Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/b9a4ac-b671-411b-ac47-19005cb98989/1/L0B96kmdc9fr1OaIJRiGh1Wcsfk.mft
File: L0B96kmdc9fr1OaIJRiGh1Wcsfk.mft (raw, json)
Hash identifier: mPfSqgf1xIIULmkF9zyJ+lexKIO90A2WBXc40MlO2/4=
Subject key identifier: CF:A2:7A:7F:AB:FD:26:3D:DF:C4:A9:62:8B:5F:30:F9:FD:03:93:5C
Authority key identifier: 2F:40:7D:EA:49:9D:73:D7:EB:D4:E6:88:25:18:86:87:55:9C:B1:F9
Certificate issuer: /CN=2f407dea499d73d7ebd4e68825188687559cb1f9
Certificate serial: 0194BC72FF9EC1A3917448B8B45613E3B426
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L0B96kmdc9fr1OaIJRiGh1Wcsfk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/b9a4ac-b671-411b-ac47-19005cb98989/1/L0B96kmdc9fr1OaIJRiGh1Wcsfk.mft
Manifest number: 1410
Signing time: Fri 31 Jan 2025 13:00:40 +0000
Manifest this update: Fri 31 Jan 2025 13:00:40 +0000
Manifest next update: Sat 01 Feb 2025 13:00:40 +0000
Files and hashes: 1: 2y9heUGpm4IABGcsawt9m5ijUw8.roa (hash: 3R+JVKPGvS+pF/oreszpE7P3zqEvUvswY+6b0jSRI3s=)
2: L0B96kmdc9fr1OaIJRiGh1Wcsfk.crl (hash: YTfwD1+7MfMZpWtKV8Ys7mtIDZDSrVR3W3Q7yH9xHw4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:ff:9e:c1:a3:91:74:48:b8:b4:56:13:e3:b4:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f407dea499d73d7ebd4e68825188687559cb1f9
Validity
Not Before: Jan 31 13:00:40 2025 GMT
Not After : Feb 1 13:00:40 2025 GMT
Subject: CN=cfa27a7fabfd263ddfc4a9628b5f30f9fd03935c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:cf:56:1b:7a:4e:3d:08:b0:e6:73:8d:54:4b:
b1:51:50:3b:1c:62:ce:d6:05:06:50:df:ec:14:34:
7a:d9:dd:32:c8:96:f6:a3:15:31:6d:02:8a:21:ec:
b8:4c:f4:8c:ec:64:e0:3e:9f:60:58:c3:3b:6b:8b:
ef:24:10:ed:7d:c1:05:5c:15:85:a1:9a:b5:76:33:
1b:dc:50:9a:53:0c:23:35:dc:ba:19:c9:f2:4f:15:
51:22:31:cc:c7:e4:de:30:08:10:68:07:87:ad:99:
fb:01:8a:03:10:7a:de:f2:eb:14:86:37:ef:90:a7:
f9:93:9c:4f:3b:c9:e5:8e:ad:58:6d:bd:f8:87:99:
a7:b0:25:fe:c9:3a:74:85:fc:62:5b:6c:96:02:84:
87:b6:96:33:1a:0c:cb:37:ae:c5:10:88:26:b9:66:
67:70:35:2b:42:89:4c:8a:4e:06:23:6d:64:29:b6:
b3:d4:1a:a9:01:ab:23:6f:2b:4e:a2:bb:07:ed:3b:
82:d0:80:1f:76:50:c0:3c:e3:1c:c7:85:96:b7:69:
24:56:f2:40:51:95:e5:65:48:fb:d8:b4:ee:e9:c2:
da:91:74:e8:96:b7:b4:6c:0b:90:26:0e:0b:ef:ef:
46:27:98:4e:53:80:78:16:4e:b3:f0:1b:8b:b6:ac:
f0:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:A2:7A:7F:AB:FD:26:3D:DF:C4:A9:62:8B:5F:30:F9:FD:03:93:5C
X509v3 Authority Key Identifier:
keyid:2F:40:7D:EA:49:9D:73:D7:EB:D4:E6:88:25:18:86:87:55:9C:B1:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L0B96kmdc9fr1OaIJRiGh1Wcsfk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/b9a4ac-b671-411b-ac47-19005cb98989/1/L0B96kmdc9fr1OaIJRiGh1Wcsfk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/b9a4ac-b671-411b-ac47-19005cb98989/1/L0B96kmdc9fr1OaIJRiGh1Wcsfk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:15:41:2d:77:8f:6e:03:b3:71:1d:32:54:d2:b3:35:a9:10:
