Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/b47217-3d58-4109-9a18-347b3052b3cc/1/lopFBwJlXLHBL1GJM9k877nt4j4.mft
File: lopFBwJlXLHBL1GJM9k877nt4j4.mft (raw, json)
Hash identifier: qd3SzkUmiYaXkuTDp4mtFy+pL08jR81AfXqWXdc/DlE=
Subject key identifier: 33:5F:6B:59:B8:02:4C:4A:C2:AA:10:70:FE:41:86:B6:E0:7C:4D:5C
Authority key identifier: 96:8A:45:07:02:65:5C:B1:C1:2F:51:89:33:D9:3C:EF:B9:ED:E2:3E
Certificate issuer: /CN=968a450702655cb1c12f518933d93cefb9ede23e
Certificate serial: 0194BD4E46AC0DA78BE1D06F72EA9D3C0C2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lopFBwJlXLHBL1GJM9k877nt4j4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/b47217-3d58-4109-9a18-347b3052b3cc/1/lopFBwJlXLHBL1GJM9k877nt4j4.mft
Manifest number: FD
Signing time: Fri 31 Jan 2025 17:00:11 +0000
Manifest this update: Fri 31 Jan 2025 17:00:11 +0000
Manifest next update: Sat 01 Feb 2025 17:00:11 +0000
Files and hashes: 1: lopFBwJlXLHBL1GJM9k877nt4j4.crl (hash: evwaQSI8rmSqb2kjoiWwaXrpnlrX4rruSRaF1LCDCas=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:46:ac:0d:a7:8b:e1:d0:6f:72:ea:9d:3c:0c:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=968a450702655cb1c12f518933d93cefb9ede23e
Validity
Not Before: Jan 31 17:00:11 2025 GMT
Not After : Feb 1 17:00:11 2025 GMT
Subject: CN=335f6b59b8024c4ac2aa1070fe4186b6e07c4d5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:fe:4c:82:dd:ed:d1:1f:d4:d0:97:36:f7:0e:
3b:bd:04:ee:b5:eb:80:83:6f:f1:be:c0:4e:52:4b:
69:60:9d:d7:50:cc:bf:f4:1e:bc:af:38:74:43:42:
7b:f5:09:6e:1f:ec:20:06:cd:aa:9e:fb:35:3a:11:
fd:c4:fc:de:f2:61:e7:a2:6d:8e:46:f0:70:51:5a:
f8:d2:a2:4a:73:e4:e6:48:a0:1d:ee:a3:04:44:33:
4f:16:d4:3e:73:c1:9b:72:3d:ce:a8:7c:17:97:22:
04:26:2e:0c:eb:f3:d2:71:f7:04:a8:ce:cb:2b:6a:
03:a9:ec:fd:cc:8d:39:8a:70:eb:2b:5a:93:49:49:
20:06:2f:82:b5:1d:1a:e4:ee:fb:79:5b:e3:f3:ed:
2e:01:44:b3:1d:17:c5:db:7a:01:62:cf:b1:a6:e6:
71:57:2c:e6:96:00:c5:8b:3d:0e:cc:fc:13:3c:04:
77:9a:2a:9f:3e:4e:32:b1:eb:c2:cd:e9:dd:2f:11:
63:0a:76:8d:87:e1:31:79:d9:ce:4f:a5:e0:12:da:
a0:6b:d7:e9:2b:17:61:81:86:ba:04:c9:7f:35:da:
6e:b6:a5:05:e6:9f:b4:65:af:f3:6d:dd:81:e9:df:
12:b6:df:83:fe:83:39:1a:e1:a5:15:78:73:64:c7:
9a:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:5F:6B:59:B8:02:4C:4A:C2:AA:10:70:FE:41:86:B6:E0:7C:4D:5C
X509v3 Authority Key Identifier:
keyid:96:8A:45:07:02:65:5C:B1:C1:2F:51:89:33:D9:3C:EF:B9:ED:E2:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lopFBwJlXLHBL1GJM9k877nt4j4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b47217-3d58-4109-9a18-347b3052b3cc/1/lopFBwJlXLHBL1GJM9k877nt4j4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b47217-3d58-4109-9a18-347b3052b3cc/1/lopFBwJlXLHBL1GJM9k877nt4j4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:e4:a7:1c:57:cb:08:05:7c:50:d2:8b:92:4b:5b:bd:3d:ae:
