Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/3e7980-7e31-4fd1-b79d-0bd62c83e92b/1/v0_LZK6zRV-zmJfjEpXd6DrdTQ4.mft
File: v0_LZK6zRV-zmJfjEpXd6DrdTQ4.mft (raw, json)
Hash identifier: 08OfQZFA4ZRZE/WP8TS92Tm3m3wQn6SKDR9mTYL59Ss=
Subject key identifier: C0:75:56:24:11:F1:2E:8B:92:53:32:CC:FA:2C:28:5E:ED:46:D0:73
Authority key identifier: BF:4F:CB:64:AE:B3:45:5F:B3:98:97:E3:12:95:DD:E8:3A:DD:4D:0E
Certificate issuer: /CN=bf4fcb64aeb3455fb39897e31295dde83add4d0e
Certificate serial: 0194BC3C897B63F880215722AE3477686ACC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v0_LZK6zRV-zmJfjEpXd6DrdTQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/3e7980-7e31-4fd1-b79d-0bd62c83e92b/1/v0_LZK6zRV-zmJfjEpXd6DrdTQ4.mft
Manifest number: 13BB
Signing time: Fri 31 Jan 2025 12:01:11 +0000
Manifest this update: Fri 31 Jan 2025 12:01:11 +0000
Manifest next update: Sat 01 Feb 2025 12:01:11 +0000
Files and hashes: 1: BJt218vyPAIZF_L2ax-fXs78RO0.roa (hash: P3rkYDci/na2QczVHIWVXTso4Bg4G7j/ooyuS4+Wnxw=)
2: v0_LZK6zRV-zmJfjEpXd6DrdTQ4.crl (hash: irLZ4tSBmASGtStfkNLJjZw3Rssq6vwlNGpaYvgXl14=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:89:7b:63:f8:80:21:57:22:ae:34:77:68:6a:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf4fcb64aeb3455fb39897e31295dde83add4d0e
Validity
Not Before: Jan 31 12:01:11 2025 GMT
Not After : Feb 1 12:01:11 2025 GMT
Subject: CN=c075562411f12e8b925332ccfa2c285eed46d073
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:50:c8:c5:63:37:62:3c:d7:77:27:c7:44:71:
7b:50:90:66:90:c0:79:44:53:2e:3b:8a:20:1a:d5:
6e:73:58:d6:16:d8:46:22:fa:d3:ad:fc:d4:8b:a8:
2d:b6:53:19:3c:77:fd:2e:09:38:38:74:09:db:b8:
2a:29:8d:7c:01:b1:f5:58:f5:87:2a:44:bc:d5:cb:
4b:8b:7f:57:73:7f:11:27:96:91:f5:51:37:19:f3:
03:06:ac:db:c0:45:c2:81:ba:75:96:c8:e7:d0:0b:
31:c9:77:bf:4c:b6:6c:2e:7c:8b:61:1b:a2:61:81:
04:88:5b:60:1d:6a:c8:3f:11:d5:24:43:6b:30:9e:
ba:0a:e4:36:c4:a6:c1:4c:d0:a3:09:72:9e:b7:68:
67:1f:92:12:51:5e:61:cd:1c:f0:86:30:9a:00:d6:
76:5d:41:6a:20:e3:aa:f7:56:dd:91:5a:5b:f9:93:
95:6f:80:57:58:a9:ff:aa:11:39:58:6a:0a:c5:df:
d4:00:1c:b4:2c:ab:ee:59:55:c6:7b:06:b6:78:3c:
d5:e2:5c:20:d7:42:96:32:14:45:f4:bf:37:4e:e5:
98:06:3f:eb:9d:bb:66:60:13:f1:4b:ba:6c:ea:fc:
04:9a:fa:0c:49:06:8b:63:b8:c6:3f:9f:0e:ac:85:
75:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:75:56:24:11:F1:2E:8B:92:53:32:CC:FA:2C:28:5E:ED:46:D0:73
X509v3 Authority Key Identifier:
keyid:BF:4F:CB:64:AE:B3:45:5F:B3:98:97:E3:12:95:DD:E8:3A:DD:4D:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v0_LZK6zRV-zmJfjEpXd6DrdTQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/3e7980-7e31-4fd1-b79d-0bd62c83e92b/1/v0_LZK6zRV-zmJfjEpXd6DrdTQ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/3e7980-7e31-4fd1-b79d-0bd62c83e92b/1/v0_LZK6zRV-zmJfjEpXd6DrdTQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:51:80:dd:ad:be:4c:ad:14:46:74:f5:52:23:5e:2a:15:ec:
