Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/b3c41a-492c-45e4-89d6-dcc4c45bf162/1/lsgslDmkFHsuorWXz_xRALqNMnw.mft
File: lsgslDmkFHsuorWXz_xRALqNMnw.mft (raw, json)
Hash identifier: OpOXXv09D7x6HJlnsXNyWBzQyn2cO8NWqq6I08TXvqQ=
Subject key identifier: 69:8A:5A:2A:09:CB:24:2E:B0:8B:46:91:1D:69:4B:33:72:ED:94:98
Authority key identifier: 96:C8:2C:94:39:A4:14:7B:2E:A2:B5:97:CF:FC:51:00:BA:8D:32:7C
Certificate issuer: /CN=96c82c9439a4147b2ea2b597cffc5100ba8d327c
Certificate serial: 0194BBCDC856EF72BC1CE0E6DB075D2574AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lsgslDmkFHsuorWXz_xRALqNMnw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/b3c41a-492c-45e4-89d6-dcc4c45bf162/1/lsgslDmkFHsuorWXz_xRALqNMnw.mft
Manifest number: 0FEA
Signing time: Fri 31 Jan 2025 10:00:13 +0000
Manifest this update: Fri 31 Jan 2025 10:00:13 +0000
Manifest next update: Sat 01 Feb 2025 10:00:13 +0000
Files and hashes: 1: lsgslDmkFHsuorWXz_xRALqNMnw.crl (hash: IdIEIVIhQUE82YzqnPvOUffFMLkCaM5hOWA2r3AdJlo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:c8:56:ef:72:bc:1c:e0:e6:db:07:5d:25:74:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96c82c9439a4147b2ea2b597cffc5100ba8d327c
Validity
Not Before: Jan 31 10:00:13 2025 GMT
Not After : Feb 1 10:00:13 2025 GMT
Subject: CN=698a5a2a09cb242eb08b46911d694b3372ed9498
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:b3:e3:74:1d:0f:69:b6:64:1f:31:61:5d:c6:
73:b7:0a:06:35:45:d5:27:bd:78:4c:49:29:37:da:
c1:66:23:c4:9c:21:ad:ec:0e:f5:a2:20:af:67:c3:
fe:30:c6:21:94:e5:50:9d:64:b0:c0:a5:ea:8c:4c:
7e:d3:84:5b:63:c8:19:01:31:21:c5:da:ec:36:f8:
ad:86:41:2b:3e:d3:aa:c1:55:57:6d:6a:bc:81:32:
8b:22:b2:29:c6:88:70:a3:ae:f0:1b:c7:80:8f:88:
5b:34:4f:8d:0d:05:b1:9a:68:76:0f:b8:2e:0b:e2:
0c:68:81:63:1c:10:a3:88:bc:65:c6:19:bd:82:1c:
c8:16:6b:05:b5:f7:71:01:59:06:54:ad:38:cb:1a:
58:b1:ab:7c:0f:8d:9b:67:76:1b:6a:3a:c8:63:e4:
e4:a5:30:d4:79:80:dc:d5:8e:84:65:de:16:f5:f0:
0c:80:1f:b1:01:fe:09:3a:7f:e8:88:81:5c:c5:f1:
8c:e6:9a:aa:65:1d:ff:c6:ad:4e:fe:07:6b:d7:0f:
bc:90:0b:2a:3d:0c:a7:b3:5c:7b:ee:51:c5:f3:32:
7d:18:fa:05:ee:97:3b:aa:fa:5e:13:26:11:ba:ab:
1b:76:b4:f2:54:da:cc:62:c9:86:ec:c8:b0:93:00:
3c:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:8A:5A:2A:09:CB:24:2E:B0:8B:46:91:1D:69:4B:33:72:ED:94:98
X509v3 Authority Key Identifier:
keyid:96:C8:2C:94:39:A4:14:7B:2E:A2:B5:97:CF:FC:51:00:BA:8D:32:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lsgslDmkFHsuorWXz_xRALqNMnw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/b3c41a-492c-45e4-89d6-dcc4c45bf162/1/lsgslDmkFHsuorWXz_xRALqNMnw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/b3c41a-492c-45e4-89d6-dcc4c45bf162/1/lsgslDmkFHsuorWXz_xRALqNMnw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:6d:4e:72:c0:d9:8d:6b:5a:f8:1f:61:a8:e6:f5:2d:47:11:
