Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/2c3619-2c59-46d2-aaae-ef7453ad099f/1/lRZkUh1QOVkhL1WypZrsbSB7Cig.mft
File: lRZkUh1QOVkhL1WypZrsbSB7Cig.mft (raw, json)
Hash identifier: gKxs4lDs+Hw9m7/XHcTEsDAY/4UawQgg/2yVoyfxVYg=
Subject key identifier: 1A:47:6C:2F:6E:02:CD:1D:92:DD:BF:52:60:92:F6:94:A3:FE:7D:7B
Authority key identifier: 95:16:64:52:1D:50:39:59:21:2F:55:B2:A5:9A:EC:6D:20:7B:0A:28
Certificate issuer: /CN=951664521d503959212f55b2a59aec6d207b0a28
Certificate serial: 0194BC3C6A0398A9121EDC9A6F9CC2C05D71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lRZkUh1QOVkhL1WypZrsbSB7Cig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/2c3619-2c59-46d2-aaae-ef7453ad099f/1/lRZkUh1QOVkhL1WypZrsbSB7Cig.mft
Manifest number: 1428
Signing time: Fri 31 Jan 2025 12:01:03 +0000
Manifest this update: Fri 31 Jan 2025 12:01:03 +0000
Manifest next update: Sat 01 Feb 2025 12:01:03 +0000
Files and hashes: 1: IPg6gK3cvCBZgriElu-X9QULHhI.roa (hash: KfBBSFaoabvdCiHx1hEd3tUcsuSp0LUQmRosJtF9Y6s=)
2: lRZkUh1QOVkhL1WypZrsbSB7Cig.crl (hash: WBR34QHAlnmqS1v50JDpyr4CnF7G3XaiZCG/0gTOn+U=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:6a:03:98:a9:12:1e:dc:9a:6f:9c:c2:c0:5d:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=951664521d503959212f55b2a59aec6d207b0a28
Validity
Not Before: Jan 31 12:01:03 2025 GMT
Not After : Feb 1 12:01:03 2025 GMT
Subject: CN=1a476c2f6e02cd1d92ddbf526092f694a3fe7d7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:69:3a:af:fa:73:91:8a:0f:4d:8c:5e:35:94:
16:25:9d:76:1c:6d:44:96:62:f2:7e:2c:d2:5a:9b:
c8:8a:e7:fe:19:3f:e0:dd:b6:36:f6:7e:0c:af:f8:
13:ed:0f:a4:f5:6a:4c:51:c1:5d:b8:8a:61:22:82:
4b:7e:38:42:52:06:6a:ea:6c:a4:6b:18:e5:7c:5e:
6f:cd:60:2c:cb:13:84:7c:58:1b:64:57:ee:d0:05:
1c:44:e0:7c:5e:e0:74:81:01:9a:5e:f8:f7:ab:5e:
b9:c0:df:e4:01:b3:83:36:90:8d:38:f8:28:bc:d3:
3a:26:cc:f7:8b:a7:1f:33:33:db:7a:7f:49:92:1d:
19:ae:18:2b:32:ed:9f:1f:21:c0:53:cf:3b:94:5e:
7b:ce:45:a5:b2:aa:cb:8b:3b:79:1b:c8:8b:72:a5:
77:0d:38:e9:ed:71:e4:af:d6:80:e6:66:84:93:f1:
89:2c:45:d7:e1:14:2c:d7:bc:50:09:93:24:42:92:
f2:de:ed:fb:cc:96:61:b4:1a:8d:fa:e9:de:4d:ec:
d0:c2:26:17:b9:e7:fe:53:33:71:65:5b:2f:20:cf:
10:a2:b3:ec:c6:0d:f0:13:33:b5:74:a3:68:0b:f1:
8f:b3:63:3a:35:8f:2e:97:d7:e1:03:07:5b:ca:fc:
71:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:47:6C:2F:6E:02:CD:1D:92:DD:BF:52:60:92:F6:94:A3:FE:7D:7B
X509v3 Authority Key Identifier:
keyid:95:16:64:52:1D:50:39:59:21:2F:55:B2:A5:9A:EC:6D:20:7B:0A:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lRZkUh1QOVkhL1WypZrsbSB7Cig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/2c3619-2c59-46d2-aaae-ef7453ad099f/1/lRZkUh1QOVkhL1WypZrsbSB7Cig.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/2c3619-2c59-46d2-aaae-ef7453ad099f/1/lRZkUh1QOVkhL1WypZrsbSB7Cig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:19:0c:2b:6d:dd:d4:f2:e9:e9:8a:97:39:a5:a6:56:23:c2:
