Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/4be2d7-9a42-4578-8b8b-90ae6d0c9b33/1/LzJSB9XO4OzqmeRwJFNAe1ZMOco.mft
File: LzJSB9XO4OzqmeRwJFNAe1ZMOco.mft (raw, json)
Hash identifier: pRhHGKTHxuwPxQmAyxdZtXiXlyNBxrOi3Xbih10oFhs=
Subject key identifier: 8C:5E:E2:D0:54:D4:5A:A2:30:71:56:CE:A2:EA:68:BD:6F:87:2D:3F
Authority key identifier: 2F:32:52:07:D5:CE:E0:EC:EA:99:E4:70:24:53:40:7B:56:4C:39:CA
Certificate issuer: /CN=2f325207d5cee0ecea99e4702453407b564c39ca
Certificate serial: 0194BBCEE904846490B8F8452FC1F1BCA2CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LzJSB9XO4OzqmeRwJFNAe1ZMOco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/4be2d7-9a42-4578-8b8b-90ae6d0c9b33/1/LzJSB9XO4OzqmeRwJFNAe1ZMOco.mft
Manifest number: 1426
Signing time: Fri 31 Jan 2025 10:01:26 +0000
Manifest this update: Fri 31 Jan 2025 10:01:26 +0000
Manifest next update: Sat 01 Feb 2025 10:01:26 +0000
Files and hashes: 1: LzJSB9XO4OzqmeRwJFNAe1ZMOco.crl (hash: Fc900TgBYUzd9Mw6FPPi6ONP3+co96vLRDNY4VNYZuM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:e9:04:84:64:90:b8:f8:45:2f:c1:f1:bc:a2:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f325207d5cee0ecea99e4702453407b564c39ca
Validity
Not Before: Jan 31 10:01:26 2025 GMT
Not After : Feb 1 10:01:26 2025 GMT
Subject: CN=8c5ee2d054d45aa2307156cea2ea68bd6f872d3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:7f:05:f7:c5:68:83:29:41:38:ca:b7:48:83:
ff:bf:bb:aa:b7:77:93:49:07:52:2f:ab:2a:93:c9:
b0:21:30:71:7a:0f:ee:99:d8:75:b8:2f:8a:e2:ad:
9b:f6:71:20:06:66:57:b4:a0:78:01:fc:d0:a4:b4:
3c:89:0a:1f:a2:25:a4:1f:61:77:a1:9b:60:0a:a0:
58:75:54:4d:ea:6f:2f:83:b7:83:08:84:a6:b6:9b:
f6:d1:99:8d:53:09:c9:ad:92:dd:a2:e0:78:19:5b:
30:f0:b1:f3:bb:c1:f0:41:2b:5d:bc:8c:04:bd:56:
93:e5:40:68:23:b7:e9:fc:ca:7e:99:a6:ef:0f:f7:
90:a3:f9:54:34:b5:62:f5:53:de:0f:f8:57:2a:11:
db:0c:85:61:69:bf:6f:e4:a8:d1:47:e0:dc:99:3e:
da:4f:16:be:15:05:88:16:37:d1:a0:e8:90:aa:cf:
71:8d:3f:ea:3b:45:63:18:89:09:87:41:3e:f4:35:
58:71:95:24:d0:c8:07:a6:d6:52:77:89:8c:32:9a:
53:6b:db:2a:02:50:e2:07:c5:87:c6:6a:39:fd:06:
43:60:f8:11:fc:ce:88:37:aa:79:c7:c9:b0:ce:90:
13:9f:f1:c9:58:83:9b:d7:3e:95:35:7f:5f:ff:69:
35:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:5E:E2:D0:54:D4:5A:A2:30:71:56:CE:A2:EA:68:BD:6F:87:2D:3F
X509v3 Authority Key Identifier:
keyid:2F:32:52:07:D5:CE:E0:EC:EA:99:E4:70:24:53:40:7B:56:4C:39:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LzJSB9XO4OzqmeRwJFNAe1ZMOco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/4be2d7-9a42-4578-8b8b-90ae6d0c9b33/1/LzJSB9XO4OzqmeRwJFNAe1ZMOco.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/4be2d7-9a42-4578-8b8b-90ae6d0c9b33/1/LzJSB9XO4OzqmeRwJFNAe1ZMOco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:51:c4:2c:a5:65:63:70:7f:82:43:3c:ee:43:27:02:2a:5c:
6f:e9:3b:27:9d:e5:31:bb:b7:64:33:85:14:6a:14:8b:8d:c5:
eb:16:1c:98:03:0c:1f:8f:2b:ce:72:e5:df:8c:c3:11:90:74:
80:97:f4:5c:1e:cf:a7:fe:d8:0d:6e:d0:be:60:21:07:eb:e3:
fc:52:86:97:ea:d0:08:1e:d1:b5:c0:1c:78:2d:55:6e:a3:3a:
f8:b4:00:f5:27:37:36:8c:bd:53:4a:24:57:db:53:e1:79:02:
cc:5e:e8:85:1d:71:bd:b9:1e:87:e8:1b:d1:43:60:8d:88:7c:
b8:fe:2f:b5:af:9f:96:4b:a4:95:6a:83:46:25:d8:d5:22:bd:
fc:83:d0:c6:80:7a:f5:83:dc:05:1e:f8:02:9d:57:d2:f9:e9:
9a:ef:f9:d0:76:55:37:a6:b7:0f:0d:54:09:90:15:5d:cc:1d:
90:b8:ff:f3:55:a3:d7:da:76:d9:2c:76:11:23:c1:92:fa:8a:
95:1a:d9:3c:46:27:c6:bd:86:d9:39:da:2e:2b:10:cb:aa:c9:
72:0e:e9:17:20:6b:2c:13:9b:34:aa:95:95:74:ae:40:b1:a2:
2a:59:fe:3b:eb:e4:c9:48:8f:51:c5:03:46:bf:54:ea:cf:d9:
85:c9:45:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:41:33 2025 by rpki-client