Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/319d61-560a-44fd-aa25-49671acdf486/1/LdOuI8tG7pwhlQ78tg3voJS6VUg.mft
File: LdOuI8tG7pwhlQ78tg3voJS6VUg.mft (raw, json)
Hash identifier: AoWn/WSkIs3Y3IIyU957GtE7hWL3bpzyX+pz+I02/OI=
Subject key identifier: 8A:AA:98:5A:D8:F5:92:CA:47:5D:22:44:75:D8:FF:E4:79:27:63:FC
Authority key identifier: 2D:D3:AE:23:CB:46:EE:9C:21:95:0E:FC:B6:0D:EF:A0:94:BA:55:48
Certificate issuer: /CN=2dd3ae23cb46ee9c21950efcb60defa094ba5548
Certificate serial: 0194BCA9D7679F353E9451CAB569D934BAC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LdOuI8tG7pwhlQ78tg3voJS6VUg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/319d61-560a-44fd-aa25-49671acdf486/1/LdOuI8tG7pwhlQ78tg3voJS6VUg.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 14:00:34 +0000
Manifest this update: Fri 31 Jan 2025 14:00:34 +0000
Manifest next update: Sat 01 Feb 2025 14:00:34 +0000
Files and hashes: 1: LdOuI8tG7pwhlQ78tg3voJS6VUg.crl (hash: jSaNxWYN52VFu5s5vNSwv1IeDqtIF3VJpucEe7z6WtQ=)
2: NR5q24H1ufzbYF2XouLHFu4YVgE.roa (hash: P7YBV+TAXY1ntVvPbNeFWy4DC2dZewmJse8AyIIurOo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:d7:67:9f:35:3e:94:51:ca:b5:69:d9:34:ba:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2dd3ae23cb46ee9c21950efcb60defa094ba5548
Validity
Not Before: Jan 31 14:00:34 2025 GMT
Not After : Feb 1 14:00:34 2025 GMT
Subject: CN=8aaa985ad8f592ca475d224475d8ffe4792763fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:2d:b1:ec:15:7e:6f:50:9f:e2:8a:a7:12:61:
22:5b:f5:85:25:8d:be:dc:1d:4e:f5:3e:0d:93:e1:
f3:59:6f:ea:65:2a:0c:f2:25:65:45:f6:40:62:50:
6e:2e:a2:96:1e:20:03:0e:4e:36:05:f3:94:68:c5:
ec:5c:af:13:2f:25:a5:1f:bd:70:b4:18:93:43:58:
78:c0:2a:29:d3:11:62:94:02:ee:f5:c6:08:87:10:
91:9d:4a:33:34:ac:d8:85:2a:b2:7f:2e:19:33:75:
65:9d:1b:75:77:6c:f9:0b:46:0a:0b:47:53:51:59:
5a:59:7a:67:a1:93:9c:73:bf:6e:2d:2e:30:0f:ae:
d3:66:94:14:0f:96:ba:04:a2:53:bd:bb:d6:85:a3:
e4:a5:6a:f1:dd:c2:44:77:74:d0:a4:eb:1e:36:c9:
b8:aa:65:c7:38:5d:24:c2:0f:62:09:dd:54:c5:0b:
20:43:96:09:b1:7a:ed:db:b3:ad:c9:61:8f:91:6f:
b6:5b:01:f7:d5:73:86:fc:bd:3a:7a:b0:dd:ef:9d:
ba:73:f0:89:2a:b7:c0:02:38:ab:8a:8c:20:64:2d:
63:fa:21:04:b5:c7:b0:9c:61:69:4f:0f:40:b5:ce:
24:87:a0:0f:d7:38:01:f3:c2:02:b3:31:a6:28:90:
9f:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:AA:98:5A:D8:F5:92:CA:47:5D:22:44:75:D8:FF:E4:79:27:63:FC
X509v3 Authority Key Identifier:
keyid:2D:D3:AE:23:CB:46:EE:9C:21:95:0E:FC:B6:0D:EF:A0:94:BA:55:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LdOuI8tG7pwhlQ78tg3voJS6VUg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/319d61-560a-44fd-aa25-49671acdf486/1/LdOuI8tG7pwhlQ78tg3voJS6VUg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/319d61-560a-44fd-aa25-49671acdf486/1/LdOuI8tG7pwhlQ78tg3voJS6VUg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:2f:aa:5b:c3:5a:fb:55:53:03:d3:34:7b:94:1b:2a:ed:80:
