Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/552f0d-01c2-418a-aa3c-acc4aac78d0d/1/L4ilP8uWd3-Z4C34lA3QQLRUzRw.mft
File: L4ilP8uWd3-Z4C34lA3QQLRUzRw.mft (raw, json)
Hash identifier: mHb6H2EU0wSt3vAlEkAUtviRLnog8U109wRUORw2QUU=
Subject key identifier: 89:45:F8:8C:DD:86:8E:9E:26:31:1A:9A:E1:FC:FB:FF:C0:75:B1:B3
Authority key identifier: 2F:88:A5:3F:CB:96:77:7F:99:E0:2D:F8:94:0D:D0:40:B4:54:CD:1C
Certificate issuer: /CN=2f88a53fcb96777f99e02df8940dd040b454cd1c
Certificate serial: 0194BC3C9A899447ACEFEE35015378077954
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L4ilP8uWd3-Z4C34lA3QQLRUzRw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/552f0d-01c2-418a-aa3c-acc4aac78d0d/1/L4ilP8uWd3-Z4C34lA3QQLRUzRw.mft
Manifest number: 1428
Signing time: Fri 31 Jan 2025 12:01:15 +0000
Manifest this update: Fri 31 Jan 2025 12:01:15 +0000
Manifest next update: Sat 01 Feb 2025 12:01:15 +0000
Files and hashes: 1: 8vDMjaVS40emmzGFVsGL0I8-fQo.roa (hash: ZQlfpvu51NDsYdzNjhzj60BOHewjbF75+WG+cK0BDP8=)
2: L4ilP8uWd3-Z4C34lA3QQLRUzRw.crl (hash: JkVpAIAU/wYwvjsf69P3oejiJiXT2sMn+2KGZmkZusk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:9a:89:94:47:ac:ef:ee:35:01:53:78:07:79:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f88a53fcb96777f99e02df8940dd040b454cd1c
Validity
Not Before: Jan 31 12:01:15 2025 GMT
Not After : Feb 1 12:01:15 2025 GMT
Subject: CN=8945f88cdd868e9e26311a9ae1fcfbffc075b1b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:52:a5:24:0a:38:52:75:68:88:ae:e5:89:6e:
93:c9:15:13:c5:b4:25:84:96:b9:e5:3b:9b:cd:45:
90:4e:fb:da:76:1c:c0:c0:f8:c8:29:65:9e:f0:01:
63:55:f0:43:01:89:c7:a9:5c:e9:87:00:70:50:9b:
0d:5c:a5:1b:2b:0d:bb:b8:89:cd:8b:92:0b:02:ae:
95:da:e4:53:87:df:1d:c2:5f:89:09:c2:15:75:d0:
0f:0b:4f:c7:a0:f5:7c:a1:a8:df:f5:01:66:b2:de:
e9:71:42:b2:be:a9:07:c5:cb:9d:25:d4:66:73:29:
a5:d7:f9:fd:2b:be:0e:86:41:65:e1:5a:13:aa:fe:
07:e3:30:0f:d5:12:ac:80:ff:57:8d:6a:53:0a:6f:
00:b0:67:89:21:e4:9f:80:cc:d0:62:c9:d5:b6:48:
a3:86:47:0f:8d:54:99:91:72:32:fe:26:bb:5b:e1:
fe:d0:7a:5e:da:c2:3a:7b:a7:07:14:e2:d3:19:b1:
36:fb:8f:ea:90:ec:45:e0:29:f3:41:a0:a6:29:52:
06:fd:90:6e:3e:5d:3a:9f:71:90:9f:e1:f5:7b:b9:
55:86:5d:46:8b:d3:14:d5:44:10:81:9e:17:a3:fa:
43:2f:f0:04:6b:17:c4:36:e4:1d:67:61:5c:5f:1e:
30:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:45:F8:8C:DD:86:8E:9E:26:31:1A:9A:E1:FC:FB:FF:C0:75:B1:B3
X509v3 Authority Key Identifier:
keyid:2F:88:A5:3F:CB:96:77:7F:99:E0:2D:F8:94:0D:D0:40:B4:54:CD:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L4ilP8uWd3-Z4C34lA3QQLRUzRw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/552f0d-01c2-418a-aa3c-acc4aac78d0d/1/L4ilP8uWd3-Z4C34lA3QQLRUzRw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/552f0d-01c2-418a-aa3c-acc4aac78d0d/1/L4ilP8uWd3-Z4C34lA3QQLRUzRw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:f5:22:0d:9e:34:cb:33:e8:da:e3:f1:0e:64:40:b9:a6:77:
