Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/04982c-5ffc-42a8-9879-6e8b34f1976b/1/LAzrgevOhZ9Qko6O0-HwqFERUts.mft
File: LAzrgevOhZ9Qko6O0-HwqFERUts.mft (raw, json)
Hash identifier: 2rTOsYfOsb6m46WDodGMhBeKpalkm+wllKHBKdH7MgI=
Subject key identifier: 5A:E6:A2:E1:C6:27:AF:B8:4D:3D:BF:E8:10:B1:AF:5F:EE:A7:21:23
Authority key identifier: 2C:0C:EB:81:EB:CE:85:9F:50:92:8E:8E:D3:E1:F0:A8:51:11:52:DB
Certificate issuer: /CN=2c0ceb81ebce859f50928e8ed3e1f0a8511152db
Certificate serial: 0194BC04E84BD9779CA0F791621611431220
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LAzrgevOhZ9Qko6O0-HwqFERUts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/04982c-5ffc-42a8-9879-6e8b34f1976b/1/LAzrgevOhZ9Qko6O0-HwqFERUts.mft
Manifest number: 0813
Signing time: Fri 31 Jan 2025 11:00:25 +0000
Manifest this update: Fri 31 Jan 2025 11:00:25 +0000
Manifest next update: Sat 01 Feb 2025 11:00:25 +0000
Files and hashes: 1: LAzrgevOhZ9Qko6O0-HwqFERUts.crl (hash: VPEJOLzyrFfX31M3QgPT4YI1GaB7K/yJv7OHu1mfV+w=)
2: Nw-tf2Fdg1IBaL0ZaEM215Hb70k.roa (hash: D6voi0MuqX48csC8cycT9bMohcrVdXkjR0ufp2F3pwQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:e8:4b:d9:77:9c:a0:f7:91:62:16:11:43:12:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c0ceb81ebce859f50928e8ed3e1f0a8511152db
Validity
Not Before: Jan 31 11:00:25 2025 GMT
Not After : Feb 1 11:00:25 2025 GMT
Subject: CN=5ae6a2e1c627afb84d3dbfe810b1af5feea72123
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:9c:e5:53:cd:8e:57:84:17:59:f9:b4:a6:7c:
7a:9d:1b:ca:8f:c1:75:6b:ed:c3:a2:f0:0e:0f:82:
43:b5:fd:09:32:32:3e:8c:f3:7b:6e:e5:8d:ed:d5:
7b:e7:49:ea:23:98:b6:56:a3:24:16:7e:3d:4a:17:
1a:de:00:9c:0d:84:33:18:08:22:a1:59:8f:ae:ec:
3d:b4:e9:81:f1:41:7d:f2:90:57:87:77:7e:e8:2d:
b5:44:31:d7:05:06:93:5e:ba:cc:d4:28:42:46:de:
2c:2f:8a:3a:65:e2:fc:b0:0d:9d:ea:89:c1:94:e5:
98:5b:44:dc:a9:16:1a:42:66:c3:1f:26:83:b8:c3:
09:a5:6a:87:c6:44:d8:32:43:6d:6d:97:c6:ae:bf:
a2:84:24:06:03:51:97:ac:d0:48:48:63:7a:9b:65:
e0:ab:64:c2:95:1a:84:26:6f:a6:f6:36:c1:73:8c:
3a:19:67:71:c8:c3:5f:cf:bc:80:ec:7b:fa:7a:e8:
48:7b:67:23:ea:39:7e:a6:46:9f:ba:f9:0a:0e:39:
2d:f2:f5:74:67:f2:28:9b:3b:2f:d2:41:d6:80:02:
3c:8e:2d:f1:31:d8:46:55:b3:0a:f1:19:b3:ba:ca:
e0:88:56:7f:50:37:7f:b0:d7:07:41:c6:82:e1:24:
92:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:E6:A2:E1:C6:27:AF:B8:4D:3D:BF:E8:10:B1:AF:5F:EE:A7:21:23
X509v3 Authority Key Identifier:
keyid:2C:0C:EB:81:EB:CE:85:9F:50:92:8E:8E:D3:E1:F0:A8:51:11:52:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LAzrgevOhZ9Qko6O0-HwqFERUts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/04982c-5ffc-42a8-9879-6e8b34f1976b/1/LAzrgevOhZ9Qko6O0-HwqFERUts.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/04982c-5ffc-42a8-9879-6e8b34f1976b/1/LAzrgevOhZ9Qko6O0-HwqFERUts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:cc:55:9c:83:83:b5:54:31:c6:42:41:13:ca:ae:10:eb:5c:
4f:9a:5b:7b:54:dd:64:29:23:56:50:8f:80:7e:9f:f2:99:71:
84:45:6a:c8:4e:a2:f0:e3:ff:92:46:c0:61:2f:74:67:c2:93:
f9:5f:91:b5:d5:51:68:5c:aa:66:69:aa:fc:38:95:ac:fc:80:
3a:4b:16:75:21:4e:c9:77:04:ae:1d:cb:33:09:7a:d9:64:88:
84:e6:db:d0:11:2c:9f:32:88:83:18:f6:f0:a3:65:5b:f3:e1:
28:6b:f6:30:c8:73:57:41:5e:e5:20:73:65:39:ad:15:78:55:
18:99:0d:c9:95:d8:ff:47:47:02:7f:49:8e:f3:d8:86:8d:eb:
fc:88:0f:13:11:92:55:3c:14:ac:bf:98:4e:d8:77:d6:0e:e3:
5b:4e:05:25:b3:41:ff:1e:e4:ba:b6:8b:16:0b:62:ab:e6:bf:
28:b8:3e:25:28:3f:13:5d:d0:83:d7:1d:c0:2d:80:6a:a4:f9:
ea:db:14:4a:a4:02:25:b6:b2:ac:f1:16:0b:18:b9:75:62:7f:
7d:72:42:7a:49:41:f7:49:f0:b4:5c:b5:84:ff:02:78:60:cf:
85:6e:ee:9c:21:33:40:ec:69:b3:bc:6e:78:65:67:be:27:5e:
54:f1:48:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:23:14 2025 by rpki-client