Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/4ce933-488f-46b9-ac2c-7c93cae227bd/1/lxe6-3AY3EO9rlOyOiPhZWfh8hw.mft
File: lxe6-3AY3EO9rlOyOiPhZWfh8hw.mft (raw, json)
Hash identifier: JC0Eep2QKt8XDjcIIXTsv5eppdRMHrTUT46QxfIpkoE=
Subject key identifier: B2:DE:1A:68:71:24:D0:3B:36:16:A5:DD:3F:20:00:D9:84:1A:3B:4B
Authority key identifier: 97:17:BA:FB:70:18:DC:43:BD:AE:53:B2:3A:23:E1:65:67:E1:F2:1C
Certificate issuer: /CN=9717bafb7018dc43bdae53b23a23e16567e1f21c
Certificate serial: 0194BCE0E16AC4A207815B68F94422042B6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lxe6-3AY3EO9rlOyOiPhZWfh8hw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/4ce933-488f-46b9-ac2c-7c93cae227bd/1/lxe6-3AY3EO9rlOyOiPhZWfh8hw.mft
Manifest number: 0FF4
Signing time: Fri 31 Jan 2025 15:00:41 +0000
Manifest this update: Fri 31 Jan 2025 15:00:41 +0000
Manifest next update: Sat 01 Feb 2025 15:00:41 +0000
Files and hashes: 1: lxe6-3AY3EO9rlOyOiPhZWfh8hw.crl (hash: PgEMfEd3TWiQkS795QaLrvuyzSBid98QKI2+c0WXfOg=)
2: sE1iK8BGArTufNYA1Zt6v_dSI9Y.roa (hash: OOj0tzcrni9iINX1RsORuXXY2J4W4MPomfi+iy0BJbQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:e1:6a:c4:a2:07:81:5b:68:f9:44:22:04:2b:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9717bafb7018dc43bdae53b23a23e16567e1f21c
Validity
Not Before: Jan 31 15:00:41 2025 GMT
Not After : Feb 1 15:00:41 2025 GMT
Subject: CN=b2de1a687124d03b3616a5dd3f2000d9841a3b4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fd:f9:13:6f:7e:e6:da:21:9b:bc:4d:3f:77:5f:
d2:a1:57:04:78:08:ec:41:d1:1a:bf:bc:27:ea:0e:
8e:a9:5f:f9:38:50:e9:7b:de:ff:fa:f0:5f:ca:33:
36:e8:2d:9d:18:70:a7:52:34:52:cb:e9:1b:b9:07:
6e:72:40:b4:62:57:86:3f:d4:58:90:98:af:f1:d5:
95:7d:86:1b:2c:75:89:0c:37:eb:58:a7:de:e9:1a:
b5:10:a5:c1:ab:5b:66:d8:1c:d0:52:eb:7d:19:51:
c2:2e:a5:85:a0:e4:2b:1e:88:c5:1a:2e:98:f8:28:
73:7f:31:6b:94:05:66:15:75:86:bb:fb:b1:72:a6:
69:43:21:93:a4:b0:04:3e:7c:fd:35:39:c8:3e:7a:
d9:0d:0d:95:1f:49:b7:1b:fe:b7:a3:48:19:fb:07:
76:50:ec:74:78:4a:e9:1d:5b:64:57:3a:6f:70:05:
ef:60:fa:39:70:f7:28:a7:bc:3f:4b:26:bc:8d:8b:
51:96:78:cd:ba:ec:7d:d6:53:ed:c7:62:0c:ef:51:
c1:f1:95:5e:a9:b0:29:90:5e:3c:f0:91:c3:d5:16:
ca:21:17:c8:24:bb:ce:79:10:ff:b7:8a:6e:06:5e:
ec:49:7b:ae:da:fe:dc:46:f8:18:df:01:dc:2a:b6:
2a:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:DE:1A:68:71:24:D0:3B:36:16:A5:DD:3F:20:00:D9:84:1A:3B:4B
X509v3 Authority Key Identifier:
keyid:97:17:BA:FB:70:18:DC:43:BD:AE:53:B2:3A:23:E1:65:67:E1:F2:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lxe6-3AY3EO9rlOyOiPhZWfh8hw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/4ce933-488f-46b9-ac2c-7c93cae227bd/1/lxe6-3AY3EO9rlOyOiPhZWfh8hw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/4ce933-488f-46b9-ac2c-7c93cae227bd/1/lxe6-3AY3EO9rlOyOiPhZWfh8hw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:e3:ad:59:96:24:9c:22:d9:e1:a0:d7:d5:e1:e8:41:85:df:
da:31:02:de:7c:cf:6f:2a:84:24:a6:52:3f:12:ba:f7:e4:95:
21:19:fa:b5:d3:7e:e0:27:43:de:c0:68:b0:a6:90:86:08:33:
a5:a5:82:43:41:6f:21:f0:4f:66:a6:1b:1d:00:69:3b:79:b2:
48:60:e1:f5:a8:74:3a:08:26:64:5c:cc:32:a3:a2:1f:9f:43:
2b:58:d2:29:b0:16:03:11:32:82:3f:d8:21:fe:8b:29:f0:44:
d4:87:ea:3f:dc:26:db:31:0c:18:7f:fd:7e:91:02:e3:73:ea:
10:f7:f1:4b:82:1c:12:16:68:c9:f3:77:96:6a:19:d4:7c:cd:
86:4c:97:12:2c:cc:86:41:cf:a2:7b:a6:43:cc:33:94:d5:b6:
a0:d7:b3:3c:f0:1c:fd:fb:bc:b3:1a:b3:2d:60:79:0f:75:dd:
5e:e9:d2:dd:81:4e:36:97:02:3d:ba:17:26:a6:73:c8:e6:df:
5f:93:70:ff:d7:69:87:cd:98:f0:de:0f:28:ec:c9:24:cd:8a:
ff:94:91:6a:65:54:48:78:3f:ac:fa:c0:ba:d9:42:22:54:86:
8a:18:7e:68:22:89:c5:52:55:ba:46:d8:a7:7b:55:db:c0:39:
52:d9:7f:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:27:46 2025 by rpki-client