98:50:0a:71:0f:3a:c8:bf:35:98:dc:fc:0d:ce:f1:fc:d5:69:
1e:dd:6a:1c:e4:5e:a7:6d:f3:16:4c:04:1c:4a:17:f9:17:0d:
2f:81:3f:41:4c:5e:d0:65:ce:85:6c:59:e5:55:91:6c:23:6c:
66:5c:7d:fd:d2:6a:89:d1:81:e9:8b:25:ab:10:dd:1b:ba:9d:
f3:06:fb:b1:c1:a1:8b:a6:8c:5b:e3:b7:6c:d8:06:a9:c5:aa:
77:fb:36:c3:b1:97:bb:11:b5:b8:25:79:1a:6f:99:3e:af:83:
b9:30:68:2a:14:ff:bd:82:b5:26:01:05:fa:f5:85:b6:5a:76:
e1:34:25:30:1a:66:40:d0:10:9a:cb:52:eb:3d:f4:d8:bd:98:
d7:43:ea:4f:60:89:b4:5a:fc:af:56:d1:de:af:53:af:bb:14:
c4:ca:9d:02:ff:37:db:0e:6e:d2:d7:c9:a1:2a:62:97:0f:99:
e3:5c:54:c8:7e:a6:77:cf:6a:b7:8d:3f:fb:4f:3c:14:e7:73:
01:31:c9:05:25:89:31:34:01:29:51:03:fd:37:0a:47:e8:91:
20:86:f4:ed:b8:d2:b6:8a:bb:22:b9:c3:19:d1:00:29:b6:e5:
25:2b:fb:e2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zchW73K8HODm2wddJXSrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2YzgyYzk0MzlhNDE0N2IyZWEyYjU5N2NmZmM1MTAwYmE4
ZDMyN2MwHhcNMjUwMTMxMTAwMDEzWhcNMjUwMjAxMTAwMDEzWjAzMTEwLwYDVQQD
Eyg2OThhNWEyYTA5Y2IyNDJlYjA4YjQ2OTExZDY5NGIzMzcyZWQ5NDk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg7PjdB0PabZkHzFhXcZztwoGNUXV
J714TEkpN9rBZiPEnCGt7A71oiCvZ8P+MMYhlOVQnWSwwKXqjEx+04RbY8gZATEh
xdrsNvithkErPtOqwVVXbWq8gTKLIrIpxohwo67wG8eAj4hbNE+NDQWxmmh2D7gu
C+IMaIFjHBCjiLxlxhm9ghzIFmsFtfdxAVkGVK04yxpYsat8D42bZ3YbajrIY+Tk
pTDUeYDc1Y6EZd4W9fAMgB+xAf4JOn/oiIFcxfGM5pqqZR3/xq1O/gdr1w+8kAsq
PQyns1x77lHF8zJ9GPoF7pc7qvpeEyYRuqsbdrTyVNrMYsmG7MiwkwA8EwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGmKWioJyyQusItGkR1pSzNy7ZSYMB8GA1UdIwQY
MBaAFJbILJQ5pBR7LqK1l8/8UQC6jTJ8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbHNnc2xEbWtGSHN1b3JXWHpfeFJBTHFOTW53LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS9iM2M0MWEtNDkyYy00NWU0LTg5ZDYt
ZGNjNGM0NWJmMTYyLzEvbHNnc2xEbWtGSHN1b3JXWHpfeFJBTHFOTW53Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS9iM2M0MWEtNDkyYy00NWU0LTg5ZDYtZGNjNGM0NWJmMTYy
LzEvbHNnc2xEbWtGSHN1b3JXWHpfeFJBTHFOTW53LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMm1OcsDZ
jWta+B9hqOb1LUcRmFAKcQ86yL81mNz8Dc7x/NVpHt1qHORep23zFkwEHEoX+RcN
L4E/QUxe0GXOhWxZ5VWRbCNsZlx9/dJqidGB6YslqxDdG7qd8wb7scGhi6aMW+O3
bNgGqcWqd/s2w7GXuxG1uCV5Gm+ZPq+DuTBoKhT/vYK1JgEF+vWFtlp24TQlMBpm
QNAQmstS6z302L2Y10PqT2CJtFr8r1bR3q9Tr7sUxMqdAv832w5u0tfJoSpilw+Z
41xUyH6md89qt40/+088FOdzATHJBSWJMTQBKVED/TcKR+iRIIb07bjStoq7IrnD
GdEAKbblJSv74g==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:44:07 2025 by rpki-client