Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/2f4605-356a-4af6-b15d-c42f9abf1477/1/lzvsM65zjJiViBnGwTuzNe40q0w.mft
File: lzvsM65zjJiViBnGwTuzNe40q0w.mft (raw, json)
Hash identifier: 6sRThRa9Q30AbUuhD0J/ndvrR0XzX24edbJNSK05nt4=
Subject key identifier: 08:AD:FC:4B:45:BB:AF:D7:21:C0:1E:42:63:EE:86:54:3D:BE:4F:CA
Authority key identifier: 97:3B:EC:33:AE:73:8C:98:95:88:19:C6:C1:3B:B3:35:EE:34:AB:4C
Certificate issuer: /CN=973bec33ae738c98958819c6c13bb335ee34ab4c
Certificate serial: 0194BC3C8BBC2D683FDD26E3003B60A51498
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lzvsM65zjJiViBnGwTuzNe40q0w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/2f4605-356a-4af6-b15d-c42f9abf1477/1/lzvsM65zjJiViBnGwTuzNe40q0w.mft
Manifest number: 0AD1
Signing time: Fri 31 Jan 2025 12:01:11 +0000
Manifest this update: Fri 31 Jan 2025 12:01:11 +0000
Manifest next update: Sat 01 Feb 2025 12:01:11 +0000
Files and hashes: 1: 04AAIWN8CdjN6G01O3D_l5i-Jvk.roa (hash: Mv4GpM35beFDVPlXDkHbY9A9imQnPo9JK9qNbOoM+YU=)
2: lzvsM65zjJiViBnGwTuzNe40q0w.crl (hash: 6oaddeoXvMfRT1/7Ac66hVx6GJGG8v9IFKq3iKQlYHk=)
3: tuawZTEX7vHBTQMJyQg0WD-oypg.roa (hash: IFKGL2W7O7px/Tqsp660BBZcbUWDZWgLugycTaSmqvQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:8b:bc:2d:68:3f:dd:26:e3:00:3b:60:a5:14:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=973bec33ae738c98958819c6c13bb335ee34ab4c
Validity
Not Before: Jan 31 12:01:11 2025 GMT
Not After : Feb 1 12:01:11 2025 GMT
Subject: CN=08adfc4b45bbafd721c01e4263ee86543dbe4fca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:13:3c:d8:c0:40:7e:5f:51:fa:5a:22:a0:b0:
71:94:fb:c8:b5:94:eb:1d:30:7d:1c:5f:43:e9:54:
71:45:99:af:5a:8f:17:f4:9c:2b:db:5a:77:6e:e8:
e5:36:20:4f:ae:5f:c9:7b:75:0b:a6:65:e1:13:20:
70:63:0f:01:2e:4f:cc:c6:59:8a:b6:3c:83:06:7a:
45:0d:8e:31:d9:8a:97:4e:4c:09:3e:d0:60:91:44:
b8:0c:42:18:01:71:bc:f4:f1:a4:42:69:4e:7c:67:
79:23:e6:70:94:40:69:1a:5b:a0:e5:ee:a8:04:ce:
99:25:48:72:7b:1a:7b:38:dc:62:ba:b6:d9:4e:e6:
eb:11:20:f7:a9:a2:dd:aa:11:4e:50:de:7b:ee:39:
73:40:b1:b6:1b:46:ed:fb:70:87:f7:87:2a:21:6d:
17:4a:99:9b:1d:dc:f3:ad:6a:81:24:14:22:10:50:
3c:7b:fa:25:62:4e:cb:e8:61:c0:35:ca:e4:fa:b7:
73:30:b4:01:16:47:dc:39:82:cf:14:7a:93:84:d2:
53:c0:16:77:97:cc:40:8d:44:03:8f:88:ed:72:06:
1f:4b:ae:02:00:01:83:9a:36:30:ee:57:1a:81:6c:
d2:d0:4f:a6:92:67:33:42:06:07:25:34:e4:30:fd:
75:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:AD:FC:4B:45:BB:AF:D7:21:C0:1E:42:63:EE:86:54:3D:BE:4F:CA
X509v3 Authority Key Identifier:
keyid:97:3B:EC:33:AE:73:8C:98:95:88:19:C6:C1:3B:B3:35:EE:34:AB:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lzvsM65zjJiViBnGwTuzNe40q0w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/2f4605-356a-4af6-b15d-c42f9abf1477/1/lzvsM65zjJiViBnGwTuzNe40q0w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/2f4605-356a-4af6-b15d-c42f9abf1477/1/lzvsM65zjJiViBnGwTuzNe40q0w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:ea:25:e0:d6:b2:f4:a5:f7:c6:e8:c4:50:c8:d7:7c:54:a5:
f6:38:b7:b9:51:83:e1:3f:87:ca:8e:fe:17:bb:8a:eb:68:ab:
c0:46:c0:a5:67:85:5b:23:49:d2:76:15:86:4e:33:d6:90:51:
44:6e:14:be:7d:fb:7f:ee:4f:e4:ea:2d:4c:7a:9e:02:01:ad:
9d:7d:17:55:a7:d7:a9:be:6a:f4:83:98:41:ca:38:5d:76:53:
47:d1:8c:29:8a:cf:b2:c5:f6:48:87:16:6c:75:34:97:bc:e4:
2b:34:be:39:79:a3:26:63:42:17:fe:39:b4:89:6b:d1:4b:14:
91:75:fd:ca:65:fc:dd:9f:6f:8f:1e:66:1a:13:3e:56:ff:ed:
9c:d8:22:32:59:42:72:45:73:c8:80:67:5a:22:8d:c8:01:21:
1d:b1:66:35:85:90:cd:cd:13:ab:b7:23:af:e7:99:3f:aa:98:
0f:8a:5a:a6:e0:67:c6:7c:be:5c:7b:7a:01:db:9f:6d:90:0e:
76:19:7d:41:b3:79:71:26:e8:9d:4c:ae:13:e1:5d:2a:f9:5f:
ab:6a:9d:8f:49:b3:ff:e8:9f:a8:3b:b5:68:0a:b7:6d:5a:9f:
fc:4a:c4:74:1e:69:ac:52:89:3a:5a:6d:18:9c:24:cc:b0:44:
30:e2:81:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:46 2025 by rpki-client