Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/431105-67a2-49cb-b7e0-83ffc80073b2/1/7Lvyulsy5C6LbAO4Ntdk-XW1iY8.mft
File: 7Lvyulsy5C6LbAO4Ntdk-XW1iY8.mft (raw, json)
Hash identifier: RQ4EXzwHJMdGxCmJteIFjAwOuM4YXLZdSF5bWzZJrMU=
Subject key identifier: A8:0C:D1:BF:AF:62:82:ED:86:1B:A3:13:EA:D3:8C:B4:21:19:E5:D8
Authority key identifier: EC:BB:F2:BA:5B:32:E4:2E:8B:6C:03:B8:36:D7:64:F9:75:B5:89:8F
Certificate issuer: /CN=ecbbf2ba5b32e42e8b6c03b836d764f975b5898f
Certificate serial: 0194BCAA38AB1936A103D459210A3F431A7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Lvyulsy5C6LbAO4Ntdk-XW1iY8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/431105-67a2-49cb-b7e0-83ffc80073b2/1/7Lvyulsy5C6LbAO4Ntdk-XW1iY8.mft
Manifest number: 126B
Signing time: Fri 31 Jan 2025 14:00:59 +0000
Manifest this update: Fri 31 Jan 2025 14:00:59 +0000
Manifest next update: Sat 01 Feb 2025 14:00:59 +0000
Files and hashes: 1: 2_qB8eFgSy7qYs-cTMDnxVlFBNw.roa (hash: fSrSkbUGiKE2ZlG+ZtKwnFUZkRCDBazw6Ikex7efYic=)
2: 7Lvyulsy5C6LbAO4Ntdk-XW1iY8.crl (hash: HF32ov1RRuA9EHjLmUy5Fp0OLm8CFr4Z3yu91aT+yiw=)
3: keUTzloof1e5LCPNjCM6qrztCW0.roa (hash: 96VfjYTiDayJ8zEZcHUdOWEaY+iQmK9P7tnTsjIikmA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:38:ab:19:36:a1:03:d4:59:21:0a:3f:43:1a:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecbbf2ba5b32e42e8b6c03b836d764f975b5898f
Validity
Not Before: Jan 31 14:00:59 2025 GMT
Not After : Feb 1 14:00:59 2025 GMT
Subject: CN=a80cd1bfaf6282ed861ba313ead38cb42119e5d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:02:a1:ea:d5:34:d9:f8:8f:6a:16:08:99:2d:
1f:d4:95:e2:a1:5f:c3:25:87:5a:81:76:5b:02:01:
54:82:8f:04:7a:6d:e8:da:f1:87:e9:70:f7:7f:59:
29:91:aa:da:29:80:20:7b:a8:1e:d8:bd:18:ab:e9:
a4:da:06:93:07:42:b9:17:c5:25:11:e2:28:a5:70:
89:78:c3:48:f1:dc:91:1f:01:00:76:00:a3:35:f5:
30:42:fb:ea:22:86:0f:fe:eb:33:b1:35:4b:9c:55:
17:18:19:a5:30:0f:ac:19:b2:6b:20:46:b1:21:0b:
71:13:33:bb:5b:33:2b:53:c4:92:98:4a:f2:23:4b:
ca:ad:d8:49:1a:9e:ac:e0:e2:95:52:70:69:3d:ea:
07:13:6e:20:24:86:4f:94:95:96:22:22:8f:2b:02:
07:a4:9c:27:a0:a7:6d:90:eb:02:98:93:af:91:5f:
3d:07:9c:c9:8a:ce:5e:6c:d7:1d:e2:d6:54:d4:b3:
2f:c3:f7:fc:d1:4d:49:a4:fa:8e:0c:2b:05:f9:85:
66:24:fe:97:93:1b:c1:c7:f5:85:c8:0e:55:bb:4d:
25:8d:96:8d:6e:b7:63:61:e5:63:94:48:83:86:b1:
71:bb:a5:c8:97:3e:c6:a1:23:c2:0a:06:76:1a:1f:
08:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:0C:D1:BF:AF:62:82:ED:86:1B:A3:13:EA:D3:8C:B4:21:19:E5:D8
X509v3 Authority Key Identifier:
