Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/6bdf6c-a181-42fc-b9bf-83bc7cc463de/1/LxXXiyVtKEWbhptybyMpSrP_Fz8.mft
File: LxXXiyVtKEWbhptybyMpSrP_Fz8.mft (raw, json)
Hash identifier: eaKfV8pAP9ZSzhQOoLW/nK7a30r8iNjZvApcqez+1EE=
Subject key identifier: D8:9A:45:D4:38:05:6C:BA:E7:12:0A:C5:84:98:34:3A:AF:B7:9D:27
Authority key identifier: 2F:15:D7:8B:25:6D:28:45:9B:86:9B:72:6F:23:29:4A:B3:FF:17:3F
Certificate issuer: /CN=2f15d78b256d28459b869b726f23294ab3ff173f
Certificate serial: 0194BD855C6704D4E515888DAF52B9AF432E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LxXXiyVtKEWbhptybyMpSrP_Fz8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/6bdf6c-a181-42fc-b9bf-83bc7cc463de/1/LxXXiyVtKEWbhptybyMpSrP_Fz8.mft
Manifest number: 0450
Signing time: Fri 31 Jan 2025 18:00:21 +0000
Manifest this update: Fri 31 Jan 2025 18:00:21 +0000
Manifest next update: Sat 01 Feb 2025 18:00:21 +0000
Files and hashes: 1: GsPXdLp5QJlWkWRdf0s9RY21G1E.roa (hash: nU6YD2kez+ifewp2jdSiMb6xmsln2dG1JjZlNr4WuwQ=)
2: LxXXiyVtKEWbhptybyMpSrP_Fz8.crl (hash: mJ+G+kSCec0fqXmyGjb2NmJTF6gHafrsAAVQqV7Q6Y8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:5c:67:04:d4:e5:15:88:8d:af:52:b9:af:43:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f15d78b256d28459b869b726f23294ab3ff173f
Validity
Not Before: Jan 31 18:00:21 2025 GMT
Not After : Feb 1 18:00:21 2025 GMT
Subject: CN=d89a45d438056cbae7120ac58498343aafb79d27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:f5:57:22:e2:ca:32:fb:63:f2:6b:07:2a:87:
63:48:2a:36:7e:64:4a:c6:30:2d:ae:d0:64:d5:29:
53:6b:b5:20:21:3e:20:53:a8:f7:47:31:e6:08:95:
06:39:dc:f6:e2:6c:07:d6:1f:a8:3d:05:c6:82:30:
05:ca:a2:18:99:1d:b8:f7:20:33:4f:08:cd:6a:75:
6d:7f:79:72:a2:a4:ca:fe:15:86:80:e5:e0:ab:3f:
81:7a:e0:21:da:1c:73:8f:e4:eb:4d:ab:94:7a:81:
21:c7:77:1f:d0:67:d5:e9:0f:72:dd:f7:13:94:c4:
9d:1c:ee:c4:a5:dd:7b:d0:c5:c9:d2:92:68:cc:3a:
b1:57:c3:68:98:9f:31:14:99:c0:63:c0:89:40:31:
ba:af:6f:b3:13:b0:4e:ba:2e:c2:4f:9e:50:29:a2:
64:7c:75:66:be:eb:dd:a2:3d:f5:05:73:1a:33:29:
ee:3f:76:cf:d4:bb:38:00:05:06:47:80:fc:6f:04:
e1:f4:de:9f:ca:b3:66:fe:1b:34:89:53:0d:76:72:
10:4d:0c:0d:f0:86:16:47:ee:a1:21:cb:99:76:f0:
71:c5:30:19:58:46:66:25:50:b3:2f:d2:eb:22:b6:
7a:3d:b5:4b:65:6c:c7:34:d9:b8:bd:b8:a1:1d:87:
55:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:9A:45:D4:38:05:6C:BA:E7:12:0A:C5:84:98:34:3A:AF:B7:9D:27
X509v3 Authority Key Identifier:
keyid:2F:15:D7:8B:25:6D:28:45:9B:86:9B:72:6F:23:29:4A:B3:FF:17:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LxXXiyVtKEWbhptybyMpSrP_Fz8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/6bdf6c-a181-42fc-b9bf-83bc7cc463de/1/LxXXiyVtKEWbhptybyMpSrP_Fz8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/6bdf6c-a181-42fc-b9bf-83bc7cc463de/1/LxXXiyVtKEWbhptybyMpSrP_Fz8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:25:02:8d:3a:51:1d:e1:bf:08:6e:d4:c4:cf:e9:c5:c4:0a:
