Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/53386c-48c5-42ee-bd09-e50abc8e8844/1/lvzaEo_oKvwG6KrRyOXM37NVYeQ.mft
File: lvzaEo_oKvwG6KrRyOXM37NVYeQ.mft (raw, json)
Hash identifier: Aig9wooE9OhJJ+aP4JxC6DLn2fL3Jn0ybpHYEyG/GVQ=
Subject key identifier: 8F:4A:15:C2:5F:EF:1B:D9:6F:78:9D:FE:0B:78:DA:78:5B:D6:12:E7
Authority key identifier: 96:FC:DA:12:8F:E8:2A:FC:06:E8:AA:D1:C8:E5:CC:DF:B3:55:61:E4
Certificate issuer: /CN=96fcda128fe82afc06e8aad1c8e5ccdfb35561e4
Certificate serial: 0194BC04AE3EA6E2788E4560C4AD910FC08D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lvzaEo_oKvwG6KrRyOXM37NVYeQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/53386c-48c5-42ee-bd09-e50abc8e8844/1/lvzaEo_oKvwG6KrRyOXM37NVYeQ.mft
Manifest number: 0282
Signing time: Fri 31 Jan 2025 11:00:10 +0000
Manifest this update: Fri 31 Jan 2025 11:00:10 +0000
Manifest next update: Sat 01 Feb 2025 11:00:10 +0000
Files and hashes: 1: A3mZEclriGszqRGoUvbHgF-KInU.roa (hash: i8Kmi4yyeQAKrcdjfPdTmfjuSQ/uP2lhkQpuex0W13Y=)
2: lvzaEo_oKvwG6KrRyOXM37NVYeQ.crl (hash: JbpK8bab/x3eR4u361cy21/rGWmL/DDEazm/nxl1wwc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:ae:3e:a6:e2:78:8e:45:60:c4:ad:91:0f:c0:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96fcda128fe82afc06e8aad1c8e5ccdfb35561e4
Validity
Not Before: Jan 31 11:00:10 2025 GMT
Not After : Feb 1 11:00:10 2025 GMT
Subject: CN=8f4a15c25fef1bd96f789dfe0b78da785bd612e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:bb:4c:87:65:52:e9:19:7e:b5:f2:27:a7:bd:
80:ca:d7:12:82:5b:45:a5:bf:ac:50:73:67:ca:18:
49:98:e1:3f:7f:f9:57:6e:ef:29:0c:4c:79:a7:b4:
39:1f:c3:8c:ca:b7:aa:38:c2:b8:e6:f9:ba:3a:f7:
4a:f9:59:bd:3f:71:56:7f:50:50:c5:3a:a5:49:ca:
16:22:34:d0:6a:f8:43:76:1e:2c:e8:78:fa:a5:7a:
b2:99:64:bc:02:5e:07:56:72:ce:86:dc:0e:23:bb:
0d:d9:60:f7:c7:56:6e:29:81:11:60:cc:f8:dc:56:
13:48:6c:4f:67:ab:0f:76:c4:cc:55:6b:4e:75:f9:
28:99:0c:67:5a:d6:8c:87:48:10:c7:d7:ac:ac:72:
75:1d:fd:ba:34:37:68:f0:5d:c0:a2:6e:8c:10:05:
bc:d3:1d:ea:ba:c1:50:0e:56:8c:13:fe:3a:9c:f9:
09:31:e1:08:f4:f7:9d:b9:55:fc:87:5f:13:2b:b8:
1e:ad:19:db:47:94:f3:5f:a6:e4:2d:63:cf:92:d8:
c3:cb:0c:3a:7f:53:28:05:d4:f8:59:10:c7:af:60:
b0:5a:b6:8a:53:d2:78:df:5e:cc:3c:3c:ca:1b:37:
ee:53:74:db:8e:eb:e3:49:d0:4b:c9:4f:00:6b:ee:
53:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:4A:15:C2:5F:EF:1B:D9:6F:78:9D:FE:0B:78:DA:78:5B:D6:12:E7
X509v3 Authority Key Identifier:
keyid:96:FC:DA:12:8F:E8:2A:FC:06:E8:AA:D1:C8:E5:CC:DF:B3:55:61:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lvzaEo_oKvwG6KrRyOXM37NVYeQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/53386c-48c5-42ee-bd09-e50abc8e8844/1/lvzaEo_oKvwG6KrRyOXM37NVYeQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/53386c-48c5-42ee-bd09-e50abc8e8844/1/lvzaEo_oKvwG6KrRyOXM37NVYeQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:9b:89:f8:f4:0f:cd:df:b8:d6:6a:48:e4:f0:8b:cb:d9:29:
47:a6:b9:12:6b:94:f9:d8:76:48:7e:0e:65:cd:3f:c4:3f:2f:
6f:a7:6f:a9:05:b8:5c:b6:7c:85:a1:de:3e:2b:83:b2:1c:d8:
fc:65:47:e3:94:82:a2:9b:e2:2f:a0:a8:32:65:eb:c0:38:58:
2f:ad:c8:ca:39:b8:17:f5:89:07:f5:42:a8:56:c3:bc:ab:7d:
d5:c5:a9:21:83:f0:a2:98:62:5e:c9:65:b9:0f:57:69:9b:09:
41:b6:14:1c:6d:fa:bb:d4:a4:3f:f6:33:26:a8:a9:7d:96:b4:
07:ba:6e:36:42:49:0a:62:a3:c0:1c:43:0f:bb:3e:bd:8c:9f:
99:e6:5e:35:63:67:f5:91:38:b2:a9:46:31:b8:f4:ed:23:9b:
09:11:83:4e:d0:fb:85:a3:4f:6d:e6:ce:6d:ca:5b:c3:e6:83:
05:65:ca:42:f9:ea:10:4c:8d:48:07:63:80:7c:f7:35:73:80:
1f:bb:50:0f:ef:3a:46:85:24:56:f9:28:c1:83:c9:00:2a:bf:
9e:06:74:7d:cb:90:cc:6d:e1:63:e0:5a:8d:6f:3a:85:22:55:
ac:fe:95:2f:cb:3e:f1:9b:b6:9a:37:d5:c8:f4:d9:35:0e:db:
98:77:4d:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:39:39 2025 by rpki-client