Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/09200e-999d-4b45-a741-85a955f2163b/1/3LZakO089K4EUlVO40uSqEdtzxA.mft
File: 3LZakO089K4EUlVO40uSqEdtzxA.mft (raw, json)
Hash identifier: Q3f9utXzWHjHYecdmhQbuy/4bF7z7/zrQXH7I3HMhPM=
Subject key identifier: 54:FC:9F:9F:4F:D0:51:B4:55:6B:FC:3E:47:F9:9B:B9:5E:2A:BF:9F
Authority key identifier: DC:B6:5A:90:ED:3C:F4:AE:04:52:55:4E:E3:4B:92:A8:47:6D:CF:10
Certificate issuer: /CN=dcb65a90ed3cf4ae0452554ee34b92a8476dcf10
Certificate serial: 0194BCA9B90ECFB8048F04590C7EA97245C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3LZakO089K4EUlVO40uSqEdtzxA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/09200e-999d-4b45-a741-85a955f2163b/1/3LZakO089K4EUlVO40uSqEdtzxA.mft
Manifest number: 143B
Signing time: Fri 31 Jan 2025 14:00:27 +0000
Manifest this update: Fri 31 Jan 2025 14:00:27 +0000
Manifest next update: Sat 01 Feb 2025 14:00:27 +0000
Files and hashes: 1: 3LZakO089K4EUlVO40uSqEdtzxA.crl (hash: ZV2Wy8jM1xPhsZ0aD3fhfxH16dvFoQ10RjVTVzita2c=)
2: 4TacCA5fNMvJzrQKHYvZp1FsTCY.roa (hash: PoM3PiM+eiQs0IrTl3gGzaDWCG/B3yTTKS+dLnu4Yd0=)
3: 7NaNhfKzkHk-4U6P-rr5I2f5Dns.roa (hash: ho2GvZ21Aa+NkGp3FzrcTvxIRbuhiRhcV51nfQsaRvI=)
4: RMqD4QZBwk_wzHsp1loeMRU2jMk.roa (hash: nCQ5Eq/Er1do1Gz84LWpqzugPw71HtroPiJZlZhFk8k=)
5: naw_j5gKrLLjpLmDjj2VeLVHcW0.roa (hash: 9rsCrKDYxMlNCKWks8aC7H+vNumWPUdz18CO2dwuUHA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:b9:0e:cf:b8:04:8f:04:59:0c:7e:a9:72:45:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcb65a90ed3cf4ae0452554ee34b92a8476dcf10
Validity
Not Before: Jan 31 14:00:27 2025 GMT
Not After : Feb 1 14:00:27 2025 GMT
Subject: CN=54fc9f9f4fd051b4556bfc3e47f99bb95e2abf9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ea:48:6d:e4:b6:dd:aa:ad:c2:d9:b5:0a:9e:
64:5e:d6:bb:57:b2:ea:69:fd:fa:c6:cb:42:fc:5b:
6b:da:72:0f:96:91:61:90:73:a3:61:47:69:79:94:
3b:15:2d:f6:86:5d:29:82:a0:ba:fd:c9:75:c5:37:
1e:c1:a1:8d:83:06:f4:92:07:f2:af:d4:6a:7d:bd:
81:ac:cd:c5:64:14:fa:ce:81:7f:f6:93:2c:b6:7a:
57:f5:3a:96:63:55:a4:10:97:20:09:b4:1a:86:c2:
37:5b:e3:85:c8:04:0f:fa:dc:3d:d8:92:b2:07:50:
f2:d0:b1:14:bd:8a:63:a0:59:a2:85:48:09:62:93:
2f:d7:24:33:ac:1e:b1:8e:1b:c5:89:6f:8b:00:d1:
56:8d:51:cf:9a:12:52:6a:16:8c:8f:72:f8:2a:63:
63:e4:f5:bf:ac:4c:d5:63:40:aa:2b:ee:cf:3d:f3:
cd:7f:9d:e3:02:5e:d6:b8:d5:8f:85:eb:a5:8c:95:
18:7c:60:d1:08:ae:a1:85:cb:3e:19:1a:bf:78:1a:
16:c5:ad:a2:e5:68:af:30:d1:f1:92:9d:dd:43:31:
81:df:92:a8:47:d5:59:06:7b:29:30:30:ec:59:c3:
9f:ed:c3:16:c0:86:d4:27:97:88:48:52:e3:58:0f:
27:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:FC:9F:9F:4F:D0:51:B4:55:6B:FC:3E:47:F9:9B:B9:5E:2A:BF:9F
X509v3 Authority Key Identifier:
keyid:DC:B6:5A:90:ED:3C:F4:AE:04:52:55:4E:E3:4B:92:A8:47:6D:CF:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3LZakO089K4EUlVO40uSqEdtzxA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/09200e-999d-4b45-a741-85a955f2163b/1/3LZakO089K4EUlVO40uSqEdtzxA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/09200e-999d-4b45-a741-85a955f2163b/1/3LZakO089K4EUlVO40uSqEdtzxA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:26:45:8e:6d:aa:00:0c:c7:57:45:fa:cb:50:cf:20:28:52:
11:21:06:a6:68:d1:51:a5:5b:9f:3d:a2:66:ec:2c:25:35:c4:
7c:ca:e7:eb:d3:17:4d:e8:19:c1:09:9b:de:6b:e0:09:c2:03:
22:1f:d7:ab:e5:9c:14:2b:8e:28:3c:12:a3:ed:31:d8:fb:58:
8f:b6:63:d2:51:da:5a:37:14:be:02:ba:7c:58:54:ee:96:1b:
8e:c9:32:37:d9:62:80:98:2b:07:19:c1:3a:69:70:13:15:2e:
2a:a5:71:8f:ee:68:ae:fd:0b:2a:dc:9d:99:17:e5:a9:ee:ed:
be:d3:d8:91:83:ce:bc:3f:5f:9d:ad:52:38:66:1c:a2:87:47:
67:60:33:5c:03:5b:e8:47:12:df:7c:2f:43:b4:38:a8:9b:f9:
2b:ce:fb:f4:b2:e6:d8:99:02:35:04:2e:b7:4f:5e:59:9e:c5:
05:46:56:91:89:0f:82:7a:d4:df:5b:67:82:ab:46:23:5f:ed:
30:24:4f:0d:7f:93:45:90:2e:b5:71:e2:64:26:6b:2d:68:63:
5f:31:b6:bc:02:80:06:77:db:ab:8c:b3:d6:70:ae:b0:13:40:
96:74:2c:61:46:04:8a:f5:7b:e3:b1:c4:20:ab:14:7e:d7:08:
7d:66:26:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:13:45 2025 by rpki-client