Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/e17e9a-d3e9-43b1-a2c7-5f65103e6f70/1/LnOM8y5uT5QCIPO4KPB7d-gT0JY.mft
File: LnOM8y5uT5QCIPO4KPB7d-gT0JY.mft (raw, json)
Hash identifier: dq3gVpvkIZEILQmQ5EkTsF8nTuqqznMPLlEYaNBrMD4=
Subject key identifier: BC:7C:EE:66:43:F3:4C:EE:08:11:9F:B5:5F:97:67:76:38:AE:4A:5B
Authority key identifier: 2E:73:8C:F3:2E:6E:4F:94:02:20:F3:B8:28:F0:7B:77:E8:13:D0:96
Certificate issuer: /CN=2e738cf32e6e4f940220f3b828f07b77e813d096
Certificate serial: 01962E2AD3FBAB506F620FA47CD6C226D7A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LnOM8y5uT5QCIPO4KPB7d-gT0JY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/e17e9a-d3e9-43b1-a2c7-5f65103e6f70/1/LnOM8y5uT5QCIPO4KPB7d-gT0JY.mft
Manifest number: 0438
Signing time: Sun 13 Apr 2025 08:01:20 +0000
Manifest this update: Sun 13 Apr 2025 08:01:20 +0000
Manifest next update: Mon 14 Apr 2025 08:01:20 +0000
Files and hashes: 1: 1-CqksZEngiad9GJ1laZb9kmUhDs.roa (hash: RFGoumzL1Ot9LozFC8/pBRuEEMi1Nkwj8cBdnCtnZ+Y=)
2: LnOM8y5uT5QCIPO4KPB7d-gT0JY.crl (hash: 62F7/+MLPX1piZx9BOGRIjvM7rGpbxFwAs9HogEygUI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2e:2a:d3:fb:ab:50:6f:62:0f:a4:7c:d6:c2:26:d7:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e738cf32e6e4f940220f3b828f07b77e813d096
Validity
Not Before: Apr 13 08:01:20 2025 GMT
Not After : Apr 14 08:01:20 2025 GMT
Subject: CN=bc7cee6643f34cee08119fb55f97677638ae4a5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:29:20:e4:8d:fe:77:a6:11:ca:2e:61:8d:b8:
ab:25:5c:5e:87:59:cd:14:58:74:f0:d6:7d:d5:44:
9c:25:f5:37:34:d8:f0:50:10:2d:0d:9b:d1:36:93:
ad:bb:bc:ef:b9:ef:d7:c4:04:23:e5:ec:e8:38:50:
00:ac:da:cb:6c:1e:92:04:88:68:24:7c:db:67:3d:
c0:87:3b:e9:8b:7d:b9:64:3f:1f:b5:22:e0:fb:07:
27:fc:80:d7:28:88:7d:ee:f8:bb:ce:68:99:97:3a:
c6:d3:c3:92:a6:57:10:2c:9f:fa:6a:3a:f3:9f:fb:
75:ea:94:73:c0:52:15:35:33:f1:d8:60:a7:e3:a5:
2b:0f:56:b3:3c:3c:38:3f:9f:72:16:78:f8:3c:1d:
be:7c:a7:60:6c:6a:28:91:e1:8e:45:38:14:27:79:
7e:a6:e4:54:4e:56:25:ae:c0:73:f4:7d:1e:55:13:
c0:5b:03:38:55:10:67:b5:52:44:ed:00:1e:99:16:
59:18:58:c7:b0:67:38:be:67:34:d4:eb:3a:c3:ff:
dd:4e:50:8e:eb:11:34:cf:d0:31:52:33:a5:ad:08:
45:6c:90:c5:34:3e:d5:42:52:b0:a9:34:fc:43:5b:
f0:83:b8:74:41:95:a5:8e:27:3f:da:a9:16:0d:ae:
ac:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:7C:EE:66:43:F3:4C:EE:08:11:9F:B5:5F:97:67:76:38:AE:4A:5B
X509v3 Authority Key Identifier:
keyid:2E:73:8C:F3:2E:6E:4F:94:02:20:F3:B8:28:F0:7B:77:E8:13:D0:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LnOM8y5uT5QCIPO4KPB7d-gT0JY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/e17e9a-d3e9-43b1-a2c7-5f65103e6f70/1/LnOM8y5uT5QCIPO4KPB7d-gT0JY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/e17e9a-d3e9-43b1-a2c7-5f65103e6f70/1/LnOM8y5uT5QCIPO4KPB7d-gT0JY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:35:bd:b8:ad:f9:9b:26:45:34:5b:da:51:40:04:4b:c7:b2:
52:2a:aa:07:79:87:f1:20:b6:4e:34:66:41:f3:18:a4:ed:7a:
5c:79:27:15:5c:52:57:a9:43:9e:26:78:55:e0:46:e9:21:a6:
76:89:b7:a9:53:bc:7c:3a:8d:72:98:69:28:48:23:1b:34:66:
56:1e:b3:a6:b0:2f:3a:b1:9f:0f:7f:11:cb:3b:05:32:4e:03:
05:6b:6d:1e:a3:30:4b:4e:be:8c:2d:4b:fd:a6:73:15:03:30:
76:b8:a6:e7:da:c6:17:84:64:85:fe:0e:8a:ea:86:44:54:22:
b7:91:8c:04:40:29:3f:21:ab:95:ae:5a:d4:49:99:62:c4:88:
e0:66:7a:85:4d:92:f0:31:93:e6:32:2c:af:ef:25:9e:9f:79:
87:90:24:19:fa:72:37:d8:a4:5a:56:c9:43:6a:40:27:bc:49:
48:1b:f1:5d:51:59:35:e6:ad:eb:9d:9c:a1:8a:8a:f1:0a:98:
92:1c:27:8b:3b:0f:b8:9e:b5:67:8d:7b:d9:81:3a:29:71:ae:
55:42:a7:e7:0c:89:52:c0:9a:48:47:c0:58:1a:1f:62:a6:50:
d0:25:33:23:3a:8a:8c:89:b3:87:85:17:3d:d4:f4:34:5f:42:
d1:4e:40:b6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuKtP7q1BvYg+kfNbCJtekMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlNzM4Y2YzMmU2ZTRmOTQwMjIwZjNiODI4ZjA3Yjc3ZTgx
M2QwOTYwHhcNMjUwNDEzMDgwMTIwWhcNMjUwNDE0MDgwMTIwWjAzMTEwLwYDVQQD
EyhiYzdjZWU2NjQzZjM0Y2VlMDgxMTlmYjU1Zjk3Njc3NjM4YWU0YTViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ikg5I3+d6YRyi5hjbirJVxeh1nN
FFh08NZ91UScJfU3NNjwUBAtDZvRNpOtu7zvue/XxAQj5ezoOFAArNrLbB6SBIho
JHzbZz3Ahzvpi325ZD8ftSLg+wcn/IDXKIh97vi7zmiZlzrG08OSplcQLJ/6ajrz
n/t16pRzwFIVNTPx2GCn46UrD1azPDw4P59yFnj4PB2+fKdgbGookeGORTgUJ3l+
puRUTlYlrsBz9H0eVRPAWwM4VRBntVJE7QAemRZZGFjHsGc4vmc01Os6w//dTlCO
6xE0z9AxUjOlrQhFbJDFND7VQlKwqTT8Q1vwg7h0QZWljic/2qkWDa6sNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLx87mZD80zuCBGftV+XZ3Y4rkpbMB8GA1UdIwQY
MBaAFC5zjPMubk+UAiDzuCjwe3foE9CWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTG5PTTh5NXVUNVFDSVBPNEtQQjdkLWdUMEpZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS9lMTdlOWEtZDNlOS00M2IxLWEyYzct
NWY2NTEwM2U2ZjcwLzEvTG5PTTh5NXVUNVFDSVBPNEtQQjdkLWdUMEpZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS9lMTdlOWEtZDNlOS00M2IxLWEyYzctNWY2NTEwM2U2Zjcw
LzEvTG5PTTh5NXVUNVFDSVBPNEtQQjdkLWdUMEpZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqDW9uK35
myZFNFvaUUAES8eyUiqqB3mH8SC2TjRmQfMYpO16XHknFVxSV6lDniZ4VeBG6SGm
dom3qVO8fDqNcphpKEgjGzRmVh6zprAvOrGfD38RyzsFMk4DBWttHqMwS06+jC1L
/aZzFQMwdrim59rGF4Rkhf4OiuqGRFQit5GMBEApPyGrla5a1EmZYsSI4GZ6hU2S
8DGT5jIsr+8lnp95h5AkGfpyN9ikWlbJQ2pAJ7xJSBvxXVFZNeat652coYqK8QqY
khwnizsPuJ61Z4172YE6KXGuVUKn5wyJUsCaSEfAWBofYqZQ0CUzIzqKjImzh4UX
PdT0NF9C0U5Atg==
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:42 2025 by rpki-client on console.sobornost.net