Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/ffce0e-c3ad-4c8a-9914-745cde74d01b/1/lDkZOu8f5NVwPLg033qrr4pL5Cw.mft
File: lDkZOu8f5NVwPLg033qrr4pL5Cw.mft (raw, json)
Hash identifier: kn/IwKwAfUtWdaGGYTUWJEoKjQw3tJURtUNEWT0If8Q=
Subject key identifier: C8:02:60:76:FC:8A:3E:3E:C4:2A:D0:63:D8:01:F4:EC:E6:19:A6:D4
Authority key identifier: 94:39:19:3A:EF:1F:E4:D5:70:3C:B8:34:DF:7A:AB:AF:8A:4B:E4:2C
Certificate issuer: /CN=9439193aef1fe4d5703cb834df7aabaf8a4be42c
Certificate serial: 0194BCA98266FB37B4B8FCBE0C887390632D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lDkZOu8f5NVwPLg033qrr4pL5Cw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/ffce0e-c3ad-4c8a-9914-745cde74d01b/1/lDkZOu8f5NVwPLg033qrr4pL5Cw.mft
Manifest number: 130A
Signing time: Fri 31 Jan 2025 14:00:13 +0000
Manifest this update: Fri 31 Jan 2025 14:00:13 +0000
Manifest next update: Sat 01 Feb 2025 14:00:13 +0000
Files and hashes: 1: WNnJojurMk10LbGrLgZt0ifKwss.roa (hash: srIz81tLyVgircW7ks18A2CAzPVgxZ0XnEJTrVmvVb8=)
2: lDkZOu8f5NVwPLg033qrr4pL5Cw.crl (hash: beUiewbOK+dqHMQBASUSPWie2jUD5z2RR+WKAeTTJC0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:82:66:fb:37:b4:b8:fc:be:0c:88:73:90:63:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9439193aef1fe4d5703cb834df7aabaf8a4be42c
Validity
Not Before: Jan 31 14:00:13 2025 GMT
Not After : Feb 1 14:00:13 2025 GMT
Subject: CN=c8026076fc8a3e3ec42ad063d801f4ece619a6d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:7b:1e:59:d4:4e:10:99:f5:02:b0:8a:c4:1d:
19:6b:e5:04:b9:38:b3:c9:c9:d0:7e:a5:0d:64:e6:
99:bd:bb:e8:5e:e9:8a:1d:bf:36:db:db:db:e6:4d:
75:f5:f4:f2:71:8f:0d:49:c5:cc:4e:f6:3c:78:7c:
41:53:04:d4:a6:64:36:1b:dd:12:54:9d:c0:6e:fd:
4a:18:3c:9f:b9:25:01:78:e8:e5:e1:0c:3c:6e:79:
51:b5:8f:6e:d8:59:02:53:a2:6c:e4:6f:21:4b:11:
b8:31:27:b4:c6:ef:42:20:6f:8f:b5:50:05:4e:cb:
e2:8b:f2:34:99:50:44:be:40:eb:a1:fc:63:61:21:
70:89:73:75:46:65:eb:d7:eb:dc:91:75:08:a7:63:
61:fb:06:81:8f:45:ad:6d:bd:a4:66:ea:52:2e:45:
36:f0:90:ed:00:78:60:b6:f1:32:77:e7:63:0c:01:
f9:5e:fc:35:f8:dd:2f:af:67:03:0a:3d:03:87:9a:
dd:0d:53:f2:a0:6d:b7:d3:0a:96:59:97:25:0b:0c:
c1:44:e2:91:96:b0:12:52:35:2d:34:36:fe:fe:44:
55:28:97:a0:e6:96:42:95:d9:aa:d8:04:42:b0:54:
f8:45:d7:f7:67:32:dc:cf:d5:4c:9e:01:b8:52:a2:
14:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:02:60:76:FC:8A:3E:3E:C4:2A:D0:63:D8:01:F4:EC:E6:19:A6:D4
X509v3 Authority Key Identifier:
keyid:94:39:19:3A:EF:1F:E4:D5:70:3C:B8:34:DF:7A:AB:AF:8A:4B:E4:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lDkZOu8f5NVwPLg033qrr4pL5Cw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ffce0e-c3ad-4c8a-9914-745cde74d01b/1/lDkZOu8f5NVwPLg033qrr4pL5Cw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ffce0e-c3ad-4c8a-9914-745cde74d01b/1/lDkZOu8f5NVwPLg033qrr4pL5Cw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:41:0e:1c:c7:84:98:6f:4f:6b:32:6a:b1:20:19:29:37:0f:
