Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/fa735c-357b-4194-be74-80c866849546/1/LNX6Kvwzj4QeAM92apA5IkUdN7g.mft
File: LNX6Kvwzj4QeAM92apA5IkUdN7g.mft (raw, json)
Hash identifier: myKf13gdq9lBXz86zumoIznKDHkyZysVqwDHIbhy99M=
Subject key identifier: 39:30:C6:D4:3C:43:FB:CA:28:85:93:BE:78:0B:03:E8:0A:67:40:6D
Authority key identifier: 2C:D5:FA:2A:FC:33:8F:84:1E:00:CF:76:6A:90:39:22:45:1D:37:B8
Certificate issuer: /CN=2cd5fa2afc338f841e00cf766a903922451d37b8
Certificate serial: 0196846C9B6176B8D9E934E70D832F5B6113
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LNX6Kvwzj4QeAM92apA5IkUdN7g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/fa735c-357b-4194-be74-80c866849546/1/LNX6Kvwzj4QeAM92apA5IkUdN7g.mft
Manifest number: 056D
Signing time: Wed 30 Apr 2025 02:00:32 +0000
Manifest this update: Wed 30 Apr 2025 02:00:32 +0000
Manifest next update: Thu 01 May 2025 02:00:32 +0000
Files and hashes: 1: LNX6Kvwzj4QeAM92apA5IkUdN7g.crl (hash: jdJ33LujP0CuEtoTB/fqnah6lVy/Hor84CO62+g3sgU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:84:6c:9b:61:76:b8:d9:e9:34:e7:0d:83:2f:5b:61:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cd5fa2afc338f841e00cf766a903922451d37b8
Validity
Not Before: Apr 30 02:00:32 2025 GMT
Not After : May 1 02:00:32 2025 GMT
Subject: CN=3930c6d43c43fbca288593be780b03e80a67406d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:51:2a:33:46:8a:0a:83:86:d3:ac:37:b5:16:
82:9b:72:9c:c4:1f:08:16:c2:95:b1:c3:b3:13:c3:
20:6e:4c:3a:ef:35:2e:87:af:9d:9c:ba:c8:18:a3:
c0:47:47:29:53:44:fc:88:ef:ce:60:01:27:fb:bb:
cc:b9:a5:5a:6a:ff:4b:b8:f8:90:0f:40:34:73:cd:
6e:08:f2:b3:9d:0c:c2:e7:bb:bd:2a:9a:bf:78:c9:
d5:cf:f1:23:88:e1:9f:c2:ee:84:45:b2:b7:78:ed:
33:17:01:fb:cf:59:e7:7d:77:fb:a5:5e:6c:37:9f:
c3:81:90:b3:ef:dd:9a:d4:17:4b:7f:e3:cb:4c:0f:
4a:72:b7:ac:93:5c:d7:fb:8d:4b:70:fd:d8:fe:0a:
90:2a:8d:76:39:85:e7:cc:2c:87:30:b1:54:12:ab:
c1:81:24:2d:65:8d:3e:03:6d:20:05:d0:ba:bf:ef:
89:72:e4:a0:f1:4c:e3:8c:ce:c6:72:5a:85:55:92:
90:75:ec:b7:ee:eb:1b:a2:31:46:2a:46:be:58:94:
14:58:46:fa:13:a9:b6:47:2e:d1:2d:03:30:59:18:
cc:c8:3a:b1:84:bf:1a:c0:b0:1b:cc:37:82:c7:21:
d3:36:bf:a1:83:ed:65:95:3b:ae:f4:6d:a7:4b:9d:
17:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:30:C6:D4:3C:43:FB:CA:28:85:93:BE:78:0B:03:E8:0A:67:40:6D
X509v3 Authority Key Identifier:
keyid:2C:D5:FA:2A:FC:33:8F:84:1E:00:CF:76:6A:90:39:22:45:1D:37:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LNX6Kvwzj4QeAM92apA5IkUdN7g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/fa735c-357b-4194-be74-80c866849546/1/LNX6Kvwzj4QeAM92apA5IkUdN7g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/fa735c-357b-4194-be74-80c866849546/1/LNX6Kvwzj4QeAM92apA5IkUdN7g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:a9:af:77:29:11:4d:3a:b8:fc:79:22:b4:ff:89:55:bf:11:
