Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/7cab15-c904-4236-89af-2093b6dffa64/1/l8dX8vOyKQu8KNZfm98AFvYfE5c.mft
File: l8dX8vOyKQu8KNZfm98AFvYfE5c.mft (raw, json)
Hash identifier: 5gT2Khg9FLfo1GuASQZA6l6xFTY+2dCnUgwZ4U2KMP8=
Subject key identifier: EE:4D:34:65:B5:73:02:BE:79:33:14:6E:D8:F5:8B:1B:AB:79:C1:DD
Authority key identifier: 97:C7:57:F2:F3:B2:29:0B:BC:28:D6:5F:9B:DF:00:16:F6:1F:13:97
Certificate issuer: /CN=97c757f2f3b2290bbc28d65f9bdf0016f61f1397
Certificate serial: 0194BBCF07479747D7D07B6013F17CC8E50D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l8dX8vOyKQu8KNZfm98AFvYfE5c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/7cab15-c904-4236-89af-2093b6dffa64/1/l8dX8vOyKQu8KNZfm98AFvYfE5c.mft
Manifest number: 13D2
Signing time: Fri 31 Jan 2025 10:01:34 +0000
Manifest this update: Fri 31 Jan 2025 10:01:34 +0000
Manifest next update: Sat 01 Feb 2025 10:01:34 +0000
Files and hashes: 1: jrvc6kmWjKHmuF_8SsZy0ZuPTP8.roa (hash: Z+xoWww5SsoPK3NcXFL/FecEhSX4cgiZ8Poe3txV32s=)
2: l8dX8vOyKQu8KNZfm98AFvYfE5c.crl (hash: ObbkRQIhUEKG4Oj373e3GLvy1PhCXAmhl6Dl1wzuAhM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cf:07:47:97:47:d7:d0:7b:60:13:f1:7c:c8:e5:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97c757f2f3b2290bbc28d65f9bdf0016f61f1397
Validity
Not Before: Jan 31 10:01:34 2025 GMT
Not After : Feb 1 10:01:34 2025 GMT
Subject: CN=ee4d3465b57302be7933146ed8f58b1bab79c1dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:ae:61:fe:8a:86:bd:2e:09:4e:a2:96:b1:53:
34:b6:02:bc:56:b3:35:d9:52:d1:f0:4a:87:67:8b:
43:16:3d:ba:fd:9c:30:e9:4e:37:be:04:42:8d:23:
a4:61:e0:91:9a:59:d5:f5:ae:c1:7f:6a:bb:5c:ca:
ad:34:63:75:b9:52:74:f8:62:3c:0f:0b:cd:99:5f:
dd:42:15:9b:26:92:9f:b0:1f:f2:5a:93:54:c6:33:
0f:4a:f2:59:06:66:95:cf:6e:2f:c8:64:bb:4f:3b:
95:6f:b6:46:e5:53:57:6a:75:c1:9a:35:dd:95:bc:
ef:dc:79:7f:08:b5:0c:71:94:e9:d7:97:6d:68:a8:
19:a6:cf:d3:4a:5c:a3:6a:b3:10:e7:0c:b4:75:9c:
5d:48:94:e2:79:5a:da:ac:3a:08:3c:5d:e2:0f:5f:
5a:97:be:a0:bb:27:01:47:13:1d:d1:6c:66:e7:b1:
9b:08:df:94:1e:95:84:13:27:24:0c:6d:7f:0b:85:
33:2a:14:c9:06:5c:de:49:c4:1a:f7:2f:c6:21:86:
c0:6a:f8:46:ab:44:2c:21:d4:92:c7:6e:dc:62:f4:
e6:6e:86:52:1a:3d:71:9f:8d:c2:0f:a9:b4:b3:e0:
24:d3:a0:31:10:b7:5b:07:fb:0f:01:30:8d:04:35:
09:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:4D:34:65:B5:73:02:BE:79:33:14:6E:D8:F5:8B:1B:AB:79:C1:DD
X509v3 Authority Key Identifier:
keyid:97:C7:57:F2:F3:B2:29:0B:BC:28:D6:5F:9B:DF:00:16:F6:1F:13:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l8dX8vOyKQu8KNZfm98AFvYfE5c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/7cab15-c904-4236-89af-2093b6dffa64/1/l8dX8vOyKQu8KNZfm98AFvYfE5c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/7cab15-c904-4236-89af-2093b6dffa64/1/l8dX8vOyKQu8KNZfm98AFvYfE5c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:4b:8c:55:e2:14:83:c1:e1:79:a6:18:72:2f:5a:e2:40:67:
20:71:35:1a:89:7c:e3:4a:ba:4a:39:ff:f4:99:01:c1:3b:00:
bf:e2:bf:a0:a7:ca:99:9d:18:63:f0:d2:51:b4:e1:83:59:81:
0a:f0:27:51:c8:e0:dc:7a:79:44:b8:6a:aa:e1:f8:16:56:19:
f4:53:5b:aa:ac:8b:72:19:46:60:bf:f5:18:8e:ea:18:b3:d3:
11:47:42:c7:8a:72:c6:7f:9f:d7:f8:8a:7d:ad:bd:bb:57:92:
20:77:1e:06:a8:ad:82:e9:a2:91:b6:8c:5d:c3:cf:58:70:75:
c7:13:6a:25:d6:f2:ab:fa:4c:ac:2b:75:d9:0b:ee:a1:0f:c1:
c1:43:19:01:10:78:05:cb:31:14:30:86:2a:08:f0:0f:6e:45:
c1:d4:36:4c:8f:67:11:7a:c3:03:e9:b9:b4:3e:e7:65:93:de:
a5:75:d7:af:0b:15:b6:0b:f9:6f:e0:07:b6:49:2a:a5:72:e4:
af:61:7d:8f:39:44:15:61:3a:ed:5c:e3:dc:bf:40:46:c5:5b:
f6:ec:d5:25:89:e0:ac:b9:b7:77:b3:1b:d6:de:97:b3:34:8a:
19:90:49:d8:6b:a4:36:27:bb:59:d6:78:77:06:2f:fb:89:c5:
92:80:de:ee
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zwdHl0fX0HtgE/F8yOUNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3Yzc1N2YyZjNiMjI5MGJiYzI4ZDY1ZjliZGYwMDE2ZjYx
ZjEzOTcwHhcNMjUwMTMxMTAwMTM0WhcNMjUwMjAxMTAwMTM0WjAzMTEwLwYDVQQD
EyhlZTRkMzQ2NWI1NzMwMmJlNzkzMzE0NmVkOGY1OGIxYmFiNzljMWRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA365h/oqGvS4JTqKWsVM0tgK8VrM1
2VLR8EqHZ4tDFj26/Zww6U43vgRCjSOkYeCRmlnV9a7Bf2q7XMqtNGN1uVJ0+GI8
DwvNmV/dQhWbJpKfsB/yWpNUxjMPSvJZBmaVz24vyGS7TzuVb7ZG5VNXanXBmjXd
lbzv3Hl/CLUMcZTp15dtaKgZps/TSlyjarMQ5wy0dZxdSJTieVrarDoIPF3iD19a
l76guycBRxMd0Wxm57GbCN+UHpWEEyckDG1/C4UzKhTJBlzeScQa9y/GIYbAavhG
q0QsIdSSx27cYvTmboZSGj1xn43CD6m0s+Ak06AxELdbB/sPATCNBDUJCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO5NNGW1cwK+eTMUbtj1ixurecHdMB8GA1UdIwQY
MBaAFJfHV/LzsikLvCjWX5vfABb2HxOXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbDhkWDh2T3lLUXU4S05aZm05OEFGdllmRTVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC83Y2FiMTUtYzkwNC00MjM2LTg5YWYt
MjA5M2I2ZGZmYTY0LzEvbDhkWDh2T3lLUXU4S05aZm05OEFGdllmRTVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC83Y2FiMTUtYzkwNC00MjM2LTg5YWYtMjA5M2I2ZGZmYTY0
LzEvbDhkWDh2T3lLUXU4S05aZm05OEFGdllmRTVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmEuMVeIU
g8HheaYYci9a4kBnIHE1Gol840q6Sjn/9JkBwTsAv+K/oKfKmZ0YY/DSUbThg1mB
CvAnUcjg3Hp5RLhqquH4FlYZ9FNbqqyLchlGYL/1GI7qGLPTEUdCx4pyxn+f1/iK
fa29u1eSIHceBqitgumikbaMXcPPWHB1xxNqJdbyq/pMrCt12QvuoQ/BwUMZARB4
BcsxFDCGKgjwD25FwdQ2TI9nEXrDA+m5tD7nZZPepXXXrwsVtgv5b+AHtkkqpXLk
r2F9jzlEFWE67Vzj3L9ARsVb9uzVJYngrLm3d7Mb1t6XszSKGZBJ2GukNie7WdZ4
dwYv+4nFkoDe7g==
-----END CERTIFICATE-----
Generated at Thu May 1 06:02:40 2025 by rpki-client