Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/cb2ee8-8782-4af4-8f6b-9d7f86f0d477/1/lWhmVi2fJYMewKzoqdjNDllNcfw.mft
File: lWhmVi2fJYMewKzoqdjNDllNcfw.mft (raw, json)
Hash identifier: E/aH2EqwFy6z6dQXPJWMciGCDc9/NttkHnThYDadht8=
Subject key identifier: A7:52:4D:A4:1D:FD:CF:AD:56:C6:7C:C6:B9:4B:90:65:18:B7:0C:88
Authority key identifier: 95:68:66:56:2D:9F:25:83:1E:C0:AC:E8:A9:D8:CD:0E:59:4D:71:FC
Certificate issuer: /CN=956866562d9f25831ec0ace8a9d8cd0e594d71fc
Certificate serial: 0194BC72D3DEC84107336DC31097FB2183EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lWhmVi2fJYMewKzoqdjNDllNcfw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/cb2ee8-8782-4af4-8f6b-9d7f86f0d477/1/lWhmVi2fJYMewKzoqdjNDllNcfw.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 13:00:29 +0000
Manifest this update: Fri 31 Jan 2025 13:00:29 +0000
Manifest next update: Sat 01 Feb 2025 13:00:29 +0000
Files and hashes: 1: 5A1rFRWiaoMZrd1W-j1DOiNHcxg.roa (hash: V+WxsJZcqfyEzzmw0OXvgqJRZOf8o70VUJRyRrh0lh8=)
2: dwjCitSclr7fGwprU9bQVIbfmCg.roa (hash: p2lC46dhETK6ft6AVZYruiB24S2hxZ7wuf8RUwFJV9o=)
3: lWhmVi2fJYMewKzoqdjNDllNcfw.crl (hash: nkqaUBj3iEqf5EYPpzbdznWRybBpjT5pIRaCx9CIQPQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:d3:de:c8:41:07:33:6d:c3:10:97:fb:21:83:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=956866562d9f25831ec0ace8a9d8cd0e594d71fc
Validity
Not Before: Jan 31 13:00:29 2025 GMT
Not After : Feb 1 13:00:29 2025 GMT
Subject: CN=a7524da41dfdcfad56c67cc6b94b906518b70c88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:0a:50:df:e0:b1:04:7e:13:80:be:78:41:ee:
0e:a9:7c:df:b4:31:16:ac:26:23:fb:cd:19:03:29:
d6:f9:6d:5f:2f:d4:9d:64:30:d7:d8:3f:30:88:21:
ff:93:c3:e9:98:c9:2f:57:c8:bb:11:17:81:71:98:
ca:ba:ae:b5:32:74:8c:45:1c:05:69:45:21:51:fe:
db:64:db:dc:bb:f0:f6:89:85:2d:d9:b9:2a:85:8a:
e8:75:8d:0b:50:97:f2:65:3d:12:f5:43:07:3e:6c:
84:44:07:8b:fc:27:a8:73:26:b0:7c:c4:c4:c1:e2:
36:85:7e:6a:7c:a3:c3:c9:61:dd:e1:e7:d8:95:94:
33:9f:68:47:a0:17:86:5d:d5:f7:94:06:79:84:ba:
6c:1e:ab:e1:43:3b:bc:f6:60:fc:25:b7:bc:40:e9:
36:e1:37:9f:d0:06:f5:7f:a9:e7:a8:ae:39:69:42:
3c:49:cb:7b:db:a5:76:db:a2:e1:c5:d8:0c:af:a3:
d9:8f:c2:2a:9b:5d:1c:8b:28:0d:88:ad:f5:1c:8f:
d5:01:b7:21:6e:a0:23:2e:dc:9a:a2:ff:60:54:6e:
79:1c:6a:3c:b4:c1:c9:65:7f:e7:60:22:a7:a7:44:
53:0f:41:49:ab:be:ea:ef:2f:3e:82:ca:00:91:f1:
31:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:52:4D:A4:1D:FD:CF:AD:56:C6:7C:C6:B9:4B:90:65:18:B7:0C:88
X509v3 Authority Key Identifier:
