Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/10f538-7844-4e64-9e64-38e4a2ab2072/1/lJ_8MYgE9yrBHSvi4sGfFmrthwQ.mft
File: lJ_8MYgE9yrBHSvi4sGfFmrthwQ.mft (raw, json)
Hash identifier: gFp6DQXJqA6O1P7/ehMnNV/AoDaKtl1wZGFcNjkzucU=
Subject key identifier: 48:E6:6D:18:CC:D0:45:64:1C:72:C3:F2:4B:34:B8:C0:56:4C:D5:D0
Authority key identifier: 94:9F:FC:31:88:04:F7:2A:C1:1D:2B:E2:E2:C1:9F:16:6A:ED:87:04
Certificate issuer: /CN=949ffc318804f72ac11d2be2e2c19f166aed8704
Certificate serial: 019546A27396AC5D0000FE7557D7A906AB68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lJ_8MYgE9yrBHSvi4sGfFmrthwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/10f538-7844-4e64-9e64-38e4a2ab2072/1/lJ_8MYgE9yrBHSvi4sGfFmrthwQ.mft
Manifest number: 041A
Signing time: Thu 27 Feb 2025 09:00:06 +0000
Manifest this update: Thu 27 Feb 2025 09:00:06 +0000
Manifest next update: Fri 28 Feb 2025 09:00:06 +0000
Files and hashes: 1: BsjKxlyhr1xJt-_B7RFdha2dw34.roa (hash: DZrrLtviTY8IeT2xTa11fcFFAO4I1PCCgwnVwmVsFaU=)
2: lJ_8MYgE9yrBHSvi4sGfFmrthwQ.crl (hash: QXeHGko1SZ6PT47e2V1MsXGuNcJjTw5ZGZQM0kNZ/L4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:46:a2:73:96:ac:5d:00:00:fe:75:57:d7:a9:06:ab:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=949ffc318804f72ac11d2be2e2c19f166aed8704
Validity
Not Before: Feb 27 09:00:06 2025 GMT
Not After : Feb 28 09:00:06 2025 GMT
Subject: CN=48e66d18ccd045641c72c3f24b34b8c0564cd5d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:0a:29:6f:ed:84:fd:9e:b9:43:04:34:94:0e:
03:d1:f5:63:4c:03:c0:32:85:d2:88:79:46:d3:4b:
57:c9:05:fa:71:77:1e:d8:09:21:bc:19:5c:1b:85:
2d:9d:c8:15:10:1a:8b:2d:f3:2a:a1:e7:f5:e4:ab:
81:66:05:bb:13:1d:5a:7b:03:84:42:d6:b6:30:d8:
29:1e:09:9f:39:e7:6f:62:64:6a:4c:0e:e7:30:d4:
c2:4c:3a:25:c9:d0:39:00:44:67:78:bc:5a:31:9e:
42:0b:6d:f9:d0:cd:03:e2:ca:a4:98:d2:0d:78:70:
06:75:e4:32:aa:31:6c:14:9d:7e:05:42:a1:2d:6a:
f0:90:5d:9a:65:6c:11:c0:94:47:b7:a0:46:57:45:
7e:b9:c9:4f:34:a7:28:47:f8:35:7c:16:5c:c1:72:
ee:3a:21:de:00:f7:5a:de:39:55:06:ad:f1:a2:f6:
51:3f:0e:0b:97:26:f3:6a:b7:8e:ad:50:cb:5b:6d:
b0:9f:3c:93:62:5c:f1:8e:64:fb:a5:3e:cc:eb:8e:
12:75:51:b8:eb:dd:52:a0:41:71:2b:6b:f8:d1:ed:
7a:74:8d:41:18:2c:db:93:48:ba:ad:eb:ea:da:85:
49:1f:67:54:96:1b:b5:e1:15:74:8f:ad:37:ff:de:
9d:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:E6:6D:18:CC:D0:45:64:1C:72:C3:F2:4B:34:B8:C0:56:4C:D5:D0
X509v3 Authority Key Identifier:
keyid:94:9F:FC:31:88:04:F7:2A:C1:1D:2B:E2:E2:C1:9F:16:6A:ED:87:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lJ_8MYgE9yrBHSvi4sGfFmrthwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/10f538-7844-4e64-9e64-38e4a2ab2072/1/lJ_8MYgE9yrBHSvi4sGfFmrthwQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/10f538-7844-4e64-9e64-38e4a2ab2072/1/lJ_8MYgE9yrBHSvi4sGfFmrthwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:ea:d9:f2:99:93:2b:19:f3:2f:f1:e5:d4:78:f4:99:08:37:
