Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/aa764d-f5ac-4acf-b2bd-9fdb5c55ae50/1/L7goDGy32z4HOVDVNdbYxwXZC4c.mft
File: L7goDGy32z4HOVDVNdbYxwXZC4c.mft (raw, json)
Hash identifier: xqDQXQhYYIeHuEA3Of/EQp6zYGzVkJAJOLkdRGyYuyM=
Subject key identifier: F3:88:34:78:03:5E:BA:AC:DB:0B:1D:55:6C:16:72:06:9B:B4:F6:61
Authority key identifier: 2F:B8:28:0C:6C:B7:DB:3E:07:39:50:D5:35:D6:D8:C7:05:D9:0B:87
Certificate issuer: /CN=2fb8280c6cb7db3e073950d535d6d8c705d90b87
Certificate serial: 0195E0EB3456937805DCD7697EA3405785DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L7goDGy32z4HOVDVNdbYxwXZC4c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/aa764d-f5ac-4acf-b2bd-9fdb5c55ae50/1/L7goDGy32z4HOVDVNdbYxwXZC4c.mft
Manifest number: 02C2
Signing time: Sat 29 Mar 2025 08:01:05 +0000
Manifest this update: Sat 29 Mar 2025 08:01:05 +0000
Manifest next update: Sun 30 Mar 2025 08:01:05 +0000
Files and hashes: 1: AYSw-t6FZQxOf3uyaYVOxPT7rkw.roa (hash: Xaavj0qNWpbVbYI0PhwiiuL7IGyoywVJOdUO3BJEDgM=)
2: L7goDGy32z4HOVDVNdbYxwXZC4c.crl (hash: E9bXDRjUlSLqH5sq/zjmBffPq1VgS44e2DMzUI7qjHw=)
3: M-EHR3HmGlEqhPSa4hFH9zBtA4U.roa (hash: dHd9hXlo/bLFC9dpW29XAWP5l4uG2XM3fAni1G6KglA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:eb:34:56:93:78:05:dc:d7:69:7e:a3:40:57:85:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fb8280c6cb7db3e073950d535d6d8c705d90b87
Validity
Not Before: Mar 29 08:01:05 2025 GMT
Not After : Mar 30 08:01:05 2025 GMT
Subject: CN=f3883478035ebaacdb0b1d556c1672069bb4f661
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e4:56:8f:7d:cd:13:3b:27:52:75:89:c2:65:
9d:f8:88:f3:d0:13:9d:a6:65:c0:4e:06:ce:e7:f7:
ee:0c:a4:3d:10:91:bc:69:8e:07:22:90:81:3a:b2:
33:b2:17:c1:4a:1d:8a:0d:77:5e:98:83:49:1f:f0:
41:85:1a:e7:29:76:40:0c:e1:48:bd:12:0f:cb:a1:
f4:41:54:cc:9d:a4:7b:97:92:d1:f7:67:f5:a8:88:
63:dd:df:05:39:5b:e9:39:14:45:21:da:ab:b7:bd:
7c:a7:22:64:fb:3b:14:86:5b:1c:77:9c:e2:a9:b9:
b4:51:56:14:49:45:3a:88:4e:65:61:1c:31:90:f6:
ad:bd:14:aa:25:28:84:ba:dd:03:3c:26:d2:61:e1:
2f:75:1e:b7:83:6c:81:49:42:5d:ba:bd:c6:1f:60:
82:0d:c7:b7:62:7c:1e:24:37:99:61:b8:89:55:ab:
62:6b:45:70:52:8d:5e:01:29:5a:c2:62:4d:60:90:
bc:07:77:03:ab:c4:e0:2f:a6:77:06:8c:b3:bb:e2:
24:77:9b:ed:b1:f1:91:b9:21:a6:5b:86:a0:11:10:
55:65:5f:01:bd:67:29:ba:03:5d:e7:5f:1f:79:04:
f9:c5:50:b2:3a:ef:76:f3:cb:e3:08:19:dd:6e:22:
99:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:88:34:78:03:5E:BA:AC:DB:0B:1D:55:6C:16:72:06:9B:B4:F6:61
X509v3 Authority Key Identifier:
