Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/09e2f7-e650-4f38-a745-c396200fe0bf/1/lKpBiudwvajvBRax0cYzpn6R84s.mft
File: lKpBiudwvajvBRax0cYzpn6R84s.mft (raw, json)
Hash identifier: TECzvWWXh4qT9d81axRtqE7qBsqmNDje+pwnPgS+0MI=
Subject key identifier: DE:67:F2:1A:5B:C1:4F:34:AF:70:C1:3E:0D:01:FF:58:3A:7B:3C:0B
Authority key identifier: 94:AA:41:8A:E7:70:BD:A8:EF:05:16:B1:D1:C6:33:A6:7E:91:F3:8B
Certificate issuer: /CN=94aa418ae770bda8ef0516b1d1c633a67e91f38b
Certificate serial: 01962E9873326C9227A0FA4DD3BD36948C22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lKpBiudwvajvBRax0cYzpn6R84s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/09e2f7-e650-4f38-a745-c396200fe0bf/1/lKpBiudwvajvBRax0cYzpn6R84s.mft
Manifest number: 0EB2
Signing time: Sun 13 Apr 2025 10:01:04 +0000
Manifest this update: Sun 13 Apr 2025 10:01:04 +0000
Manifest next update: Mon 14 Apr 2025 10:01:04 +0000
Files and hashes: 1: JDbsNRiv_WMTlViBQXQ3g59gK5M.roa (hash: 5BHapuXzcbpJhpfOa/evo44J0f0F6BTnvXfMcpPhdEU=)
2: lKpBiudwvajvBRax0cYzpn6R84s.crl (hash: zMrzA9id4N3ChDUBWn1tji3YpdMBGYuJGAEBXO8RVcc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2e:98:73:32:6c:92:27:a0:fa:4d:d3:bd:36:94:8c:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94aa418ae770bda8ef0516b1d1c633a67e91f38b
Validity
Not Before: Apr 13 10:01:04 2025 GMT
Not After : Apr 14 10:01:04 2025 GMT
Subject: CN=de67f21a5bc14f34af70c13e0d01ff583a7b3c0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:e4:c1:da:88:98:ad:a3:54:a3:2b:a7:21:82:
d5:6c:10:d3:95:5c:70:80:61:7e:a5:95:5c:a9:a7:
87:9e:c0:3f:5f:03:39:0e:74:39:27:5c:a9:5f:7e:
b7:01:95:e2:34:fb:6c:16:c4:b1:53:09:fa:aa:1d:
5d:14:76:92:45:3e:f1:d4:4c:78:1b:7a:5e:0b:a9:
ae:fb:84:8d:35:ed:63:b9:8b:ea:cf:02:67:45:c4:
e3:cf:76:b4:d1:62:f9:3c:bf:b5:42:ea:a9:05:2f:
a5:bb:36:a3:be:2a:58:f0:db:a5:55:86:bb:6f:35:
84:4b:cc:d8:5e:06:c1:01:31:cd:50:a3:f0:07:e0:
a6:95:a4:d7:0c:47:7c:31:17:69:10:06:f4:39:4f:
3a:64:2f:d7:f3:61:30:ca:c1:10:19:14:7a:56:00:
9f:c1:bd:ae:b3:c0:89:76:65:b9:e1:98:75:10:2b:
30:ee:08:ed:6e:40:1d:ed:18:df:eb:60:fa:02:e9:
f7:06:52:23:a9:c7:7f:2a:79:57:f1:1a:61:3c:37:
b2:7c:36:f2:b4:e6:f8:d5:47:38:fc:a9:5b:98:12:
4a:0e:8a:8c:46:d0:e2:70:6a:41:cd:45:6d:61:81:
60:28:93:51:f2:d4:53:d0:a5:4d:6f:04:1b:74:54:
46:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:67:F2:1A:5B:C1:4F:34:AF:70:C1:3E:0D:01:FF:58:3A:7B:3C:0B
X509v3 Authority Key Identifier:
keyid:94:AA:41:8A:E7:70:BD:A8:EF:05:16:B1:D1:C6:33:A6:7E:91:F3:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lKpBiudwvajvBRax0cYzpn6R84s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/09e2f7-e650-4f38-a745-c396200fe0bf/1/lKpBiudwvajvBRax0cYzpn6R84s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/09e2f7-e650-4f38-a745-c396200fe0bf/1/lKpBiudwvajvBRax0cYzpn6R84s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:9b:ac:06:4d:de:aa:aa:e3:d2:74:79:84:3e:1c:36:3d:47:
