Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/fd52f7-0ffa-4f1d-9d02-147d486f4050/1/_LMpnwXCDWOVnOd4G1qOBy9XzLQ.mft
File: _LMpnwXCDWOVnOd4G1qOBy9XzLQ.mft (raw, json)
Hash identifier: rMeiCy+cfT7sgdEFV5DgVcHbWZkk2IjHzzOYJMWvbNw=
Subject key identifier: 62:44:85:F4:88:EB:FE:BF:40:A3:02:CF:56:91:1A:AE:14:5D:E2:33
Authority key identifier: FC:B3:29:9F:05:C2:0D:63:95:9C:E7:78:1B:5A:8E:07:2F:57:CC:B4
Certificate issuer: /CN=fcb3299f05c20d63959ce7781b5a8e072f57ccb4
Certificate serial: 0194BCA9BF9045F30CC1AC9BB3D60BB8FCEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_LMpnwXCDWOVnOd4G1qOBy9XzLQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/fd52f7-0ffa-4f1d-9d02-147d486f4050/1/_LMpnwXCDWOVnOd4G1qOBy9XzLQ.mft
Manifest number: 11CC
Signing time: Fri 31 Jan 2025 14:00:28 +0000
Manifest this update: Fri 31 Jan 2025 14:00:28 +0000
Manifest next update: Sat 01 Feb 2025 14:00:28 +0000
Files and hashes: 1: _LMpnwXCDWOVnOd4G1qOBy9XzLQ.crl (hash: bXV/hF6R9g4BMlk0t5b2U3O0pXHfj7Ph4GMptVCa2qo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:bf:90:45:f3:0c:c1:ac:9b:b3:d6:0b:b8:fc:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcb3299f05c20d63959ce7781b5a8e072f57ccb4
Validity
Not Before: Jan 31 14:00:28 2025 GMT
Not After : Feb 1 14:00:28 2025 GMT
Subject: CN=624485f488ebfebf40a302cf56911aae145de233
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b2:b1:dd:0a:c2:79:70:5f:35:8a:84:f9:88:
a1:03:03:0d:4d:5f:a3:2e:2e:da:ed:96:be:61:ea:
c7:af:e5:da:9c:f4:de:75:c7:1d:d2:06:1f:e4:d7:
9f:c4:1e:e9:bf:64:f8:33:20:08:b1:9d:90:ca:f4:
0d:8f:6c:26:f1:ae:f7:b1:9f:5f:fe:4a:48:92:47:
39:22:69:26:80:6d:10:57:0e:6c:d5:72:23:51:5c:
cf:8a:92:1c:df:1d:e7:d7:c8:09:6e:44:c0:a7:1d:
45:80:58:18:29:71:5c:da:c8:9b:21:57:3c:c6:bf:
32:38:5e:4b:37:bc:b5:5a:cc:b8:0e:78:d4:d8:9b:
07:22:27:53:01:17:1d:34:b1:2e:71:cd:c5:ca:32:
8e:cd:ab:95:3a:a8:71:a8:23:c2:36:d6:68:30:11:
9d:10:d3:c1:01:00:93:0c:de:b4:6d:29:06:91:45:
1b:1a:56:27:50:6a:0e:95:3e:61:eb:6c:43:e9:88:
7a:f7:cc:69:0b:89:ba:0a:77:bb:5f:80:f1:0f:40:
cd:11:26:a0:86:0d:4f:dd:5e:da:14:cc:f2:5e:90:
82:df:d9:a1:f8:45:1e:70:72:6b:dd:40:d7:9b:a5:
29:1b:cd:5c:34:14:8a:de:04:b4:54:40:ae:fc:6b:
03:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:44:85:F4:88:EB:FE:BF:40:A3:02:CF:56:91:1A:AE:14:5D:E2:33
X509v3 Authority Key Identifier:
keyid:FC:B3:29:9F:05:C2:0D:63:95:9C:E7:78:1B:5A:8E:07:2F:57:CC:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_LMpnwXCDWOVnOd4G1qOBy9XzLQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/fd52f7-0ffa-4f1d-9d02-147d486f4050/1/_LMpnwXCDWOVnOd4G1qOBy9XzLQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/fd52f7-0ffa-4f1d-9d02-147d486f4050/1/_LMpnwXCDWOVnOd4G1qOBy9XzLQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:4d:bf:37:94:cf:89:09:74:71:6b:4e:a8:3c:41:59:f5:9f:
85:a9:c2:b6:13:ee:e9:2a:ae:a9:96:c1:04:a6:f0:25:d7:68:
9e:41:41:e7:80:20:dc:38:d0:e4:84:c5:21:b9:6f:31:ac:22:
83:95:71:e0:0b:8a:b3:68:3c:9d:33:80:c3:bb:4b:4b:13:3f:
00:e9:3b:d6:71:8f:c4:6e:c9:4b:af:28:22:04:5a:97:3f:61:
87:8b:2f:3e:1f:69:9e:a9:84:94:0f:7c:15:81:5b:ec:67:39:
e1:b0:68:58:1c:62:f3:24:d9:c1:3c:f4:cb:3c:c6:47:c3:c1:
1d:23:38:e3:76:3d:da:51:5b:44:c5:2e:3d:8c:a9:f7:70:3e:
19:44:aa:ee:b8:8e:e2:b0:5f:bf:98:78:b9:bf:bc:1c:90:7e:
bc:75:d9:70:96:fe:2b:b7:93:5e:53:87:3c:da:da:6b:70:b4:
ed:ad:23:c2:ce:6c:54:f8:fb:2a:af:30:c4:70:61:1f:7d:bb:
55:ca:1a:1c:73:23:b2:db:15:e0:aa:4f:47:d8:b9:ad:9a:12:
6a:8c:57:b7:58:f5:79:cf:e0:75:e4:16:75:e2:32:47:a2:80:
d2:7a:d2:95:2e:a5:88:6e:4b:75:6d:0b:41:05:2d:8f:43:e9:
18:b6:e5:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:48:56 2025 by rpki-client