Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/0add7c-a28c-4ae8-8885-01ce06d315cd/1/LKzIXJmo4dt9HFImfC3b08OeGLI.mft
File: LKzIXJmo4dt9HFImfC3b08OeGLI.mft (raw, json)
Hash identifier: MQ4rK6bbGwivxbB/fhM/PVK/MatWOwEsaeffI6jhf8M=
Subject key identifier: 4C:4B:1C:57:71:F1:1A:D8:21:F7:B3:29:99:12:B8:40:1B:E5:28:E6
Authority key identifier: 2C:AC:C8:5C:99:A8:E1:DB:7D:1C:52:26:7C:2D:DB:D3:C3:9E:18:B2
Certificate issuer: /CN=2cacc85c99a8e1db7d1c52267c2ddbd3c39e18b2
Certificate serial: 0194BBCDF83C8F8566FF94FC82DBE1C5F12A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LKzIXJmo4dt9HFImfC3b08OeGLI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/0add7c-a28c-4ae8-8885-01ce06d315cd/1/LKzIXJmo4dt9HFImfC3b08OeGLI.mft
Manifest number: 0B41
Signing time: Fri 31 Jan 2025 10:00:25 +0000
Manifest this update: Fri 31 Jan 2025 10:00:25 +0000
Manifest next update: Sat 01 Feb 2025 10:00:25 +0000
Files and hashes: 1: LKzIXJmo4dt9HFImfC3b08OeGLI.crl (hash: g6WS0rwqDpfNC4/pBNLbR0P9uKWCBun0m86C+fzAVLU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:f8:3c:8f:85:66:ff:94:fc:82:db:e1:c5:f1:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cacc85c99a8e1db7d1c52267c2ddbd3c39e18b2
Validity
Not Before: Jan 31 10:00:25 2025 GMT
Not After : Feb 1 10:00:25 2025 GMT
Subject: CN=4c4b1c5771f11ad821f7b3299912b8401be528e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d0:b0:f8:26:d1:ea:05:7d:a9:68:d5:15:7a:
e9:8d:51:b8:a7:52:1a:0a:1b:b9:8d:7f:43:07:3c:
e4:9f:3c:a4:01:17:8e:cd:88:2b:03:18:6f:54:97:
f7:fd:9d:ed:f7:e6:99:cf:39:ab:5c:f5:9a:40:c9:
68:16:f1:fa:7b:13:70:e7:b4:47:23:38:d9:61:da:
01:34:1f:c0:b4:96:de:6c:20:46:87:00:41:79:9a:
95:88:ed:37:1c:e4:7c:5f:c2:77:ae:8a:00:c6:95:
ec:ea:5c:3c:04:ce:77:86:b1:a8:6b:2a:66:38:de:
88:ad:58:41:0a:40:ce:7c:12:31:14:e2:38:0b:f3:
1d:67:bb:b7:c8:1d:44:cb:c2:1b:01:b8:61:27:d1:
8c:ca:21:2d:aa:30:08:a1:50:27:00:c5:9d:71:7e:
79:ab:df:71:cf:eb:19:e5:ef:d0:68:92:d4:64:5c:
8f:ba:e6:0d:4f:8e:05:4c:f6:cb:38:f2:a4:a5:9d:
ac:e3:e4:5c:9a:da:16:cb:47:48:78:e2:86:69:9b:
e1:50:d2:3e:d4:e4:97:4d:25:fc:f3:22:f5:9c:48:
70:1e:37:1f:69:8a:00:f0:8a:0b:e9:fc:a8:da:22:
55:e6:f1:2b:70:d9:52:de:39:b5:c3:c8:f1:6b:41:
1e:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:4B:1C:57:71:F1:1A:D8:21:F7:B3:29:99:12:B8:40:1B:E5:28:E6
X509v3 Authority Key Identifier:
keyid:2C:AC:C8:5C:99:A8:E1:DB:7D:1C:52:26:7C:2D:DB:D3:C3:9E:18:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LKzIXJmo4dt9HFImfC3b08OeGLI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/0add7c-a28c-4ae8-8885-01ce06d315cd/1/LKzIXJmo4dt9HFImfC3b08OeGLI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/0add7c-a28c-4ae8-8885-01ce06d315cd/1/LKzIXJmo4dt9HFImfC3b08OeGLI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:a0:be:ba:12:ad:7b:86:c3:fc:c7:7b:9f:df:9c:44:c9:3a:
