Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/2e38ea-c9fa-4013-9fd3-858c6f8829eb/1/liqjLr7JzqHJPEvVX4XvfgpdT5I.mft
File: liqjLr7JzqHJPEvVX4XvfgpdT5I.mft (raw, json)
Hash identifier: IcXZItwiGndk8BZUrbC2Iq4z2DPV5FcmpUmXhP+sjnA=
Subject key identifier: 32:D2:1F:C4:1D:BA:5B:E2:4E:82:CF:9D:68:D0:94:37:37:76:DD:19
Authority key identifier: 96:2A:A3:2E:BE:C9:CE:A1:C9:3C:4B:D5:5F:85:EF:7E:0A:5D:4F:92
Certificate issuer: /CN=962aa32ebec9cea1c93c4bd55f85ef7e0a5d4f92
Certificate serial: 0194BC050CBD4AC5043EF5E908593B822846
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/liqjLr7JzqHJPEvVX4XvfgpdT5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/2e38ea-c9fa-4013-9fd3-858c6f8829eb/1/liqjLr7JzqHJPEvVX4XvfgpdT5I.mft
Manifest number: 07EC
Signing time: Fri 31 Jan 2025 11:00:35 +0000
Manifest this update: Fri 31 Jan 2025 11:00:35 +0000
Manifest next update: Sat 01 Feb 2025 11:00:35 +0000
Files and hashes: 1: 40yNe5drs03KBqTPteFk6f_6lOI.roa (hash: +9sbecufhXxr3UfhY0K/1Ke1i8FJRZHe8knUxyECWgU=)
2: NTRuSteXMEXLvayahODmi046fpw.roa (hash: f1MFdssa3cdYy5ca/ZRwnxiIjLIP7jvC8Sw0s1pkpF8=)
3: liqjLr7JzqHJPEvVX4XvfgpdT5I.crl (hash: ANlC5Btjbda2OzbewZhSiKl33MCZ6aftjMxGTOaB44Q=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:0c:bd:4a:c5:04:3e:f5:e9:08:59:3b:82:28:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=962aa32ebec9cea1c93c4bd55f85ef7e0a5d4f92
Validity
Not Before: Jan 31 11:00:35 2025 GMT
Not After : Feb 1 11:00:35 2025 GMT
Subject: CN=32d21fc41dba5be24e82cf9d68d094373776dd19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:40:23:d4:56:86:8c:e3:4f:26:42:96:08:0a:
a1:a3:cd:b7:b5:a2:33:27:90:ea:b0:96:85:ef:c3:
e8:0e:57:6c:03:d8:03:3b:77:d0:8b:c0:a9:fb:2a:
f1:5b:1c:05:0b:3e:df:88:1b:45:89:05:d3:51:e8:
d7:0a:15:21:55:1b:40:60:d7:0f:cb:9f:d3:3f:48:
55:a4:d5:99:c4:78:48:e9:3f:b9:82:56:77:a2:25:
25:a5:52:12:ae:f3:43:30:9b:0f:cd:35:e9:26:10:
cf:af:d2:55:c5:3a:3a:62:ce:68:6a:2b:06:d8:d8:
1f:93:21:35:68:7a:de:5c:54:84:8f:e6:1d:9b:52:
ee:92:cd:65:57:f2:ed:c7:99:ea:7d:81:1f:4d:1c:
d1:2c:c2:3b:30:9b:d6:20:94:fd:3c:1c:8b:55:46:
3b:dd:ea:97:28:73:a0:17:5f:47:e4:97:90:10:6b:
7b:6a:88:17:01:4d:9e:d8:69:2b:c9:47:e2:ca:d0:
e2:1d:dc:d1:fb:6c:a1:06:66:e0:80:9a:2e:9c:9b:
de:94:d3:3a:d1:b8:ab:ec:2e:72:4d:9c:5a:a6:65:
de:6a:97:c5:fc:23:ef:81:c8:cf:ef:2d:cb:64:44:
37:2f:69:7a:2d:32:43:10:0e:ff:99:1f:df:08:a8:
d2:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:D2:1F:C4:1D:BA:5B:E2:4E:82:CF:9D:68:D0:94:37:37:76:DD:19
X509v3 Authority Key Identifier:
