Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/20f805-df63-4631-99bd-a256177739c6/1/lNtLHp7Wi7XDMiiuMOnN0lKzL7g.mft
File: lNtLHp7Wi7XDMiiuMOnN0lKzL7g.mft (raw, json)
Hash identifier: HP49ObsMlm0MJUaxPtBcpvQIpHu5du3PEn8hHu5MOVY=
Subject key identifier: 16:65:AA:FB:8E:57:F5:58:20:2D:E5:66:52:D2:FC:C8:42:34:EC:2C
Authority key identifier: 94:DB:4B:1E:9E:D6:8B:B5:C3:32:28:AE:30:E9:CD:D2:52:B3:2F:B8
Certificate issuer: /CN=94db4b1e9ed68bb5c33228ae30e9cdd252b32fb8
Certificate serial: 01962DF4376D129C460EF4FB16D7D1AAE11E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lNtLHp7Wi7XDMiiuMOnN0lKzL7g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/20f805-df63-4631-99bd-a256177739c6/1/lNtLHp7Wi7XDMiiuMOnN0lKzL7g.mft
Manifest number: 14EA
Signing time: Sun 13 Apr 2025 07:01:41 +0000
Manifest this update: Sun 13 Apr 2025 07:01:41 +0000
Manifest next update: Mon 14 Apr 2025 07:01:41 +0000
Files and hashes: 1: lNtLHp7Wi7XDMiiuMOnN0lKzL7g.crl (hash: yWgpDhxk0dnnrFSbHFsmG+7zX0wSuVLYBxfwdvAKQq4=)
2: q0ApgfDR6MUFo5SmPdczTTS0Xsc.roa (hash: scfCeq11ilCac8clsFq/zmbEUDIqGanHD8OiJk8YEiI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2d:f4:37:6d:12:9c:46:0e:f4:fb:16:d7:d1:aa:e1:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94db4b1e9ed68bb5c33228ae30e9cdd252b32fb8
Validity
Not Before: Apr 13 07:01:41 2025 GMT
Not After : Apr 14 07:01:41 2025 GMT
Subject: CN=1665aafb8e57f558202de56652d2fcc84234ec2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:b0:22:41:99:23:23:db:03:2c:a5:5c:4c:79:
7f:80:af:e8:8b:fa:61:37:45:12:4b:a7:4c:78:25:
0c:48:49:d5:5b:99:6e:a3:d6:f8:58:b6:88:5b:22:
bc:25:92:78:11:c3:b5:ae:1b:80:f2:eb:c8:f5:bb:
49:54:ff:52:c3:13:c3:e6:45:31:aa:31:3b:47:8c:
5d:96:7e:c2:ca:2f:36:f2:be:87:76:eb:bb:cd:35:
5f:45:52:ce:80:48:0a:89:71:b1:11:9f:7a:29:06:
b1:19:00:09:2d:05:3d:d1:f4:44:ec:e6:85:e8:50:
c7:f7:b4:39:bd:dd:16:18:c5:3c:fe:2e:de:87:c5:
4b:7c:3d:90:3a:f7:09:1e:1b:52:39:84:a2:15:34:
22:35:a7:47:24:ff:f1:5e:54:7b:8d:a3:66:fe:55:
ac:52:d4:31:61:12:1a:c6:48:0b:a9:9e:7a:9f:ca:
5e:1f:9f:0c:5c:fc:1e:5b:6e:58:53:9e:8f:25:1d:
c2:3f:07:08:82:98:bf:c8:48:62:3b:60:7f:a0:49:
14:75:2d:e4:8f:fa:3c:56:83:cb:b1:91:b2:09:e9:
4b:e2:d5:11:ea:25:12:81:61:11:40:38:93:6a:d6:
bc:90:26:f3:02:38:a8:ce:ee:29:5d:21:6c:2e:0b:
d6:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:65:AA:FB:8E:57:F5:58:20:2D:E5:66:52:D2:FC:C8:42:34:EC:2C
X509v3 Authority Key Identifier:
keyid:94:DB:4B:1E:9E:D6:8B:B5:C3:32:28:AE:30:E9:CD:D2:52:B3:2F:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lNtLHp7Wi7XDMiiuMOnN0lKzL7g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/20f805-df63-4631-99bd-a256177739c6/1/lNtLHp7Wi7XDMiiuMOnN0lKzL7g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/20f805-df63-4631-99bd-a256177739c6/1/lNtLHp7Wi7XDMiiuMOnN0lKzL7g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:31:d1:01:1d:3f:3f:b7:b6:7c:54:ff:f2:43:19:16:ae:4c:
