Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/ae7101-e4fa-450c-a301-68ad3bdbd39b/1/LkJv6Qhstq8B85H_T2nACDZNbu0.mft
File: LkJv6Qhstq8B85H_T2nACDZNbu0.mft (raw, json)
Hash identifier: GyuC3CtwTvQGYOH3SsJvOMnzNZAGNQfjxokN15C9Yuo=
Subject key identifier: 6A:E2:B7:8D:D6:D2:5B:5D:DA:FD:48:07:44:FF:F6:4D:7C:2B:E3:04
Authority key identifier: 2E:42:6F:E9:08:6C:B6:AF:01:F3:91:FF:4F:69:C0:08:36:4D:6E:ED
Certificate issuer: /CN=2e426fe9086cb6af01f391ff4f69c008364d6eed
Certificate serial: 0194BC729B8A3A3B94B549E340E373AA1116
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LkJv6Qhstq8B85H_T2nACDZNbu0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/ae7101-e4fa-450c-a301-68ad3bdbd39b/1/LkJv6Qhstq8B85H_T2nACDZNbu0.mft
Manifest number: 13C0
Signing time: Fri 31 Jan 2025 13:00:14 +0000
Manifest this update: Fri 31 Jan 2025 13:00:14 +0000
Manifest next update: Sat 01 Feb 2025 13:00:14 +0000
Files and hashes: 1: LkJv6Qhstq8B85H_T2nACDZNbu0.crl (hash: +gMPCOLntBXot8BSRVH69QnQOveNMw+NHKsJkT5Eqbs=)
2: jS_G6el4wEcgi8my5R0XT21ut5Q.roa (hash: Q5lJn0D9zs18LOmkVI8eROdi6ECwhGDbp8byuxpzAUo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:9b:8a:3a:3b:94:b5:49:e3:40:e3:73:aa:11:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e426fe9086cb6af01f391ff4f69c008364d6eed
Validity
Not Before: Jan 31 13:00:14 2025 GMT
Not After : Feb 1 13:00:14 2025 GMT
Subject: CN=6ae2b78dd6d25b5ddafd480744fff64d7c2be304
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:07:aa:9c:fe:37:ac:ee:cc:0e:3c:ab:d5:8e:
9c:e1:35:f6:dd:62:ec:ea:ce:ac:a7:c1:04:51:f9:
80:af:99:81:87:ae:a3:97:49:70:f5:f3:b4:8a:92:
51:d1:c0:bf:e5:a7:52:e7:1f:02:dc:f0:42:05:37:
30:10:26:2b:c7:8d:5d:9e:7e:ec:6b:b7:63:82:75:
84:50:fe:f8:97:28:4b:35:53:f4:66:3e:60:31:ac:
0c:09:a4:5c:b8:7e:aa:99:d9:03:30:9b:74:b8:26:
f9:af:fc:88:77:b3:cf:a4:55:2f:df:41:ee:eb:24:
07:d8:bf:ad:51:9a:7a:8f:7d:33:25:2d:0b:36:19:
8c:0b:4d:af:75:42:7c:67:33:57:da:c3:51:b7:74:
a5:aa:bf:71:bf:16:37:0a:3c:0f:88:49:f7:fa:06:
3c:c2:c0:8f:d6:fa:dd:13:4c:81:87:ef:24:88:b8:
5d:5e:96:c6:58:c7:76:2e:1e:e3:48:0b:a9:f2:fd:
6f:b9:2d:f5:b5:31:72:05:08:d1:ab:78:74:49:36:
a6:b8:60:a9:0f:ee:0c:00:58:00:58:35:25:55:49:
5d:f9:29:ca:f4:95:be:76:53:58:56:45:4a:f3:10:
0a:a9:68:53:7e:2b:53:d7:03:f4:26:35:b0:77:bf:
c2:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:E2:B7:8D:D6:D2:5B:5D:DA:FD:48:07:44:FF:F6:4D:7C:2B:E3:04
X509v3 Authority Key Identifier:
keyid:2E:42:6F:E9:08:6C:B6:AF:01:F3:91:FF:4F:69:C0:08:36:4D:6E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LkJv6Qhstq8B85H_T2nACDZNbu0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ae7101-e4fa-450c-a301-68ad3bdbd39b/1/LkJv6Qhstq8B85H_T2nACDZNbu0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ae7101-e4fa-450c-a301-68ad3bdbd39b/1/LkJv6Qhstq8B85H_T2nACDZNbu0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:0f:92:a0:97:0e:33:14:39:fc:aa:6d:b7:58:3d:d5:64:d2:
