Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/ef9a4e-790e-4ece-a845-25ccf32739a2/1/lbzyUZp7TPNY-2x4A5pb56GxMFs.mft
File: lbzyUZp7TPNY-2x4A5pb56GxMFs.mft (raw, json)
Hash identifier: GdrYTgoQvN1FoVcQsMPJ2FRV9Te7TV1YoHhSGb9CWQ8=
Subject key identifier: CB:0E:E4:76:75:F5:8A:66:91:03:19:41:22:E6:FB:1F:07:77:E0:AC
Authority key identifier: 95:BC:F2:51:9A:7B:4C:F3:58:FB:6C:78:03:9A:5B:E7:A1:B1:30:5B
Certificate issuer: /CN=95bcf2519a7b4cf358fb6c78039a5be7a1b1305b
Certificate serial: 0194BBCE397A66CF5E4568D1F0CF6ECF5C70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lbzyUZp7TPNY-2x4A5pb56GxMFs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/ef9a4e-790e-4ece-a845-25ccf32739a2/1/lbzyUZp7TPNY-2x4A5pb56GxMFs.mft
Manifest number: 0301
Signing time: Fri 31 Jan 2025 10:00:42 +0000
Manifest this update: Fri 31 Jan 2025 10:00:42 +0000
Manifest next update: Sat 01 Feb 2025 10:00:42 +0000
Files and hashes: 1: lbzyUZp7TPNY-2x4A5pb56GxMFs.crl (hash: 3aA8bwUKEwesqlxcfokJbWBSxMW/bD0E3GZKrJbr88A=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:39:7a:66:cf:5e:45:68:d1:f0:cf:6e:cf:5c:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95bcf2519a7b4cf358fb6c78039a5be7a1b1305b
Validity
Not Before: Jan 31 10:00:42 2025 GMT
Not After : Feb 1 10:00:42 2025 GMT
Subject: CN=cb0ee47675f58a669103194122e6fb1f0777e0ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:15:e5:0f:8e:d6:45:df:b2:d9:51:45:f1:54:
01:d2:c7:e4:8e:e0:64:c2:cf:dc:a5:aa:43:5e:1f:
bc:23:9e:8c:86:58:1e:3d:e5:df:fd:80:1a:49:15:
98:cf:ef:62:e3:63:5a:8f:a7:b9:d1:d5:14:c5:22:
67:80:64:39:1c:91:ed:36:61:e9:7a:da:45:c0:fc:
69:36:53:c5:65:a4:f8:88:a0:be:7a:a4:dc:80:a2:
85:5a:84:92:6a:79:cc:16:2a:63:0b:5e:3a:dd:51:
41:4d:18:ff:f3:52:e7:79:e9:21:2a:c9:58:fa:de:
03:bf:4d:1d:24:be:42:c8:88:67:1c:92:17:20:4f:
46:cc:e1:f2:1b:d7:2b:c8:51:5d:ef:ed:0b:f2:4e:
85:fd:40:01:44:f3:27:3d:a6:24:f9:96:3e:1e:d9:
1d:2f:d5:89:5d:00:02:d0:7d:b3:6f:8b:40:1b:dd:
36:3a:e6:ad:cf:82:e2:d5:25:e5:6a:7d:9f:a7:c2:
5b:60:de:b0:82:f3:df:6d:37:24:66:51:25:a1:da:
7e:b7:1a:69:d1:e4:24:98:74:01:f3:53:9c:f3:96:
56:d9:cf:24:dd:7c:96:22:28:0e:45:9c:de:2a:c7:
bf:21:63:9a:6b:32:1a:f7:fc:bb:a3:58:bd:34:26:
eb:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:0E:E4:76:75:F5:8A:66:91:03:19:41:22:E6:FB:1F:07:77:E0:AC
X509v3 Authority Key Identifier:
keyid:95:BC:F2:51:9A:7B:4C:F3:58:FB:6C:78:03:9A:5B:E7:A1:B1:30:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lbzyUZp7TPNY-2x4A5pb56GxMFs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/ef9a4e-790e-4ece-a845-25ccf32739a2/1/lbzyUZp7TPNY-2x4A5pb56GxMFs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/ef9a4e-790e-4ece-a845-25ccf32739a2/1/lbzyUZp7TPNY-2x4A5pb56GxMFs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
