Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/40a102-efcd-4fd2-9373-d06aa518aa6d/1/lZmz54I3DcKBT1JcHW7OhNj3DzY.mft
File: lZmz54I3DcKBT1JcHW7OhNj3DzY.mft (raw, json)
Hash identifier: lTSeO9jpUM1y8E64WO3GhsJx+WYgnQ16qhz+jEYpQrY=
Subject key identifier: 7D:90:28:67:F9:19:37:D0:0A:40:29:F9:3D:59:95:E7:1D:B7:73:B6
Authority key identifier: 95:99:B3:E7:82:37:0D:C2:81:4F:52:5C:1D:6E:CE:84:D8:F7:0F:36
Certificate issuer: /CN=9599b3e782370dc2814f525c1d6ece84d8f70f36
Certificate serial: 0194BD4E5D60FED1144C8B3EDF9C813A54F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lZmz54I3DcKBT1JcHW7OhNj3DzY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/40a102-efcd-4fd2-9373-d06aa518aa6d/1/lZmz54I3DcKBT1JcHW7OhNj3DzY.mft
Manifest number: CB
Signing time: Fri 31 Jan 2025 17:00:17 +0000
Manifest this update: Fri 31 Jan 2025 17:00:17 +0000
Manifest next update: Sat 01 Feb 2025 17:00:17 +0000
Files and hashes: 1: 0VA_9HQvgavGjx805ubmo2Lo5H0.roa (hash: LdNiPcj48/zXBSO9oEQ4RJjrS+zHAsqfBOtXhy9k8x4=)
2: VrF_JXAYi7cHSdA7vOtQcy0-na0.roa (hash: T3vCer2CYjMD216ESnj/Jeswzt56af8ZdG15R1wMajk=)
3: lZmz54I3DcKBT1JcHW7OhNj3DzY.crl (hash: yiSKwD0CRf2ezXhNoMNtF6IP5ax3NRZ8X+PRGt7jLRs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:5d:60:fe:d1:14:4c:8b:3e:df:9c:81:3a:54:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9599b3e782370dc2814f525c1d6ece84d8f70f36
Validity
Not Before: Jan 31 17:00:17 2025 GMT
Not After : Feb 1 17:00:17 2025 GMT
Subject: CN=7d902867f91937d00a4029f93d5995e71db773b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:f7:81:96:91:36:b0:34:02:5e:5a:03:20:86:
bc:44:02:06:b1:97:01:5e:5a:d3:08:3e:9d:af:14:
e0:e8:15:92:32:e7:14:e9:ae:ce:d5:42:26:b5:55:
79:8b:64:83:5d:cb:8d:79:cf:9e:8f:56:44:6a:d9:
8a:ae:a3:0d:0e:14:00:9f:7c:7c:e9:bd:8e:0e:e0:
50:ff:30:8d:33:a3:1e:97:fa:97:b7:50:7d:07:ab:
53:d9:3b:be:48:5c:39:54:1b:33:9d:c3:c7:70:23:
d1:f4:77:bd:9c:bf:af:19:f7:8e:b4:ae:c6:fb:d1:
5e:62:48:99:77:f2:11:b4:65:db:fb:cd:3a:a7:4e:
02:9a:6c:85:95:02:90:f8:50:8d:cd:92:42:f0:c1:
82:1d:9b:2d:93:1e:94:ac:e8:66:0c:e8:35:78:ac:
45:8f:3a:59:17:4e:9a:93:5a:7b:64:38:11:50:d6:
c0:0f:83:27:51:55:e1:bc:29:9b:46:f6:b2:de:9a:
96:60:1c:5c:aa:6c:aa:87:22:a8:73:8c:7a:c4:2d:
f4:98:29:47:76:23:8d:bc:8d:3b:2a:f6:20:49:64:
25:a6:80:e4:17:da:c7:1e:2b:5e:6e:42:7d:b9:e4:
ef:f1:cc:8b:bc:58:bb:1c:d8:24:08:47:95:d5:7c:
b6:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:90:28:67:F9:19:37:D0:0A:40:29:F9:3D:59:95:E7:1D:B7:73:B6
X509v3 Authority Key Identifier:
keyid:95:99:B3:E7:82:37:0D:C2:81:4F:52:5C:1D:6E:CE:84:D8:F7:0F:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lZmz54I3DcKBT1JcHW7OhNj3DzY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/40a102-efcd-4fd2-9373-d06aa518aa6d/1/lZmz54I3DcKBT1JcHW7OhNj3DzY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/40a102-efcd-4fd2-9373-d06aa518aa6d/1/lZmz54I3DcKBT1JcHW7OhNj3DzY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:62:b0:cb:c0:28:d7:87:b7:16:29:a8:f3:9e:26:d8:a3:d9:
55:f6:71:43:b2:1f:4d:f1:1d:16:cb:a8:26:d3:b3:af:0b:a3:
88:a8:82:9c:52:0a:04:77:f9:aa:0a:eb:35:8b:9a:1f:51:bf:
71:69:3b:09:34:1f:6a:9a:3a:76:ab:3d:88:3d:13:a6:f4:38:
ce:31:a7:9b:2b:39:df:45:08:a6:9f:32:3a:cb:a8:84:5e:7b:
05:5c:45:7b:0a:58:ba:ca:55:a3:ac:af:64:4e:2a:5b:03:50:
a5:bd:c5:f6:15:1a:97:75:76:6c:8e:88:25:37:37:8f:61:d1:
24:ae:a7:2d:a8:ad:60:31:2a:dc:ec:da:ad:3a:fa:1a:58:6c:
09:bc:40:6d:51:ad:9a:05:db:6f:93:95:30:d3:e5:05:75:87:
27:2a:9f:be:b3:72:eb:2d:dc:10:b4:c3:b6:4f:09:a3:6b:57:
a8:34:d6:0c:fa:95:40:a9:48:f2:9a:9d:b2:b8:34:42:5b:6f:
41:59:d7:e2:38:7e:41:46:52:75:73:a1:21:a5:19:3c:1c:ef:
f9:91:91:6d:62:37:c7:80:cd:91:35:27:3c:73:bf:24:0c:0e:
c8:44:07:59:9e:85:c5:28:49:2e:24:d8:10:f8:c8:9b:76:3d:
c4:19:c1:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:46:34 2025 by rpki-client