Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/d520db-bdf8-4f27-8dff-8c130e6841db/1/LOKZUFiz3prtI6Yff7e1t7GTmEo.mft
File: LOKZUFiz3prtI6Yff7e1t7GTmEo.mft (raw, json)
Hash identifier: Ib2zdqJ0Wmet8oeOy3303PE+h0fKO1Mq48PmoLlcbW0=
Subject key identifier: 1B:39:17:62:7E:BB:5B:6D:E5:5A:6E:54:D8:2D:13:95:56:8C:7D:01
Authority key identifier: 2C:E2:99:50:58:B3:DE:9A:ED:23:A6:1F:7F:B7:B5:B7:B1:93:98:4A
Certificate issuer: /CN=2ce2995058b3de9aed23a61f7fb7b5b7b193984a
Certificate serial: 0194BCA9C73B402E4BB9586B6779FE620DFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LOKZUFiz3prtI6Yff7e1t7GTmEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/d520db-bdf8-4f27-8dff-8c130e6841db/1/LOKZUFiz3prtI6Yff7e1t7GTmEo.mft
Manifest number: 0B21
Signing time: Fri 31 Jan 2025 14:00:30 +0000
Manifest this update: Fri 31 Jan 2025 14:00:30 +0000
Manifest next update: Sat 01 Feb 2025 14:00:30 +0000
Files and hashes: 1: 7x1Ss4505QNa0fMVELtO8LmLJeM.roa (hash: 9SZiDlSiFrfDTptEJc86ZTB/oJuky1dBcaDe8vDIhaU=)
2: LOKZUFiz3prtI6Yff7e1t7GTmEo.crl (hash: +hJrRAZdO9lJ9b0xGEj5Dshsc/ycGV2mNWQkMAbvNmA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:c7:3b:40:2e:4b:b9:58:6b:67:79:fe:62:0d:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ce2995058b3de9aed23a61f7fb7b5b7b193984a
Validity
Not Before: Jan 31 14:00:30 2025 GMT
Not After : Feb 1 14:00:30 2025 GMT
Subject: CN=1b3917627ebb5b6de55a6e54d82d1395568c7d01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:08:c5:1a:7f:0d:2b:c3:80:e0:55:a2:6a:8e:
dc:84:ec:6b:68:00:59:95:f3:30:de:39:3c:9d:6f:
cc:65:54:5f:c6:6e:69:bd:82:bb:71:e0:a7:9a:7b:
e8:d5:c0:30:9c:ec:5e:d4:19:fc:7a:09:41:25:49:
66:cf:ba:8d:bb:ac:70:87:76:08:93:23:2d:c3:93:
f3:d6:d9:01:fa:76:0d:63:9c:9f:b3:ea:ed:17:94:
2e:09:58:6e:c5:f1:2c:06:37:7d:a6:66:15:db:60:
1f:04:01:cc:68:f9:51:59:4e:b7:27:df:2f:e6:3a:
c8:84:32:51:ec:3d:fd:6a:0f:9b:9c:ed:47:08:57:
e0:17:dc:42:4f:f7:a2:a2:37:39:05:f3:67:4a:7d:
0e:38:f3:31:fd:58:c6:88:77:6f:1c:0b:e9:a5:79:
6d:c4:1b:ee:73:e1:f1:76:28:83:d9:ef:59:b6:4d:
9a:d7:a7:27:a4:14:ab:ae:06:10:a6:1b:5c:c4:79:
f9:68:27:9c:41:25:a9:73:b7:51:ea:c3:6e:45:eb:
33:e8:4e:e5:b0:29:db:53:a9:bd:e2:8f:56:a9:c5:
eb:cc:02:f7:4f:f2:7a:3d:31:19:86:9a:72:55:b9:
dc:b3:7a:a2:8f:89:20:75:45:f6:d2:80:2f:5c:10:
a3:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:39:17:62:7E:BB:5B:6D:E5:5A:6E:54:D8:2D:13:95:56:8C:7D:01
X509v3 Authority Key Identifier:
keyid:2C:E2:99:50:58:B3:DE:9A:ED:23:A6:1F:7F:B7:B5:B7:B1:93:98:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LOKZUFiz3prtI6Yff7e1t7GTmEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/d520db-bdf8-4f27-8dff-8c130e6841db/1/LOKZUFiz3prtI6Yff7e1t7GTmEo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/d520db-bdf8-4f27-8dff-8c130e6841db/1/LOKZUFiz3prtI6Yff7e1t7GTmEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:9f:d9:10:57:db:74:fb:98:f8:67:45:4b:e5:5e:4a:d2:8a:
f1:a2:69:d3:50:8a:05:31:aa:7c:c8:aa:cb:f4:86:db:83:3a:
38:72:ab:13:82:8c:68:3c:ff:ea:03:58:e1:7c:06:c7:e1:c0:
6c:02:d6:b5:48:8d:81:e2:67:c0:cb:86:54:06:15:07:41:14:
4a:12:8f:9d:08:41:9b:05:2d:de:12:fb:aa:94:f2:86:55:bf:
4e:1e:3b:eb:8a:d4:44:4a:be:f7:0d:bd:33:93:10:31:07:ed:
9a:8f:c1:bb:93:f0:a4:48:12:8e:5a:bc:41:a7:21:e5:b8:6b:
0e:59:bb:81:b6:c9:ec:80:25:a2:7f:d0:6a:d0:fe:ec:58:e2:
09:c4:d5:af:67:f8:5c:b4:e9:c4:ee:27:7e:c6:48:d6:bb:ef:
c8:43:7b:fc:c0:2a:82:52:7f:06:71:7c:0c:b3:8d:d4:e1:85:
a4:23:e5:47:70:a4:50:33:df:22:e7:b1:35:02:20:2f:dc:dc:
01:e4:87:c8:00:55:e2:46:3f:00:9d:e9:9d:5a:e9:87:a2:eb:
ab:ac:14:fd:25:a6:77:56:76:d0:e7:d1:90:6d:b9:c7:b6:bf:
f4:00:bc:01:6f:6b:a6:c0:93:b5:b6:8f:ca:3d:6d:79:d5:fc:
3e:83:4f:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:42:17 2025 by rpki-client