c2:cd:c0:0b:87:fe:5c:8c:30:f3:f0:1e:f6:0b:9b:3f:4e:c5:
91:7b:3c:72:f8:8b:c5:f6:25:f0:b1:6c:c7:0d:89:9c:74:77:
86:ac:66:4b:32:f5:ed:67:9c:fa:ca:c9:3c:7b:9c:12:73:38:
ec:3c:44:51:af:cd:14:a0:36:82:49:e9:03:6b:b4:7b:de:e5:
0a:a5:d6:7f:5b:ed:44:28:3a:8a:4e:06:11:b0:36:b2:db:73:
c6:db:dd:61:eb:28:e8:fe:82:75:d4:c8:55:04:b1:be:12:29:
7b:e1:4b:81:c9:ce:a7:2d:9b:ff:20:b6:df:05:89:b5:0b:fb:
37:ad:5b:22:f7:98:5d:cd:0a:e4:20:da:1f:d5:59:dd:fd:d9:
4e:ee:61:79:e7:2b:cb:31:79:cf:38:6a:18:9c:18:19:61:a7:
e7:a2:e1:36:bd:30:dd:e9:44:1a:fb:56:d0:84:55:78:02:3a:
34:82:f7:c6:b7:3c:6f:d9:ff:e1:05:eb:ce:1d:3a:52:1f:20:
f1:da:dd:63:df:15:4b:01:3d:58:5b:30:ea:dc:1d:1d:4c:72:
a6:6c:46:45:be:0c:c8:8d:8c:58:72:63:64:f1:d1:e1:23:48:
b8:6f:73:e7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8PJqJlEes7+41AVN4B3lUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmODhhNTNmY2I5Njc3N2Y5OWUwMmRmODk0MGRkMDQwYjQ1
NGNkMWMwHhcNMjUwMTMxMTIwMTE1WhcNMjUwMjAxMTIwMTE1WjAzMTEwLwYDVQQD
Eyg4OTQ1Zjg4Y2RkODY4ZTllMjYzMTFhOWFlMWZjZmJmZmMwNzViMWIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2FKlJAo4UnVoiK7liW6TyRUTxbQl
hJa55TubzUWQTvvadhzAwPjIKWWe8AFjVfBDAYnHqVzphwBwUJsNXKUbKw27uInN
i5ILAq6V2uRTh98dwl+JCcIVddAPC0/HoPV8oajf9QFmst7pcUKyvqkHxcudJdRm
cyml1/n9K74OhkFl4VoTqv4H4zAP1RKsgP9XjWpTCm8AsGeJIeSfgMzQYsnVtkij
hkcPjVSZkXIy/ia7W+H+0Hpe2sI6e6cHFOLTGbE2+4/qkOxF4CnzQaCmKVIG/ZBu
Pl06n3GQn+H1e7lVhl1Gi9MU1UQQgZ4Xo/pDL/AEaxfENuQdZ2FcXx4wSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIlF+Izdho6eJjEamuH8+//AdbGzMB8GA1UdIwQY
MBaAFC+IpT/Llnd/meAt+JQN0EC0VM0cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTDRpbFA4dVdkMy1aNEMzNGxBM1FRTFJVelJ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS81NTJmMGQtMDFjMi00MThhLWFhM2Mt
YWNjNGFhYzc4ZDBkLzEvTDRpbFA4dVdkMy1aNEMzNGxBM1FRTFJVelJ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS81NTJmMGQtMDFjMi00MThhLWFhM2MtYWNjNGFhYzc4ZDBk
LzEvTDRpbFA4dVdkMy1aNEMzNGxBM1FRTFJVelJ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnvUiDZ40
yzPo2uPxDmRAuaZ3ws3AC4f+XIww8/Ae9gubP07FkXs8cviLxfYl8LFsxw2JnHR3
hqxmSzL17Wec+srJPHucEnM47DxEUa/NFKA2gknpA2u0e97lCqXWf1vtRCg6ik4G
EbA2sttzxtvdYeso6P6CddTIVQSxvhIpe+FLgcnOpy2b/yC23wWJtQv7N61bIveY
Xc0K5CDaH9VZ3f3ZTu5heecryzF5zzhqGJwYGWGn56LhNr0w3elEGvtW0IRVeAI6
NIL3xrc8b9n/4QXrzh06Uh8g8drdY98VSwE9WFsw6twdHUxypmxGRb4MyI2MWHJj
ZPHR4SNIuG9z5w==
-----END CERTIFICATE-----
Generated at Mon Apr 28 11:11:36 2025 by rpki-client