Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/edddaa-c31a-4026-8f85-0566f51252a9/1/lJCxxOooQt35kp6oplRbgXoodoA.mft
File: lJCxxOooQt35kp6oplRbgXoodoA.mft (raw, json)
Hash identifier: Y9tQ06Mz+B7mqpd1Dy4oFSD8vWf0FD0XuDGTHQtjvgw=
Subject key identifier: 0B:DA:25:76:C6:DA:11:52:DD:30:1E:E3:4B:61:4C:81:37:18:93:DB
Authority key identifier: 94:90:B1:C4:EA:28:42:DD:F9:92:9E:A8:A6:54:5B:81:7A:28:76:80
Certificate issuer: /CN=9490b1c4ea2842ddf9929ea8a6545b817a287680
Certificate serial: 0194BBCDC5EC16876C41988BAD5136BC1F30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lJCxxOooQt35kp6oplRbgXoodoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/edddaa-c31a-4026-8f85-0566f51252a9/1/lJCxxOooQt35kp6oplRbgXoodoA.mft
Manifest number: 02B6
Signing time: Fri 31 Jan 2025 10:00:12 +0000
Manifest this update: Fri 31 Jan 2025 10:00:12 +0000
Manifest next update: Sat 01 Feb 2025 10:00:12 +0000
Files and hashes: 1: lJCxxOooQt35kp6oplRbgXoodoA.crl (hash: oC3iq8lzuU2tOqEs/DwdtCv41XyL2G7qU0wCAslojkw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:c5:ec:16:87:6c:41:98:8b:ad:51:36:bc:1f:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9490b1c4ea2842ddf9929ea8a6545b817a287680
Validity
Not Before: Jan 31 10:00:12 2025 GMT
Not After : Feb 1 10:00:12 2025 GMT
Subject: CN=0bda2576c6da1152dd301ee34b614c81371893db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:78:38:0b:c2:f0:39:6f:fe:f1:72:27:ae:9f:
d6:f1:6b:de:bc:95:96:39:8a:40:bb:71:fa:83:e0:
0b:94:2a:92:8a:f5:47:0f:4c:3c:51:70:0f:42:b2:
8b:30:93:90:dd:4d:d7:4c:ca:67:13:de:d3:c6:9e:
a7:b9:86:85:e9:05:b7:27:5b:73:b4:48:43:16:ee:
34:2a:ab:af:01:6b:91:72:5c:bd:9b:f8:35:81:35:
a8:56:b8:21:25:9f:7f:52:04:bd:65:b6:e2:40:e0:
76:7e:70:b4:c2:7b:06:60:85:32:b0:5d:ac:2c:1d:
ce:84:02:2a:dd:95:0d:8b:cd:7a:cd:34:a7:72:b3:
93:3b:10:97:ab:9b:d8:df:f7:70:ce:04:96:14:5b:
d5:30:ac:9a:df:24:2b:b6:25:17:61:48:e1:1b:4b:
fc:8c:d4:db:af:f2:fb:57:c2:28:aa:6f:70:a1:27:
38:76:1c:1c:29:c0:1f:e8:a8:96:34:65:5d:40:c0:
46:ee:0a:fd:cb:83:60:41:ac:cc:c2:eb:a1:8c:3e:
ef:4e:fb:6e:a3:93:25:cf:53:43:dd:84:71:93:ac:
de:ee:3d:7d:2d:23:ac:1d:9a:96:7d:ea:26:61:2c:
24:35:55:af:ad:01:c2:42:af:f9:97:ea:55:e6:64:
b1:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:DA:25:76:C6:DA:11:52:DD:30:1E:E3:4B:61:4C:81:37:18:93:DB
X509v3 Authority Key Identifier:
keyid:94:90:B1:C4:EA:28:42:DD:F9:92:9E:A8:A6:54:5B:81:7A:28:76:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lJCxxOooQt35kp6oplRbgXoodoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/edddaa-c31a-4026-8f85-0566f51252a9/1/lJCxxOooQt35kp6oplRbgXoodoA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/edddaa-c31a-4026-8f85-0566f51252a9/1/lJCxxOooQt35kp6oplRbgXoodoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:19:af:17:88:68:54:3d:d1:bb:a5:e2:9b:69:37:f5:dc:ea:
a4:1b:e1:42:25:7e:82:cf:95:aa:03:0f:c7:76:dd:9d:01:8f:
9c:46:c1:a4:97:8e:08:60:4c:99:ec:a1:b1:fa:fe:0e:78:9e:
51:31:50:21:6a:02:4b:1e:91:c4:2a:8c:57:69:0e:c2:d2:05:
fe:46:b6:4c:3e:f0:36:8a:5c:20:d7:ae:b3:91:2d:e2:1c:d7:
01:0d:ef:30:74:99:95:0e:be:ae:dc:5e:ee:2c:2a:d1:66:6d:
ea:e2:3f:3d:0d:c9:d9:88:49:52:7c:fe:08:d8:8c:11:82:a1:
49:8e:1f:9a:18:1f:94:e9:45:39:65:12:66:32:c6:99:63:dc:
98:c5:6b:d0:99:f0:09:b2:e6:c6:5a:88:c3:55:b2:ae:8e:d0:
f6:10:d4:dd:9c:15:10:d5:70:ea:a3:b5:f5:4f:83:8b:27:31:
bf:56:19:9d:01:bc:15:1b:ea:d5:ad:cf:c0:ef:b8:32:4e:a6:
5f:fc:5e:9c:35:2a:37:f0:18:1e:4a:4e:90:2f:19:63:3e:54:
e0:ad:ce:e6:af:32:b3:1e:46:cb:13:ca:f7:72:63:40:75:db:
7e:48:51:81:7b:65:f0:ec:8e:ee:ea:03:74:5e:18:a3:bc:40:
79:49:a3:d8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zcXsFodsQZiLrVE2vB8wMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0OTBiMWM0ZWEyODQyZGRmOTkyOWVhOGE2NTQ1YjgxN2Ey
ODc2ODAwHhcNMjUwMTMxMTAwMDEyWhcNMjUwMjAxMTAwMDEyWjAzMTEwLwYDVQQD
EygwYmRhMjU3NmM2ZGExMTUyZGQzMDFlZTM0YjYxNGM4MTM3MTg5M2RiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtXg4C8LwOW/+8XInrp/W8WvevJWW
OYpAu3H6g+ALlCqSivVHD0w8UXAPQrKLMJOQ3U3XTMpnE97Txp6nuYaF6QW3J1tz
tEhDFu40KquvAWuRcly9m/g1gTWoVrghJZ9/UgS9ZbbiQOB2fnC0wnsGYIUysF2s
LB3OhAIq3ZUNi816zTSncrOTOxCXq5vY3/dwzgSWFFvVMKya3yQrtiUXYUjhG0v8
jNTbr/L7V8Ioqm9woSc4dhwcKcAf6KiWNGVdQMBG7gr9y4NgQazMwuuhjD7vTvtu
o5Mlz1ND3YRxk6ze7j19LSOsHZqWfeomYSwkNVWvrQHCQq/5l+pV5mSx9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAvaJXbG2hFS3TAe40thTIE3GJPbMB8GA1UdIwQY
MBaAFJSQscTqKELd+ZKeqKZUW4F6KHaAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbEpDeHhPb29RdDM1a3A2b3BsUmJnWG9vZG9BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy9lZGRkYWEtYzMxYS00MDI2LThmODUt
MDU2NmY1MTI1MmE5LzEvbEpDeHhPb29RdDM1a3A2b3BsUmJnWG9vZG9BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMy9lZGRkYWEtYzMxYS00MDI2LThmODUtMDU2NmY1MTI1MmE5
LzEvbEpDeHhPb29RdDM1a3A2b3BsUmJnWG9vZG9BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjxmvF4ho
VD3Ru6Xim2k39dzqpBvhQiV+gs+VqgMPx3bdnQGPnEbBpJeOCGBMmeyhsfr+Dnie
UTFQIWoCSx6RxCqMV2kOwtIF/ka2TD7wNopcINeus5Et4hzXAQ3vMHSZlQ6+rtxe
7iwq0WZt6uI/PQ3J2YhJUnz+CNiMEYKhSY4fmhgflOlFOWUSZjLGmWPcmMVr0Jnw
CbLmxlqIw1Wyro7Q9hDU3ZwVENVw6qO19U+Diycxv1YZnQG8FRvq1a3PwO+4Mk6m
X/xenDUqN/AYHkpOkC8ZYz5U4K3O5q8ysx5GyxPK93JjQHXbfkhRgXtl8OyO7uoD
dF4Yo7xAeUmj2A==
-----END CERTIFICATE-----
Generated at Mon Apr 28 09:00:42 2025 by rpki-client