Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/6155f0-4dcb-48ce-a4ed-ac332f8d8c48/1/LJl56ji5293KdLe_pzdotXv_wS8.mft
File: LJl56ji5293KdLe_pzdotXv_wS8.mft (raw, json)
Hash identifier: dATRw/bv9vK42TlxGSku0Uf2ZC0D106srHOMoqIPDRE=
Subject key identifier: B0:29:3E:9F:97:F5:D4:55:A3:90:E2:9D:C1:0F:A7:36:C5:39:27:03
Authority key identifier: 2C:99:79:EA:38:B9:DB:DD:CA:74:B7:BF:A7:37:68:B5:7B:FF:C1:2F
Certificate issuer: /CN=2c9979ea38b9dbddca74b7bfa73768b57bffc12f
Certificate serial: 0194BD4E925D3EEF6F142BA8F299177F8936
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LJl56ji5293KdLe_pzdotXv_wS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/6155f0-4dcb-48ce-a4ed-ac332f8d8c48/1/LJl56ji5293KdLe_pzdotXv_wS8.mft
Manifest number: 06B2
Signing time: Fri 31 Jan 2025 17:00:30 +0000
Manifest this update: Fri 31 Jan 2025 17:00:30 +0000
Manifest next update: Sat 01 Feb 2025 17:00:30 +0000
Files and hashes: 1: 24lEKB10zz7SWBTVz9q6ez1L_Kg.roa (hash: +v6VfXMdQxAy8BGX5hFZxiA3ZHJflUdR/7aKrM+AQ6w=)
2: FiplwliDj9IFqaxubyOH47PNHzI.roa (hash: vsFAl5vfrL4Efd6/sucJnB8CL/6FIPUabbDv79LBuT8=)
3: LJl56ji5293KdLe_pzdotXv_wS8.crl (hash: rvdhxGNP/UKdgDfjxEk676uvAaUtnlVPt88vLaxko4w=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:92:5d:3e:ef:6f:14:2b:a8:f2:99:17:7f:89:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c9979ea38b9dbddca74b7bfa73768b57bffc12f
Validity
Not Before: Jan 31 17:00:30 2025 GMT
Not After : Feb 1 17:00:30 2025 GMT
Subject: CN=b0293e9f97f5d455a390e29dc10fa736c5392703
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:7b:ed:97:69:41:cd:92:1f:db:28:81:1c:5b:
7c:5f:23:68:48:bf:77:a1:d8:5c:ba:ef:54:fe:35:
9e:be:2d:9b:4c:94:0e:06:9f:34:37:6d:05:bb:2d:
ec:46:03:f9:56:b0:95:08:e8:dc:6e:03:95:f6:56:
ef:85:d3:d0:42:94:d8:b6:ea:d6:d4:c3:7c:3c:db:
f0:7a:d0:71:dd:de:ef:aa:d1:30:a5:9d:be:c9:5b:
8b:b2:fa:22:76:44:6f:83:59:a5:13:b8:57:ca:dc:
3d:80:9c:38:43:59:5b:b3:34:6f:45:40:5e:14:14:
ec:c8:63:f3:f9:e3:f2:4c:dc:05:f1:88:ca:64:4e:
65:87:96:ec:82:c8:08:47:c5:79:93:6d:14:4f:22:
16:9d:55:e2:cc:34:5b:e4:2e:75:84:e2:e3:4e:a5:
5d:9d:8a:d9:ba:d1:fc:28:e6:46:a7:e6:43:b1:d1:
68:a7:a0:21:bf:2a:46:f4:cb:9c:e9:8d:b4:4b:ae:
9b:86:fa:1e:40:4f:7d:fb:b7:b5:6a:22:c4:08:1a:
dc:c8:89:86:4f:19:cf:e9:70:a8:ea:34:6b:93:d9:
fb:72:72:d5:ee:f5:c3:87:33:8c:ec:4f:30:cf:cc:
ae:bb:31:f8:05:e4:e1:9d:de:1a:f4:10:94:87:6e:
e8:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:29:3E:9F:97:F5:D4:55:A3:90:E2:9D:C1:0F:A7:36:C5:39:27:03
X509v3 Authority Key Identifier:
keyid:2C:99:79:EA:38:B9:DB:DD:CA:74:B7:BF:A7:37:68:B5:7B:FF:C1:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LJl56ji5293KdLe_pzdotXv_wS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6155f0-4dcb-48ce-a4ed-ac332f8d8c48/1/LJl56ji5293KdLe_pzdotXv_wS8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6155f0-4dcb-48ce-a4ed-ac332f8d8c48/1/LJl56ji5293KdLe_pzdotXv_wS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:68:5c:ab:3b:6c:57:15:8b:ad:c5:3d:82:7b:d7:c4:27:23:
5a:3d:27:48:40:2a:56:6c:7c:15:eb:26:03:52:01:9d:c2:f9:
1c:70:bf:38:07:50:38:f5:af:dd:39:67:a1:73:0e:80:75:a7:
bd:31:5f:90:28:77:3d:7f:14:05:07:06:f5:ed:7f:a2:67:0d:
66:d2:bc:78:aa:07:03:c5:f9:5e:d2:bf:05:a4:e7:49:7a:5b:
e6:85:c8:26:3c:9b:62:b9:a1:1e:f3:23:0c:af:70:e6:fc:e3:
2a:29:ea:14:08:ca:3c:b3:d1:70:73:97:f7:15:df:1d:fb:31:
c6:3e:d3:12:81:4a:ff:59:28:d5:2b:6e:ed:4b:f3:0e:22:c7:
3e:dc:72:dc:e8:fa:39:36:4f:a2:a3:c9:94:46:36:73:3b:33:
5a:da:5f:e6:c0:15:0a:cd:09:7e:f4:9a:35:97:e6:db:81:48:
31:7b:aa:92:a0:2d:3d:f4:e9:65:41:e0:a4:68:88:ad:b1:5f:
93:fa:f1:d1:98:18:32:1a:f4:bb:e9:18:7c:8d:0f:f7:6e:3d:
41:67:09:34:0f:66:9c:d5:20:ab:5e:82:4a:d7:48:3a:1b:35:
1b:f4:02:6b:73:1b:46:af:a2:f1:0f:af:ff:a9:f8:42:b2:f2:
33:41:93:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:15:56 2025 by rpki-client