4f:b6:89:e1:2e:9c:95:b4:e3:dc:a5:6a:32:dc:00:55:56:28:
96:84:fc:ef:ab:d1:5c:96:fe:ca:6b:fd:97:f4:b4:21:8a:c9:
c1:a7:3f:f9:65:5c:aa:86:13:23:d4:67:78:01:f1:2b:aa:18:
bb:7a:a2:32:05:66:d5:0d:33:43:5c:43:1e:a7:03:e0:af:10:
f3:fc:10:88:95:88:c8:49:9b:40:c5:4a:47:d8:22:fe:65:96:
c8:28:66:d5:40:95:f9:bc:e9:0f:6f:ac:44:50:95:1f:2e:e7:
f9:53:2e:81:8e:67:69:19:23:81:fe:54:0e:c7:47:5a:82:1d:
66:d8:35:0f:c8:50:fd:99:b9:41:3f:49:42:03:61:8d:29:6b:
00:d4:49:fd:45:c3:97:d2:59:89:9e:13:a7:60:61:4c:39:b2:
95:ba:32:9d:76:6e:da:a6:19:ca:c2:01:00:67:11:a9:98:1d:
94:fb:87:72:a7:65:1d:dd:cc:b1:56:49:73:7f:29:bb:0f:31:
e4:c7:0d:bc:3e:be:64:f7:9a:e5:a7:f4:2a:09:b7:c4:df:05:
1d:21:da:57:4e:6f:5c:18:7e:47:32:24:6f:fb:ed:c3:66:63:
ca:46:0d:8c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZVGonOWrF0AAP51V9epBqtoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0OWZmYzMxODgwNGY3MmFjMTFkMmJlMmUyYzE5ZjE2NmFl
ZDg3MDQwHhcNMjUwMjI3MDkwMDA2WhcNMjUwMjI4MDkwMDA2WjAzMTEwLwYDVQQD
Eyg0OGU2NmQxOGNjZDA0NTY0MWM3MmMzZjI0YjM0YjhjMDU2NGNkNWQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmwopb+2E/Z65QwQ0lA4D0fVjTAPA
MoXSiHlG00tXyQX6cXce2AkhvBlcG4UtncgVEBqLLfMqoef15KuBZgW7Ex1aewOE
Qta2MNgpHgmfOedvYmRqTA7nMNTCTDolydA5AERneLxaMZ5CC2350M0D4sqkmNIN
eHAGdeQyqjFsFJ1+BUKhLWrwkF2aZWwRwJRHt6BGV0V+uclPNKcoR/g1fBZcwXLu
OiHeAPda3jlVBq3xovZRPw4LlybzareOrVDLW22wnzyTYlzxjmT7pT7M644SdVG4
691SoEFxK2v40e16dI1BGCzbk0i6revq2oVJH2dUlhu14RV0j603/96dDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEjmbRjM0EVkHHLD8ks0uMBWTNXQMB8GA1UdIwQY
MBaAFJSf/DGIBPcqwR0r4uLBnxZq7YcEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbEpfOE1ZZ0U5eXJCSFN2aTRzR2ZGbXJ0aHdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC8xMGY1MzgtNzg0NC00ZTY0LTllNjQt
MzhlNGEyYWIyMDcyLzEvbEpfOE1ZZ0U5eXJCSFN2aTRzR2ZGbXJ0aHdRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC8xMGY1MzgtNzg0NC00ZTY0LTllNjQtMzhlNGEyYWIyMDcy
LzEvbEpfOE1ZZ0U5eXJCSFN2aTRzR2ZGbXJ0aHdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZerZ8pmT
KxnzL/Hl1Hj0mQg3T7aJ4S6clbTj3KVqMtwAVVYoloT876vRXJb+ymv9l/S0IYrJ
wac/+WVcqoYTI9RneAHxK6oYu3qiMgVm1Q0zQ1xDHqcD4K8Q8/wQiJWIyEmbQMVK
R9gi/mWWyChm1UCV+bzpD2+sRFCVHy7n+VMugY5naRkjgf5UDsdHWoIdZtg1D8hQ
/Zm5QT9JQgNhjSlrANRJ/UXDl9JZiZ4Tp2BhTDmylboynXZu2qYZysIBAGcRqZgd
lPuHcqdlHd3MsVZJc38puw8x5McNvD6+ZPea5af0Kgm3xN8FHSHaV05vXBh+RzIk
b/vtw2ZjykYNjA==
-----END CERTIFICATE-----
Generated at Sat Mar 8 04:50:52 2025 by rpki-client on console.sobornost.net