38:49:9b:60:7a:f3:54:68:f9:b6:da:01:44:6b:36:35:3c:9f:
1c:6b:46:a2:4a:6d:55:c6:ec:56:6d:48:41:ee:3b:1c:3c:15:
29:5d:63:7d:89:f6:41:1e:31:be:02:4a:c4:d5:b9:78:7c:a6:
d0:a5:6a:fa:02:76:61:99:03:10:de:74:62:b4:60:67:ed:d7:
1b:28:59:23:09:37:14:b0:91:b6:b0:a5:3f:9c:76:91:9e:03:
e3:20:b9:52:3d:eb:cf:52:6e:1c:f7:f0:34:1f:e7:4f:27:59:
9a:00:c2:ff:91:7b:aa:af:b3:a6:43:c6:5c:9c:b5:e1:9e:ef:
23:06:1d:23:82:8f:55:5a:69:a1:a6:02:e1:3c:87:57:73:84:
ac:58:bb:9c:bc:00:54:91:f8:d6:1c:73:3b:48:a6:b5:05:b0:
c9:4f:08:b7:10:1a:9f:17:ba:60:11:6b:f4:66:71:a8:74:85:
06:65:87:eb:aa:8f:b1:3d:ab:28:81:e7:c2:4b:69:81:26:e6:
21:76:d3:12:f3:97:6e:c5:f4:08:d4:91:fa:6b:16:ee:0f:eb:
33:71:65:73:f9:5b:57:89:ac:28:ec:1e:03:81:c4:99:54:b8:
1d:68:70:65
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9TkasDaeL4dBvcuqdPAwuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2OGE0NTA3MDI2NTVjYjFjMTJmNTE4OTMzZDkzY2VmYjll
ZGUyM2UwHhcNMjUwMTMxMTcwMDExWhcNMjUwMjAxMTcwMDExWjAzMTEwLwYDVQQD
EygzMzVmNmI1OWI4MDI0YzRhYzJhYTEwNzBmZTQxODZiNmUwN2M0ZDVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4P5Mgt3t0R/U0Jc29w47vQTuteuA
g2/xvsBOUktpYJ3XUMy/9B68rzh0Q0J79QluH+wgBs2qnvs1OhH9xPze8mHnom2O
RvBwUVr40qJKc+TmSKAd7qMERDNPFtQ+c8Gbcj3OqHwXlyIEJi4M6/PScfcEqM7L
K2oDqez9zI05inDrK1qTSUkgBi+CtR0a5O77eVvj8+0uAUSzHRfF23oBYs+xpuZx
VyzmlgDFiz0OzPwTPAR3miqfPk4ysevCzendLxFjCnaNh+ExednOT6XgEtqga9fp
KxdhgYa6BMl/NdputqUF5p+0Za/zbd2B6d8Stt+D/oM5GuGlFXhzZMeaJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDNfa1m4AkxKwqoQcP5BhrbgfE1cMB8GA1UdIwQY
MBaAFJaKRQcCZVyxwS9RiTPZPO+57eI+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbG9wRkJ3SmxYTEhCTDFHSk05azg3N250NGo0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS9iNDcyMTctM2Q1OC00MTA5LTlhMTgt
MzQ3YjMwNTJiM2NjLzEvbG9wRkJ3SmxYTEhCTDFHSk05azg3N250NGo0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS9iNDcyMTctM2Q1OC00MTA5LTlhMTgtMzQ3YjMwNTJiM2Nj
LzEvbG9wRkJ3SmxYTEhCTDFHSk05azg3N250NGo0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdeSnHFfL
CAV8UNKLkktbvT2uOEmbYHrzVGj5ttoBRGs2NTyfHGtGokptVcbsVm1IQe47HDwV
KV1jfYn2QR4xvgJKxNW5eHym0KVq+gJ2YZkDEN50YrRgZ+3XGyhZIwk3FLCRtrCl
P5x2kZ4D4yC5Uj3rz1JuHPfwNB/nTydZmgDC/5F7qq+zpkPGXJy14Z7vIwYdI4KP
VVppoaYC4TyHV3OErFi7nLwAVJH41hxzO0imtQWwyU8ItxAanxe6YBFr9GZxqHSF
BmWH66qPsT2rKIHnwktpgSbmIXbTEvOXbsX0CNSR+msW7g/rM3Flc/lbV4msKOwe
A4HEmVS4HWhwZQ==
-----END CERTIFICATE-----
Generated at Mon Apr 28 14:48:16 2025 by rpki-client