Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/3aa386-9057-49a0-a229-5e77fa0333a3/1/lsDOn4fZ0nX2yuTcnN-11EN9jOs.mft
File: lsDOn4fZ0nX2yuTcnN-11EN9jOs.mft (raw, json)
Hash identifier: bNddcXb5K56ob0R0gXIgX+LUv5mbq8EqwKFYn12/nHM=
Subject key identifier: 5A:7D:80:52:72:E3:30:8E:81:A5:9D:65:F4:C0:F1:C4:26:DC:07:2A
Authority key identifier: 96:C0:CE:9F:87:D9:D2:75:F6:CA:E4:DC:9C:DF:B5:D4:43:7D:8C:EB
Certificate issuer: /CN=96c0ce9f87d9d275f6cae4dc9cdfb5d4437d8ceb
Certificate serial: 01962ECF5992FDD50D729EFEC521546FC9F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lsDOn4fZ0nX2yuTcnN-11EN9jOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/3aa386-9057-49a0-a229-5e77fa0333a3/1/lsDOn4fZ0nX2yuTcnN-11EN9jOs.mft
Manifest number: 0CA2
Signing time: Sun 13 Apr 2025 11:01:02 +0000
Manifest this update: Sun 13 Apr 2025 11:01:02 +0000
Manifest next update: Mon 14 Apr 2025 11:01:02 +0000
Files and hashes: 1: ew1zgYS28PrRo2_vyICjeeeZzZk.roa (hash: Fhi/oH9QUYxK/iP3UryNP+xQPg6T4wc9jRF/RdGEuMY=)
2: lsDOn4fZ0nX2yuTcnN-11EN9jOs.crl (hash: 7LOruA8/nxbsKzJV5vA48ML41UT3J1/F9uis2QCOHbI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2e:cf:59:92:fd:d5:0d:72:9e:fe:c5:21:54:6f:c9:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96c0ce9f87d9d275f6cae4dc9cdfb5d4437d8ceb
Validity
Not Before: Apr 13 11:01:02 2025 GMT
Not After : Apr 14 11:01:02 2025 GMT
Subject: CN=5a7d805272e3308e81a59d65f4c0f1c426dc072a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:0a:c3:3a:73:19:72:bc:f8:a5:2c:26:83:88:
88:51:f7:0e:26:13:90:74:3a:37:25:e5:9f:45:63:
9e:35:d4:7f:bb:86:80:c3:be:67:3c:93:26:44:13:
90:cd:a6:8f:03:b4:f1:21:59:de:4a:6e:dd:83:ae:
c8:38:e8:60:36:27:10:af:b7:d6:16:49:3b:29:b3:
12:00:b8:bb:d8:83:b6:ca:bb:d3:58:30:eb:ba:31:
ad:aa:5a:cd:8f:11:81:fb:d2:a1:b0:80:63:a0:c5:
ff:7c:fc:fd:8f:ab:ea:36:67:f5:73:83:b2:31:b3:
91:09:c0:90:15:0e:8d:c4:01:bb:74:79:30:15:2c:
27:82:d9:2d:1a:03:4f:16:c5:97:85:be:44:1e:cc:
ff:cb:f0:31:a7:a7:26:05:da:aa:d8:e9:9e:1e:92:
36:32:df:24:bf:09:cc:57:56:a5:7e:9b:b3:f7:0d:
4a:de:aa:1b:8f:cc:15:92:85:4c:2a:ed:94:6d:94:
50:92:e4:ed:6e:6b:6c:11:04:f2:ce:e5:7b:db:32:
cd:7d:2e:c2:80:3e:50:c2:6d:da:28:fb:80:0f:e3:
6c:04:94:12:e4:51:4f:2d:97:07:4f:56:7b:33:97:
39:11:a9:9d:ee:80:fa:8f:2b:a6:d9:57:db:90:03:
b3:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:7D:80:52:72:E3:30:8E:81:A5:9D:65:F4:C0:F1:C4:26:DC:07:2A
X509v3 Authority Key Identifier:
keyid:96:C0:CE:9F:87:D9:D2:75:F6:CA:E4:DC:9C:DF:B5:D4:43:7D:8C:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lsDOn4fZ0nX2yuTcnN-11EN9jOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3aa386-9057-49a0-a229-5e77fa0333a3/1/lsDOn4fZ0nX2yuTcnN-11EN9jOs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3aa386-9057-49a0-a229-5e77fa0333a3/1/lsDOn4fZ0nX2yuTcnN-11EN9jOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:85:ae:85:12:e9:e7:15:bf:4e:7a:43:9f:d3:22:8a:af:f9:
