Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/e67956-de18-40c4-b013-951e5afae9e7/1/LdgAjePP9i0vrKENmf8gw-h43N8.mft
File: LdgAjePP9i0vrKENmf8gw-h43N8.mft (raw, json)
Hash identifier: 9mt9pBz11lsnDL7lUhs/hypAjvzK81VjbJI7uZ6pWwE=
Subject key identifier: 84:31:FA:11:C1:63:29:70:FA:E2:11:B0:DD:2A:93:D4:A9:2F:4F:6C
Authority key identifier: 2D:D8:00:8D:E3:CF:F6:2D:2F:AC:A1:0D:99:FF:20:C3:E8:78:DC:DF
Certificate issuer: /CN=2dd8008de3cff62d2faca10d99ff20c3e878dcdf
Certificate serial: 0194BD8579CAA0B7591FBCD58A29906A3DC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LdgAjePP9i0vrKENmf8gw-h43N8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/e67956-de18-40c4-b013-951e5afae9e7/1/LdgAjePP9i0vrKENmf8gw-h43N8.mft
Manifest number: 02EC
Signing time: Fri 31 Jan 2025 18:00:28 +0000
Manifest this update: Fri 31 Jan 2025 18:00:28 +0000
Manifest next update: Sat 01 Feb 2025 18:00:28 +0000
Files and hashes: 1: LdgAjePP9i0vrKENmf8gw-h43N8.crl (hash: L4g7TfFB/HUMg11rXa4s3V+2i7KBdKlzlazgTGPegow=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:79:ca:a0:b7:59:1f:bc:d5:8a:29:90:6a:3d:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2dd8008de3cff62d2faca10d99ff20c3e878dcdf
Validity
Not Before: Jan 31 18:00:28 2025 GMT
Not After : Feb 1 18:00:28 2025 GMT
Subject: CN=8431fa11c1632970fae211b0dd2a93d4a92f4f6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:13:54:bd:24:32:45:7c:0a:78:4a:c4:9d:9b:
ed:82:ec:82:d1:42:c6:20:fc:03:f5:64:1e:7b:54:
f4:2b:d4:c5:cc:a1:ef:33:d5:99:6d:dc:62:df:08:
2d:81:bd:83:1d:6f:5f:0c:62:b3:f4:e1:d8:01:37:
2d:36:81:bd:36:02:24:30:69:c4:96:f7:58:75:0a:
e3:5e:01:dd:98:c2:84:01:78:ac:fa:7c:75:69:32:
12:ec:68:54:ee:2a:dd:88:88:56:52:56:e6:6d:9d:
30:84:af:79:50:eb:8e:fc:26:ec:15:3c:0c:49:c4:
ac:a7:72:69:95:4a:29:cd:15:fb:c5:55:77:4a:e3:
26:15:d3:5e:9b:8d:19:92:a2:c9:82:53:10:fb:87:
bc:0d:9d:95:fb:ee:ed:5d:1b:3f:cf:54:58:4f:9d:
01:8d:cb:9d:68:42:8e:0c:e8:75:f7:4e:55:56:23:
d4:46:69:55:b4:cd:0d:e5:d9:77:94:dc:45:af:a5:
b6:75:ef:f5:f3:34:10:67:b0:98:61:98:5e:25:80:
a8:f0:6c:49:7e:23:6b:7d:df:80:ac:35:b3:e3:ef:
75:4a:f9:11:d8:3e:cc:ff:9e:fd:dd:e3:10:59:4d:
f2:bd:53:e8:eb:2e:ec:29:f4:c6:b9:1d:6d:50:6e:
23:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:31:FA:11:C1:63:29:70:FA:E2:11:B0:DD:2A:93:D4:A9:2F:4F:6C
X509v3 Authority Key Identifier:
keyid:2D:D8:00:8D:E3:CF:F6:2D:2F:AC:A1:0D:99:FF:20:C3:E8:78:DC:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LdgAjePP9i0vrKENmf8gw-h43N8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/e67956-de18-40c4-b013-951e5afae9e7/1/LdgAjePP9i0vrKENmf8gw-h43N8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/e67956-de18-40c4-b013-951e5afae9e7/1/LdgAjePP9i0vrKENmf8gw-h43N8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:8e:81:50:b8:84:05:1a:eb:a1:3a:47:98:c7:40:b3:b2:16:
