Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/446e9a-963f-44cb-a42d-48741009fc1e/1/li_WiB3GhZt6-qn3UKbdi71p6Zo.mft
File: li_WiB3GhZt6-qn3UKbdi71p6Zo.mft (raw, json)
Hash identifier: YIuKlngsrzScgXhZoSZ5jxqsTnxhC5B3VFTyooQ+FF4=
Subject key identifier: B6:98:32:8C:EF:26:3E:66:56:5F:71:F4:0F:87:CF:4B:AC:43:F6:B0
Authority key identifier: 96:2F:D6:88:1D:C6:85:9B:7A:FA:A9:F7:50:A6:DD:8B:BD:69:E9:9A
Certificate issuer: /CN=962fd6881dc6859b7afaa9f750a6dd8bbd69e99a
Certificate serial: 0194BD8570B9A03A92868422C57F678F4E7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/li_WiB3GhZt6-qn3UKbdi71p6Zo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/446e9a-963f-44cb-a42d-48741009fc1e/1/li_WiB3GhZt6-qn3UKbdi71p6Zo.mft
Manifest number: 0706
Signing time: Fri 31 Jan 2025 18:00:26 +0000
Manifest this update: Fri 31 Jan 2025 18:00:26 +0000
Manifest next update: Sat 01 Feb 2025 18:00:26 +0000
Files and hashes: 1: VP1dVitGNzhgzlrIu_RUc35dU0g.roa (hash: 24LtlHsHu58mIGcYviemg+NoFfkkY936H7bROrCIBME=)
2: li_WiB3GhZt6-qn3UKbdi71p6Zo.crl (hash: OG9mUYz2WIIw6Tv3p42zynXzxtukBuTAZ9aDC7Sff/c=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:70:b9:a0:3a:92:86:84:22:c5:7f:67:8f:4e:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=962fd6881dc6859b7afaa9f750a6dd8bbd69e99a
Validity
Not Before: Jan 31 18:00:26 2025 GMT
Not After : Feb 1 18:00:26 2025 GMT
Subject: CN=b698328cef263e66565f71f40f87cf4bac43f6b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:9c:2a:ed:10:70:8a:f7:72:29:c6:ec:17:f8:
cb:d8:0d:b7:b8:7f:3a:c8:28:00:98:1f:22:98:36:
84:7a:42:f8:5a:c0:b1:d2:10:41:8c:a8:49:ff:5f:
05:96:c6:3b:e1:fd:40:24:3f:9c:ad:ed:74:7a:4c:
f9:8f:af:7f:6a:af:e6:f6:e4:97:f8:0d:7b:32:fa:
13:b7:2e:0c:e0:d0:f5:a1:ab:88:3a:f5:ed:b9:ad:
a2:2c:6e:4f:8c:97:1e:9b:bd:f4:ed:46:f9:00:5a:
81:b4:b8:95:a4:82:3d:3a:77:05:83:e7:b8:82:9f:
af:e2:7a:52:c3:e4:a3:5b:90:ae:53:12:2d:82:af:
f7:59:e9:74:5e:4d:c3:e0:74:df:77:9c:45:79:ab:
1b:14:e5:42:14:b3:41:d7:12:e3:75:b4:c5:2d:ab:
b7:31:16:25:c4:96:65:2f:05:d9:88:08:9e:45:e4:
a5:83:f6:bf:47:84:d1:fd:06:59:76:e9:af:e5:2d:
8d:90:00:55:69:6a:65:58:b8:b7:70:fc:85:f8:e9:
ba:d1:60:0f:a0:c8:92:99:02:7e:74:04:28:df:db:
21:9a:6e:c3:52:11:04:b5:35:78:f3:c9:0a:6a:fa:
f6:2b:2f:71:a3:4e:54:ba:8f:0a:02:c0:04:e6:33:
6a:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:98:32:8C:EF:26:3E:66:56:5F:71:F4:0F:87:CF:4B:AC:43:F6:B0
X509v3 Authority Key Identifier:
keyid:96:2F:D6:88:1D:C6:85:9B:7A:FA:A9:F7:50:A6:DD:8B:BD:69:E9:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/li_WiB3GhZt6-qn3UKbdi71p6Zo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/446e9a-963f-44cb-a42d-48741009fc1e/1/li_WiB3GhZt6-qn3UKbdi71p6Zo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/446e9a-963f-44cb-a42d-48741009fc1e/1/li_WiB3GhZt6-qn3UKbdi71p6Zo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:0e:c4:5d:41:42:11:13:93:5e:b8:82:51:a4:4b:fa:4b:0d:
