Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/715bc4-0fe2-468d-bd91-36ab8d11639a/1/LzUr_P5Xj5d3PUpTYjuViIVecEE.mft
File: LzUr_P5Xj5d3PUpTYjuViIVecEE.mft (raw, json)
Hash identifier: gEGyQxxHzsdbVLNgzvcklk5idf8uLJ3iQxLK0/qaMLI=
Subject key identifier: 3F:4B:CD:14:43:EF:45:A8:6B:01:44:E3:C1:B6:4B:65:B8:5A:DB:47
Authority key identifier: 2F:35:2B:FC:FE:57:8F:97:77:3D:4A:53:62:3B:95:88:85:5E:70:41
Certificate issuer: /CN=2f352bfcfe578f97773d4a53623b9588855e7041
Certificate serial: 018B69ECF606960B24D5E177DE437F69879E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LzUr_P5Xj5d3PUpTYjuViIVecEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/715bc4-0fe2-468d-bd91-36ab8d11639a/1/LzUr_P5Xj5d3PUpTYjuViIVecEE.mft
Manifest number: 03
Signing time: Thu 26 Oct 2023 03:00:18 +0000
Manifest this update: Thu 26 Oct 2023 03:00:18 +0000
Manifest next update: Fri 27 Oct 2023 03:00:18 +0000
Files and hashes: 1: LzUr_P5Xj5d3PUpTYjuViIVecEE.crl (hash: Lc0A0d6Km+lvcE8RjC9svwu85ltgn1rAd64NQCWzcDE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:69:ec:f6:06:96:0b:24:d5:e1:77:de:43:7f:69:87:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f352bfcfe578f97773d4a53623b9588855e7041
Validity
Not Before: Oct 26 03:00:18 2023 GMT
Not After : Oct 27 03:00:18 2023 GMT
Subject: CN=3f4bcd1443ef45a86b0144e3c1b64b65b85adb47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:eb:a8:6b:c8:d0:c6:10:40:81:81:42:2c:0e:
5c:81:bc:39:9d:bc:c3:19:a1:18:35:33:2f:a6:cc:
26:02:e0:c8:e8:e3:4a:58:f6:5f:4a:fc:a3:28:cb:
76:05:4b:f7:9d:37:f5:80:69:b6:85:39:0f:b6:c2:
94:37:49:93:53:50:93:6f:1d:6b:e2:6c:20:a5:83:
59:05:53:0b:dc:8d:38:e7:58:99:fc:07:e5:e9:4d:
1e:4d:93:ee:ba:11:ba:fc:b6:7f:32:21:d7:4b:34:
b7:32:e8:52:c9:db:f5:87:98:79:39:f3:6a:6a:00:
5f:32:dc:d3:21:c5:66:57:cd:ae:a4:46:e1:d9:39:
91:ee:76:29:ce:d4:62:a0:76:f4:a1:63:74:25:50:
e2:1e:0d:0d:fe:c1:39:b0:9a:c5:14:2b:63:d9:97:
d8:90:10:6e:f2:78:03:68:cf:8c:55:9d:db:42:19:
65:88:0e:1c:cc:53:37:8a:17:c7:0f:d5:0f:68:ea:
80:5e:4f:49:a6:c8:f9:37:26:15:10:0a:9d:94:19:
b7:32:aa:79:57:60:e1:3c:4c:9f:b0:51:79:87:25:
f3:ed:6c:7e:df:a7:16:a4:7c:c7:b6:e9:42:05:47:
d5:f6:dd:cb:f7:57:b2:84:af:e4:00:a9:ae:ff:85:
9a:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:4B:CD:14:43:EF:45:A8:6B:01:44:E3:C1:B6:4B:65:B8:5A:DB:47
X509v3 Authority Key Identifier:
keyid:2F:35:2B:FC:FE:57:8F:97:77:3D:4A:53:62:3B:95:88:85:5E:70:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LzUr_P5Xj5d3PUpTYjuViIVecEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/715bc4-0fe2-468d-bd91-36ab8d11639a/1/LzUr_P5Xj5d3PUpTYjuViIVecEE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/715bc4-0fe2-468d-bd91-36ab8d11639a/1/LzUr_P5Xj5d3PUpTYjuViIVecEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:cc:aa:03:f7:e8:4a:b7:e7:1c:7c:43:0b:6c:6c:98:74:27:
7e:89:d3:2b:a4:9d:fb:92:d9:b4:ed:45:01:69:e7:86:18:fc:
5f:a7:33:93:24:a2:e0:de:c2:9a:3f:a0:e5:ce:c6:a8:cf:a4:
a6:35:29:65:56:e0:65:58:3f:59:f3:49:6b:fe:24:a8:75:f2:
44:f9:e0:d6:1a:a9:04:e3:95:07:b9:41:7f:68:10:da:b5:b9:
7a:60:19:27:18:1e:47:4e:80:b1:f9:81:32:92:9f:88:c2:31:
0f:ec:a0:9e:da:ef:72:5c:38:12:2e:94:57:ca:e3:27:e8:4e:
1f:82:4c:04:ac:e1:e5:26:fc:90:66:d0:64:e9:40:33:65:d6:
e3:e9:ed:e0:45:6f:bb:ca:17:dc:57:48:1d:78:a6:35:17:4d:
30:51:00:9b:4a:4d:24:f6:7a:14:55:2e:c5:33:e6:51:82:c3:
ab:c9:b1:d3:23:3b:db:dd:f7:f1:e4:d9:6c:25:80:31:5f:46:
bc:1c:87:75:fb:36:61:e3:2c:14:16:a8:e7:1f:f4:13:b6:90:
49:f1:48:ed:f2:02:66:01:0f:54:38:3a:a9:d4:a2:8a:bf:c4:
e7:ce:c3:33:98:4e:35:9d:40:3e:08:f1:de:e4:cb:bd:01:4d:
3d:94:aa:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:57:42 2025 by rpki-client