keyid:EC:BB:F2:BA:5B:32:E4:2E:8B:6C:03:B8:36:D7:64:F9:75:B5:89:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Lvyulsy5C6LbAO4Ntdk-XW1iY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/431105-67a2-49cb-b7e0-83ffc80073b2/1/7Lvyulsy5C6LbAO4Ntdk-XW1iY8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/431105-67a2-49cb-b7e0-83ffc80073b2/1/7Lvyulsy5C6LbAO4Ntdk-XW1iY8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:59:f4:df:30:f8:3a:ad:a3:d8:4b:de:79:18:04:17:7e:2b:
29:d9:94:25:19:8c:94:98:75:a7:24:89:06:d1:de:3f:da:db:
09:51:78:3d:ef:1b:20:5e:03:41:97:e0:d8:6f:e1:c6:a6:58:
89:fa:84:d7:45:8f:80:fe:8b:e4:a7:a0:26:4c:79:02:11:fd:
b5:03:30:77:1f:d3:98:ee:59:24:6d:64:e6:61:5b:9a:31:6e:
b3:20:a8:37:44:a5:23:15:27:35:d9:94:50:fc:c5:2f:b7:3d:
11:29:5d:10:6b:57:3b:a2:c0:97:dd:29:fa:be:a9:9f:92:f3:
8b:e0:0b:40:be:8f:c2:5a:d4:03:b0:aa:95:3d:3d:43:ba:67:
65:ba:38:f5:1f:ab:ec:79:94:36:fe:55:22:1c:b4:63:2d:6f:
95:78:73:cc:53:a6:33:b9:3a:fe:ad:f9:ce:df:37:15:4a:ce:
f6:ee:93:84:d0:5d:3d:ee:5e:f6:81:3e:e9:e3:c3:f7:3c:af:
49:d7:e9:b4:58:ac:0a:68:34:08:68:03:05:d6:0a:5e:42:c2:
e6:96:a9:86:a5:ef:a7:f8:d4:72:4b:68:0e:8f:23:ad:fe:29:
55:b3:c5:4d:6d:d3:e7:67:77:66:f2:01:5a:1f:6f:2e:9e:36:
88:10:f8:ab
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qjirGTahA9RZIQo/Qxp/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVjYmJmMmJhNWIzMmU0MmU4YjZjMDNiODM2ZDc2NGY5NzVi
NTg5OGYwHhcNMjUwMTMxMTQwMDU5WhcNMjUwMjAxMTQwMDU5WjAzMTEwLwYDVQQD
EyhhODBjZDFiZmFmNjI4MmVkODYxYmEzMTNlYWQzOGNiNDIxMTllNWQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvAKh6tU02fiPahYImS0f1JXioV/D
JYdagXZbAgFUgo8Eem3o2vGH6XD3f1kpkaraKYAge6ge2L0Yq+mk2gaTB0K5F8Ul
EeIopXCJeMNI8dyRHwEAdgCjNfUwQvvqIoYP/uszsTVLnFUXGBmlMA+sGbJrIEax
IQtxEzO7WzMrU8SSmEryI0vKrdhJGp6s4OKVUnBpPeoHE24gJIZPlJWWIiKPKwIH
pJwnoKdtkOsCmJOvkV89B5zJis5ebNcd4tZU1LMvw/f80U1JpPqODCsF+YVmJP6X
kxvBx/WFyA5Vu00ljZaNbrdjYeVjlEiDhrFxu6XIlz7GoSPCCgZ2Gh8IOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKgM0b+vYoLthhujE+rTjLQhGeXYMB8GA1UdIwQY
MBaAFOy78rpbMuQui2wDuDbXZPl1tYmPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN0x2eXVsc3k1QzZMYkFPNE50ZGstWFcxaVk4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC80MzExMDUtNjdhMi00OWNiLWI3ZTAt
ODNmZmM4MDA3M2IyLzEvN0x2eXVsc3k1QzZMYkFPNE50ZGstWFcxaVk4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC80MzExMDUtNjdhMi00OWNiLWI3ZTAtODNmZmM4MDA3M2Iy
LzEvN0x2eXVsc3k1QzZMYkFPNE50ZGstWFcxaVk4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY1n03zD4
Oq2j2EveeRgEF34rKdmUJRmMlJh1pySJBtHeP9rbCVF4Pe8bIF4DQZfg2G/hxqZY
ifqE10WPgP6L5KegJkx5AhH9tQMwdx/TmO5ZJG1k5mFbmjFusyCoN0SlIxUnNdmU
UPzFL7c9ESldEGtXO6LAl90p+r6pn5Lzi+ALQL6PwlrUA7CqlT09Q7pnZbo49R+r
7HmUNv5VIhy0Yy1vlXhzzFOmM7k6/q35zt83FUrO9u6ThNBdPe5e9oE+6ePD9zyv
SdfptFisCmg0CGgDBdYKXkLC5paphqXvp/jUcktoDo8jrf4pVbPFTW3T52d3ZvIB
Wh9vLp42iBD4qw==
-----END CERTIFICATE-----
Generated at Fri Apr 25 12:18:00 2025 by rpki-client