27:87:b7:77:5c:ae:79:9e:b3:36:6c:5e:cb:74:90:33:19:ff:
87:1a:f1:f5:69:4b:d8:d3:15:91:5b:66:d4:be:10:c3:05:f5:
79:2a:60:dc:1a:fd:a0:ca:a6:98:68:35:ae:bf:8c:1e:2d:20:
ce:50:62:cf:3d:3f:77:7f:cb:1c:36:91:c2:4b:3f:c1:e2:aa:
de:8a:f3:02:bf:82:26:c2:68:9b:66:68:8e:41:aa:7a:1f:79:
d8:e7:4d:01:d6:39:61:9e:af:7b:f1:9c:dd:32:64:48:f0:fa:
83:83:97:6b:7c:da:ce:9d:e1:dc:80:86:c7:7e:40:15:72:49:
13:f4:00:24:83:c7:ec:73:32:c8:7b:4e:30:2a:71:05:c9:ea:
5b:5d:f1:7f:b2:67:9a:93:06:6f:f3:2b:b9:0a:8e:f3:9a:88:
fc:55:4f:64:eb:5a:1b:98:67:7f:ae:9b:b4:5b:4f:3e:5d:65:
d5:7c:66:d1:af:63:25:0b:80:68:59:2d:45:1b:13:00:96:be:
66:3c:ab:db:82:77:75:9f:43:ad:e4:a3:71:02:14:89:ad:d7:
5b:69:c0:ab:52:dc:e5:66:d9:e9:21:9f:4a:49:af:29:47:12:
3b:8e:5d:5e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9hXC5oDqShoQixX9nj059MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2MmZkNjg4MWRjNjg1OWI3YWZhYTlmNzUwYTZkZDhiYmQ2
OWU5OWEwHhcNMjUwMTMxMTgwMDI2WhcNMjUwMjAxMTgwMDI2WjAzMTEwLwYDVQQD
EyhiNjk4MzI4Y2VmMjYzZTY2NTY1ZjcxZjQwZjg3Y2Y0YmFjNDNmNmIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkJwq7RBwivdyKcbsF/jL2A23uH86
yCgAmB8imDaEekL4WsCx0hBBjKhJ/18FlsY74f1AJD+cre10ekz5j69/aq/m9uSX
+A17MvoTty4M4ND1oauIOvXtua2iLG5PjJcem7307Ub5AFqBtLiVpII9OncFg+e4
gp+v4npSw+SjW5CuUxItgq/3Wel0Xk3D4HTfd5xFeasbFOVCFLNB1xLjdbTFLau3
MRYlxJZlLwXZiAieReSlg/a/R4TR/QZZdumv5S2NkABVaWplWLi3cPyF+Om60WAP
oMiSmQJ+dAQo39shmm7DUhEEtTV488kKavr2Ky9xo05Uuo8KAsAE5jNqIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLaYMozvJj5mVl9x9A+Hz0usQ/awMB8GA1UdIwQY
MBaAFJYv1ogdxoWbevqp91Cm3Yu9aemaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbGlfV2lCM0doWnQ2LXFuM1VLYmRpNzFwNlpvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS80NDZlOWEtOTYzZi00NGNiLWE0MmQt
NDg3NDEwMDlmYzFlLzEvbGlfV2lCM0doWnQ2LXFuM1VLYmRpNzFwNlpvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS80NDZlOWEtOTYzZi00NGNiLWE0MmQtNDg3NDEwMDlmYzFl
LzEvbGlfV2lCM0doWnQ2LXFuM1VLYmRpNzFwNlpvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACQ7EXUFC
EROTXriCUaRL+ksNJ4e3d1yueZ6zNmxey3SQMxn/hxrx9WlL2NMVkVtm1L4QwwX1
eSpg3Br9oMqmmGg1rr+MHi0gzlBizz0/d3/LHDaRwks/weKq3orzAr+CJsJom2Zo
jkGqeh952OdNAdY5YZ6ve/Gc3TJkSPD6g4OXa3zazp3h3ICGx35AFXJJE/QAJIPH
7HMyyHtOMCpxBcnqW13xf7JnmpMGb/MruQqO85qI/FVPZOtaG5hnf66btFtPPl1l
1Xxm0a9jJQuAaFktRRsTAJa+Zjyr24J3dZ9DreSjcQIUia3XW2nAq1Lc5WbZ6SGf
SkmvKUcSO45dXg==
-----END CERTIFICATE-----
Generated at Fri Apr 25 02:56:29 2025 by rpki-client