Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/f90d83-02be-4e5f-bd0f-929f106630f1/1/LzE27RCZhYClF9lZiryjPZumZZk.mft
File: LzE27RCZhYClF9lZiryjPZumZZk.mft (raw, json)
Hash identifier: T4qYNYemuRgoQ+kWPtZ6bQvuDm7tNFblpuCEd/HrEL0=
Subject key identifier: 0D:AC:47:6A:53:FE:3D:EF:4E:2D:FB:B3:9E:74:E8:3E:94:7D:77:15
Authority key identifier: 2F:31:36:ED:10:99:85:80:A5:17:D9:59:8A:BC:A3:3D:9B:A6:65:99
Certificate issuer: /CN=2f3136ed10998580a517d9598abca33d9ba66599
Certificate serial: 0194BCE07BE4B3D31A3EE9EBE736B86EE48B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LzE27RCZhYClF9lZiryjPZumZZk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/f90d83-02be-4e5f-bd0f-929f106630f1/1/LzE27RCZhYClF9lZiryjPZumZZk.mft
Manifest number: 0E7B
Signing time: Fri 31 Jan 2025 15:00:15 +0000
Manifest this update: Fri 31 Jan 2025 15:00:15 +0000
Manifest next update: Sat 01 Feb 2025 15:00:15 +0000
Files and hashes: 1: 1-yugL-SGYJzA0SlIwsrWzOp3cgA.roa (hash: O2bNI1scy+7X4n9DPZtywaN+gf/oDuWIcE8taLKp6lk=)
2: LzE27RCZhYClF9lZiryjPZumZZk.crl (hash: ZubCEcDs/uneXWn1x6FcWjoU/ZKtaJN//p5tQjVKjEA=)
3: rTnE_4SSvKLdBmzoX1z2eYDdLlo.roa (hash: ahybXpUR1qe0NeSWLYaG6olTaEIqlXgXDv7V6mdJiXU=)
4: tjGJDt_M-VxsgPS8YmM7UNvHHRo.roa (hash: ByJAYyuv1Y5nwy0y2xRNrrdrD4R0wOXmShNxbo80fvQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:7b:e4:b3:d3:1a:3e:e9:eb:e7:36:b8:6e:e4:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f3136ed10998580a517d9598abca33d9ba66599
Validity
Not Before: Jan 31 15:00:15 2025 GMT
Not After : Feb 1 15:00:15 2025 GMT
Subject: CN=0dac476a53fe3def4e2dfbb39e74e83e947d7715
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:b8:9d:5c:0b:11:45:2f:86:e9:a9:c9:1a:f1:
44:d0:69:04:5f:09:f1:68:06:a2:c8:c3:14:77:94:
00:0b:f8:31:a5:35:45:3c:e1:4e:ff:fd:cc:6d:cf:
86:ec:90:c1:b0:3a:0a:5f:a7:98:13:45:11:26:b6:
bf:bd:41:62:be:ca:cf:5a:60:7f:86:32:29:0f:f0:
b5:b4:6f:22:be:3d:07:23:5a:41:d7:fa:58:0e:41:
15:29:ae:df:f2:3f:7e:1b:9a:07:94:70:31:b6:d1:
bf:ec:c4:5e:96:e7:ce:a5:99:83:78:dc:55:f5:70:
20:5e:3f:0f:70:9d:57:aa:70:a7:bf:c3:eb:cb:ba:
8e:31:ca:7d:e2:75:5f:38:b0:57:45:d7:b4:63:69:
11:58:1f:86:cc:64:69:81:63:85:6f:3c:76:3f:61:
64:eb:8b:ca:68:b2:b4:60:d9:00:68:77:5e:61:b9:
15:5f:2a:5a:3f:0b:74:7c:c8:60:95:80:c8:f5:00:
dc:c1:d8:c0:5c:ab:cd:b8:76:ae:f8:44:10:9d:e2:
19:18:52:11:21:c2:59:e0:bf:d4:b5:41:a6:ef:c0:
86:3d:61:4d:10:a7:3e:c9:b5:b0:7e:e5:72:b0:7d:
0a:c1:24:f8:20:bb:cc:e6:94:d4:fa:11:bd:ab:0e:
92:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:AC:47:6A:53:FE:3D:EF:4E:2D:FB:B3:9E:74:E8:3E:94:7D:77:15
X509v3 Authority Key Identifier:
keyid:2F:31:36:ED:10:99:85:80:A5:17:D9:59:8A:BC:A3:3D:9B:A6:65:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LzE27RCZhYClF9lZiryjPZumZZk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f90d83-02be-4e5f-bd0f-929f106630f1/1/LzE27RCZhYClF9lZiryjPZumZZk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f90d83-02be-4e5f-bd0f-929f106630f1/1/LzE27RCZhYClF9lZiryjPZumZZk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:d8:65:a0:bf:e1:dc:8d:ac:1d:e0:2b:be:4d:c3:b8:c8:e1:
5d:fe:2a:c4:81:38:1d:43:9a:a2:80:32:e0:ad:2e:8d:a0:34:
3a:d0:b8:c4:31:7e:8e:2b:48:e6:c1:01:36:ce:61:26:dc:ed:
a7:3c:c3:04:f9:09:88:59:9a:be:21:2d:59:9d:ef:14:7f:87:
ad:23:a8:16:43:c3:4f:d3:26:43:3c:36:4c:f7:85:33:61:dd:
3a:de:22:75:3c:fa:49:6b:df:38:be:0c:0c:54:ae:c0:50:71:
1c:56:b1:83:a4:31:f3:f7:bb:b8:b8:07:61:c7:be:cc:e8:bc:
4d:fc:f1:bd:1f:38:9f:97:a9:95:56:6c:99:bf:25:04:05:98:
4b:ff:8c:96:17:3d:30:fe:82:6e:d5:f7:75:d3:4d:05:aa:f2:
5f:6b:f5:5f:b5:13:60:ae:90:db:8f:64:8b:69:08:ac:12:42:
d6:7f:81:b8:58:1c:ff:ef:92:92:55:f5:2e:51:ec:14:75:69:
5f:38:3a:46:ee:bb:a2:ab:3e:78:d0:45:91:6b:b1:1b:d9:ba:
61:56:7e:4f:3f:8d:db:d6:71:8d:27:80:f9:1b:e0:4c:6a:41:
30:5a:64:3f:9f:df:3e:91:4b:34:3a:b3:9a:97:5f:f1:9c:7b:
3c:ea:ef:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 09:14:35 2025 by rpki-client