Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/b5dc5d-e89e-47dd-8298-79772f01d870/1/LwgxhX0-2Lh-cofZ_qqVKFuYPms.mft
File: LwgxhX0-2Lh-cofZ_qqVKFuYPms.mft (raw, json)
Hash identifier: NU7fJH1z/1xLLPguK3U/APh+EDXmCLmHsNlL7ylb76s=
Subject key identifier: A2:EB:3E:00:2E:1D:03:52:5D:DD:4D:ED:50:9E:B5:29:4B:D1:02:00
Authority key identifier: 2F:08:31:85:7D:3E:D8:B8:7E:72:87:D9:FE:AA:95:28:5B:98:3E:6B
Certificate issuer: /CN=2f0831857d3ed8b87e7287d9feaa95285b983e6b
Certificate serial: 01952228B85A44AFDA1796528EC06CF1280A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LwgxhX0-2Lh-cofZ_qqVKFuYPms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/b5dc5d-e89e-47dd-8298-79772f01d870/1/LwgxhX0-2Lh-cofZ_qqVKFuYPms.mft
Manifest number: 12D2
Signing time: Thu 20 Feb 2025 07:00:48 +0000
Manifest this update: Thu 20 Feb 2025 07:00:48 +0000
Manifest next update: Fri 21 Feb 2025 07:00:48 +0000
Files and hashes: 1: LwgxhX0-2Lh-cofZ_qqVKFuYPms.crl (hash: jJMdtdPldqyN8DvszyB70iUQ5HzyZAmrDNx60ioF3l0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:22:28:b8:5a:44:af:da:17:96:52:8e:c0:6c:f1:28:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f0831857d3ed8b87e7287d9feaa95285b983e6b
Validity
Not Before: Feb 20 07:00:48 2025 GMT
Not After : Feb 21 07:00:48 2025 GMT
Subject: CN=a2eb3e002e1d03525ddd4ded509eb5294bd10200
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:89:11:37:8c:53:44:8d:11:9e:7b:38:9d:ee:
0b:40:a0:00:76:47:72:86:ce:1c:b8:7f:d1:5d:13:
88:47:ea:e4:9f:45:1d:53:0d:b1:d5:8c:f0:e8:87:
e6:d3:1f:64:d7:c2:48:9e:c5:4b:d6:44:e0:86:ef:
8c:b9:2a:0f:29:30:88:9b:b0:97:ad:bc:a8:5f:b1:
0a:76:ad:60:a3:ac:f1:6a:6a:60:4f:98:7a:6c:51:
3c:d0:e7:06:28:a5:2f:77:2a:ee:13:68:b3:47:f7:
8d:d4:1e:01:eb:08:b8:d1:a8:02:be:42:ee:a7:4e:
87:71:97:fe:00:4e:40:0b:14:c3:d3:98:7a:d0:42:
9d:19:4a:ed:62:0d:db:ee:01:23:2a:12:33:76:30:
a7:f5:72:76:b7:b7:bb:38:13:e1:52:cc:13:d0:e9:
6e:56:c1:bf:60:91:2a:57:9f:f8:9d:ef:90:82:00:
9d:41:0f:c7:91:5a:c3:27:2e:e0:e6:77:cc:2a:15:
91:7e:73:b9:16:a8:b2:a2:26:36:6c:45:fc:ec:98:
b2:e0:25:90:f5:ed:15:b7:1c:85:85:7b:87:1a:f5:
c9:67:be:38:f7:ab:64:37:a4:03:49:ee:f4:ef:3f:
6d:c4:2d:5f:33:2f:57:69:94:a6:06:6e:09:bc:f3:
a4:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:EB:3E:00:2E:1D:03:52:5D:DD:4D:ED:50:9E:B5:29:4B:D1:02:00
X509v3 Authority Key Identifier:
keyid:2F:08:31:85:7D:3E:D8:B8:7E:72:87:D9:FE:AA:95:28:5B:98:3E:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LwgxhX0-2Lh-cofZ_qqVKFuYPms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/b5dc5d-e89e-47dd-8298-79772f01d870/1/LwgxhX0-2Lh-cofZ_qqVKFuYPms.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/b5dc5d-e89e-47dd-8298-79772f01d870/1/LwgxhX0-2Lh-cofZ_qqVKFuYPms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:a7:d5:3f:7a:bc:c2:44:2c:2b:60:a9:5c:f3:d7:23:7b:bb:
f9:b7:c1:b6:7f:22:d7:25:24:ee:89:57:29:46:c8:47:3d:5c:
95:02:7a:03:31:de:80:54:7c:de:5c:81:ef:1a:60:54:78:d3:
eb:4b:ce:87:43:a7:bf:d4:74:13:6b:c6:f9:26:62:4b:ac:55:
91:75:06:dd:22:ca:78:98:86:40:f7:3b:ef:9e:d7:f0:36:d8:
49:17:e2:f8:9d:49:0b:49:c3:d3:b1:32:e5:90:e4:a6:01:7d:
92:38:6d:c6:ce:f8:32:f3:d8:50:ac:06:47:1c:ac:58:3f:44:
99:ba:46:68:95:3c:c0:44:d4:ec:2e:c8:52:45:f6:2f:7a:9b:
42:89:1f:5e:2b:1a:a3:ea:97:ae:5c:85:5c:69:cf:82:9c:46:
55:63:17:ae:62:e8:bb:21:d2:1a:dc:55:a6:73:ba:2c:d8:3c:
56:0a:fb:08:11:76:5c:1d:e5:60:99:d9:33:41:48:a0:28:6a:
62:41:94:a6:46:f0:55:7a:05:a1:a2:fd:a4:02:5a:50:d9:86:
63:21:53:d4:14:ec:93:28:d2:8f:b9:d0:e0:f0:19:74:c9:32:
a0:e6:15:00:fe:2f:d5:08:db:a7:98:bf:e7:73:db:7c:83:df:
53:7a:f0:00
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZUiKLhaRK/aF5ZSjsBs8SgKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmMDgzMTg1N2QzZWQ4Yjg3ZTcyODdkOWZlYWE5NTI4NWI5
ODNlNmIwHhcNMjUwMjIwMDcwMDQ4WhcNMjUwMjIxMDcwMDQ4WjAzMTEwLwYDVQQD
EyhhMmViM2UwMDJlMWQwMzUyNWRkZDRkZWQ1MDllYjUyOTRiZDEwMjAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhokRN4xTRI0Rnns4ne4LQKAAdkdy
hs4cuH/RXROIR+rkn0UdUw2x1Yzw6Ifm0x9k18JInsVL1kTghu+MuSoPKTCIm7CX
rbyoX7EKdq1go6zxampgT5h6bFE80OcGKKUvdyruE2izR/eN1B4B6wi40agCvkLu
p06HcZf+AE5ACxTD05h60EKdGUrtYg3b7gEjKhIzdjCn9XJ2t7e7OBPhUswT0Olu
VsG/YJEqV5/4ne+QggCdQQ/HkVrDJy7g5nfMKhWRfnO5FqiyoiY2bEX87Jiy4CWQ
9e0VtxyFhXuHGvXJZ74496tkN6QDSe707z9txC1fMy9XaZSmBm4JvPOkjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKLrPgAuHQNSXd1N7VCetSlL0QIAMB8GA1UdIwQY
MBaAFC8IMYV9Pti4fnKH2f6qlShbmD5rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTHdneGhYMC0yTGgtY29mWl9xcVZLRnVZUG1zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi9iNWRjNWQtZTg5ZS00N2RkLTgyOTgt
Nzk3NzJmMDFkODcwLzEvTHdneGhYMC0yTGgtY29mWl9xcVZLRnVZUG1zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi9iNWRjNWQtZTg5ZS00N2RkLTgyOTgtNzk3NzJmMDFkODcw
LzEvTHdneGhYMC0yTGgtY29mWl9xcVZLRnVZUG1zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlqfVP3q8
wkQsK2CpXPPXI3u7+bfBtn8i1yUk7olXKUbIRz1clQJ6AzHegFR83lyB7xpgVHjT
60vOh0Onv9R0E2vG+SZiS6xVkXUG3SLKeJiGQPc7757X8DbYSRfi+J1JC0nD07Ey
5ZDkpgF9kjhtxs74MvPYUKwGRxysWD9EmbpGaJU8wETU7C7IUkX2L3qbQokfXisa
o+qXrlyFXGnPgpxGVWMXrmLouyHSGtxVpnO6LNg8Vgr7CBF2XB3lYJnZM0FIoChq
YkGUpkbwVXoFoaL9pAJaUNmGYyFT1BTskyjSj7nQ4PAZdMkyoOYVAP4v1Qjbp5i/
53PbfIPfU3rwAA==
-----END CERTIFICATE-----
Generated at Sun Jun 8 20:52:12 2025 by rpki-client