keyid:95:68:66:56:2D:9F:25:83:1E:C0:AC:E8:A9:D8:CD:0E:59:4D:71:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lWhmVi2fJYMewKzoqdjNDllNcfw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/cb2ee8-8782-4af4-8f6b-9d7f86f0d477/1/lWhmVi2fJYMewKzoqdjNDllNcfw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/cb2ee8-8782-4af4-8f6b-9d7f86f0d477/1/lWhmVi2fJYMewKzoqdjNDllNcfw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:5e:72:c0:b8:bc:46:8d:d0:3d:4c:39:d9:7d:dd:46:17:77:
f6:0a:0e:c3:04:41:b6:33:15:ae:4f:46:ae:86:76:bf:e7:ae:
97:86:8c:8b:94:98:98:99:bb:f5:87:00:07:1a:75:7f:4f:e6:
ea:79:c5:45:57:8f:fc:6a:e2:7a:a4:1d:7c:95:ba:5b:c4:3f:
66:96:07:42:ea:f5:56:67:d2:60:0d:f9:a1:26:28:73:35:5c:
ca:26:6d:20:c3:f8:27:16:f8:5c:a8:29:cc:c2:81:04:59:20:
39:54:69:b7:8d:91:85:53:3a:b0:7f:39:5c:06:8b:8a:35:65:
f5:be:98:43:9a:91:38:cd:55:28:25:b6:e1:eb:e2:f2:1b:76:
26:f8:cc:3a:28:d6:99:0f:14:d6:5b:51:5c:f5:2f:8d:41:4f:
c2:dd:19:48:04:8f:ce:f0:97:5a:56:49:78:ae:f8:54:51:23:
aa:65:36:8c:cc:c9:5c:90:55:06:9c:d4:8b:a2:4d:a8:03:f7:
a7:e3:11:39:cc:de:9a:00:50:7d:70:48:7a:57:44:43:8f:6c:
31:c7:38:c1:f2:b7:6b:1c:98:fd:0b:80:99:ba:57:24:07:47:
ee:6d:65:9c:91:ff:af:59:c1:a8:69:ff:c0:58:be:7a:09:ca:
cb:ba:3b:23
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8ctPeyEEHM23DEJf7IYPqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1Njg2NjU2MmQ5ZjI1ODMxZWMwYWNlOGE5ZDhjZDBlNTk0
ZDcxZmMwHhcNMjUwMTMxMTMwMDI5WhcNMjUwMjAxMTMwMDI5WjAzMTEwLwYDVQQD
EyhhNzUyNGRhNDFkZmRjZmFkNTZjNjdjYzZiOTRiOTA2NTE4YjcwYzg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmgpQ3+CxBH4TgL54Qe4OqXzftDEW
rCYj+80ZAynW+W1fL9SdZDDX2D8wiCH/k8PpmMkvV8i7EReBcZjKuq61MnSMRRwF
aUUhUf7bZNvcu/D2iYUt2bkqhYrodY0LUJfyZT0S9UMHPmyERAeL/CeocyawfMTE
weI2hX5qfKPDyWHd4efYlZQzn2hHoBeGXdX3lAZ5hLpsHqvhQzu89mD8Jbe8QOk2
4Tef0Ab1f6nnqK45aUI8Sct726V226LhxdgMr6PZj8Iqm10ciygNiK31HI/VAbch
bqAjLtyaov9gVG55HGo8tMHJZX/nYCKnp0RTD0FJq77q7y8+gsoAkfExuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKdSTaQd/c+tVsZ8xrlLkGUYtwyIMB8GA1UdIwQY
MBaAFJVoZlYtnyWDHsCs6KnYzQ5ZTXH8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbFdobVZpMmZKWU1ld0t6b3Fkak5EbGxOY2Z3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS9jYjJlZTgtODc4Mi00YWY0LThmNmIt
OWQ3Zjg2ZjBkNDc3LzEvbFdobVZpMmZKWU1ld0t6b3Fkak5EbGxOY2Z3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS9jYjJlZTgtODc4Mi00YWY0LThmNmItOWQ3Zjg2ZjBkNDc3
LzEvbFdobVZpMmZKWU1ld0t6b3Fkak5EbGxOY2Z3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo15ywLi8
Ro3QPUw52X3dRhd39goOwwRBtjMVrk9GroZ2v+eul4aMi5SYmJm79YcABxp1f0/m
6nnFRVeP/GrieqQdfJW6W8Q/ZpYHQur1VmfSYA35oSYoczVcyiZtIMP4Jxb4XKgp
zMKBBFkgOVRpt42RhVM6sH85XAaLijVl9b6YQ5qROM1VKCW24evi8ht2JvjMOijW
mQ8U1ltRXPUvjUFPwt0ZSASPzvCXWlZJeK74VFEjqmU2jMzJXJBVBpzUi6JNqAP3
p+MROczemgBQfXBIeldEQ49sMcc4wfK3axyY/QuAmbpXJAdH7m1lnJH/r1nBqGn/
wFi+egnKy7o7Iw==
-----END CERTIFICATE-----
Generated at Tue Apr 29 20:13:31 2025 by rpki-client