Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/9307f6-1458-432f-9915-ca4ed8097970/1/LPAizk3IHwOzswcwpsI-rzQuzF4.mft
File: LPAizk3IHwOzswcwpsI-rzQuzF4.mft (raw, json)
Hash identifier: /nEunDzPuoCbtEY5qI0PTdmfpEWYctyZmTClYdwmRKg=
Subject key identifier: 64:E2:7E:5E:1F:BA:ED:CB:4C:DC:46:3E:4A:05:8D:D4:AC:E5:9C:92
Authority key identifier: 2C:F0:22:CE:4D:C8:1F:03:B3:B3:07:30:A6:C2:3E:AF:34:2E:CC:5E
Certificate issuer: /CN=2cf022ce4dc81f03b3b30730a6c23eaf342ecc5e
Certificate serial: 0194BC731A88D5071C83CC66FA4157F06747
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LPAizk3IHwOzswcwpsI-rzQuzF4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/9307f6-1458-432f-9915-ca4ed8097970/1/LPAizk3IHwOzswcwpsI-rzQuzF4.mft
Manifest number: 094B
Signing time: Fri 31 Jan 2025 13:00:47 +0000
Manifest this update: Fri 31 Jan 2025 13:00:47 +0000
Manifest next update: Sat 01 Feb 2025 13:00:47 +0000
Files and hashes: 1: LPAizk3IHwOzswcwpsI-rzQuzF4.crl (hash: R0r+Nw9qa0FPg4uI+7WGcFFzySBqQgRwzocd5oXB2KY=)
2: SiSRrPcHelaVZsbMdPyYnFpcX7g.roa (hash: MiZDViUeplCOeEov/OOx4T8K/9EA6SimsIwRAIFKwms=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:1a:88:d5:07:1c:83:cc:66:fa:41:57:f0:67:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cf022ce4dc81f03b3b30730a6c23eaf342ecc5e
Validity
Not Before: Jan 31 13:00:47 2025 GMT
Not After : Feb 1 13:00:47 2025 GMT
Subject: CN=64e27e5e1fbaedcb4cdc463e4a058dd4ace59c92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:d7:a7:7a:cc:d2:8c:b3:14:be:4f:0f:a1:05:
fa:f1:d1:1f:ec:0b:6a:8d:d4:36:67:3d:0c:13:9e:
85:3b:5e:18:2d:28:f1:99:75:f2:be:bd:7a:ad:b4:
60:4c:0e:d2:2e:78:ce:1b:dc:81:69:51:f4:f4:37:
1c:95:d7:fe:3c:f8:6b:94:71:39:03:6a:09:06:3b:
bf:46:f9:cb:34:53:68:c1:08:21:2e:6b:49:1a:b1:
c3:75:43:1c:ba:f2:a2:dd:17:4d:bf:36:63:27:d8:
eb:d2:8e:a1:62:b9:2a:b1:06:53:cd:b2:79:9e:47:
e9:34:76:a2:bd:c9:51:f2:8d:0b:2e:d4:12:a0:bf:
23:74:ef:ab:a3:d5:79:f6:b8:37:81:d5:7b:fe:08:
a1:65:c2:4f:48:61:0f:9f:86:55:f5:ed:04:36:13:
48:5d:a1:4c:54:c3:03:65:b6:7f:5e:bf:e1:9e:c7:
8f:e9:1d:e7:1c:e0:45:62:c2:09:d6:4f:e3:26:4f:
17:dc:e6:37:91:d8:3f:e0:2c:73:8b:30:e5:15:b2:
63:38:27:97:54:cb:ab:9a:51:4b:60:9c:4f:41:d3:
e0:73:84:73:6e:89:db:12:c6:15:b1:e3:46:1e:8a:
25:78:68:57:0b:aa:dc:7e:c5:1b:fe:e8:bd:58:8d:
9b:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:E2:7E:5E:1F:BA:ED:CB:4C:DC:46:3E:4A:05:8D:D4:AC:E5:9C:92
X509v3 Authority Key Identifier:
keyid:2C:F0:22:CE:4D:C8:1F:03:B3:B3:07:30:A6:C2:3E:AF:34:2E:CC:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LPAizk3IHwOzswcwpsI-rzQuzF4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/9307f6-1458-432f-9915-ca4ed8097970/1/LPAizk3IHwOzswcwpsI-rzQuzF4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/9307f6-1458-432f-9915-ca4ed8097970/1/LPAizk3IHwOzswcwpsI-rzQuzF4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:d3:93:95:6d:ef:cc:e0:a4:f8:cb:23:cd:24:2d:82:6d:b9:
a1:24:08:77:49:d2:79:9f:07:29:28:11:63:6d:f4:6f:7b:2e:
b4:d5:e0:9c:31:76:b9:6e:85:18:bf:4f:d1:d2:ed:63:0e:8e:
96:67:17:6f:6c:1e:8f:57:27:f7:34:10:3b:08:49:09:d8:95:
2f:82:de:cc:95:5e:39:72:82:22:34:d9:0d:9a:d4:f7:af:30:
77:de:16:b0:fb:bb:9b:f6:01:f3:6d:76:f7:c3:8f:12:55:38:
83:3f:33:d0:a9:07:4c:36:86:c0:7c:bc:b9:ad:da:5f:b7:f9:
81:d3:89:b2:e6:6e:26:0d:30:bb:17:a7:41:31:da:31:66:9d:
9f:5b:66:ff:9a:b7:9d:f6:21:ec:2c:8e:49:f7:83:a9:6b:b2:
cd:dc:14:d7:34:b1:33:1f:62:6b:54:70:c4:ca:25:2e:2c:ff:
0d:57:e3:47:cc:53:a8:72:0b:c5:af:fa:b1:2c:89:40:fd:bd:
c0:ca:3e:14:52:89:a2:56:14:04:f7:8a:ec:b8:c6:1f:54:ed:
b7:bd:a6:e1:42:88:1e:35:77:41:ba:7d:a0:4a:26:b7:1c:28:
95:d5:c1:1f:6b:f6:ba:e7:3d:f6:e0:13:ae:7d:ee:4b:cf:ad:
04:f2:d5:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:06:55 2025 by rpki-client