Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/0697c0-98ae-44ab-b4ab-b615c5c60652/1/ltzrqozTLcS_HWbQhzobbz1zSY8.mft
File: ltzrqozTLcS_HWbQhzobbz1zSY8.mft (raw, json)
Hash identifier: g+gP5qkxejZdvqMQjm7sNITZ7HiyeFFdgs/brpt4Wkg=
Subject key identifier: 45:B3:FC:4F:66:4A:AC:62:3B:8F:5F:C2:82:BA:BA:A2:E2:55:66:1D
Authority key identifier: 96:DC:EB:AA:8C:D3:2D:C4:BF:1D:66:D0:87:3A:1B:6F:3D:73:49:8F
Certificate issuer: /CN=96dcebaa8cd32dc4bf1d66d0873a1b6f3d73498f
Certificate serial: 0194BD85AC91FE779026A65189B2466FC80E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ltzrqozTLcS_HWbQhzobbz1zSY8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/0697c0-98ae-44ab-b4ab-b615c5c60652/1/ltzrqozTLcS_HWbQhzobbz1zSY8.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 18:00:41 +0000
Manifest this update: Fri 31 Jan 2025 18:00:41 +0000
Manifest next update: Sat 01 Feb 2025 18:00:41 +0000
Files and hashes: 1: ltzrqozTLcS_HWbQhzobbz1zSY8.crl (hash: FDlJ39oBKmgKP1ER0LpCl6wzKZDA1AvgoUqMsz4vP0w=)
2: wAvxAueoqpHLtk8XQwnNyU9MpT8.roa (hash: BRt8y2qLbXewc3lf068PubvnKUoQIDgwBq9aCv3+KLU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:ac:91:fe:77:90:26:a6:51:89:b2:46:6f:c8:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96dcebaa8cd32dc4bf1d66d0873a1b6f3d73498f
Validity
Not Before: Jan 31 18:00:41 2025 GMT
Not After : Feb 1 18:00:41 2025 GMT
Subject: CN=45b3fc4f664aac623b8f5fc282babaa2e255661d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:05:44:11:3d:a8:37:48:b1:0a:6d:a5:9c:c3:
3a:d3:3e:1f:44:13:74:4d:4c:9b:3b:6c:52:47:1a:
46:80:a8:8c:7e:45:18:b4:b1:b1:d0:16:27:9b:13:
13:a4:d1:6c:8d:f6:e3:55:97:de:3f:8d:10:cc:ac:
59:4f:61:33:bf:73:d5:3d:0f:5c:73:b2:c2:ad:f6:
5f:4e:78:af:08:47:30:52:87:38:8c:e9:84:54:9e:
ba:c2:91:59:06:a3:63:a2:1d:b4:41:ff:d3:80:5c:
b7:36:d3:07:f4:78:53:3a:81:ef:35:39:62:85:ad:
ec:74:1f:b1:de:26:6d:2d:45:37:45:d6:7b:d4:1d:
b2:56:db:2a:65:24:34:d5:4b:c8:2e:2b:65:45:e9:
56:c5:4e:55:80:e2:20:d8:c4:80:33:a2:d1:7a:d2:
1c:d3:51:e8:81:b7:69:7f:9d:21:d8:fc:09:86:76:
ad:46:f2:68:11:91:5d:f1:6b:e1:d9:08:c5:23:fa:
96:84:58:5f:c6:fc:62:92:49:b7:2c:5c:6d:a0:f8:
da:d6:5e:98:10:55:ee:53:69:b6:41:aa:0b:65:51:
73:1e:94:00:4a:af:e6:db:fb:5c:20:a1:41:bf:66:
49:1a:2f:c8:88:46:d3:9d:be:4a:fb:92:58:0d:62:
90:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:B3:FC:4F:66:4A:AC:62:3B:8F:5F:C2:82:BA:BA:A2:E2:55:66:1D
X509v3 Authority Key Identifier:
keyid:96:DC:EB:AA:8C:D3:2D:C4:BF:1D:66:D0:87:3A:1B:6F:3D:73:49:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ltzrqozTLcS_HWbQhzobbz1zSY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/0697c0-98ae-44ab-b4ab-b615c5c60652/1/ltzrqozTLcS_HWbQhzobbz1zSY8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/0697c0-98ae-44ab-b4ab-b615c5c60652/1/ltzrqozTLcS_HWbQhzobbz1zSY8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:c5:b8:8c:ac:33:6a:de:4f:db:26:2e:35:e5:a5:c9:c9:a0:
b1:7f:84:65:fb:9e:95:0a:9a:74:36:f0:4f:83:ee:08:62:c7:
c1:73:48:94:56:f8:2d:45:ff:2b:5d:4e:a4:97:b4:38:bb:21:
d9:21:23:ef:55:02:c2:82:28:70:24:db:d7:ee:87:ca:d0:53:
72:6c:6d:1f:66:c9:07:80:3e:99:45:9d:ba:50:81:2a:a6:b0:
ec:3b:cc:7b:05:08:92:93:22:4b:73:09:4b:a9:a9:b0:c0:13:
1b:f3:75:17:10:88:2c:f1:a7:5c:4e:6a:71:be:af:68:1f:3f:
46:9b:92:b3:d3:48:5e:a5:87:9a:92:4a:f0:ea:90:ed:e4:5b:
8d:d0:b8:bb:bd:bf:d6:71:d8:e2:7c:90:8f:f1:5c:07:a6:c0:
67:a8:52:6b:39:78:e2:ef:10:62:b3:96:37:ea:8a:b5:ea:4e:
f7:dc:58:e3:f1:fc:87:a9:97:32:e5:5f:cf:f1:5a:88:9e:12:
4d:f4:80:18:00:7e:55:cf:c9:a2:16:77:93:0a:0f:70:1e:83:
82:b9:fe:3b:53:e7:c0:06:5f:fb:6e:2e:61:98:27:01:57:bf:
c5:ee:8d:c9:56:e9:c8:cb:53:5d:ca:4b:d6:cd:b5:b2:1b:b2:
8e:dc:4e:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:01:15 2025 by rpki-client