Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/2f4605-356a-4af6-b15d-c42f9abf1477/1/lzvsM65zjJiViBnGwTuzNe40q0w.mft
File: lzvsM65zjJiViBnGwTuzNe40q0w.mft (raw, json)
Hash identifier: o2jFaWX1ftiNlLurg0yKUhuGyJOtCnND7soEn/OorhQ=
Subject key identifier: 5E:92:FA:08:73:2F:B7:04:A3:AE:F8:F2:B5:2F:BF:DD:0A:D1:30:1F
Authority key identifier: 97:3B:EC:33:AE:73:8C:98:95:88:19:C6:C1:3B:B3:35:EE:34:AB:4C
Certificate issuer: /CN=973bec33ae738c98958819c6c13bb335ee34ab4c
Certificate serial: 0195DFD8EBA5688ACBF16DB22E30CEAB7C2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lzvsM65zjJiViBnGwTuzNe40q0w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/2f4605-356a-4af6-b15d-c42f9abf1477/1/lzvsM65zjJiViBnGwTuzNe40q0w.mft
Manifest number: 0B68
Signing time: Sat 29 Mar 2025 03:01:30 +0000
Manifest this update: Sat 29 Mar 2025 03:01:30 +0000
Manifest next update: Sun 30 Mar 2025 03:01:30 +0000
Files and hashes: 1: 04AAIWN8CdjN6G01O3D_l5i-Jvk.roa (hash: Mv4GpM35beFDVPlXDkHbY9A9imQnPo9JK9qNbOoM+YU=)
2: lzvsM65zjJiViBnGwTuzNe40q0w.crl (hash: AW39kPyqAWCO8tjTILsJSC6dVMiJIxEK5oqr/VmtAj8=)
3: tuawZTEX7vHBTQMJyQg0WD-oypg.roa (hash: IFKGL2W7O7px/Tqsp660BBZcbUWDZWgLugycTaSmqvQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:df:d8:eb:a5:68:8a:cb:f1:6d:b2:2e:30:ce:ab:7c:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=973bec33ae738c98958819c6c13bb335ee34ab4c
Validity
Not Before: Mar 29 03:01:30 2025 GMT
Not After : Mar 30 03:01:30 2025 GMT
Subject: CN=5e92fa08732fb704a3aef8f2b52fbfdd0ad1301f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:ba:26:7e:3c:a7:1a:21:61:3f:ed:68:c7:20:
13:23:44:d9:5d:15:74:d7:b8:18:23:e9:81:48:b0:
4d:8d:ef:58:de:61:10:6d:5b:bd:64:15:f3:43:8a:
97:52:41:86:11:8c:66:a3:38:c8:70:cf:19:38:72:
f1:b8:6d:3d:26:ff:57:c8:89:bb:03:57:e3:c2:fb:
12:a9:d9:8b:09:a6:eb:42:6e:e2:06:f3:7b:c0:0e:
f6:d2:80:c3:5e:95:b1:03:a3:e4:c8:44:9a:ab:e8:
e6:c4:5e:ea:c6:08:ec:b6:1c:6c:48:f9:b8:ad:43:
a1:24:3d:9b:8a:3a:a6:05:6d:10:87:17:1e:b1:f5:
a7:bd:25:9f:e7:ae:7e:04:0b:fe:30:d3:76:27:7b:
b0:64:58:c0:ec:5e:8c:c3:6f:83:db:23:f5:31:6d:
23:50:c2:3d:bd:70:35:3d:98:fc:f3:98:74:9b:46:
c9:2b:6f:19:1f:91:0b:46:77:2c:f3:26:e0:b4:eb:
81:88:d0:cc:3f:cc:e6:86:ac:e2:1e:89:c4:79:bc:
df:1f:52:10:68:dd:10:4d:2e:00:e0:27:b4:d3:7b:
d7:48:37:c6:07:31:d5:4f:f0:65:28:ca:69:82:76:
e4:68:dd:11:47:40:27:a8:78:4c:f1:90:15:2b:e8:
08:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:92:FA:08:73:2F:B7:04:A3:AE:F8:F2:B5:2F:BF:DD:0A:D1:30:1F
X509v3 Authority Key Identifier:
keyid:97:3B:EC:33:AE:73:8C:98:95:88:19:C6:C1:3B:B3:35:EE:34:AB:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lzvsM65zjJiViBnGwTuzNe40q0w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/2f4605-356a-4af6-b15d-c42f9abf1477/1/lzvsM65zjJiViBnGwTuzNe40q0w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/2f4605-356a-4af6-b15d-c42f9abf1477/1/lzvsM65zjJiViBnGwTuzNe40q0w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:12:ea:61:2e:ce:55:44:8f:f7:e4:0f:a6:6d:7d:7c:bb:bd:
86:3b:11:f1:64:7d:db:76:3e:f5:f6:4c:d5:1d:3b:4c:5a:2a:
b9:75:83:55:2e:91:58:da:05:11:73:c7:e8:e5:4d:db:84:6e:
7b:df:d0:8d:88:59:19:41:c3:f1:e6:65:14:03:54:8a:5c:2a:
5e:37:67:84:f7:87:43:23:ae:a8:46:0b:bf:0c:68:cc:e2:12:
81:91:e7:28:70:83:dc:37:53:52:e6:9f:e2:75:9c:9f:20:ee:
2a:6d:a8:b1:11:02:b4:ca:20:c7:55:21:b8:54:06:52:e9:74:
26:9a:73:33:8a:0d:e8:c4:54:54:8e:99:e2:76:c1:33:01:b5:
67:c4:25:91:f4:12:88:9c:b2:7a:22:22:1b:6f:21:8d:51:2b:
ef:83:e7:99:6d:ce:0d:28:a2:2a:04:49:3f:0a:b2:29:44:13:
bf:08:c9:b2:62:ce:9f:ec:6e:77:c6:54:3e:1f:50:a9:4d:c6:
04:5b:83:ce:36:a6:43:3d:dc:52:31:28:a5:b2:b0:7b:af:4b:
27:e2:35:5d:16:94:de:25:1c:15:b8:71:c8:d3:2e:e2:3d:61:
40:fb:69:33:69:89:42:96:14:de:9f:fa:6c:72:64:83:ad:60:
44:02:2f:94
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZXf2OulaIrL8W2yLjDOq3wsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3M2JlYzMzYWU3MzhjOTg5NTg4MTljNmMxM2JiMzM1ZWUz
NGFiNGMwHhcNMjUwMzI5MDMwMTMwWhcNMjUwMzMwMDMwMTMwWjAzMTEwLwYDVQQD
Eyg1ZTkyZmEwODczMmZiNzA0YTNhZWY4ZjJiNTJmYmZkZDBhZDEzMDFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3bomfjynGiFhP+1oxyATI0TZXRV0
17gYI+mBSLBNje9Y3mEQbVu9ZBXzQ4qXUkGGEYxmozjIcM8ZOHLxuG09Jv9XyIm7
A1fjwvsSqdmLCabrQm7iBvN7wA720oDDXpWxA6PkyESaq+jmxF7qxgjsthxsSPm4
rUOhJD2bijqmBW0QhxcesfWnvSWf565+BAv+MNN2J3uwZFjA7F6Mw2+D2yP1MW0j
UMI9vXA1PZj885h0m0bJK28ZH5ELRncs8ybgtOuBiNDMP8zmhqziHonEebzfH1IQ
aN0QTS4A4Ce003vXSDfGBzHVT/BlKMppgnbkaN0RR0AnqHhM8ZAVK+gIoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF6S+ghzL7cEo6748rUvv90K0TAfMB8GA1UdIwQY
MBaAFJc77DOuc4yYlYgZxsE7szXuNKtMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbHp2c002NXpqSmlWaUJuR3dUdXpOZTQwcTB3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS8yZjQ2MDUtMzU2YS00YWY2LWIxNWQt
YzQyZjlhYmYxNDc3LzEvbHp2c002NXpqSmlWaUJuR3dUdXpOZTQwcTB3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS8yZjQ2MDUtMzU2YS00YWY2LWIxNWQtYzQyZjlhYmYxNDc3
LzEvbHp2c002NXpqSmlWaUJuR3dUdXpOZTQwcTB3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJBLqYS7O
VUSP9+QPpm19fLu9hjsR8WR923Y+9fZM1R07TFoquXWDVS6RWNoFEXPH6OVN24Ru
e9/QjYhZGUHD8eZlFANUilwqXjdnhPeHQyOuqEYLvwxozOISgZHnKHCD3DdTUuaf
4nWcnyDuKm2osRECtMogx1UhuFQGUul0JppzM4oN6MRUVI6Z4nbBMwG1Z8QlkfQS
iJyyeiIiG28hjVEr74PnmW3ODSiiKgRJPwqyKUQTvwjJsmLOn+xud8ZUPh9QqU3G
BFuDzjamQz3cUjEopbKwe69LJ+I1XRaU3iUcFbhxyNMu4j1hQPtpM2mJQpYU3p/6
bHJkg61gRAIvlA==
-----END CERTIFICATE-----
Generated at Sun Apr 6 18:59:59 2025 by rpki-client