e8:a6:d2:25:f6:35:55:0f:26:80:47:97:a7:6a:ae:b8:a4:66:
ec:ff:96:fe:76:80:59:39:77:48:23:9c:56:7d:66:58:f3:b3:
46:bf:37:d4:14:3f:15:61:6a:d3:87:1c:b6:a4:d5:46:79:ff:
81:7d:0f:c2:f8:fb:ea:ec:bc:45:2c:4d:49:37:e6:11:fe:05:
7f:22:96:8b:0f:13:33:de:47:21:bf:32:cc:0b:ae:47:68:2f:
38:2f:e5:ee:dc:12:70:bd:08:f6:5f:b6:3e:b9:44:d4:be:d9:
3f:8f:0c:06:12:b7:23:18:09:f5:e4:60:c3:b5:59:fd:22:dc:
7a:fe:3e:15:49:ea:7a:fe:b6:f0:9a:0c:42:9a:84:14:ab:43:
4f:6f:ad:9f:02:c0:5c:81:41:14:c4:7f:60:c6:a4:cb:70:09:
23:de:cd:83:f2:3b:60:8a:68:5b:78:ad:07:36:56:7e:c0:da:
8b:6c:4d:43:4f:f6:91:63:3b:12:09:29:3e:71:aa:81:d5:67:
4a:07:f7:95:b6:74:8b:a6:bd:6c:e4:9d:85:35:5c:ab:8c:f2:
78:ba:e2:09:da:71:1e:cd:5d:08:75:f8:cd:c6:c4:ba:d1:74:
67:50:82:04
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9hVxnBNTlFYiNr1K5r0MuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmMTVkNzhiMjU2ZDI4NDU5Yjg2OWI3MjZmMjMyOTRhYjNm
ZjE3M2YwHhcNMjUwMTMxMTgwMDIxWhcNMjUwMjAxMTgwMDIxWjAzMTEwLwYDVQQD
EyhkODlhNDVkNDM4MDU2Y2JhZTcxMjBhYzU4NDk4MzQzYWFmYjc5ZDI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApvVXIuLKMvtj8msHKodjSCo2fmRK
xjAtrtBk1SlTa7UgIT4gU6j3RzHmCJUGOdz24mwH1h+oPQXGgjAFyqIYmR249yAz
TwjNanVtf3lyoqTK/hWGgOXgqz+BeuAh2hxzj+TrTauUeoEhx3cf0GfV6Q9y3fcT
lMSdHO7Epd170MXJ0pJozDqxV8NomJ8xFJnAY8CJQDG6r2+zE7BOui7CT55QKaJk
fHVmvuvdoj31BXMaMynuP3bP1Ls4AAUGR4D8bwTh9N6fyrNm/hs0iVMNdnIQTQwN
8IYWR+6hIcuZdvBxxTAZWEZmJVCzL9LrIrZ6PbVLZWzHNNm4vbihHYdVxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNiaRdQ4BWy65xIKxYSYNDqvt50nMB8GA1UdIwQY
MBaAFC8V14slbShFm4abcm8jKUqz/xc/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTHhYWGl5VnRLRVdiaHB0eWJ5TXBTclBfRno4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS82YmRmNmMtYTE4MS00MmZjLWI5YmYt
ODNiYzdjYzQ2M2RlLzEvTHhYWGl5VnRLRVdiaHB0eWJ5TXBTclBfRno4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOS82YmRmNmMtYTE4MS00MmZjLWI5YmYtODNiYzdjYzQ2M2Rl
LzEvTHhYWGl5VnRLRVdiaHB0eWJ5TXBTclBfRno4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADSUCjTpR
HeG/CG7UxM/pxcQK6KbSJfY1VQ8mgEeXp2quuKRm7P+W/naAWTl3SCOcVn1mWPOz
Rr831BQ/FWFq04cctqTVRnn/gX0Pwvj76uy8RSxNSTfmEf4FfyKWiw8TM95HIb8y
zAuuR2gvOC/l7twScL0I9l+2PrlE1L7ZP48MBhK3IxgJ9eRgw7VZ/SLcev4+FUnq
ev628JoMQpqEFKtDT2+tnwLAXIFBFMR/YMaky3AJI97Ng/I7YIpoW3itBzZWfsDa
i2xNQ0/2kWM7EgkpPnGqgdVnSgf3lbZ0i6a9bOSdhTVcq4zyeLriCdpxHs1dCHX4
zcbEutF0Z1CCBA==
-----END CERTIFICATE-----
Generated at Fri Apr 25 07:40:52 2025 by rpki-client