82:76:78:c6:99:e8:b5:cd:34:ba:3c:bd:ca:40:f2:ea:79:85:
4c:52:d1:98:e3:99:6d:33:9d:b6:f7:64:32:19:2d:6b:f6:75:
03:61:ef:0d:b3:4f:bb:a7:d4:73:98:ac:ce:f1:e8:42:48:3a:
97:09:a6:c0:d1:c3:59:03:aa:0e:56:33:64:78:d9:3c:ee:df:
9c:b7:0c:c5:63:90:eb:f2:7d:70:31:c0:96:76:9c:e1:e8:b6:
56:18:7c:09:05:c5:22:3d:10:80:e9:b4:1f:4a:a9:fd:f6:ac:
65:c7:34:14:8f:22:4a:21:80:36:6d:7c:b0:e1:1f:9c:27:e5:
2c:dc:c0:f8:1a:3b:ad:63:63:4a:ef:fd:52:f7:cc:d2:bd:30:
8d:25:e3:78:59:3d:db:f8:ae:a4:e2:47:d1:e9:a9:a2:e4:9d:
db:44:b9:23:9c:20:79:3e:32:36:fa:37:ca:fd:a0:03:07:0b:
85:52:e6:66:79:93:10:40:ab:61:10:df:d2:1e:7c:6c:2d:ed:
00:08:8f:31:2a:29:25:4e:c6:64:e4:2e:79:54:a9:8b:2f:1c:
5a:67:0e:4c:20:4e:49:b8:2f:64:cd:45:cb:e9:ad:e8:ee:16:
16:7a:d3:28
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaEbJthdrjZ6TTnDYMvW2ETMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJjZDVmYTJhZmMzMzhmODQxZTAwY2Y3NjZhOTAzOTIyNDUx
ZDM3YjgwHhcNMjUwNDMwMDIwMDMyWhcNMjUwNTAxMDIwMDMyWjAzMTEwLwYDVQQD
EygzOTMwYzZkNDNjNDNmYmNhMjg4NTkzYmU3ODBiMDNlODBhNjc0MDZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlFEqM0aKCoOG06w3tRaCm3KcxB8I
FsKVscOzE8Mgbkw67zUuh6+dnLrIGKPAR0cpU0T8iO/OYAEn+7vMuaVaav9LuPiQ
D0A0c81uCPKznQzC57u9Kpq/eMnVz/EjiOGfwu6ERbK3eO0zFwH7z1nnfXf7pV5s
N5/DgZCz792a1BdLf+PLTA9Kcresk1zX+41LcP3Y/gqQKo12OYXnzCyHMLFUEqvB
gSQtZY0+A20gBdC6v++JcuSg8UzjjM7GclqFVZKQdey37usbojFGKka+WJQUWEb6
E6m2Ry7RLQMwWRjMyDqxhL8awLAbzDeCxyHTNr+hg+1llTuu9G2nS50XCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDkwxtQ8Q/vKKIWTvngLA+gKZ0BtMB8GA1UdIwQY
MBaAFCzV+ir8M4+EHgDPdmqQOSJFHTe4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTE5YNkt2d3pqNFFlQU05MmFwQTVJa1VkTjdnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My9mYTczNWMtMzU3Yi00MTk0LWJlNzQt
ODBjODY2ODQ5NTQ2LzEvTE5YNkt2d3pqNFFlQU05MmFwQTVJa1VkTjdnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83My9mYTczNWMtMzU3Yi00MTk0LWJlNzQtODBjODY2ODQ5NTQ2
LzEvTE5YNkt2d3pqNFFlQU05MmFwQTVJa1VkTjdnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiqmvdykR
TTq4/HkitP+JVb8RgnZ4xpnotc00ujy9ykDy6nmFTFLRmOOZbTOdtvdkMhkta/Z1
A2HvDbNPu6fUc5iszvHoQkg6lwmmwNHDWQOqDlYzZHjZPO7fnLcMxWOQ6/J9cDHA
lnac4ei2Vhh8CQXFIj0QgOm0H0qp/fasZcc0FI8iSiGANm18sOEfnCflLNzA+Bo7
rWNjSu/9UvfM0r0wjSXjeFk92/iupOJH0empouSd20S5I5wgeT4yNvo3yv2gAwcL
hVLmZnmTEECrYRDf0h58bC3tAAiPMSopJU7GZOQueVSpiy8cWmcOTCBOSbgvZM1F
y+mt6O4WFnrTKA==
-----END CERTIFICATE-----
Generated at Sat May 10 16:48:32 2025 by rpki-client