Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/6fa6d0-f2c8-412c-9bc7-365c51a5f9ff/1/LLo1Vmm0-bkDXwWx-6IR74aWEB0.mft
File: LLo1Vmm0-bkDXwWx-6IR74aWEB0.mft (raw, json)
Hash identifier: UETL+IlROUz5YW2fH5fVAegDPn3EPyoNgIdnDYObfBc=
Subject key identifier: D6:90:11:71:41:5C:EF:14:14:6A:7F:25:B0:E5:09:4B:72:38:84:1A
Authority key identifier: 2C:BA:35:56:69:B4:F9:B9:03:5F:05:B1:FB:A2:11:EF:86:96:10:1D
Certificate issuer: /CN=2cba355669b4f9b9035f05b1fba211ef8696101d
Certificate serial: 0195E1222D546F0B9E71CB2114BE1158AAC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LLo1Vmm0-bkDXwWx-6IR74aWEB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/6fa6d0-f2c8-412c-9bc7-365c51a5f9ff/1/LLo1Vmm0-bkDXwWx-6IR74aWEB0.mft
Manifest number: 1390
Signing time: Sat 29 Mar 2025 09:01:08 +0000
Manifest this update: Sat 29 Mar 2025 09:01:08 +0000
Manifest next update: Sun 30 Mar 2025 09:01:08 +0000
Files and hashes: 1: LLo1Vmm0-bkDXwWx-6IR74aWEB0.crl (hash: fmbEg+P9fMa4HL5XBO7PUHBG+F1OlXVvsvY2eEcEhmc=)
2: N2MMA2ajHovb9op5fyA_qeAVz_M.roa (hash: n+Qd6FGkBgmtsqN4tvP533FkHH2YOTsZsw1S1MXov80=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e1:22:2d:54:6f:0b:9e:71:cb:21:14:be:11:58:aa:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cba355669b4f9b9035f05b1fba211ef8696101d
Validity
Not Before: Mar 29 09:01:08 2025 GMT
Not After : Mar 30 09:01:08 2025 GMT
Subject: CN=d6901171415cef14146a7f25b0e5094b7238841a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:3a:6a:d7:f6:2f:52:2a:76:e7:19:d7:61:de:
dd:4f:2f:4c:b7:ef:b0:2f:11:6e:0c:9f:d8:c4:26:
cd:93:9a:56:1a:1b:77:aa:a3:67:f4:d3:ee:e1:06:
a9:97:da:07:d2:8d:ab:f6:8d:13:c5:a9:ee:b7:11:
0c:d8:e9:d9:5c:80:63:cc:bb:12:d6:49:e0:63:b6:
1b:4e:7a:96:b8:8c:e8:c0:27:c6:ca:25:e6:74:42:
f3:9b:e7:c2:b8:a7:59:f6:29:e3:53:41:f1:24:39:
79:48:e1:51:5e:77:8d:e2:10:21:22:ba:ac:d9:35:
bc:37:bc:32:11:e0:10:a0:a0:23:19:41:40:88:b6:
17:1c:02:23:86:fc:00:51:a4:f1:fe:b2:f5:a1:64:
e2:64:16:f1:23:84:9b:32:6d:5e:f4:94:4d:71:62:
3c:2d:e9:4b:52:42:b6:bc:43:f6:16:9b:50:5a:b0:
37:43:a9:7c:34:b8:6d:4c:8a:0a:4d:d6:fd:a6:82:
81:80:39:2c:88:bb:b7:c4:30:2f:69:60:a1:eb:46:
2f:cc:a7:5a:e3:d2:14:41:b0:e0:87:d1:bc:63:72:
68:1b:71:60:4f:f5:95:cb:8a:bb:06:c3:e2:72:0c:
77:d0:1b:56:16:b7:50:93:bc:51:d7:3b:d5:0e:01:
45:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:90:11:71:41:5C:EF:14:14:6A:7F:25:B0:E5:09:4B:72:38:84:1A
X509v3 Authority Key Identifier:
keyid:2C:BA:35:56:69:B4:F9:B9:03:5F:05:B1:FB:A2:11:EF:86:96:10:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LLo1Vmm0-bkDXwWx-6IR74aWEB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/6fa6d0-f2c8-412c-9bc7-365c51a5f9ff/1/LLo1Vmm0-bkDXwWx-6IR74aWEB0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/6fa6d0-f2c8-412c-9bc7-365c51a5f9ff/1/LLo1Vmm0-bkDXwWx-6IR74aWEB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:64:2d:aa:e7:0d:9b:b2:2b:0b:71:80:9e:46:68:20:d7:04:
a3:b2:51:d9:fa:94:4d:65:7d:61:f7:fa:74:02:54:e5:c5:57:
76:d9:96:3f:57:ab:31:95:ae:ce:c3:9d:1e:83:14:d6:28:c5:
ec:5e:8d:8d:f8:ae:ba:1d:b6:6f:3f:02:38:2c:72:70:69:be:
17:6b:9a:82:30:b6:67:87:75:39:61:78:d8:fd:12:5c:56:3e:
89:32:84:bc:1b:cc:e5:70:92:9b:66:b0:ba:9a:70:ba:48:55:
14:2c:e2:05:60:10:e0:77:12:1b:a3:0f:cb:02:d5:39:ed:91:
78:ab:e6:8c:d5:2b:bf:b9:7a:08:a2:b2:fa:e6:6d:45:c3:f5:
3b:5a:6f:27:2c:4e:72:61:b2:ba:1a:e9:5f:b2:1d:ce:79:d4:
cc:d8:cd:16:bf:a6:33:5b:a0:b4:2f:25:af:45:f4:f3:43:6b:
27:26:4f:78:a8:61:80:1b:cd:eb:eb:2f:10:43:9b:0e:12:ba:
6d:05:4d:92:c5:cc:a2:c5:f1:3d:80:bc:fd:b4:7f:6d:37:29:
5c:85:ec:94:6c:d8:d2:fa:3e:e8:b5:17:ad:d8:61:a2:0c:02:
fe:38:a4:26:2a:a2:43:a1:f6:85:c7:8b:4c:a7:9d:ac:25:fd:
4b:fa:dd:38
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZXhIi1UbwueccshFL4RWKrHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJjYmEzNTU2NjliNGY5YjkwMzVmMDViMWZiYTIxMWVmODY5
NjEwMWQwHhcNMjUwMzI5MDkwMTA4WhcNMjUwMzMwMDkwMTA4WjAzMTEwLwYDVQQD
EyhkNjkwMTE3MTQxNWNlZjE0MTQ2YTdmMjViMGU1MDk0YjcyMzg4NDFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwTpq1/YvUip25xnXYd7dTy9Mt++w
LxFuDJ/YxCbNk5pWGht3qqNn9NPu4Qapl9oH0o2r9o0TxanutxEM2OnZXIBjzLsS
1kngY7YbTnqWuIzowCfGyiXmdELzm+fCuKdZ9injU0HxJDl5SOFRXneN4hAhIrqs
2TW8N7wyEeAQoKAjGUFAiLYXHAIjhvwAUaTx/rL1oWTiZBbxI4SbMm1e9JRNcWI8
LelLUkK2vEP2FptQWrA3Q6l8NLhtTIoKTdb9poKBgDksiLu3xDAvaWCh60YvzKda
49IUQbDgh9G8Y3JoG3FgT/WVy4q7BsPicgx30BtWFrdQk7xR1zvVDgFFOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNaQEXFBXO8UFGp/JbDlCUtyOIQaMB8GA1UdIwQY
MBaAFCy6NVZptPm5A18FsfuiEe+GlhAdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTExvMVZtbTAtYmtEWHdXeC02SVI3NGFXRUIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi82ZmE2ZDAtZjJjOC00MTJjLTliYzct
MzY1YzUxYTVmOWZmLzEvTExvMVZtbTAtYmtEWHdXeC02SVI3NGFXRUIwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi82ZmE2ZDAtZjJjOC00MTJjLTliYzctMzY1YzUxYTVmOWZm
LzEvTExvMVZtbTAtYmtEWHdXeC02SVI3NGFXRUIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATGQtqucN
m7IrC3GAnkZoINcEo7JR2fqUTWV9Yff6dAJU5cVXdtmWP1erMZWuzsOdHoMU1ijF
7F6Njfiuuh22bz8COCxycGm+F2uagjC2Z4d1OWF42P0SXFY+iTKEvBvM5XCSm2aw
uppwukhVFCziBWAQ4HcSG6MPywLVOe2ReKvmjNUrv7l6CKKy+uZtRcP1O1pvJyxO
cmGyuhrpX7IdznnUzNjNFr+mM1ugtC8lr0X080NrJyZPeKhhgBvN6+svEEObDhK6
bQVNksXMosXxPYC8/bR/bTcpXIXslGzY0vo+6LUXrdhhogwC/jikJiqiQ6H2hceL
TKedrCX9S/rdOA==
-----END CERTIFICATE-----
Generated at Thu Apr 10 22:02:31 2025 by rpki-client