7c:71:75:02:f4:19:25:16:f6:dd:3b:f2:12:88:b9:a1:fd:b1:
22:18:aa:7f:ff:79:99:84:1d:cc:b8:b2:6a:84:24:24:57:17:
34:21:d4:e6:56:4e:15:cb:32:1c:a2:29:fc:35:12:05:86:6a:
7c:eb:42:86:4a:89:d7:ae:07:90:ff:9f:c7:48:07:7a:99:c9:
1d:6b:b0:3a:1b:dd:32:17:36:02:df:8d:67:61:00:0c:7e:07:
89:bc:66:7c:15:d3:18:10:99:20:f3:7e:93:b7:b5:92:fd:06:
5e:e1:8f:d0:ed:03:07:24:5a:b6:2a:4f:cd:6a:fe:9e:38:6b:
1e:3e:7e:e4:8f:b8:e8:e0:76:4b:13:2f:a6:a3:5a:f3:2d:66:
d0:db:c6:48:c8:39:78:ca:d4:88:de:4f:8a:42:42:c1:38:c5:
f6:e0:45:7b:4d:3a:dd:09:07:87:d8:9e:6b:70:0d:d6:0d:73:
88:cd:e4:f3:3c:13:81:a4:af:a3:02:48:88:25:47:e3:bb:91:
c8:58:42:73:0e:32:2c:0d:61:25:27:a8:b4:d0:f0:fa:ba:01:
af:e3:e0:43:7a:fb:10:18:38:80:94:68:a8:aa:34:a9:64:cd:
8a:94:02:ce
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8cv+ewaORdEi4tFYT47QmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmNDA3ZGVhNDk5ZDczZDdlYmQ0ZTY4ODI1MTg4Njg3NTU5
Y2IxZjkwHhcNMjUwMTMxMTMwMDQwWhcNMjUwMjAxMTMwMDQwWjAzMTEwLwYDVQQD
EyhjZmEyN2E3ZmFiZmQyNjNkZGZjNGE5NjI4YjVmMzBmOWZkMDM5MzVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2c9WG3pOPQiw5nONVEuxUVA7HGLO
1gUGUN/sFDR62d0yyJb2oxUxbQKKIey4TPSM7GTgPp9gWMM7a4vvJBDtfcEFXBWF
oZq1djMb3FCaUwwjNdy6GcnyTxVRIjHMx+TeMAgQaAeHrZn7AYoDEHre8usUhjfv
kKf5k5xPO8nljq1Ybb34h5mnsCX+yTp0hfxiW2yWAoSHtpYzGgzLN67FEIgmuWZn
cDUrQolMik4GI21kKbaz1BqpAasjbytOorsH7TuC0IAfdlDAPOMcx4WWt2kkVvJA
UZXlZUj72LTu6cLakXTolre0bAuQJg4L7+9GJ5hOU4B4Fk6z8BuLtqzwLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM+ien+r/SY938SpYotfMPn9A5NcMB8GA1UdIwQY
MBaAFC9AfepJnXPX69TmiCUYhodVnLH5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTDBCOTZrbWRjOWZyMU9hSUpSaUdoMVdjc2ZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9iOWE0YWMtYjY3MS00MTFiLWFjNDct
MTkwMDVjYjk4OTg5LzEvTDBCOTZrbWRjOWZyMU9hSUpSaUdoMVdjc2ZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi9iOWE0YWMtYjY3MS00MTFiLWFjNDctMTkwMDVjYjk4OTg5
LzEvTDBCOTZrbWRjOWZyMU9hSUpSaUdoMVdjc2ZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANhVBLXeP
bgOzcR0yVNKzNakQfHF1AvQZJRb23TvyEoi5of2xIhiqf/95mYQdzLiyaoQkJFcX
NCHU5lZOFcsyHKIp/DUSBYZqfOtChkqJ164HkP+fx0gHepnJHWuwOhvdMhc2At+N
Z2EADH4HibxmfBXTGBCZIPN+k7e1kv0GXuGP0O0DByRatipPzWr+njhrHj5+5I+4
6OB2SxMvpqNa8y1m0NvGSMg5eMrUiN5PikJCwTjF9uBFe0063QkHh9iea3AN1g1z
iM3k8zwTgaSvowJIiCVH47uRyFhCcw4yLA1hJSeotNDw+roBr+PgQ3r7EBg4gJRo
qKo0qWTNipQCzg==
-----END CERTIFICATE-----
Generated at Thu Apr 24 19:07:28 2025 by rpki-client