0a:cd:3e:f6:76:1a:04:e2:97:6a:a3:ec:42:7a:f7:15:a5:f4:
f0:a6:ce:ab:86:25:2d:b2:f0:a1:f0:f4:84:dc:a7:15:19:37:
06:cf:40:4e:01:fb:e9:b3:27:c5:3c:19:00:c6:83:dd:9e:b4:
d6:83:95:b1:93:49:41:32:f8:a4:e5:c2:4b:94:57:dc:4d:b5:
8c:17:5a:40:65:05:31:0c:45:ee:f6:c4:ff:5d:5d:f0:22:76:
a9:89:53:97:2d:31:36:73:38:f0:c7:06:9f:d7:9c:69:87:93:
67:6e:3a:65:03:3c:4d:23:a4:22:e9:ec:5a:0f:39:81:4d:0c:
03:1c:99:16:fc:9a:32:48:4a:28:3c:bd:97:b7:8a:35:0f:67:
7c:47:3c:39:90:2b:4c:d6:79:67:88:5d:20:62:19:df:e3:26:
ec:2f:d3:2a:a0:47:36:91:43:2e:27:36:6c:5b:78:71:e3:ff:
56:91:b2:63:08:bd:10:73:33:15:00:47:7d:06:77:0e:78:aa:
4f:d2:97:96:4d:90:8f:14:77:7f:cf:fe:fe:37:95:0a:d2:f2:
1f:49:b7:a8:76:65:5c:1d:61:8a:c7:fc:e6:b8:d4:ee:c8:b1:
93:38:fa:e2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9hXnKoLdZH7zViimQaj3FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJkZDgwMDhkZTNjZmY2MmQyZmFjYTEwZDk5ZmYyMGMzZTg3
OGRjZGYwHhcNMjUwMTMxMTgwMDI4WhcNMjUwMjAxMTgwMDI4WjAzMTEwLwYDVQQD
Eyg4NDMxZmExMWMxNjMyOTcwZmFlMjExYjBkZDJhOTNkNGE5MmY0ZjZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxBNUvSQyRXwKeErEnZvtguyC0ULG
IPwD9WQee1T0K9TFzKHvM9WZbdxi3wgtgb2DHW9fDGKz9OHYATctNoG9NgIkMGnE
lvdYdQrjXgHdmMKEAXis+nx1aTIS7GhU7irdiIhWUlbmbZ0whK95UOuO/CbsFTwM
ScSsp3JplUopzRX7xVV3SuMmFdNem40ZkqLJglMQ+4e8DZ2V++7tXRs/z1RYT50B
jcudaEKODOh1905VViPURmlVtM0N5dl3lNxFr6W2de/18zQQZ7CYYZheJYCo8GxJ
fiNrfd+ArDWz4+91SvkR2D7M/5793eMQWU3yvVPo6y7sKfTGuR1tUG4jtwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIQx+hHBYylw+uIRsN0qk9SpL09sMB8GA1UdIwQY
MBaAFC3YAI3jz/YtL6yhDZn/IMPoeNzfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTGRnQWplUFA5aTB2cktFTm1mOGd3LWg0M044LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9lNjc5NTYtZGUxOC00MGM0LWIwMTMt
OTUxZTVhZmFlOWU3LzEvTGRnQWplUFA5aTB2cktFTm1mOGd3LWg0M044Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS9lNjc5NTYtZGUxOC00MGM0LWIwMTMtOTUxZTVhZmFlOWU3
LzEvTGRnQWplUFA5aTB2cktFTm1mOGd3LWg0M044LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABY6BULiE
BRrroTpHmMdAs7IWCs0+9nYaBOKXaqPsQnr3FaX08KbOq4YlLbLwofD0hNynFRk3
Bs9ATgH76bMnxTwZAMaD3Z601oOVsZNJQTL4pOXCS5RX3E21jBdaQGUFMQxF7vbE
/11d8CJ2qYlTly0xNnM48McGn9ecaYeTZ246ZQM8TSOkIunsWg85gU0MAxyZFvya
MkhKKDy9l7eKNQ9nfEc8OZArTNZ5Z4hdIGIZ3+Mm7C/TKqBHNpFDLic2bFt4ceP/
VpGyYwi9EHMzFQBHfQZ3DniqT9KXlk2QjxR3f8/+/jeVCtLyH0m3qHZlXB1hisf8
5rjU7sixkzj64g==
-----END CERTIFICATE-----
Generated at Fri Apr 25 06:31:36 2025 by rpki-client