Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/4225b9-e9c3-4b8e-8bff-3a533cedc301/1/LhznvOx_18KfCYu64NMSte46NF4.mft
File: LhznvOx_18KfCYu64NMSte46NF4.mft (raw, json)
Hash identifier: gjbtFt+rYzvT7f8c/gkcqHOVg1lQd+Um90C6oSCLeis=
Subject key identifier: 5D:F2:6A:3B:3E:B6:86:39:67:BB:20:7B:F9:93:42:89:0A:EE:4C:BD
Authority key identifier: 2E:1C:E7:BC:EC:7F:D7:C2:9F:09:8B:BA:E0:D3:12:B5:EE:3A:34:5E
Certificate issuer: /CN=2e1ce7bcec7fd7c29f098bbae0d312b5ee3a345e
Certificate serial: 01966C2D4F2158EE270F65D31F4E2D3F6546
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LhznvOx_18KfCYu64NMSte46NF4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/4225b9-e9c3-4b8e-8bff-3a533cedc301/1/LhznvOx_18KfCYu64NMSte46NF4.mft
Manifest number: 018E
Signing time: Fri 25 Apr 2025 09:00:30 +0000
Manifest this update: Fri 25 Apr 2025 09:00:30 +0000
Manifest next update: Sat 26 Apr 2025 09:00:30 +0000
Files and hashes: 1: LhznvOx_18KfCYu64NMSte46NF4.crl (hash: X9QtSIfGd8xdpub5pgl4aemQfZ9YXhIDtsBtsJGm07k=)
2: dGGMhhLDaoWkDWmK8o4AcoqcFuc.roa (hash: +aGKRXgqkoPg+9wbbAijk/9YLBVcGbYOuDtpc/CsaCg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:6c:2d:4f:21:58:ee:27:0f:65:d3:1f:4e:2d:3f:65:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e1ce7bcec7fd7c29f098bbae0d312b5ee3a345e
Validity
Not Before: Apr 25 09:00:30 2025 GMT
Not After : Apr 26 09:00:30 2025 GMT
Subject: CN=5df26a3b3eb6863967bb207bf99342890aee4cbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:65:a3:06:f1:e7:ff:ac:19:2e:23:4b:bb:72:
39:b8:72:ea:6f:13:99:a4:9b:73:6d:30:ad:0e:23:
a4:f8:d1:00:f9:84:50:6c:56:63:03:9b:bc:e4:d5:
bf:b6:bf:cb:a6:0d:28:3d:b2:44:7c:9b:29:5d:78:
bf:cc:79:3a:3a:2d:a8:e2:c4:78:6e:a7:8d:e1:16:
06:24:93:8b:5d:4e:ac:db:ae:dc:7f:0f:8c:83:4e:
23:60:96:8b:08:c0:85:ff:1e:51:3c:85:6a:64:d2:
a3:10:ce:d7:32:f5:85:87:dd:19:a9:d6:b3:9f:fb:
85:09:36:67:45:06:44:29:dc:42:c7:48:98:13:44:
d7:04:91:69:de:dc:2f:a8:d4:90:dd:b8:10:36:9c:
0d:e7:ca:2c:f5:91:66:b3:0c:2e:cb:52:92:74:b1:
1b:59:3c:a8:15:8d:c9:ac:9c:bb:7b:51:c9:de:a8:
d8:7d:f5:20:d7:27:c5:f6:46:49:9b:a1:ee:7b:63:
4f:87:fa:bb:79:e6:d9:f1:28:a5:af:1e:43:7e:f9:
11:1a:de:8b:0b:65:88:ae:25:d3:d2:22:ef:07:55:
89:11:5b:6e:c3:4e:b7:f5:99:60:d3:25:2f:b8:02:
dd:eb:6f:19:74:22:3f:20:24:64:fb:16:e8:e2:5d:
c9:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:F2:6A:3B:3E:B6:86:39:67:BB:20:7B:F9:93:42:89:0A:EE:4C:BD
X509v3 Authority Key Identifier:
keyid:2E:1C:E7:BC:EC:7F:D7:C2:9F:09:8B:BA:E0:D3:12:B5:EE:3A:34:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LhznvOx_18KfCYu64NMSte46NF4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/4225b9-e9c3-4b8e-8bff-3a533cedc301/1/LhznvOx_18KfCYu64NMSte46NF4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/4225b9-e9c3-4b8e-8bff-3a533cedc301/1/LhznvOx_18KfCYu64NMSte46NF4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:d1:cc:5f:97:f9:12:d0:df:0d:25:86:17:bf:13:ce:a8:16:
