gkU3GPZDtCXzpffaGs1lhy5vLQqAmBbglWoHuxzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHz5ij3qYtpAnvPby8bKksz6nzw4MB8GA1UdIwQY
MBaAFC/kFzYm9GAmQOjU6WtUoaCWq+eLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTC1RWE5pYjBZQ1pBNk5UcGExU2hvSmFyNTRzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy9hNGNkMGQtYWYxNC00OWMzLTk0ODEt
MzU0NzljNTRkY2JkLzEvTC1RWE5pYjBZQ1pBNk5UcGExU2hvSmFyNTRzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMy9hNGNkMGQtYWYxNC00OWMzLTk0ODEtMzU0NzljNTRkY2Jk
LzEvTC1RWE5pYjBZQ1pBNk5UcGExU2hvSmFyNTRzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZNmj8soN
9zawGZfzqRSUwFwvqfd3TkTUa9jDmeqwcZJz6UqPYbc6+/OF+8tTJWF5YIep0Xe3
D9F/A6mL61iyI0eeVsYjeOUOHLq+HmIdvhTmKbUY75dZU55gtdxt/Fg9J50IET7b
dpU5wnxyZevkUJARVdKvQQ8ev4dwNXXHnWrWcX+cyXMzJ83WGoNvYfy2CA9zs1ag
Ijr00WlTUUlFAFjhib6n8Fzhy6FqpWxiMpigAnHqjtX2Et4EozPddC67SaQs7SNN
z7sRI9mdHic58HkvoVwDNkCjjYc/ukmCF9og6TjVTeBy/YJi6oDLztbX9Jxi44gf
iWQvUVmjpD1bNg==
-----END CERTIFICATE-----
Generated at Fri Apr 25 16:58:56 2025 by rpki-client