Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/4b622e-f5a1-4c2c-8c77-6f71cad16f96/1/Lz_LZCXVmOS4ewSRez75UJ47VsA.mft
File: Lz_LZCXVmOS4ewSRez75UJ47VsA.mft (raw, json)
Hash identifier: vcnCDC0d76rp2Cgm+U/jtColFCXsWSAm7fQXMeGZFgw=
Subject key identifier: BC:10:20:45:E6:CB:51:B8:D8:46:BF:93:7E:56:45:26:DF:DF:94:18
Authority key identifier: 2F:3F:CB:64:25:D5:98:E4:B8:7B:04:91:7B:3E:F9:50:9E:3B:56:C0
Certificate issuer: /CN=2f3fcb6425d598e4b87b04917b3ef9509e3b56c0
Certificate serial: 0194BCA9D19BD7CCB3F8C3AEC550D1C8E869
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lz_LZCXVmOS4ewSRez75UJ47VsA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/4b622e-f5a1-4c2c-8c77-6f71cad16f96/1/Lz_LZCXVmOS4ewSRez75UJ47VsA.mft
Manifest number: 0733
Signing time: Fri 31 Jan 2025 14:00:33 +0000
Manifest this update: Fri 31 Jan 2025 14:00:33 +0000
Manifest next update: Sat 01 Feb 2025 14:00:33 +0000
Files and hashes: 1: 2YmJTcAs1uemHQPUBr03G1oF2-o.roa (hash: pPzIg/QViF6nnNM/CzGYm2r3D8l+qUVLVDXD+71JZMM=)
2: Lz_LZCXVmOS4ewSRez75UJ47VsA.crl (hash: yd1xns2s/Hhj6kog9tNnUA1mDJJ188JYHOK7uwydaYY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:d1:9b:d7:cc:b3:f8:c3:ae:c5:50:d1:c8:e8:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f3fcb6425d598e4b87b04917b3ef9509e3b56c0
Validity
Not Before: Jan 31 14:00:33 2025 GMT
Not After : Feb 1 14:00:33 2025 GMT
Subject: CN=bc102045e6cb51b8d846bf937e564526dfdf9418
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:1e:3b:50:3d:3b:83:9c:c6:c9:dc:a5:89:ab:
23:e2:e5:ed:ff:37:7c:90:02:ca:08:5a:7a:cd:00:
80:02:a7:61:3a:82:06:dd:e3:54:cf:9c:28:aa:6f:
da:88:92:7b:cb:7c:b3:95:fe:95:0c:eb:c4:32:97:
95:23:d2:92:8d:fa:22:e5:05:46:11:a7:7f:54:67:
ac:aa:36:39:e7:72:6a:99:74:f8:fd:76:cb:52:8d:
f5:61:ce:12:5e:cd:26:ba:8e:d1:d6:81:0b:21:60:
43:0f:84:55:8b:b9:41:91:11:5d:7d:74:19:9d:72:
3f:71:06:3f:85:ab:2a:87:35:78:ec:8b:7a:91:1e:
33:c7:aa:99:69:b7:c8:92:e6:fa:04:bd:b4:ec:4a:
bb:29:81:f4:88:95:aa:9a:ce:a8:cf:2e:f0:44:d6:
fc:b2:40:22:93:bf:7e:39:ef:c1:0c:8b:42:49:1a:
35:af:33:97:43:44:89:e9:4c:41:d9:e1:c6:ab:a2:
1c:70:35:c5:77:3f:f4:7a:5b:28:72:f7:00:cd:57:
f0:ba:bb:84:10:a1:8c:7c:28:45:4d:8e:30:8a:02:
1a:fc:1d:b5:ff:b6:fa:c4:5d:60:57:0e:47:ba:65:
31:9d:be:65:cf:b2:0b:e5:41:a9:b5:7f:93:30:3a:
25:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:10:20:45:E6:CB:51:B8:D8:46:BF:93:7E:56:45:26:DF:DF:94:18
X509v3 Authority Key Identifier:
keyid:2F:3F:CB:64:25:D5:98:E4:B8:7B:04:91:7B:3E:F9:50:9E:3B:56:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lz_LZCXVmOS4ewSRez75UJ47VsA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/4b622e-f5a1-4c2c-8c77-6f71cad16f96/1/Lz_LZCXVmOS4ewSRez75UJ47VsA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/4b622e-f5a1-4c2c-8c77-6f71cad16f96/1/Lz_LZCXVmOS4ewSRez75UJ47VsA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:f0:98:97:c8:d5:b7:b0:b2:e5:b0:dd:fc:dc:e8:70:19:89:
