
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/08e183-64eb-4999-9f78-7ce7322671eb/1/LzZ8eUn6D2zwWiECfnW4RhLcE7A.mft
File: LzZ8eUn6D2zwWiECfnW4RhLcE7A.mft (raw, json)
Hash identifier: NmI820EEngT+eXJbGjFpJ1F6Q2CRPLZ+0k8oUOHdUUw=
Subject key identifier: 7D:36:AD:C5:EC:92:D3:FB:9A:F4:67:79:FC:29:43:52:B8:38:61:C7
Authority key identifier: 2F:36:7C:79:49:FA:0F:6C:F0:5A:21:02:7E:75:B8:46:12:DC:13:B0
Certificate issuer: /CN=2f367c7949fa0f6cf05a21027e75b84612dc13b0
Certificate serial: 0194BD17F0C7E6BF2FFB941B80B4CD5140E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LzZ8eUn6D2zwWiECfnW4RhLcE7A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/08e183-64eb-4999-9f78-7ce7322671eb/1/LzZ8eUn6D2zwWiECfnW4RhLcE7A.mft
Manifest number: 1431
Signing time: Fri 31 Jan 2025 16:00:50 +0000
Manifest this update: Fri 31 Jan 2025 16:00:50 +0000
Manifest next update: Sat 01 Feb 2025 16:00:50 +0000
Files and hashes: 1: LzZ8eUn6D2zwWiECfnW4RhLcE7A.crl (hash: Ge9fM+xr1WU3B/7tA/oaQpRoku2d4jycSAAwDQz37kI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:f0:c7:e6:bf:2f:fb:94:1b:80:b4:cd:51:40:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f367c7949fa0f6cf05a21027e75b84612dc13b0
Validity
Not Before: Jan 31 16:00:50 2025 GMT
Not After : Feb 1 16:00:50 2025 GMT
Subject: CN=7d36adc5ec92d3fb9af46779fc294352b83861c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:3c:74:4c:2b:b7:e3:97:2f:1d:14:7c:ae:3f:
48:30:52:09:36:a1:03:f1:5a:11:63:a4:07:b5:64:
61:15:bf:04:fa:73:37:80:61:90:55:68:57:a9:56:
76:19:1d:83:38:ef:8b:16:7a:75:64:85:a1:87:c3:
fe:c0:82:72:e9:23:ee:a8:73:13:2a:14:e9:6c:58:
a2:f6:6f:98:16:78:f6:cd:18:a4:84:90:02:80:bb:
d9:b7:7b:f8:b7:a4:a5:9d:3f:aa:f1:3c:1f:8e:93:
04:9b:69:d1:0b:f5:ea:41:20:ad:7c:70:a4:4c:60:
00:99:52:7d:6f:dd:bd:ed:0f:1f:71:a9:00:79:51:
52:88:15:c9:69:17:4f:0e:a2:d4:2c:66:97:28:e1:
e7:f8:ac:74:f8:4a:2d:13:8b:dc:cb:81:dc:2e:b0:
03:40:f7:9b:21:07:5a:c8:11:e3:e2:89:71:47:d2:
a1:e2:e0:95:64:58:10:ca:f1:96:7c:87:66:d9:86:
c0:99:ac:e7:11:ae:a9:ca:3f:9e:c5:f2:f5:52:36:
5f:b0:53:06:37:ba:8a:2c:64:9c:cf:b1:16:df:d1:
3b:b3:b9:7d:05:1e:ea:4b:8c:0c:69:05:6e:80:84:
1f:93:10:0f:10:e0:35:ea:4f:45:87:b6:04:58:65:
09:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:36:AD:C5:EC:92:D3:FB:9A:F4:67:79:FC:29:43:52:B8:38:61:C7
X509v3 Authority Key Identifier:
keyid:2F:36:7C:79:49:FA:0F:6C:F0:5A:21:02:7E:75:B8:46:12:DC:13:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LzZ8eUn6D2zwWiECfnW4RhLcE7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/08e183-64eb-4999-9f78-7ce7322671eb/1/LzZ8eUn6D2zwWiECfnW4RhLcE7A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/08e183-64eb-4999-9f78-7ce7322671eb/1/LzZ8eUn6D2zwWiECfnW4RhLcE7A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:c7:e8:f8:85:05:95:57:bc:95:6d:f3:94:f7:00:e1:b4:93:
9d:c4:a5:0a:12:8a:c4:c8:ec:54:0e:9a:89:38:4e:c3:49:f2:
51:7b:3a:a9:92:30:02:d9:82:47:ae:85:bc:23:75:05:67:4e:
08:eb:83:05:60:0f:20:dc:eb:29:bc:33:c4:8f:56:95:aa:e3:
6f:67:e8:c3:d2:5f:a2:d9:d6:0d:be:49:51:19:17:ac:77:a7:
e1:24:b3:47:45:a5:73:54:44:1d:d4:76:ba:23:61:31:80:12:
30:f3:d6:31:b0:17:b1:98:fa:1e:12:27:c8:ca:c2:66:fa:69:
e7:c2:f2:cc:c8:05:92:ee:09:d6:20:fc:d0:f5:85:fb:51:86:
56:51:c4:60:47:b5:30:1c:d4:8d:4a:df:dc:ca:70:f6:3c:6d:
6e:ab:5e:ef:58:c4:cb:75:5f:13:67:f4:b4:08:12:0c:cd:02:
0a:8b:c9:10:6f:f8:de:d2:5c:6e:75:53:28:01:24:3b:e8:ac:
16:c5:df:56:b8:a6:86:09:fe:7f:7f:c0:64:23:37:89:4f:d3:
77:37:c4:cc:44:6b:4e:b5:83:9a:02:b9:86:16:70:e8:87:b2:
fe:34:62:17:da:1c:a3:55:3d:95:19:d3:58:50:83:0e:02:4e:
9c:d1:9b:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:47:52 2025 by rpki-client