Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/5e7b4e-89d6-4042-8807-2c063cb0047a/1/lv1kUnabFryUb-lg4IwBLZSRQJ0.mft
File: lv1kUnabFryUb-lg4IwBLZSRQJ0.mft (raw, json)
Hash identifier: C43k3bwgsslRJz6M7E44AemY7FzA3iS3MuchZhRxreY=
Subject key identifier: BB:65:78:65:A3:E8:F8:F6:A6:4F:F9:FB:6A:11:AF:B8:35:DB:8F:5B
Authority key identifier: 96:FD:64:52:76:9B:16:BC:94:6F:E9:60:E0:8C:01:2D:94:91:40:9D
Certificate issuer: /CN=96fd6452769b16bc946fe960e08c012d9491409d
Certificate serial: 0185C23A2F7944A8373211009A8950947E92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lv1kUnabFryUb-lg4IwBLZSRQJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/5e7b4e-89d6-4042-8807-2c063cb0047a/1/lv1kUnabFryUb-lg4IwBLZSRQJ0.mft
Manifest number: 0943
Signing time: Wed 18 Jan 2023 00:14:31 +0000
Manifest this update: Wed 18 Jan 2023 00:14:31 +0000
Manifest next update: Thu 19 Jan 2023 00:14:31 +0000
Files and hashes: 1: WUTXyRYMA4A71EoddorHVQYL_Ns.roa (hash: aHLZ63XpDY12zwe/1mbCiKvfnW1HbN9SKf29uGPPFhI=)
2: lv1kUnabFryUb-lg4IwBLZSRQJ0.crl (hash: XX563UiyAxsdRPee8UfNLrQWum+zyf61EVlm5CsAWxc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:c2:3a:2f:79:44:a8:37:32:11:00:9a:89:50:94:7e:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96fd6452769b16bc946fe960e08c012d9491409d
Validity
Not Before: Jan 18 00:14:31 2023 GMT
Not After : Jan 19 00:14:31 2023 GMT
Subject: CN=bb657865a3e8f8f6a64ff9fb6a11afb835db8f5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:2e:5a:cc:6a:77:b7:1c:d8:4f:90:3f:f0:71:
e4:49:32:c2:85:f1:11:9b:2a:cc:d6:88:19:6a:d2:
d2:38:6d:c0:40:1a:2e:c4:0f:4c:cf:f8:28:a2:25:
f1:d5:cf:f1:03:e4:2f:8a:6d:b3:a8:87:ec:c7:95:
63:cb:b6:49:b2:0c:59:54:b7:10:5e:c9:74:6d:65:
6c:0f:01:05:e0:33:e3:eb:d8:f2:93:af:ad:7d:b8:
7a:f4:8d:4d:8e:64:14:22:b9:82:be:f3:ff:16:75:
92:d4:ae:d8:fb:a4:07:c7:43:a0:01:72:fa:f4:0b:
3c:52:fe:5f:1a:3b:74:16:d7:c6:f2:b9:81:25:a3:
70:ff:73:42:f1:5d:2e:98:d3:d7:06:bb:46:d6:8c:
95:83:6c:a2:ed:35:f6:e9:4b:ee:99:6c:88:d7:9b:
e4:87:01:54:31:db:e7:ec:27:60:70:04:38:9e:5e:
99:0e:d3:62:da:68:dc:f3:7f:cb:ed:1f:38:84:a0:
20:4e:95:f5:3a:58:d5:ad:9b:36:2a:52:c4:71:7e:
2c:8c:57:15:bd:88:80:4a:75:db:31:66:13:bb:1c:
22:f7:eb:05:54:ca:50:ac:aa:8a:a5:a8:1c:31:c0:
ad:1f:39:05:5c:0e:ee:f4:b9:74:9a:d3:ca:4d:5b:
cb:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:65:78:65:A3:E8:F8:F6:A6:4F:F9:FB:6A:11:AF:B8:35:DB:8F:5B
X509v3 Authority Key Identifier:
keyid:96:FD:64:52:76:9B:16:BC:94:6F:E9:60:E0:8C:01:2D:94:91:40:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lv1kUnabFryUb-lg4IwBLZSRQJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/5e7b4e-89d6-4042-8807-2c063cb0047a/1/lv1kUnabFryUb-lg4IwBLZSRQJ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/5e7b4e-89d6-4042-8807-2c063cb0047a/1/lv1kUnabFryUb-lg4IwBLZSRQJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:d3:b5:7e:d2:9a:aa:4e:d1:9d:9a:c9:bf:32:89:ba:97:ed:
87:d5:a2:e6:33:2e:ab:cc:63:9c:23:a0:7e:4f:9a:22:38:ac:
06:6c:db:29:21:f7:93:51:b2:3f:38:b9:73:03:93:46:b9:6d:
5e:19:65:af:e9:c2:83:5a:e4:eb:8c:78:3e:7d:0a:ed:64:3c:
ce:d1:f2:36:ad:77:5f:49:6d:29:76:ad:c9:e8:16:17:5a:c4:
d9:d4:04:59:ed:4c:52:d6:df:4f:9b:ed:d1:a9:25:47:b5:de:
dc:e2:d8:f0:ae:af:18:53:ad:78:ae:e0:6b:83:2c:1a:54:99:
92:47:d2:ce:45:70:88:68:61:e1:0e:e1:01:18:9e:01:9e:5e:
e4:2a:da:46:df:8c:67:c7:61:89:7a:ff:01:0c:9d:e6:db:84:
53:5f:48:c9:08:81:30:7b:a9:c8:60:95:70:8e:98:53:f9:28:
e1:af:bd:0d:bf:8d:c6:aa:50:2c:5b:89:4e:e0:40:8e:1f:83:
cc:12:0a:63:f8:1e:5f:46:5d:fa:a2:10:1e:4f:a2:83:24:e7:
91:92:f3:8f:fe:9a:a5:96:01:0e:20:da:95:ad:f9:52:04:c7:
25:43:61:04:3e:f7:ac:49:3f:2b:37:4f:2a:6a:5f:0c:dc:de:
fa:60:37:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:19:52 2025 by rpki-client