Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/5cffd2-b568-4d55-a124-21fc9afc8ac1/1/lpztpb83kB_p5E9ztb-CtoezRXI.mft
File: lpztpb83kB_p5E9ztb-CtoezRXI.mft (raw, json)
Hash identifier: sBinQldm47Ltuu50C11l6piLEE8vVmdMLR6Tr4SioCU=
Subject key identifier: C7:D5:E1:BB:81:07:50:53:4D:D6:08:8D:E7:4C:5F:C6:2C:5D:D9:74
Authority key identifier: 96:9C:ED:A5:BF:37:90:1F:E9:E4:4F:73:B5:BF:82:B6:87:B3:45:72
Certificate issuer: /CN=969ceda5bf37901fe9e44f73b5bf82b687b34572
Certificate serial: 0194BCAA33AA53DCA480384763F9BE92BF76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lpztpb83kB_p5E9ztb-CtoezRXI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/5cffd2-b568-4d55-a124-21fc9afc8ac1/1/lpztpb83kB_p5E9ztb-CtoezRXI.mft
Manifest number: 08CF
Signing time: Fri 31 Jan 2025 14:00:58 +0000
Manifest this update: Fri 31 Jan 2025 14:00:58 +0000
Manifest next update: Sat 01 Feb 2025 14:00:58 +0000
Files and hashes: 1: BlSKEWV8a0Pu0DQWSBEZ8E6j6Ig.roa (hash: E+fl2IDftOEsy56bvfa1HOBzyBMqnDbK6GEdF9F9KeI=)
2: amBacDdU6Mjk1rJegCvOmhPZCuI.roa (hash: QFuN87Ca0aIv1BOf1cf5zbuSpQPxJlnZXFNDEW5Ik9U=)
3: lpztpb83kB_p5E9ztb-CtoezRXI.crl (hash: DSBG1yxOsByfCUE5NZYFgfrQI6yvdFAvnm+NR8azcYk=)
4: oQUx3CaetTGOoOfH7R_GIuQC9ZM.roa (hash: QXtVeIAnBIaJbBWzjL0HKxzProdKFi/c2re+3CNcveM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:33:aa:53:dc:a4:80:38:47:63:f9:be:92:bf:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=969ceda5bf37901fe9e44f73b5bf82b687b34572
Validity
Not Before: Jan 31 14:00:58 2025 GMT
Not After : Feb 1 14:00:58 2025 GMT
Subject: CN=c7d5e1bb810750534dd6088de74c5fc62c5dd974
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:e8:f7:e2:df:30:89:13:18:c0:a0:d3:fb:ad:
ed:03:cb:d5:cf:59:43:ce:e2:9b:44:03:fd:02:a0:
a7:f8:0d:ba:dd:60:b9:00:0f:ea:30:d6:56:45:fd:
1a:48:25:56:5c:ac:c2:f2:ee:ee:73:ed:2e:80:44:
48:9d:a7:0a:b5:2c:8f:25:66:f7:a9:b6:3a:16:cd:
a0:02:47:d7:df:91:fd:b1:18:36:e7:9a:67:7b:dd:
a2:5f:0f:c3:90:99:79:fa:14:28:16:db:33:7f:11:
02:5b:81:ac:ca:5f:b0:4c:50:1a:fb:aa:e8:6b:28:
32:a7:a0:e9:aa:af:fe:e7:1d:5a:ba:44:fd:d5:92:
96:5f:53:a6:18:99:90:b5:ed:01:ed:6c:0a:28:fc:
a5:ec:3d:15:cc:da:26:f6:5d:c6:64:19:b3:59:9b:
40:6d:95:48:e7:77:c9:46:4a:8f:52:b7:3b:04:eb:
23:ce:87:8c:9a:45:3c:e8:fe:5b:d0:19:16:34:b6:
d1:07:e5:c3:de:1d:ec:0e:3f:d0:28:19:cf:dc:3c:
21:3c:e9:6d:01:85:30:af:e3:e4:10:5d:61:72:0c:
26:3d:88:77:73:6a:7f:44:0d:6b:9d:88:8f:70:20:
73:7f:41:60:7a:2d:40:65:67:3a:14:66:46:41:7b:
a5:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:D5:E1:BB:81:07:50:53:4D:D6:08:8D:E7:4C:5F:C6:2C:5D:D9:74
X509v3 Authority Key Identifier:
keyid:96:9C:ED:A5:BF:37:90:1F:E9:E4:4F:73:B5:BF:82:B6:87:B3:45:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lpztpb83kB_p5E9ztb-CtoezRXI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/5cffd2-b568-4d55-a124-21fc9afc8ac1/1/lpztpb83kB_p5E9ztb-CtoezRXI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/5cffd2-b568-4d55-a124-21fc9afc8ac1/1/lpztpb83kB_p5E9ztb-CtoezRXI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:61:63:a0:6c:06:dc:37:06:d4:95:f8:91:63:97:de:d0:85:
57:a6:fc:77:c9:da:ea:e8:92:e1:82:e7:7f:9b:32:b1:1c:5b:
b3:44:ae:61:e3:81:38:e9:21:c0:9a:7d:11:0c:9e:93:69:f7:
b9:96:74:21:6b:cb:95:b6:f6:25:cc:36:a7:8e:fb:1e:67:7d:
55:a3:99:ae:d8:fe:92:0f:79:e4:ad:da:54:88:3f:a3:6a:7f:
0b:2c:10:ad:00:6e:2e:d3:18:e9:c2:6d:ce:0a:b4:80:92:56:
59:3f:b0:83:ac:27:a2:aa:f4:ee:b3:c7:93:4a:04:4a:9c:36:
4e:80:72:53:81:a5:66:bc:e1:06:0a:93:e9:c1:0d:e5:d0:c2:
65:29:ba:fc:2b:80:c1:e9:79:71:fa:5f:c4:39:be:f4:45:ae:
b8:1f:1f:c3:4e:d7:3e:d4:6f:a7:86:5d:a1:7f:c1:bf:78:97:
14:91:77:fc:a7:24:61:49:d1:12:72:d1:1a:2b:c5:f9:9f:da:
4e:51:38:12:1b:62:e8:11:c1:49:2c:47:5d:b8:58:d5:23:e1:
cb:a2:15:40:88:61:de:2b:d5:7f:1e:b5:a6:7d:8d:b6:83:00:
36:b2:60:f7:fe:c7:9f:71:fc:86:9f:ac:96:4d:54:5b:77:a4:
75:f2:8a:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:42:21 2025 by rpki-client