7f:b3:d2:0c:ad:1f:c9:87:18:ff:4a:da:76:4d:26:29:98:69:
cb:75:a8:6a:bf:d6:cd:4e:36:aa:10:3b:57:69:d6:c0:05:63:
28:8d:7c:5a:13:1a:c4:f7:68:d0:85:2f:a3:6d:ef:a3:3b:38:
a7:78:db:9c:00:8f:7f:ab:f0:56:c0:72:39:5d:2c:57:84:e4:
6d:ed:d1:c8:0f:02:6f:39:37:13:f7:60:85:f2:02:1e:24:90:
45:5c:33:c3:e8:7b:1c:35:45:7e:08:70:ee:44:e5:a2:38:7b:
cf:4d:ab:08:35:4f:b8:cf:1d:5c:8e:9c:d8:68:fa:ea:a4:23:
85:96:5e:7c:d1:1c:44:10:60:ee:64:ce:76:e0:d9:27:f8:35:
9d:ce:95:ba:f3:7e:cb:f3:90:dc:ff:c1:22:58:e5:00:8b:24:
4d:5c:61:87:61:a5:45:2c:ed:91:dc:aa:c2:e9:94:0c:52:0a:
5c:14:1a:0e:5d:fc:53:db:87:41:03:38:10:3e:48:6e:a9:2c:
46:fc:03:02:34:58:16:8c:78:eb:bf:dd:ce:37:8c:c6:c7:c0:
18:ae:ed:06:92:87:f9:8f:aa:24:e6:10:d0:3d:de:9c:60:30:
55:34:94:9e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumHMybJInoPpN0702lIwiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0YWE0MThhZTc3MGJkYThlZjA1MTZiMWQxYzYzM2E2N2U5
MWYzOGIwHhcNMjUwNDEzMTAwMTA0WhcNMjUwNDE0MTAwMTA0WjAzMTEwLwYDVQQD
EyhkZTY3ZjIxYTViYzE0ZjM0YWY3MGMxM2UwZDAxZmY1ODNhN2IzYzBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwOTB2oiYraNUoyunIYLVbBDTlVxw
gGF+pZVcqaeHnsA/XwM5DnQ5J1ypX363AZXiNPtsFsSxUwn6qh1dFHaSRT7x1Ex4
G3peC6mu+4SNNe1juYvqzwJnRcTjz3a00WL5PL+1QuqpBS+luzajvipY8NulVYa7
bzWES8zYXgbBATHNUKPwB+CmlaTXDEd8MRdpEAb0OU86ZC/X82EwysEQGRR6VgCf
wb2us8CJdmW54Zh1ECsw7gjtbkAd7Rjf62D6Aun3BlIjqcd/KnlX8RphPDeyfDby
tOb41Uc4/KlbmBJKDoqMRtDicGpBzUVtYYFgKJNR8tRT0KVNbwQbdFRGawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN5n8hpbwU80r3DBPg0B/1g6ezwLMB8GA1UdIwQY
MBaAFJSqQYrncL2o7wUWsdHGM6Z+kfOLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbEtwQml1ZHd2YWp2QlJheDBjWXpwbjZSODRzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy8wOWUyZjctZTY1MC00ZjM4LWE3NDUt
YzM5NjIwMGZlMGJmLzEvbEtwQml1ZHd2YWp2QlJheDBjWXpwbjZSODRzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy8wOWUyZjctZTY1MC00ZjM4LWE3NDUtYzM5NjIwMGZlMGJm
LzEvbEtwQml1ZHd2YWp2QlJheDBjWXpwbjZSODRzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEZusBk3e
qqrj0nR5hD4cNj1Hf7PSDK0fyYcY/0radk0mKZhpy3Woar/WzU42qhA7V2nWwAVj
KI18WhMaxPdo0IUvo23vozs4p3jbnACPf6vwVsByOV0sV4Tkbe3RyA8Cbzk3E/dg
hfICHiSQRVwzw+h7HDVFfghw7kTlojh7z02rCDVPuM8dXI6c2Gj66qQjhZZefNEc
RBBg7mTOduDZJ/g1nc6VuvN+y/OQ3P/BIljlAIskTVxhh2GlRSztkdyqwumUDFIK
XBQaDl38U9uHQQM4ED5IbqksRvwDAjRYFox467/dzjeMxsfAGK7tBpKH+Y+qJOYQ
0D3enGAwVTSUng==
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:30 2025 by rpki-client on console.sobornost.net