Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/7514d6-59de-460e-8e2f-ffcee1533577/1/LZrhAubK20caMKDIWTPgOQvy-co.mft
File: LZrhAubK20caMKDIWTPgOQvy-co.mft (raw, json)
Hash identifier: De7UYtwJ5QSwS7W72d92dLCjLojD7xsd5GHrGIdKdrc=
Subject key identifier: 60:68:C4:49:5A:9E:73:65:4A:DC:6F:53:F5:76:4E:70:F1:97:E2:73
Authority key identifier: 2D:9A:E1:02:E6:CA:DB:47:1A:30:A0:C8:59:33:E0:39:0B:F2:F9:CA
Certificate issuer: /CN=2d9ae102e6cadb471a30a0c85933e0390bf2f9ca
Certificate serial: 0194BCE0C0E25FE973D8B28D8DA7F4CB7E46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LZrhAubK20caMKDIWTPgOQvy-co.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/7514d6-59de-460e-8e2f-ffcee1533577/1/LZrhAubK20caMKDIWTPgOQvy-co.mft
Manifest number: 0A18
Signing time: Fri 31 Jan 2025 15:00:33 +0000
Manifest this update: Fri 31 Jan 2025 15:00:33 +0000
Manifest next update: Sat 01 Feb 2025 15:00:33 +0000
Files and hashes: 1: LZrhAubK20caMKDIWTPgOQvy-co.crl (hash: oZVPENr/06zuJRMvbat7i/fEAxixXAptAeUX3Wa8ofk=)
2: pl2IcfdvWd1nTAPO2kcXwuCa2Cs.roa (hash: 85u+tpWuF05Mbmd2ccACruWRfJ5rpPXoHevfa/3sNY4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:c0:e2:5f:e9:73:d8:b2:8d:8d:a7:f4:cb:7e:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d9ae102e6cadb471a30a0c85933e0390bf2f9ca
Validity
Not Before: Jan 31 15:00:33 2025 GMT
Not After : Feb 1 15:00:33 2025 GMT
Subject: CN=6068c4495a9e73654adc6f53f5764e70f197e273
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:66:95:38:9b:c1:9d:df:78:69:2e:8d:fa:49:
0b:89:de:c3:e6:87:d6:e1:77:a4:cc:5e:e7:bd:e0:
06:3b:a3:4b:b9:32:ce:f4:b4:1e:3e:53:0d:0b:40:
2e:23:83:9f:39:72:2e:82:ad:6f:a8:e0:ec:ea:6c:
91:c5:2b:9b:c7:32:72:0e:20:fd:8c:98:3c:ce:d9:
72:ce:c2:c3:60:88:33:a2:ce:30:18:71:54:65:d0:
62:1b:1c:2a:d9:2c:73:3f:fb:ef:b1:1f:7d:3c:a1:
b4:03:d1:06:fc:67:d0:d7:44:ad:84:ed:51:db:20:
5e:5e:d6:30:2b:87:88:ed:fc:7d:ea:e5:00:8c:2f:
b1:6a:2a:03:37:a5:70:de:51:67:16:e4:c4:0a:e9:
f3:0d:84:36:19:98:ba:33:3d:d0:ef:8d:48:95:41:
ce:a8:26:bb:3a:8e:2c:33:4a:07:a5:9f:61:04:f5:
2a:b2:0c:16:21:aa:4c:a6:fd:8a:26:59:af:94:6c:
aa:60:2a:c7:62:83:6a:be:88:1b:32:cb:c1:af:65:
ff:4e:fc:91:a5:be:e6:90:6a:db:e4:49:ef:8a:62:
0c:e9:be:00:6c:b0:c5:00:50:2d:07:14:d8:fd:8b:
c7:00:e5:8e:8a:ef:f6:6e:47:12:74:c1:76:e1:07:
54:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:68:C4:49:5A:9E:73:65:4A:DC:6F:53:F5:76:4E:70:F1:97:E2:73
X509v3 Authority Key Identifier:
keyid:2D:9A:E1:02:E6:CA:DB:47:1A:30:A0:C8:59:33:E0:39:0B:F2:F9:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LZrhAubK20caMKDIWTPgOQvy-co.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/7514d6-59de-460e-8e2f-ffcee1533577/1/LZrhAubK20caMKDIWTPgOQvy-co.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/7514d6-59de-460e-8e2f-ffcee1533577/1/LZrhAubK20caMKDIWTPgOQvy-co.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:76:2d:f0:39:fe:80:a5:ab:f0:3f:57:f2:b7:79:7c:76:b3:
6c:1a:69:07:cd:00:93:98:6b:24:21:9c:f3:9e:a1:3a:0e:07:
d2:b4:bd:52:32:c6:14:8d:05:2b:2a:d8:b0:77:79:56:24:b1:
2e:7e:33:83:36:cd:c0:cd:a9:22:cc:bb:b8:56:09:36:7f:51:
38:0f:c4:25:16:40:f6:14:a4:ad:18:fb:d7:27:11:ea:88:7a:
13:9d:5c:7e:c7:4d:1a:42:ae:91:fc:5b:be:dd:6f:ba:84:4f:
2d:b8:df:64:0d:1e:5f:a9:38:05:f3:8d:21:28:71:ec:69:1e:
7f:d5:56:70:87:e9:7a:57:8a:6e:db:77:4c:af:7c:28:a9:cf:
e1:38:23:eb:1f:ac:3f:2c:4a:9b:d7:a0:41:e0:b8:eb:d5:6c:
6c:83:42:3d:77:9f:24:75:b0:6b:02:e1:3e:42:c0:e1:67:24:
b4:2d:a1:97:44:41:e3:27:f9:ad:40:bf:38:1a:ba:60:7d:8f:
60:55:19:e7:4c:ba:c1:ff:45:90:c4:4f:67:69:db:71:7d:f9:
25:a4:e0:cf:c5:ff:97:5e:c9:76:0e:44:84:7c:e5:cd:62:96:
f5:2b:e7:98:7f:d3:97:8b:e5:16:89:5b:4e:44:89:fc:a3:2a:
87:82:1f:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:15:07 2025 by rpki-client