Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/dc06bd-e834-405f-8c33-9e5f90538336/1/L6XwX5ngJQBApDHSvtyrf4ko6bI.mft
File: L6XwX5ngJQBApDHSvtyrf4ko6bI.mft (raw, json)
Hash identifier: R9B8dei4rQlPqhHn8d2GSlJKRB5U8gc7h1cuYaHfM/c=
Subject key identifier: 86:40:9C:F2:FC:F5:B0:D1:C6:F7:FA:A7:24:A1:19:9A:1D:6D:E6:A8
Authority key identifier: 2F:A5:F0:5F:99:E0:25:00:40:A4:31:D2:BE:DC:AB:7F:89:28:E9:B2
Certificate issuer: /CN=2fa5f05f99e0250040a431d2bedcab7f8928e9b2
Certificate serial: 0194BCAA18C68D2FD28E67625F4FCEF882C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L6XwX5ngJQBApDHSvtyrf4ko6bI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/dc06bd-e834-405f-8c33-9e5f90538336/1/L6XwX5ngJQBApDHSvtyrf4ko6bI.mft
Manifest number: 1391
Signing time: Fri 31 Jan 2025 14:00:51 +0000
Manifest this update: Fri 31 Jan 2025 14:00:51 +0000
Manifest next update: Sat 01 Feb 2025 14:00:51 +0000
Files and hashes: 1: L6XwX5ngJQBApDHSvtyrf4ko6bI.crl (hash: 9+0EE6KjY1M+pKHYzpYjZt2I6OPCj9LZMAVIdv8IaUM=)
2: LhfwTdWFWStLfcssza7_4OeUEq0.roa (hash: 733IJ4DXj92/axm7cq0je/9e/z1H6N96iBs0WMeqrVk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:18:c6:8d:2f:d2:8e:67:62:5f:4f:ce:f8:82:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fa5f05f99e0250040a431d2bedcab7f8928e9b2
Validity
Not Before: Jan 31 14:00:51 2025 GMT
Not After : Feb 1 14:00:51 2025 GMT
Subject: CN=86409cf2fcf5b0d1c6f7faa724a1199a1d6de6a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:3f:ee:e4:cf:15:b2:38:ad:22:f4:55:c3:1c:
0f:53:dd:81:54:2d:61:5a:c6:b8:38:99:36:d9:93:
f4:8f:ba:7b:0e:d1:75:72:d3:20:04:c7:2e:58:c8:
d0:fe:c0:1a:11:38:0f:7e:82:29:45:05:17:45:b5:
84:00:99:89:e3:89:56:a4:ef:4a:47:71:dd:92:1a:
51:dc:71:c9:12:e2:22:ec:23:03:32:9c:00:cd:ff:
cc:1e:08:ca:55:e7:7f:22:38:c5:04:8c:34:2f:aa:
7a:cd:f9:49:bf:2a:b8:03:83:f5:bf:35:c3:82:56:
c8:13:ce:dd:17:dd:d2:0f:0f:bf:26:9e:ce:f5:9a:
cd:ed:58:0f:35:03:f4:4e:67:d7:53:94:5e:1e:5a:
c0:f9:83:fe:06:6b:0f:48:2f:d2:97:e1:48:28:0a:
c0:ee:73:27:ff:5b:b0:c6:bc:7b:cd:22:35:7a:2a:
8a:c8:ba:0f:86:8b:fe:9f:60:3c:ff:ed:bf:c9:22:
9d:8e:3d:12:90:0c:b6:6f:a7:0b:4b:49:6f:76:63:
bc:4a:05:84:c6:fd:b3:65:e5:06:61:2b:f5:20:a4:
e7:13:32:29:51:40:aa:19:06:f5:45:33:b9:46:67:
d4:6f:6c:86:77:8a:ef:41:df:d5:90:c9:34:b7:b2:
ad:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:40:9C:F2:FC:F5:B0:D1:C6:F7:FA:A7:24:A1:19:9A:1D:6D:E6:A8
X509v3 Authority Key Identifier:
keyid:2F:A5:F0:5F:99:E0:25:00:40:A4:31:D2:BE:DC:AB:7F:89:28:E9:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L6XwX5ngJQBApDHSvtyrf4ko6bI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/dc06bd-e834-405f-8c33-9e5f90538336/1/L6XwX5ngJQBApDHSvtyrf4ko6bI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/dc06bd-e834-405f-8c33-9e5f90538336/1/L6XwX5ngJQBApDHSvtyrf4ko6bI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e5:23:07:47:5e:49:51:ca:a1:67:5e:57:e8:1a:54:bc:d6:69:
f6:a8:88:4b:04:41:81:68:90:a7:27:fb:77:2b:ab:47:3d:d1:
83:dd:28:d7:aa:9c:e3:30:c7:21:10:d1:5b:f4:ac:2e:87:82:
f5:e2:f6:2f:b1:c7:9d:c2:35:d5:6c:92:ca:7f:ff:4c:2c:b5:
d7:80:27:66:48:dc:63:ac:e4:6f:1d:4f:95:59:92:e9:a8:7b:
ec:fa:03:48:3e:b7:34:0f:c8:6c:33:9e:b8:8f:53:19:3d:b9:
7f:2b:5a:67:75:20:08:29:cc:2f:01:fb:fa:1d:35:fe:3f:a5:
67:09:21:38:84:cc:9f:b1:4b:23:ba:44:74:26:89:32:27:b2:
c1:a8:5f:7c:04:9e:38:5f:ce:f8:d3:14:72:64:54:9e:fd:b0:
42:18:7f:52:7d:a6:b6:4d:11:6f:4d:b2:e9:95:05:f6:57:50:
cb:f9:16:35:5b:90:c0:13:46:31:c0:d6:df:32:98:c1:89:14:
e0:ad:f5:d9:76:d6:d4:7a:0a:4f:68:2b:a2:68:d2:fc:9b:c6:
ee:89:24:cf:91:7e:7a:0d:ef:c0:73:b0:49:88:3e:bc:9d:7b:
8f:3d:d8:03:99:d0:1e:55:c8:88:12:fe:1e:fe:3e:f4:98:30:
34:44:1d:23
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qhjGjS/SjmdiX0/O+ILJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmYTVmMDVmOTllMDI1MDA0MGE0MzFkMmJlZGNhYjdmODky
OGU5YjIwHhcNMjUwMTMxMTQwMDUxWhcNMjUwMjAxMTQwMDUxWjAzMTEwLwYDVQQD
Eyg4NjQwOWNmMmZjZjViMGQxYzZmN2ZhYTcyNGExMTk5YTFkNmRlNmE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsj/u5M8VsjitIvRVwxwPU92BVC1h
Wsa4OJk22ZP0j7p7DtF1ctMgBMcuWMjQ/sAaETgPfoIpRQUXRbWEAJmJ44lWpO9K
R3HdkhpR3HHJEuIi7CMDMpwAzf/MHgjKVed/IjjFBIw0L6p6zflJvyq4A4P1vzXD
glbIE87dF93SDw+/Jp7O9ZrN7VgPNQP0TmfXU5ReHlrA+YP+BmsPSC/Sl+FIKArA
7nMn/1uwxrx7zSI1eiqKyLoPhov+n2A8/+2/ySKdjj0SkAy2b6cLS0lvdmO8SgWE
xv2zZeUGYSv1IKTnEzIpUUCqGQb1RTO5RmfUb2yGd4rvQd/VkMk0t7KtqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIZAnPL89bDRxvf6pyShGZodbeaoMB8GA1UdIwQY
MBaAFC+l8F+Z4CUAQKQx0r7cq3+JKOmyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTDZYd1g1bmdKUUJBcERIU3Z0eXJmNGtvNmJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9kYzA2YmQtZTgzNC00MDVmLThjMzMt
OWU1ZjkwNTM4MzM2LzEvTDZYd1g1bmdKUUJBcERIU3Z0eXJmNGtvNmJJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS9kYzA2YmQtZTgzNC00MDVmLThjMzMtOWU1ZjkwNTM4MzM2
LzEvTDZYd1g1bmdKUUJBcERIU3Z0eXJmNGtvNmJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA5SMHR15J
UcqhZ15X6BpUvNZp9qiISwRBgWiQpyf7dyurRz3Rg90o16qc4zDHIRDRW/SsLoeC
9eL2L7HHncI11WySyn//TCy114AnZkjcY6zkbx1PlVmS6ah77PoDSD63NA/IbDOe
uI9TGT25fytaZ3UgCCnMLwH7+h01/j+lZwkhOITMn7FLI7pEdCaJMieywahffASe
OF/O+NMUcmRUnv2wQhh/Un2mtk0Rb02y6ZUF9ldQy/kWNVuQwBNGMcDW3zKYwYkU
4K312XbW1HoKT2gromjS/JvG7okkz5F+eg3vwHOwSYg+vJ17jz3YA5nQHlXIiBL+
Hv4+9JgwNEQdIw==
-----END CERTIFICATE-----
Generated at Mon Apr 28 13:22:51 2025 by rpki-client