54:c8:18:ff:27:24:e5:11:a8:be:16:ee:95:fa:4d:e4:ab:c8:
17:06:2b:89:d2:b0:93:36:fc:f6:71:97:ac:ff:53:4a:b7:c9:
b6:0c:4b:03:82:95:6c:be:ff:7b:32:c7:1a:ff:bc:d6:fe:ab:
e4:c7:ab:af:e4:b6:23:d8:0c:ca:99:74:cf:19:fa:b7:c0:aa:
5f:47:69:61:05:59:b9:02:51:70:99:41:cd:5d:61:ef:bc:8f:
96:db:70:0a:00:72:c1:f0:31:a2:f7:26:a4:de:b0:fa:22:10:
74:43:84:e3:a6:7a:dd:11:2a:a2:c1:29:de:35:27:77:c2:c3:
11:5c:9a:cb:1c:26:a4:c5:88:6f:88:5f:66:57:1c:42:3c:a8:
37:88:d2:b9:dc:3f:7a:5e:87:b6:f3:ee:a7:01:e9:6c:74:d5:
42:d8:c1:69:0c:20:e9:59:ac:19:3f:ea:a1:a7:05:b5:72:8a:
3e:2d:c7:f2:69:53:99:18:ea:15:37:85:3a:b6:94:29:48:ee:
b6:0a:09:c7:f0:fe:57:b9:42:91:9c:f9:71:8f:35:c1:28:1f:
48:74:f3:81:3d:05:a0:19:30:a8:18:fa:91:51:16:19:44:6d:
7e:f7:83:67
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qddnnzU+lFHKtWnZNLrBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJkZDNhZTIzY2I0NmVlOWMyMTk1MGVmY2I2MGRlZmEwOTRi
YTU1NDgwHhcNMjUwMTMxMTQwMDM0WhcNMjUwMjAxMTQwMDM0WjAzMTEwLwYDVQQD
Eyg4YWFhOTg1YWQ4ZjU5MmNhNDc1ZDIyNDQ3NWQ4ZmZlNDc5Mjc2M2ZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwi2x7BV+b1Cf4oqnEmEiW/WFJY2+
3B1O9T4Nk+HzWW/qZSoM8iVlRfZAYlBuLqKWHiADDk42BfOUaMXsXK8TLyWlH71w
tBiTQ1h4wCop0xFilALu9cYIhxCRnUozNKzYhSqyfy4ZM3VlnRt1d2z5C0YKC0dT
UVlaWXpnoZOcc79uLS4wD67TZpQUD5a6BKJTvbvWhaPkpWrx3cJEd3TQpOseNsm4
qmXHOF0kwg9iCd1UxQsgQ5YJsXrt27OtyWGPkW+2WwH31XOG/L06erDd7526c/CJ
KrfAAjiriowgZC1j+iEEtcewnGFpTw9Atc4kh6AP1zgB88ICszGmKJCfkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIqqmFrY9ZLKR10iRHXY/+R5J2P8MB8GA1UdIwQY
MBaAFC3TriPLRu6cIZUO/LYN76CUulVIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTGRPdUk4dEc3cHdobFE3OHRnM3ZvSlM2VlVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy8zMTlkNjEtNTYwYS00NGZkLWFhMjUt
NDk2NzFhY2RmNDg2LzEvTGRPdUk4dEc3cHdobFE3OHRnM3ZvSlM2VlVnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy8zMTlkNjEtNTYwYS00NGZkLWFhMjUtNDk2NzFhY2RmNDg2
LzEvTGRPdUk4dEc3cHdobFE3OHRnM3ZvSlM2VlVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAji+qW8Na
+1VTA9M0e5QbKu2AVMgY/yck5RGovhbulfpN5KvIFwYridKwkzb89nGXrP9TSrfJ
tgxLA4KVbL7/ezLHGv+81v6r5Merr+S2I9gMypl0zxn6t8CqX0dpYQVZuQJRcJlB
zV1h77yPlttwCgBywfAxovcmpN6w+iIQdEOE46Z63REqosEp3jUnd8LDEVyayxwm
pMWIb4hfZlccQjyoN4jSudw/el6HtvPupwHpbHTVQtjBaQwg6VmsGT/qoacFtXKK
Pi3H8mlTmRjqFTeFOraUKUjutgoJx/D+V7lCkZz5cY81wSgfSHTzgT0FoBkwqBj6
kVEWGURtfveDZw==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:01 2025 by rpki-client