d6:4f:82:fb:4e:1c:8a:24:e3:07:af:25:42:64:ae:a9:67:02:
26:61:59:1d:0d:6d:2f:0b:74:a6:0c:3f:60:dd:5a:4a:62:07:
00:3a:5c:e7:ba:e4:8f:e6:dd:b1:14:e2:96:13:3b:cf:4d:eb:
16:a0:29:93:87:11:4a:90:10:48:e4:11:f1:40:95:bc:30:c9:
17:ff:1d:42:22:99:94:73:1d:cf:e0:6a:aa:94:90:bc:e8:95:
b2:2d:62:db:e9:68:ed:ae:72:57:dc:ea:72:1c:56:2f:fc:52:
c7:68:9b:e5:50:3f:66:f9:48:c9:5d:2b:74:ab:0d:fe:83:ee:
21:60:7f:2b:0d:c7:e9:a8:3e:e7:73:ad:49:53:3e:76:01:4b:
5e:0e:3b:9b:14:8a:00:11:c9:2b:fd:d4:3e:d1:3c:8e:74:ec:
02:fb:6b:c9:8f:58:e8:91:f5:89:fd:ad:de:69:fd:9c:c4:45:
0d:88:24:ea:08:69:fd:27:11:81:90:20:4f:ce:9e:d0:4b:1a:
ec:fb:0e:4c:9d:f3:45:fd:0e:2d:4e:66:e7:2b:c5:3a:7e:96:
e5:d7:08:5d:0f:c1:b9:24:0f:47:a8:cb:21:9e:c3:91:fc:e8:
50:0b:7d:dc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qYJm+ze0uPy+DIhzkGMtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0MzkxOTNhZWYxZmU0ZDU3MDNjYjgzNGRmN2FhYmFmOGE0
YmU0MmMwHhcNMjUwMTMxMTQwMDEzWhcNMjUwMjAxMTQwMDEzWjAzMTEwLwYDVQQD
EyhjODAyNjA3NmZjOGEzZTNlYzQyYWQwNjNkODAxZjRlY2U2MTlhNmQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsnseWdROEJn1ArCKxB0Za+UEuTiz
ycnQfqUNZOaZvbvoXumKHb8229vb5k119fTycY8NScXMTvY8eHxBUwTUpmQ2G90S
VJ3Abv1KGDyfuSUBeOjl4Qw8bnlRtY9u2FkCU6Js5G8hSxG4MSe0xu9CIG+PtVAF
Tsvii/I0mVBEvkDrofxjYSFwiXN1RmXr1+vckXUIp2Nh+waBj0Wtbb2kZupSLkU2
8JDtAHhgtvEyd+djDAH5Xvw1+N0vr2cDCj0Dh5rdDVPyoG230wqWWZclCwzBROKR
lrASUjUtNDb+/kRVKJeg5pZCldmq2ARCsFT4Rdf3ZzLcz9VMngG4UqIUDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMgCYHb8ij4+xCrQY9gB9OzmGabUMB8GA1UdIwQY
MBaAFJQ5GTrvH+TVcDy4NN96q6+KS+QsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbERrWk91OGY1TlZ3UExnMDMzcXJyNHBMNUN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC9mZmNlMGUtYzNhZC00YzhhLTk5MTQt
NzQ1Y2RlNzRkMDFiLzEvbERrWk91OGY1TlZ3UExnMDMzcXJyNHBMNUN3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC9mZmNlMGUtYzNhZC00YzhhLTk5MTQtNzQ1Y2RlNzRkMDFi
LzEvbERrWk91OGY1TlZ3UExnMDMzcXJyNHBMNUN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUUEOHMeE
mG9PazJqsSAZKTcP1k+C+04ciiTjB68lQmSuqWcCJmFZHQ1tLwt0pgw/YN1aSmIH
ADpc57rkj+bdsRTilhM7z03rFqApk4cRSpAQSOQR8UCVvDDJF/8dQiKZlHMdz+Bq
qpSQvOiVsi1i2+lo7a5yV9zqchxWL/xSx2ib5VA/ZvlIyV0rdKsN/oPuIWB/Kw3H
6ag+53OtSVM+dgFLXg47mxSKABHJK/3UPtE8jnTsAvtryY9Y6JH1if2t3mn9nMRF
DYgk6ghp/ScRgZAgT86e0Esa7PsOTJ3zRf0OLU5m5yvFOn6W5dcIXQ/BuSQPR6jL
IZ7DkfzoUAt93A==
-----END CERTIFICATE-----
Generated at Fri Apr 25 01:42:08 2025 by rpki-client