keyid:2F:B8:28:0C:6C:B7:DB:3E:07:39:50:D5:35:D6:D8:C7:05:D9:0B:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L7goDGy32z4HOVDVNdbYxwXZC4c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/aa764d-f5ac-4acf-b2bd-9fdb5c55ae50/1/L7goDGy32z4HOVDVNdbYxwXZC4c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/aa764d-f5ac-4acf-b2bd-9fdb5c55ae50/1/L7goDGy32z4HOVDVNdbYxwXZC4c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:fd:1d:3d:c7:e1:6b:0f:b8:d9:31:2d:91:93:57:4e:db:ae:
8c:a5:6a:27:29:81:86:83:3f:3d:a2:fd:00:61:94:44:3f:8a:
a2:7d:37:f8:5f:0a:8a:bd:c4:a6:cc:30:b5:61:d7:75:d2:17:
12:d7:ff:37:2d:c0:ea:54:0f:f6:b8:14:bf:ca:0b:19:4f:ed:
7c:69:c5:56:cd:8e:1d:4f:70:04:e7:62:0a:6d:fe:b7:9e:07:
6c:5c:fe:06:1a:43:b2:54:da:71:a4:47:88:3f:41:89:6a:30:
81:e5:2c:bf:f6:90:51:87:0b:73:fa:40:14:78:85:dc:98:dd:
04:94:46:02:66:e9:71:76:3d:14:91:d7:a0:73:67:69:7f:e5:
1b:6c:4c:94:9a:94:89:7a:f1:ee:8b:df:40:0e:0a:09:15:73:
45:31:c3:13:c4:fc:51:23:cb:e9:b6:46:fc:11:68:66:3a:70:
59:cb:b2:f5:0e:48:5f:4d:4c:a1:78:11:fb:a1:fb:f3:21:af:
73:33:6c:3c:b3:d8:f6:4e:69:96:cf:45:ec:36:b3:b6:2b:3f:
08:62:33:d6:9a:85:0d:53:b5:94:76:18:e6:b5:92:1d:e2:e3:
fd:6f:75:77:b6:de:e6:da:0c:06:e2:4a:fb:19:98:8a:0e:08:
cd:46:9d:df
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZXg6zRWk3gF3NdpfqNAV4XeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmYjgyODBjNmNiN2RiM2UwNzM5NTBkNTM1ZDZkOGM3MDVk
OTBiODcwHhcNMjUwMzI5MDgwMTA1WhcNMjUwMzMwMDgwMTA1WjAzMTEwLwYDVQQD
EyhmMzg4MzQ3ODAzNWViYWFjZGIwYjFkNTU2YzE2NzIwNjliYjRmNjYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsORWj33NEzsnUnWJwmWd+Ijz0BOd
pmXATgbO5/fuDKQ9EJG8aY4HIpCBOrIzshfBSh2KDXdemINJH/BBhRrnKXZADOFI
vRIPy6H0QVTMnaR7l5LR92f1qIhj3d8FOVvpORRFIdqrt718pyJk+zsUhlscd5zi
qbm0UVYUSUU6iE5lYRwxkPatvRSqJSiEut0DPCbSYeEvdR63g2yBSUJdur3GH2CC
Dce3YnweJDeZYbiJVatia0VwUo1eASlawmJNYJC8B3cDq8TgL6Z3Boyzu+Ikd5vt
sfGRuSGmW4agERBVZV8BvWcpugNd518feQT5xVCyOu9288vjCBndbiKZVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPOINHgDXrqs2wsdVWwWcgabtPZhMB8GA1UdIwQY
MBaAFC+4KAxst9s+BzlQ1TXW2McF2QuHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTDdnb0RHeTMyejRIT1ZEVk5kYll4d1haQzRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS9hYTc2NGQtZjVhYy00YWNmLWIyYmQt
OWZkYjVjNTVhZTUwLzEvTDdnb0RHeTMyejRIT1ZEVk5kYll4d1haQzRjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS9hYTc2NGQtZjVhYy00YWNmLWIyYmQtOWZkYjVjNTVhZTUw
LzEvTDdnb0RHeTMyejRIT1ZEVk5kYll4d1haQzRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi/0dPcfh
aw+42TEtkZNXTtuujKVqJymBhoM/PaL9AGGURD+Kon03+F8Kir3EpswwtWHXddIX
Etf/Ny3A6lQP9rgUv8oLGU/tfGnFVs2OHU9wBOdiCm3+t54HbFz+BhpDslTacaRH
iD9BiWowgeUsv/aQUYcLc/pAFHiF3JjdBJRGAmbpcXY9FJHXoHNnaX/lG2xMlJqU
iXrx7ovfQA4KCRVzRTHDE8T8USPL6bZG/BFoZjpwWcuy9Q5IX01MoXgR+6H78yGv
czNsPLPY9k5pls9F7Daztis/CGIz1pqFDVO1lHYY5rWSHeLj/W91d7be5toMBuJK
+xmYig4IzUad3w==
-----END CERTIFICATE-----
Generated at Sun Apr 6 16:56:17 2025 by rpki-client