Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/1c0ea6-a6df-4522-8bc9-8c511698fcae/1/l-z7s1UL8sdnTMUunLvzqTP153g.mft
File: l-z7s1UL8sdnTMUunLvzqTP153g.mft (raw, json)
Hash identifier: Wa95hFMBcSnyLgX7L7CE8+KAQ63sKti8+PklmSfCENg=
Subject key identifier: 41:9C:09:1B:61:44:5F:23:14:21:6C:F5:F0:5A:C6:87:A6:E7:AA:1A
Authority key identifier: 97:EC:FB:B3:55:0B:F2:C7:67:4C:C5:2E:9C:BB:F3:A9:33:F5:E7:78
Certificate issuer: /CN=97ecfbb3550bf2c7674cc52e9cbbf3a933f5e778
Certificate serial: 0194BBCE524E037623E8B496111EC8CDBA93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l-z7s1UL8sdnTMUunLvzqTP153g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/1c0ea6-a6df-4522-8bc9-8c511698fcae/1/l-z7s1UL8sdnTMUunLvzqTP153g.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 10:00:48 +0000
Manifest this update: Fri 31 Jan 2025 10:00:48 +0000
Manifest next update: Sat 01 Feb 2025 10:00:48 +0000
Files and hashes: 1: l-z7s1UL8sdnTMUunLvzqTP153g.crl (hash: 0Ka/Rbckl0GvfPCLd3idQ0CTqDyDembq/lm/rXHgVqg=)
2: lz1Zu-7Dd1zohtmSo2B7eoc-JLk.roa (hash: 4nM0pH6w4uGyHRxAYln0YQ8h8FqFvJIZzMm3lqAMtRM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:52:4e:03:76:23:e8:b4:96:11:1e:c8:cd:ba:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97ecfbb3550bf2c7674cc52e9cbbf3a933f5e778
Validity
Not Before: Jan 31 10:00:48 2025 GMT
Not After : Feb 1 10:00:48 2025 GMT
Subject: CN=419c091b61445f2314216cf5f05ac687a6e7aa1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:de:5d:da:ec:f4:94:ef:03:53:d5:38:1b:aa:
eb:c9:3c:04:02:ef:96:93:50:be:3c:c4:28:c3:c1:
92:81:0b:bc:51:4f:69:5a:be:90:9c:d6:c0:8c:f7:
58:bd:05:4c:d6:3c:b5:b7:09:ee:5f:27:02:2c:99:
9e:da:05:7b:76:50:6f:71:44:13:fe:b7:cd:88:48:
e7:af:b2:ae:ca:ee:39:e8:32:19:e6:b0:27:29:0e:
63:a9:b3:72:e1:7a:12:79:59:72:7d:74:c6:6c:87:
b0:9b:65:d6:e0:1a:8c:13:21:b5:49:90:23:c6:56:
ef:66:ef:4c:af:b1:cd:bd:ef:ac:7a:0c:de:94:7f:
25:3c:b2:10:9b:96:72:d2:22:e3:54:33:9d:2d:f9:
6b:9d:17:a0:dd:0f:a4:20:16:49:83:e5:e7:8f:e8:
51:99:c9:76:2b:5a:b9:d7:c0:f3:6e:59:90:80:28:
dc:20:43:4e:3f:54:36:04:10:8c:d8:27:2d:78:a8:
fc:1e:db:3c:17:f3:f5:a8:01:dd:e0:18:45:8f:0c:
82:94:e0:09:4e:46:74:7b:7c:fc:cd:09:b2:76:f7:
87:29:ad:be:12:8a:91:b2:54:92:b6:07:ec:b1:a8:
d6:98:fd:ec:ed:d5:91:c7:f3:52:c1:39:5f:c8:7e:
93:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:9C:09:1B:61:44:5F:23:14:21:6C:F5:F0:5A:C6:87:A6:E7:AA:1A
X509v3 Authority Key Identifier:
keyid:97:EC:FB:B3:55:0B:F2:C7:67:4C:C5:2E:9C:BB:F3:A9:33:F5:E7:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l-z7s1UL8sdnTMUunLvzqTP153g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/1c0ea6-a6df-4522-8bc9-8c511698fcae/1/l-z7s1UL8sdnTMUunLvzqTP153g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/1c0ea6-a6df-4522-8bc9-8c511698fcae/1/l-z7s1UL8sdnTMUunLvzqTP153g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:40:0e:70:30:4c:f8:0f:02:20:d5:08:eb:38:c8:57:f9:b0:
f6:57:cf:3a:9b:9e:0c:ef:b4:39:41:bb:24:ea:3d:71:d1:08:
eb:dd:cc:96:46:47:1e:48:5f:5a:56:45:cb:b3:8f:53:33:a2:
43:cf:46:45:1d:c1:10:af:56:7a:35:12:1d:77:da:f1:5a:b5:
58:d4:52:03:3b:16:66:3c:8d:c9:22:de:0c:2c:a7:44:1e:07:
1c:eb:78:7a:ac:58:94:66:36:6e:7b:90:21:19:f1:72:c6:c5:
2c:2a:eb:c5:d0:af:13:15:1b:0e:1e:3a:f5:2d:85:28:0a:df:
72:aa:77:3f:9f:66:50:05:4e:4e:e5:c3:14:f1:2e:ef:40:03:
84:1b:67:37:aa:4c:b7:2f:d6:f6:5f:03:bf:c9:99:9a:cf:d6:
f6:d6:37:30:fe:43:2f:f7:0d:41:f5:92:00:89:6e:75:9a:41:
5d:7b:d4:6c:33:55:39:9c:71:60:9e:84:ab:d2:37:5e:02:46:
e0:df:18:5c:c8:79:d0:71:68:a7:92:40:b9:55:c5:1c:2f:82:
50:0d:1d:53:e7:98:6e:fb:18:47:65:5b:72:ec:00:da:a3:77:
cb:88:d5:e9:b7:e6:ab:7f:1c:49:d0:ef:63:8e:48:bc:41:d6:
f5:53:5d:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:49:41 2025 by rpki-client