dc:70:fe:9a:9c:63:14:fd:d1:42:0b:39:7e:8b:0a:6b:32:9d:
b1:b3:74:3e:66:ac:3a:f4:2a:04:09:ac:94:4e:97:e9:35:eb:
82:9d:f1:c0:d5:f8:cc:02:a6:dd:9c:11:e8:3d:90:b6:29:2e:
12:49:b4:b0:27:62:7d:0c:26:ed:90:a0:97:38:91:ab:44:f2:
63:01:ce:97:0f:ca:64:78:76:ab:50:0b:e6:e5:10:ae:09:2c:
76:a8:d1:ca:13:a5:35:b5:11:6d:20:b3:eb:d8:10:96:40:d5:
dc:1b:2a:45:62:61:d2:34:cc:e4:a6:92:04:ff:b9:cd:d7:fd:
f3:68:12:50:6e:50:dc:3d:87:30:37:b4:d9:5c:dc:39:06:7f:
17:87:2a:5f:71:50:f7:8c:ee:be:35:22:39:32:e9:17:da:88:
73:cb:e3:80:56:3f:53:c0:b7:3e:11:38:80:db:fc:fd:64:85:
70:1c:12:7c:29:2a:36:d1:e1:c0:be:c8:29:29:aa:80:3a:d2:
8c:d2:a8:1d:71:5b:4c:55:37:fe:95:ae:7f:31:b7:99:e4:71:
ee:db:02:fa:c6:64:59:13:2c:d3:7c:46:e4:cd:1b:0b:4e:37:
33:79:ee:2a:03:89:12:21:3f:8b:67:a7:12:f3:a4:d4:03:ef:
7f:ee:73:18
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zjl6Zs9eRWjR8M9uz1xwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1YmNmMjUxOWE3YjRjZjM1OGZiNmM3ODAzOWE1YmU3YTFi
MTMwNWIwHhcNMjUwMTMxMTAwMDQyWhcNMjUwMjAxMTAwMDQyWjAzMTEwLwYDVQQD
EyhjYjBlZTQ3Njc1ZjU4YTY2OTEwMzE5NDEyMmU2ZmIxZjA3NzdlMGFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxBXlD47WRd+y2VFF8VQB0sfkjuBk
ws/cpapDXh+8I56MhlgePeXf/YAaSRWYz+9i42Naj6e50dUUxSJngGQ5HJHtNmHp
etpFwPxpNlPFZaT4iKC+eqTcgKKFWoSSannMFipjC1463VFBTRj/81LneekhKslY
+t4Dv00dJL5CyIhnHJIXIE9GzOHyG9cryFFd7+0L8k6F/UABRPMnPaYk+ZY+Htkd
L9WJXQAC0H2zb4tAG902Ouatz4Li1SXlan2fp8JbYN6wgvPfbTckZlElodp+txpp
0eQkmHQB81Oc85ZW2c8k3XyWIigORZzeKse/IWOaazIa9/y7o1i9NCbriQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMsO5HZ19YpmkQMZQSLm+x8Hd+CsMB8GA1UdIwQY
MBaAFJW88lGae0zzWPtseAOaW+ehsTBbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbGJ6eVVacDdUUE5ZLTJ4NEE1cGI1Nkd4TUZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi9lZjlhNGUtNzkwZS00ZWNlLWE4NDUt
MjVjY2YzMjczOWEyLzEvbGJ6eVVacDdUUE5ZLTJ4NEE1cGI1Nkd4TUZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMi9lZjlhNGUtNzkwZS00ZWNlLWE4NDUtMjVjY2YzMjczOWEy
LzEvbGJ6eVVacDdUUE5ZLTJ4NEE1cGI1Nkd4TUZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA3HD+mpxj
FP3RQgs5fosKazKdsbN0PmasOvQqBAmslE6X6TXrgp3xwNX4zAKm3ZwR6D2Qtiku
Ekm0sCdifQwm7ZCglziRq0TyYwHOlw/KZHh2q1AL5uUQrgksdqjRyhOlNbURbSCz
69gQlkDV3BsqRWJh0jTM5KaSBP+5zdf982gSUG5Q3D2HMDe02VzcOQZ/F4cqX3FQ
94zuvjUiOTLpF9qIc8vjgFY/U8C3PhE4gNv8/WSFcBwSfCkqNtHhwL7IKSmqgDrS
jNKoHXFbTFU3/pWufzG3meRx7tsC+sZkWRMs03xG5M0bC043M3nuKgOJEiE/i2en
EvOk1APvf+5zGA==
-----END CERTIFICATE-----
Generated at Fri Apr 25 06:53:01 2025 by rpki-client