5e:b9:a2:43:21:8d:c8:19:91:14:b2:9e:0d:f2:62:cc:1a:5e:
ba:e4:3c:0a:a1:d8:a4:9e:91:81:df:b1:d5:4b:69:a2:54:68:
77:c9:2e:b4:48:ac:34:02:99:8a:15:0c:ba:77:b6:59:da:78:
d9:4d:20:d7:4f:40:de:ae:7c:33:45:a5:da:9b:fe:49:c6:11:
44:d0:5d:e6:15:1e:7d:9d:ab:fd:5b:bf:c1:3f:c6:b7:d7:74:
67:50:bc:1a:d4:c0:d6:f4:6e:77:1e:77:01:b9:7a:1c:55:81:
a1:2d:09:0e:b0:94:2b:c5:62:8f:81:ba:08:e5:8e:b5:51:0d:
f5:81:b4:fd:11:3b:28:01:55:a5:74:73:c3:8a:f6:d0:92:d7:
07:2e:ca:d0:08:4c:80:d4:1c:55:16:d6:ee:de:34:38:85:98:
a0:2a:b6:b5:b3:44:79:8c:9c:a3:cb:6f:09:64:a8:3e:be:40:
43:19:be:5a:fd:6d:93:2c:fc:7d:ca:36:72:a6:5f:c2:bd:c9:
34:4d:03:d7:c5:e4:b6:33:b6:7c:75:71:0a:16:26:a5:8b:1e:
1c:7f:cb:86:ff:29:0a:cf:aa:c2:62:bc:cc:52:64:6c:88:90:
df:86:5d:4e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZsLU8hWO4nD2XTH04tP2VGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlMWNlN2JjZWM3ZmQ3YzI5ZjA5OGJiYWUwZDMxMmI1ZWUz
YTM0NWUwHhcNMjUwNDI1MDkwMDMwWhcNMjUwNDI2MDkwMDMwWjAzMTEwLwYDVQQD
Eyg1ZGYyNmEzYjNlYjY4NjM5NjdiYjIwN2JmOTkzNDI4OTBhZWU0Y2JkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA02WjBvHn/6wZLiNLu3I5uHLqbxOZ
pJtzbTCtDiOk+NEA+YRQbFZjA5u85NW/tr/Lpg0oPbJEfJspXXi/zHk6Oi2o4sR4
bqeN4RYGJJOLXU6s267cfw+Mg04jYJaLCMCF/x5RPIVqZNKjEM7XMvWFh90Zqdaz
n/uFCTZnRQZEKdxCx0iYE0TXBJFp3twvqNSQ3bgQNpwN58os9ZFmswwuy1KSdLEb
WTyoFY3JrJy7e1HJ3qjYffUg1yfF9kZJm6Hue2NPh/q7eebZ8Silrx5DfvkRGt6L
C2WIriXT0iLvB1WJEVtuw0639Zlg0yUvuALd628ZdCI/ICRk+xbo4l3JxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF3yajs+toY5Z7sge/mTQokK7ky9MB8GA1UdIwQY
MBaAFC4c57zsf9fCnwmLuuDTErXuOjReMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTGh6bnZPeF8xOEtmQ1l1NjROTVN0ZTQ2TkY0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS80MjI1YjktZTljMy00YjhlLThiZmYt
M2E1MzNjZWRjMzAxLzEvTGh6bnZPeF8xOEtmQ1l1NjROTVN0ZTQ2TkY0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS80MjI1YjktZTljMy00YjhlLThiZmYtM2E1MzNjZWRjMzAx
LzEvTGh6bnZPeF8xOEtmQ1l1NjROTVN0ZTQ2TkY0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAItHMX5f5
EtDfDSWGF78TzqgWXrmiQyGNyBmRFLKeDfJizBpeuuQ8CqHYpJ6Rgd+x1UtpolRo
d8kutEisNAKZihUMune2Wdp42U0g109A3q58M0Wl2pv+ScYRRNBd5hUefZ2r/Vu/
wT/Gt9d0Z1C8GtTA1vRudx53Abl6HFWBoS0JDrCUK8Vij4G6COWOtVEN9YG0/RE7
KAFVpXRzw4r20JLXBy7K0AhMgNQcVRbW7t40OIWYoCq2tbNEeYyco8tvCWSoPr5A
Qxm+Wv1tkyz8fco2cqZfwr3JNE0D18XktjO2fHVxChYmpYseHH/Lhv8pCs+qwmK8
zFJkbIiQ34ZdTg==
-----END CERTIFICATE-----
Generated at Sat May 10 01:15:23 2025 by rpki-client