f4:2c:1d:d5:ce:17:9f:a5:fd:a0:4e:da:ed:3f:24:17:83:54:
cb:b5:01:89:46:04:70:2e:8f:38:2a:85:e3:3a:26:7d:c0:04:
33:69:89:3f:cc:7d:82:da:f5:97:29:78:a9:2d:6a:52:d1:e4:
33:97:a9:a0:f1:ef:ea:be:7e:6c:78:f3:3d:06:bb:ff:b6:6a:
76:7f:38:f2:2c:a0:9a:09:79:9f:57:ef:d9:17:74:2c:94:13:
42:5a:10:8c:96:a6:f5:42:1f:b2:50:88:e7:70:e2:92:e6:87:
52:3a:58:ff:a3:c5:97:25:bc:fc:45:ab:85:76:18:45:66:18:
06:9c:ca:e3:ee:31:a1:e2:73:5a:aa:78:84:2f:fc:3e:40:dc:
bb:49:be:3b:aa:03:5a:e5:a5:f9:4b:b4:53:a7:94:37:9f:ed:
80:26:a6:12:ba:f3:c1:03:00:61:65:48:4d:54:73:67:bb:c9:
6e:c7:34:e4:3d:07:4b:53:01:c4:ba:e2:f2:f8:65:62:c1:39:
55:a6:46:ec:4c:7b:03:1a:a0:9a:b6:3c:4b:10:58:55:68:f0:
a9:11:3f:b0:ae:c6:64:b4:c5:eb:f9:dd:95:85:fa:08:5f:e7:
ff:94:5e:e3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYt9DdtEpxGDvT7FtfRquEeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0ZGI0YjFlOWVkNjhiYjVjMzMyMjhhZTMwZTljZGQyNTJi
MzJmYjgwHhcNMjUwNDEzMDcwMTQxWhcNMjUwNDE0MDcwMTQxWjAzMTEwLwYDVQQD
EygxNjY1YWFmYjhlNTdmNTU4MjAyZGU1NjY1MmQyZmNjODQyMzRlYzJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA17AiQZkjI9sDLKVcTHl/gK/oi/ph
N0USS6dMeCUMSEnVW5luo9b4WLaIWyK8JZJ4EcO1rhuA8uvI9btJVP9SwxPD5kUx
qjE7R4xdln7Cyi828r6Hduu7zTVfRVLOgEgKiXGxEZ96KQaxGQAJLQU90fRE7OaF
6FDH97Q5vd0WGMU8/i7eh8VLfD2QOvcJHhtSOYSiFTQiNadHJP/xXlR7jaNm/lWs
UtQxYRIaxkgLqZ56n8peH58MXPweW25YU56PJR3CPwcIgpi/yEhiO2B/oEkUdS3k
j/o8VoPLsZGyCelL4tUR6iUSgWERQDiTata8kCbzAjiozu4pXSFsLgvWEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBZlqvuOV/VYIC3lZlLS/MhCNOwsMB8GA1UdIwQY
MBaAFJTbSx6e1ou1wzIorjDpzdJSsy+4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbE50TEhwN1dpN1hETWlpdU1Pbk4wbEt6TDdnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC8yMGY4MDUtZGY2My00NjMxLTk5YmQt
YTI1NjE3NzczOWM2LzEvbE50TEhwN1dpN1hETWlpdU1Pbk4wbEt6TDdnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC8yMGY4MDUtZGY2My00NjMxLTk5YmQtYTI1NjE3NzczOWM2
LzEvbE50TEhwN1dpN1hETWlpdU1Pbk4wbEt6TDdnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADTHRAR0/
P7e2fFT/8kMZFq5M9Cwd1c4Xn6X9oE7a7T8kF4NUy7UBiUYEcC6POCqF4zomfcAE
M2mJP8x9gtr1lyl4qS1qUtHkM5epoPHv6r5+bHjzPQa7/7Zqdn848iygmgl5n1fv
2Rd0LJQTQloQjJam9UIfslCI53DikuaHUjpY/6PFlyW8/EWrhXYYRWYYBpzK4+4x
oeJzWqp4hC/8PkDcu0m+O6oDWuWl+Uu0U6eUN5/tgCamErrzwQMAYWVITVRzZ7vJ
bsc05D0HS1MBxLri8vhlYsE5VaZG7Ex7AxqgmrY8SxBYVWjwqRE/sK7GZLTF6/nd
lYX6CF/n/5Re4w==
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:50 2025 by rpki-client on console.sobornost.net