5d:82:31:17:fe:e2:18:c3:c7:12:2f:f9:9d:77:c8:da:c9:d4:
fb:ce:35:46:c2:c1:88:9e:0b:4b:b1:b0:06:33:98:37:9a:3f:
6d:59:6b:d7:e9:c9:e0:81:2f:e3:09:a9:10:85:a3:43:1b:49:
22:d7:d6:92:d8:04:ac:fc:97:d4:e3:18:6c:50:77:c6:92:7f:
56:ed:b5:49:11:55:1b:ae:fb:26:49:01:ba:48:94:05:c2:64:
6f:d1:b1:4b:a3:c2:70:1c:dd:43:12:36:eb:21:58:d1:06:e6:
95:3b:80:78:45:31:39:4a:5e:92:af:26:3f:c0:ef:81:15:78:
ca:2a:49:81:09:b9:80:9f:74:4d:e5:08:88:0c:b3:80:f8:fb:
c7:c1:b0:3b:02:24:a3:c4:13:fd:19:b8:3d:8f:b6:36:b4:14:
98:da:5a:fb:c5:7b:c6:1a:1d:31:56:f5:7b:31:e4:d8:d2:ab:
cd:0c:4b:83:57:c5:2f:3c:ec:49:0a:7f:50:2c:21:a1:16:bb:
b0:3d:82:74:86:cc:e6:77:7b:01:7f:aa:11:cf:61:30:d8:91:
59:c2:eb:2f:05:66:af:28:e8:d0:4a:4b:fc:7a:75:9a:1e:28:
2f:fb:cc:99
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuz1mS/dUNcp7+xSFUb8n3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2YzBjZTlmODdkOWQyNzVmNmNhZTRkYzljZGZiNWQ0NDM3
ZDhjZWIwHhcNMjUwNDEzMTEwMTAyWhcNMjUwNDE0MTEwMTAyWjAzMTEwLwYDVQQD
Eyg1YTdkODA1MjcyZTMzMDhlODFhNTlkNjVmNGMwZjFjNDI2ZGMwNzJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvgrDOnMZcrz4pSwmg4iIUfcOJhOQ
dDo3JeWfRWOeNdR/u4aAw75nPJMmRBOQzaaPA7TxIVneSm7dg67IOOhgNicQr7fW
Fkk7KbMSALi72IO2yrvTWDDrujGtqlrNjxGB+9KhsIBjoMX/fPz9j6vqNmf1c4Oy
MbORCcCQFQ6NxAG7dHkwFSwngtktGgNPFsWXhb5EHsz/y/Axp6cmBdqq2OmeHpI2
Mt8kvwnMV1alfpuz9w1K3qobj8wVkoVMKu2UbZRQkuTtbmtsEQTyzuV72zLNfS7C
gD5Qwm3aKPuAD+NsBJQS5FFPLZcHT1Z7M5c5Eamd7oD6jyum2VfbkAOzpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFp9gFJy4zCOgaWdZfTA8cQm3AcqMB8GA1UdIwQY
MBaAFJbAzp+H2dJ19srk3JzftdRDfYzrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbHNET240ZlowblgyeXVUY25OLTExRU45ak9zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC8zYWEzODYtOTA1Ny00OWEwLWEyMjkt
NWU3N2ZhMDMzM2EzLzEvbHNET240ZlowblgyeXVUY25OLTExRU45ak9zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC8zYWEzODYtOTA1Ny00OWEwLWEyMjktNWU3N2ZhMDMzM2Ez
LzEvbHNET240ZlowblgyeXVUY25OLTExRU45ak9zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkoWuhRLp
5xW/TnpDn9Miiq/5XYIxF/7iGMPHEi/5nXfI2snU+841RsLBiJ4LS7GwBjOYN5o/
bVlr1+nJ4IEv4wmpEIWjQxtJItfWktgErPyX1OMYbFB3xpJ/Vu21SRFVG677JkkB
ukiUBcJkb9GxS6PCcBzdQxI26yFY0QbmlTuAeEUxOUpekq8mP8DvgRV4yipJgQm5
gJ90TeUIiAyzgPj7x8GwOwIko8QT/Rm4PY+2NrQUmNpa+8V7xhodMVb1ezHk2NKr
zQxLg1fFLzzsSQp/UCwhoRa7sD2CdIbM5nd7AX+qEc9hMNiRWcLrLwVmryjo0EpL
/Hp1mh4oL/vMmQ==
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:08 2025 by rpki-client on console.sobornost.net