3d:c9:9c:8f:74:18:cd:32:88:f0:57:e7:0c:0a:8e:d4:eb:d6:
c0:d1:22:25:17:0c:29:fe:63:4c:85:c1:f6:8d:30:24:6d:41:
64:20:19:88:84:4a:ef:05:dc:bc:5e:57:a0:73:b6:ca:5a:ce:
5a:f2:5f:73:1f:6b:14:75:fc:e7:76:15:da:76:ea:9c:2d:a4:
c5:a3:dc:e1:aa:f9:94:e2:41:db:a6:f6:d4:0c:91:03:05:1a:
fe:e3:27:7d:4f:7e:c8:78:2c:ae:4d:75:07:f5:78:ce:d7:e1:
fe:ce:1e:b3:fd:f8:ff:dc:14:df:4e:3e:cb:bb:39:99:f6:f5:
ac:e0:32:5a:09:91:a2:30:6d:8d:e0:69:6c:d9:89:12:8a:07:
53:ef:a7:d0:dc:85:71:99:69:b4:c8:2c:43:7f:53:28:b0:4f:
27:02:fd:98:0b:05:8d:b6:27:b8:c1:d0:6d:29:a6:d4:6d:80:
44:d6:9e:cf:7d:f7:ff:97:82:e1:d9:db:62:1d:fe:38:95:a0:
7c:30:1a:ca:0a:d1:27:36:db:5b:54:af:8b:fa:07:f5:23:62:
45:fd:8f:2b:5f:ad:bb:57:32:d1:06:0e:37:b7:ca:0b:0a:e4:
8d:05:a1:b5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8cpuKOjuUtUnjQONzqhEWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlNDI2ZmU5MDg2Y2I2YWYwMWYzOTFmZjRmNjljMDA4MzY0
ZDZlZWQwHhcNMjUwMTMxMTMwMDE0WhcNMjUwMjAxMTMwMDE0WjAzMTEwLwYDVQQD
Eyg2YWUyYjc4ZGQ2ZDI1YjVkZGFmZDQ4MDc0NGZmZjY0ZDdjMmJlMzA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzQeqnP43rO7MDjyr1Y6c4TX23WLs
6s6sp8EEUfmAr5mBh66jl0lw9fO0ipJR0cC/5adS5x8C3PBCBTcwECYrx41dnn7s
a7djgnWEUP74lyhLNVP0Zj5gMawMCaRcuH6qmdkDMJt0uCb5r/yId7PPpFUv30Hu
6yQH2L+tUZp6j30zJS0LNhmMC02vdUJ8ZzNX2sNRt3Slqr9xvxY3CjwPiEn3+gY8
wsCP1vrdE0yBh+8kiLhdXpbGWMd2Lh7jSAup8v1vuS31tTFyBQjRq3h0STamuGCp
D+4MAFgAWDUlVUld+SnK9JW+dlNYVkVK8xAKqWhTfitT1wP0JjWwd7/CIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGrit43W0ltd2v1IB0T/9k18K+MEMB8GA1UdIwQY
MBaAFC5Cb+kIbLavAfOR/09pwAg2TW7tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTGtKdjZRaHN0cThCODVIX1QybkFDRFpOYnUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy9hZTcxMDEtZTRmYS00NTBjLWEzMDEt
NjhhZDNiZGJkMzliLzEvTGtKdjZRaHN0cThCODVIX1QybkFDRFpOYnUwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMy9hZTcxMDEtZTRmYS00NTBjLWEzMDEtNjhhZDNiZGJkMzli
LzEvTGtKdjZRaHN0cThCODVIX1QybkFDRFpOYnUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARg+SoJcO
MxQ5/Kptt1g91WTSPcmcj3QYzTKI8FfnDAqO1OvWwNEiJRcMKf5jTIXB9o0wJG1B
ZCAZiIRK7wXcvF5XoHO2ylrOWvJfcx9rFHX853YV2nbqnC2kxaPc4ar5lOJB26b2
1AyRAwUa/uMnfU9+yHgsrk11B/V4ztfh/s4es/34/9wU304+y7s5mfb1rOAyWgmR
ojBtjeBpbNmJEooHU++n0NyFcZlptMgsQ39TKLBPJwL9mAsFjbYnuMHQbSmm1G2A
RNaez333/5eC4dnbYh3+OJWgfDAaygrRJzbbW1Svi/oH9SNiRf2PK1+tu1cy0QYO
N7fKCwrkjQWhtQ==
-----END CERTIFICATE-----
Generated at Fri Apr 25 00:52:27 2025 by rpki-client