d9:5a:6b:bd:a6:46:9d:50:a2:f8:2a:f5:cd:e0:c8:ed:54:47:
a5:4b:45:e6:6f:63:2d:64:1e:b4:81:18:e3:5a:44:9b:a4:0a:
ab:4e:64:d6:c3:66:d0:9b:0a:08:cc:cf:f2:56:68:87:1b:3b:
f2:5d:43:34:eb:b4:5c:a1:98:05:64:69:bb:4d:fc:93:04:cb:
3f:54:3c:b2:cd:64:db:e2:4f:ad:3a:10:ca:c8:ce:e3:30:a4:
c0:3f:1e:d5:89:8a:76:a5:0d:0c:1f:a3:0d:a9:9d:83:fb:db:
5b:7e:87:b5:62:15:bf:10:63:90:48:97:66:e4:43:0d:42:6b:
12:81:b2:b9:58:81:4c:d2:84:39:f3:05:94:67:e2:e2:17:23:
c9:8d:90:e8:4b:0a:5b:bb:fb:e5:24:55:e5:e6:ee:a4:96:6c:
d5:f3:44:6d:68:3f:66:55:7a:91:ad:57:da:d1:d6:23:6c:f6:
e2:b6:4c:8f:02:20:69:1f:ed:61:80:cc:e7:dd:f3:9a:11:fe:
84:11:ba:39:e9:78:bf:5c:cc:80:10:61:93:64:95:7c:a4:0c:
0c:e4:f2:d1:aa:9c:d6:6a:0a:b0:8e:d4:73:e6:92:3b:87:05:
f4:45:88:8a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zfg8j4Vm/5T8gtvhxfEqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJjYWNjODVjOTlhOGUxZGI3ZDFjNTIyNjdjMmRkYmQzYzM5
ZTE4YjIwHhcNMjUwMTMxMTAwMDI1WhcNMjUwMjAxMTAwMDI1WjAzMTEwLwYDVQQD
Eyg0YzRiMWM1NzcxZjExYWQ4MjFmN2IzMjk5OTEyYjg0MDFiZTUyOGU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwNCw+CbR6gV9qWjVFXrpjVG4p1Ia
Chu5jX9DBzzknzykAReOzYgrAxhvVJf3/Z3t9+aZzzmrXPWaQMloFvH6exNw57RH
IzjZYdoBNB/AtJbebCBGhwBBeZqViO03HOR8X8J3rooAxpXs6lw8BM53hrGoaypm
ON6IrVhBCkDOfBIxFOI4C/MdZ7u3yB1Ey8IbAbhhJ9GMyiEtqjAIoVAnAMWdcX55
q99xz+sZ5e/QaJLUZFyPuuYNT44FTPbLOPKkpZ2s4+RcmtoWy0dIeOKGaZvhUNI+
1OSXTSX88yL1nEhwHjcfaYoA8IoL6fyo2iJV5vErcNlS3jm1w8jxa0EeCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFExLHFdx8RrYIfezKZkSuEAb5SjmMB8GA1UdIwQY
MBaAFCysyFyZqOHbfRxSJnwt29PDnhiyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTEt6SVhKbW80ZHQ5SEZJbWZDM2IwOE9lR0xJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC8wYWRkN2MtYTI4Yy00YWU4LTg4ODUt
MDFjZTA2ZDMxNWNkLzEvTEt6SVhKbW80ZHQ5SEZJbWZDM2IwOE9lR0xJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC8wYWRkN2MtYTI4Yy00YWU4LTg4ODUtMDFjZTA2ZDMxNWNk
LzEvTEt6SVhKbW80ZHQ5SEZJbWZDM2IwOE9lR0xJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR6C+uhKt
e4bD/Md7n9+cRMk62VprvaZGnVCi+Cr1zeDI7VRHpUtF5m9jLWQetIEY41pEm6QK
q05k1sNm0JsKCMzP8lZohxs78l1DNOu0XKGYBWRpu038kwTLP1Q8ss1k2+JPrToQ
ysjO4zCkwD8e1YmKdqUNDB+jDamdg/vbW36HtWIVvxBjkEiXZuRDDUJrEoGyuViB
TNKEOfMFlGfi4hcjyY2Q6EsKW7v75SRV5ebupJZs1fNEbWg/ZlV6ka1X2tHWI2z2
4rZMjwIgaR/tYYDM593zmhH+hBG6Oel4v1zMgBBhk2SVfKQMDOTy0aqc1moKsI7U
c+aSO4cF9EWIig==
-----END CERTIFICATE-----
Generated at Fri Apr 25 18:17:50 2025 by rpki-client