keyid:96:2A:A3:2E:BE:C9:CE:A1:C9:3C:4B:D5:5F:85:EF:7E:0A:5D:4F:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/liqjLr7JzqHJPEvVX4XvfgpdT5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/2e38ea-c9fa-4013-9fd3-858c6f8829eb/1/liqjLr7JzqHJPEvVX4XvfgpdT5I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/2e38ea-c9fa-4013-9fd3-858c6f8829eb/1/liqjLr7JzqHJPEvVX4XvfgpdT5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:07:d2:57:c3:96:bc:8f:19:1a:4a:83:2e:ff:31:12:8c:63:
68:96:39:0c:6a:75:17:cd:3a:a3:90:fa:db:ab:5b:0e:ad:07:
d4:fd:ad:2d:5e:6e:6d:e7:35:f7:78:1a:62:38:25:4c:2f:69:
48:f9:fe:0a:3f:d2:e9:64:7f:46:62:fe:50:be:19:4e:99:80:
d2:43:bb:e0:46:e0:63:7f:b2:db:af:ca:60:56:d6:b1:52:45:
f8:2e:91:50:d2:c4:4a:a8:e4:db:42:ba:a9:67:86:69:0a:ac:
4a:d1:f9:4c:af:b0:e9:14:c2:e4:34:a2:dd:45:b8:04:8e:30:
79:6d:9d:ce:31:a9:e8:92:a4:ce:55:7a:ca:9b:51:a4:b2:d1:
26:b2:a8:45:da:13:ae:1a:0f:92:2f:b6:4c:ab:49:43:da:d0:
2b:77:d2:f0:4a:13:42:30:9b:05:17:c6:9d:ba:61:69:59:7b:
6e:f2:03:bd:e3:e0:1f:76:bf:2c:cb:c8:16:41:a0:99:bd:57:
10:ae:bc:84:64:8b:9a:98:92:a3:42:ee:b1:d3:cb:86:22:b4:
4a:c8:f7:bf:3c:73:a6:11:e2:50:bb:99:0a:17:77:b7:14:f1:
6f:91:31:16:d7:93:d1:87:97:69:9f:ee:18:81:99:a1:45:f4:
a8:9b:9d:01
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8BQy9SsUEPvXpCFk7gihGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2MmFhMzJlYmVjOWNlYTFjOTNjNGJkNTVmODVlZjdlMGE1
ZDRmOTIwHhcNMjUwMTMxMTEwMDM1WhcNMjUwMjAxMTEwMDM1WjAzMTEwLwYDVQQD
EygzMmQyMWZjNDFkYmE1YmUyNGU4MmNmOWQ2OGQwOTQzNzM3NzZkZDE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2kAj1FaGjONPJkKWCAqho823taIz
J5DqsJaF78PoDldsA9gDO3fQi8Cp+yrxWxwFCz7fiBtFiQXTUejXChUhVRtAYNcP
y5/TP0hVpNWZxHhI6T+5glZ3oiUlpVISrvNDMJsPzTXpJhDPr9JVxTo6Ys5oaisG
2NgfkyE1aHreXFSEj+Ydm1Luks1lV/Ltx5nqfYEfTRzRLMI7MJvWIJT9PByLVUY7
3eqXKHOgF19H5JeQEGt7aogXAU2e2GkryUfiytDiHdzR+2yhBmbggJounJvelNM6
0bir7C5yTZxapmXeapfF/CPvgcjP7y3LZEQ3L2l6LTJDEA7/mR/fCKjSvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDLSH8QdulviToLPnWjQlDc3dt0ZMB8GA1UdIwQY
MBaAFJYqoy6+yc6hyTxL1V+F734KXU+SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbGlxakxyN0p6cUhKUEV2Vlg0WHZmZ3BkVDVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS8yZTM4ZWEtYzlmYS00MDEzLTlmZDMt
ODU4YzZmODgyOWViLzEvbGlxakxyN0p6cUhKUEV2Vlg0WHZmZ3BkVDVJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS8yZTM4ZWEtYzlmYS00MDEzLTlmZDMtODU4YzZmODgyOWVi
LzEvbGlxakxyN0p6cUhKUEV2Vlg0WHZmZ3BkVDVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApAfSV8OW
vI8ZGkqDLv8xEoxjaJY5DGp1F806o5D626tbDq0H1P2tLV5ubec193gaYjglTC9p
SPn+Cj/S6WR/RmL+UL4ZTpmA0kO74EbgY3+y26/KYFbWsVJF+C6RUNLESqjk20K6
qWeGaQqsStH5TK+w6RTC5DSi3UW4BI4weW2dzjGp6JKkzlV6yptRpLLRJrKoRdoT
rhoPki+2TKtJQ9rQK3fS8EoTQjCbBRfGnbphaVl7bvIDvePgH3a/LMvIFkGgmb1X
EK68hGSLmpiSo0LusdPLhiK0Ssj3vzxzphHiULuZChd3txTxb5ExFteT0YeXaZ/u
GIGZoUX0qJudAQ==
-----END CERTIFICATE-----
Generated at Fri Apr 25 01:10:40 2025 by rpki-client