dc:28:a2:fc:83:de:4a:9b:51:07:69:4c:60:a4:d4:a8:15:4b:
ee:7b:52:64:ae:28:fd:68:b7:bb:4a:07:53:55:e0:1d:8b:6a:
08:fa:c8:ae:7b:79:86:67:e8:d8:27:c7:78:6a:46:71:9c:ca:
d8:c9:d2:c9:72:25:8c:95:dc:9a:4c:ea:4d:53:d9:19:17:f4:
af:b7:16:12:80:50:a2:d7:81:43:a1:28:ce:5e:2d:02:a3:34:
95:4d:97:db:3e:a1:77:f7:70:f7:e9:ed:76:86:1a:b2:98:33:
45:7e:c6:2a:28:ac:54:62:28:bf:3c:6c:9f:68:e4:c4:97:9b:
0e:46:6b:e5:c5:9c:f0:98:d7:5f:74:e0:87:f1:6e:24:ae:19:
6a:2d:67:ab:d2:51:b0:30:3f:75:85:2f:c6:a3:ee:99:0f:04:
0f:c6:82:84:76:39:ab:4d:a1:e1:77:9c:c8:7a:f5:cb:cf:85:
6a:c1:aa:72:31:8b:a9:12:bd:bc:0f:3e:e8:c6:1d:fd:50:ab:
73:d6:ad:c1:82:36:8d:fb:26:b5:30:4b:f2:25:43:d9:cc:b0:
41:49:e0:27:1b:f5:bb:39:0a:27:a2:21:84:89:dd:82:0f:f2:
67:1e:ce:43
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8PIl7Y/iAIVcirjR3aGrMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmNGZjYjY0YWViMzQ1NWZiMzk4OTdlMzEyOTVkZGU4M2Fk
ZDRkMGUwHhcNMjUwMTMxMTIwMTExWhcNMjUwMjAxMTIwMTExWjAzMTEwLwYDVQQD
EyhjMDc1NTYyNDExZjEyZThiOTI1MzMyY2NmYTJjMjg1ZWVkNDZkMDczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw1DIxWM3YjzXdyfHRHF7UJBmkMB5
RFMuO4ogGtVuc1jWFthGIvrTrfzUi6gttlMZPHf9Lgk4OHQJ27gqKY18AbH1WPWH
KkS81ctLi39Xc38RJ5aR9VE3GfMDBqzbwEXCgbp1lsjn0AsxyXe/TLZsLnyLYRui
YYEEiFtgHWrIPxHVJENrMJ66CuQ2xKbBTNCjCXKet2hnH5ISUV5hzRzwhjCaANZ2
XUFqIOOq91bdkVpb+ZOVb4BXWKn/qhE5WGoKxd/UABy0LKvuWVXGewa2eDzV4lwg
10KWMhRF9L83TuWYBj/rnbtmYBPxS7ps6vwEmvoMSQaLY7jGP58OrIV13wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMB1ViQR8S6LklMyzPosKF7tRtBzMB8GA1UdIwQY
MBaAFL9Py2Sus0Vfs5iX4xKV3eg63U0OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdjBfTFpLNnpSVi16bUpmakVwWGQ2RHJkVFE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8zZTc5ODAtN2UzMS00ZmQxLWI3OWQt
MGJkNjJjODNlOTJiLzEvdjBfTFpLNnpSVi16bUpmakVwWGQ2RHJkVFE0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC8zZTc5ODAtN2UzMS00ZmQxLWI3OWQtMGJkNjJjODNlOTJi
LzEvdjBfTFpLNnpSVi16bUpmakVwWGQ2RHJkVFE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXFGA3a2+
TK0URnT1UiNeKhXs3Cii/IPeSptRB2lMYKTUqBVL7ntSZK4o/Wi3u0oHU1XgHYtq
CPrIrnt5hmfo2CfHeGpGcZzK2MnSyXIljJXcmkzqTVPZGRf0r7cWEoBQoteBQ6Eo
zl4tAqM0lU2X2z6hd/dw9+ntdoYaspgzRX7GKiisVGIovzxsn2jkxJebDkZr5cWc
8JjXX3Tgh/FuJK4Zai1nq9JRsDA/dYUvxqPumQ8ED8aChHY5q02h4XecyHr1y8+F
asGqcjGLqRK9vA8+6MYd/VCrc9atwYI2jfsmtTBL8iVD2cywQUngJxv1uzkKJ6Ih
hIndgg/yZx7OQw==
-----END CERTIFICATE-----
Generated at Mon Apr 28 17:52:43 2025 by rpki-client