Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/cd4350-be74-47e0-96b3-b0db2eaa97ed/1/lzWpTzFUbUN7iXIOhEsvEqWr8mg.mft
File: lzWpTzFUbUN7iXIOhEsvEqWr8mg.mft (raw, json)
Hash identifier: TgoonuyttZDYWxi/QLfyJ9jSD/s0Fpp0C6jn0wIecic=
Subject key identifier: E5:09:B2:36:2B:23:DB:16:56:01:20:90:73:47:13:85:68:30:8D:ED
Authority key identifier: 97:35:A9:4F:31:54:6D:43:7B:89:72:0E:84:4B:2F:12:A5:AB:F2:68
Certificate issuer: /CN=9735a94f31546d437b89720e844b2f12a5abf268
Certificate serial: 0194BC04DA1D04215888D75896168B6FFACC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lzWpTzFUbUN7iXIOhEsvEqWr8mg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/cd4350-be74-47e0-96b3-b0db2eaa97ed/1/lzWpTzFUbUN7iXIOhEsvEqWr8mg.mft
Manifest number: 095C
Signing time: Fri 31 Jan 2025 11:00:22 +0000
Manifest this update: Fri 31 Jan 2025 11:00:22 +0000
Manifest next update: Sat 01 Feb 2025 11:00:22 +0000
Files and hashes: 1: K_2uusZ-ceVYTyxoJbEaCXUaJZ8.roa (hash: ECfU3dqUiHJoycwQ/ZQhx1FlZVv9NEnP+CXvi3oehN0=)
2: lzWpTzFUbUN7iXIOhEsvEqWr8mg.crl (hash: xulX0NMpEf6AmyJSoqtRwyx8MBVf6oPYxoAEjn0Z1dc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:da:1d:04:21:58:88:d7:58:96:16:8b:6f:fa:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9735a94f31546d437b89720e844b2f12a5abf268
Validity
Not Before: Jan 31 11:00:22 2025 GMT
Not After : Feb 1 11:00:22 2025 GMT
Subject: CN=e509b2362b23db16560120907347138568308ded
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:2c:8f:8c:9f:5d:bf:a1:22:7b:fc:4d:7e:a8:
15:9b:6d:ff:ad:5f:76:52:64:2c:98:1a:1c:7f:03:
65:20:eb:77:29:36:c3:94:9a:76:95:3f:2a:aa:11:
58:30:14:61:30:ea:87:e8:03:ff:c3:f9:f4:ae:7d:
26:25:3d:b7:04:17:22:ad:c1:91:f8:78:a2:00:c4:
52:bc:97:8a:4e:f6:94:f3:a7:ec:e9:ca:57:43:16:
0e:3f:28:6a:fa:97:b4:9f:da:6c:35:fa:ae:22:76:
d4:9a:df:04:b4:d6:aa:48:82:63:fe:fe:14:32:0d:
91:a7:e2:a6:2a:6c:0d:cd:b9:18:4f:c3:21:00:41:
c1:53:ce:3c:75:70:b3:5b:1d:d1:53:9f:a2:ff:36:
3d:6a:a0:f4:f1:bf:bb:5d:d0:34:32:87:e7:1b:57:
50:2b:90:6d:ff:1a:40:94:55:91:c6:61:f0:4d:7b:
da:5e:a7:87:56:ce:3b:d0:b5:8b:12:bf:d3:9b:a1:
7c:60:9b:70:56:88:ca:6d:a8:c9:ca:8e:ad:68:8f:
71:1e:e1:4b:da:6e:18:ae:6e:9f:3f:ed:08:ed:a4:
9d:6f:7d:26:d8:1a:09:c8:9c:36:8b:c3:0d:ac:99:
ba:8b:10:f1:54:04:22:54:42:d4:48:88:56:fa:a0:
ca:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:09:B2:36:2B:23:DB:16:56:01:20:90:73:47:13:85:68:30:8D:ED
X509v3 Authority Key Identifier:
keyid:97:35:A9:4F:31:54:6D:43:7B:89:72:0E:84:4B:2F:12:A5:AB:F2:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lzWpTzFUbUN7iXIOhEsvEqWr8mg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/cd4350-be74-47e0-96b3-b0db2eaa97ed/1/lzWpTzFUbUN7iXIOhEsvEqWr8mg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/cd4350-be74-47e0-96b3-b0db2eaa97ed/1/lzWpTzFUbUN7iXIOhEsvEqWr8mg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:d2:7b:19:f6:5a:fc:4c:c0:b5:73:f6:e2:52:dc:e9:a4:1a:
61:ab:a5:85:bf:54:48:a3:da:43:0f:da:b2:51:ca:07:f1:a4:
39:f8:1e:c0:f6:ff:de:f4:d8:e4:05:67:f7:c6:81:38:23:b2:
92:f0:07:3e:9f:17:1e:f0:e1:23:3f:2c:db:f1:03:68:83:e2:
f2:77:b2:1b:72:35:c2:32:e6:2a:f9:44:8a:0c:25:4f:68:cd:
28:01:09:2f:50:cc:e3:e4:69:fe:b5:b9:cc:2f:ca:70:f6:bf:
ff:b1:f8:38:3b:69:81:ab:e7:2f:f0:2d:c2:4d:4b:c1:e2:63:
b3:79:73:3c:0e:20:11:cb:86:26:d8:c0:bc:60:33:ac:21:81:
11:c0:1b:a1:7e:9d:30:85:07:ff:cd:d4:12:4f:25:77:83:6f:
18:03:39:6a:b1:8a:7e:60:43:9c:55:f2:68:4b:d5:b7:03:15:
d1:f7:68:87:38:3d:12:0c:81:ca:b0:ac:08:a8:f4:93:a7:45:
e3:5b:8d:91:97:37:51:f5:bc:61:49:2b:2d:da:49:f3:7b:27:
62:75:dd:e6:8c:d2:fe:0b:f0:6c:bb:e9:84:0c:ce:56:e3:88:
7b:56:48:4c:56:26:b5:46:02:a8:bf:f0:5c:f4:07:d3:c4:9b:
87:4f:cf:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:43:11 2025 by rpki-client