05:94:15:3c:fc:72:77:c4:20:22:f8:43:03:67:5a:03:89:18:
ef:1c:0d:04:da:a0:22:1d:94:3c:8e:71:f3:4a:ec:9a:ec:20:
66:de:65:3c:3a:d2:a5:07:6a:2f:ab:f7:00:9f:cf:9c:b9:b1:
86:de:2a:69:7c:4e:8f:83:59:42:6a:a0:2a:02:91:31:c0:8e:
c1:dc:65:0c:3c:89:87:e5:8c:76:64:21:91:d9:d4:20:78:67:
49:45:5d:66:07:ab:19:38:f7:28:68:8d:f4:53:b4:b1:e1:26:
eb:1c:2b:87:28:d3:3e:24:21:e2:c3:b1:fc:a4:cd:57:e8:76:
d0:00:3f:30:f6:c9:89:7a:3a:ca:b7:5a:7b:1f:89:95:7a:2b:
bf:7f:6d:b4:1d:67:2f:40:8a:2d:80:d5:e5:4b:24:84:36:56:
4a:33:3f:9e:74:ed:4e:f7:43:1a:cb:bd:2a:53:8d:5b:39:67:
50:cc:da:0e:8f:84:db:fc:23:34:53:27:7c:ce:82:55:0f:3f:
7b:3d:14:7d:84:70:ad:f6:2d:8b:62:46:38:b3:bc:ef:00:8e:
24:ab:9e:b8:4a:ad:ed:09:19:8b:6f:ec:a1:e2:bd:e6:49:91:
0e:6d:06:e9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8PGoDmKkSHtyab5zCwF1xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1MTY2NDUyMWQ1MDM5NTkyMTJmNTViMmE1OWFlYzZkMjA3
YjBhMjgwHhcNMjUwMTMxMTIwMTAzWhcNMjUwMjAxMTIwMTAzWjAzMTEwLwYDVQQD
EygxYTQ3NmMyZjZlMDJjZDFkOTJkZGJmNTI2MDkyZjY5NGEzZmU3ZDdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvWk6r/pzkYoPTYxeNZQWJZ12HG1E
lmLyfizSWpvIiuf+GT/g3bY29n4Mr/gT7Q+k9WpMUcFduIphIoJLfjhCUgZq6myk
axjlfF5vzWAsyxOEfFgbZFfu0AUcROB8XuB0gQGaXvj3q165wN/kAbODNpCNOPgo
vNM6Jsz3i6cfMzPben9Jkh0ZrhgrMu2fHyHAU887lF57zkWlsqrLizt5G8iLcqV3
DTjp7XHkr9aA5maEk/GJLEXX4RQs17xQCZMkQpLy3u37zJZhtBqN+uneTezQwiYX
uef+UzNxZVsvIM8QorPsxg3wEzO1dKNoC/GPs2M6NY8ul9fhAwdbyvxxEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBpHbC9uAs0dkt2/UmCS9pSj/n17MB8GA1UdIwQY
MBaAFJUWZFIdUDlZIS9VsqWa7G0gewooMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbFJaa1VoMVFPVmtoTDFXeXBacnNiU0I3Q2lnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS8yYzM2MTktMmM1OS00NmQyLWFhYWUt
ZWY3NDUzYWQwOTlmLzEvbFJaa1VoMVFPVmtoTDFXeXBacnNiU0I3Q2lnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMS8yYzM2MTktMmM1OS00NmQyLWFhYWUtZWY3NDUzYWQwOTlm
LzEvbFJaa1VoMVFPVmtoTDFXeXBacnNiU0I3Q2lnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlhkMK23d
1PLp6YqXOaWmViPCBZQVPPxyd8QgIvhDA2daA4kY7xwNBNqgIh2UPI5x80rsmuwg
Zt5lPDrSpQdqL6v3AJ/PnLmxht4qaXxOj4NZQmqgKgKRMcCOwdxlDDyJh+WMdmQh
kdnUIHhnSUVdZgerGTj3KGiN9FO0seEm6xwrhyjTPiQh4sOx/KTNV+h20AA/MPbJ
iXo6yrdaex+JlXorv39ttB1nL0CKLYDV5UskhDZWSjM/nnTtTvdDGsu9KlONWzln
UMzaDo+E2/wjNFMnfM6CVQ8/ez0UfYRwrfYti2JGOLO87wCOJKueuEqt7QkZi2/s
oeK95kmRDm0G6Q==
-----END CERTIFICATE-----
Generated at Fri Apr 25 02:01:03 2025 by rpki-client