73:9f:e0:0c:af:c9:72:fe:d4:4e:8c:09:62:59:74:ff:01:51:
f4:3b:3a:6b:ff:05:38:56:ed:be:bc:4d:91:a8:f4:9e:9c:36:
54:7e:78:26:32:8b:ab:77:e6:57:8a:c5:fc:04:b9:18:c2:56:
76:b3:05:37:39:3e:04:76:06:1d:57:96:40:49:06:d2:df:b9:
f0:b4:3f:e6:39:42:6c:a9:64:27:10:5d:c1:df:55:d9:73:f1:
17:4b:18:01:d9:bf:ce:d4:15:50:ee:14:47:65:46:eb:24:da:
72:45:00:ef:67:7e:9b:b2:c7:82:26:1d:c5:bf:73:0d:e5:c2:
02:41:c8:b0:60:c1:6a:e7:73:28:a0:4c:9a:0f:fe:32:72:59:
28:cd:a1:77:f3:d5:d8:d6:e4:89:f9:ca:79:ee:71:8c:1a:80:
c3:32:71:61:d8:e6:19:81:10:d1:0f:78:80:ca:27:ae:af:f8:
ef:59:58:91:20:10:c5:c1:2a:e8:07:25:90:73:06:ba:43:df:
ef:86:cc:c2:1a:50:86:c1:f3:64:8d:5b:dc:00:d4:78:57:98:
43:a5:84:bb:37:27:1f:6d:67:a4:43:de:da:aa:ac:f6:62:fa:
28:99:aa:d8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qdGb18yz+MOuxVDRyOhpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmM2ZjYjY0MjVkNTk4ZTRiODdiMDQ5MTdiM2VmOTUwOWUz
YjU2YzAwHhcNMjUwMTMxMTQwMDMzWhcNMjUwMjAxMTQwMDMzWjAzMTEwLwYDVQQD
EyhiYzEwMjA0NWU2Y2I1MWI4ZDg0NmJmOTM3ZTU2NDUyNmRmZGY5NDE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxh47UD07g5zGydyliasj4uXt/zd8
kALKCFp6zQCAAqdhOoIG3eNUz5woqm/aiJJ7y3yzlf6VDOvEMpeVI9KSjfoi5QVG
Ead/VGesqjY553JqmXT4/XbLUo31Yc4SXs0muo7R1oELIWBDD4RVi7lBkRFdfXQZ
nXI/cQY/hasqhzV47It6kR4zx6qZabfIkub6BL207Eq7KYH0iJWqms6ozy7wRNb8
skAik79+Oe/BDItCSRo1rzOXQ0SJ6UxB2eHGq6IccDXFdz/0elsocvcAzVfwuruE
EKGMfChFTY4wigIa/B21/7b6xF1gVw5HumUxnb5lz7IL5UGptX+TMDolTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLwQIEXmy1G42Ea/k35WRSbf35QYMB8GA1UdIwQY
MBaAFC8/y2Ql1ZjkuHsEkXs++VCeO1bAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTHpfTFpDWFZtT1M0ZXdTUmV6NzVVSjQ3VnNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC80YjYyMmUtZjVhMS00YzJjLThjNzct
NmY3MWNhZDE2Zjk2LzEvTHpfTFpDWFZtT1M0ZXdTUmV6NzVVSjQ3VnNBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC80YjYyMmUtZjVhMS00YzJjLThjNzctNmY3MWNhZDE2Zjk2
LzEvTHpfTFpDWFZtT1M0ZXdTUmV6NzVVSjQ3VnNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATPCYl8jV
t7Cy5bDd/NzocBmJc5/gDK/Jcv7UTowJYll0/wFR9Ds6a/8FOFbtvrxNkaj0npw2
VH54JjKLq3fmV4rF/AS5GMJWdrMFNzk+BHYGHVeWQEkG0t+58LQ/5jlCbKlkJxBd
wd9V2XPxF0sYAdm/ztQVUO4UR2VG6yTackUA72d+m7LHgiYdxb9zDeXCAkHIsGDB
audzKKBMmg/+MnJZKM2hd/PV2NbkifnKee5xjBqAwzJxYdjmGYEQ0Q94gMonrq/4
71lYkSAQxcEq6AclkHMGukPf74bMwhpQhsHzZI1b3ADUeFeYQ6WEuzcnH21npEPe
2qqs9mL6KJmq2A==
-----END CERTIFICATE-----
Generated at Thu Apr 24 19:04:44 2025 by rpki-client