Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/e27d9b-931a-488b-ac35-8ffbd6c73bf5/1/la6L0zJJzx7V8NQ5gUfv0y0lQho.mft
File: la6L0zJJzx7V8NQ5gUfv0y0lQho.mft (raw, json)
Hash identifier: +cXDWMHNDlrroo/WpkrVHgomyM+EUD3Z+zLhWHY5dYo=
Subject key identifier: AC:54:DA:59:50:F0:1A:91:F5:E7:F1:EA:00:9B:87:09:85:40:40:12
Authority key identifier: 95:AE:8B:D3:32:49:CF:1E:D5:F0:D4:39:81:47:EF:D3:2D:25:42:1A
Certificate issuer: /CN=95ae8bd33249cf1ed5f0d4398147efd32d25421a
Certificate serial: 0194BBCEBEC74281A83825FE56DA2E68F23F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/la6L0zJJzx7V8NQ5gUfv0y0lQho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/e27d9b-931a-488b-ac35-8ffbd6c73bf5/1/la6L0zJJzx7V8NQ5gUfv0y0lQho.mft
Manifest number: 0B99
Signing time: Fri 31 Jan 2025 10:01:16 +0000
Manifest this update: Fri 31 Jan 2025 10:01:16 +0000
Manifest next update: Sat 01 Feb 2025 10:01:16 +0000
Files and hashes: 1: la6L0zJJzx7V8NQ5gUfv0y0lQho.crl (hash: AH1+x9+Zv6IKLfI5LgLBtges5oesC+jttP5K/oEbaxw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:be:c7:42:81:a8:38:25:fe:56:da:2e:68:f2:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95ae8bd33249cf1ed5f0d4398147efd32d25421a
Validity
Not Before: Jan 31 10:01:16 2025 GMT
Not After : Feb 1 10:01:16 2025 GMT
Subject: CN=ac54da5950f01a91f5e7f1ea009b870985404012
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:67:6e:af:75:44:19:75:f4:34:18:28:ef:af:
e5:d0:b5:26:f1:74:20:ab:7b:c7:6a:aa:61:e6:99:
79:af:92:38:eb:a7:10:19:da:2d:0f:e0:92:42:ff:
aa:84:63:d1:b3:03:1b:86:cc:54:41:67:cb:b0:d5:
cf:83:74:70:29:de:b4:ac:45:fb:66:18:4b:0d:3f:
a6:c5:f5:57:50:d4:fd:73:c2:d9:f7:06:1d:92:b8:
cb:ad:d4:60:14:39:cf:a6:24:47:0e:fa:b1:43:3f:
06:54:7c:2e:27:d3:18:18:7a:8c:13:1c:40:45:9a:
d6:5d:7f:1d:b0:dd:d8:32:67:6e:67:8c:05:19:89:
eb:59:36:0b:a6:bf:c9:7d:f0:cd:fb:69:2d:48:86:
75:b8:e3:bd:32:60:3d:00:1a:7a:e1:a4:a2:da:90:
2b:f1:4e:b8:16:03:77:7e:f1:73:c0:8a:7f:18:b9:
67:fe:09:78:0c:e5:02:d3:97:5c:dc:5d:f6:12:6d:
6d:51:a4:29:ba:33:52:a6:9b:99:6d:33:da:a9:66:
84:05:23:75:28:f2:2c:08:9e:00:69:e4:41:b9:82:
87:df:a1:f3:00:60:32:de:b4:a3:11:87:e3:b5:fe:
0b:db:e9:97:3a:e1:8c:e4:ef:0a:e3:46:ac:11:fb:
ff:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:54:DA:59:50:F0:1A:91:F5:E7:F1:EA:00:9B:87:09:85:40:40:12
X509v3 Authority Key Identifier:
keyid:95:AE:8B:D3:32:49:CF:1E:D5:F0:D4:39:81:47:EF:D3:2D:25:42:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/la6L0zJJzx7V8NQ5gUfv0y0lQho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/e27d9b-931a-488b-ac35-8ffbd6c73bf5/1/la6L0zJJzx7V8NQ5gUfv0y0lQho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/e27d9b-931a-488b-ac35-8ffbd6c73bf5/1/la6L0zJJzx7V8NQ5gUfv0y0lQho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:ae:41:7e:78:8f:00:fa:44:e2:5f:d6:6b:3c:2d:c2:4a:3d:
e8:6e:87:c3:1f:f3:7f:60:a9:76:a2:64:89:42:74:14:f0:d9:
3c:7c:17:62:9e:81:95:9d:05:e4:17:6d:80:13:b5:66:ea:cf:
7b:49:48:4a:66:d3:9b:40:60:c3:6e:8a:07:b0:c3:90:bb:c6:
4d:43:60:de:6f:cd:a1:d1:86:d3:ac:b8:77:26:0f:93:c5:06:
02:2f:0b:c1:f2:63:37:db:a5:f7:ec:d8:18:7a:d5:09:c4:76:
fe:d5:9b:c1:a9:80:2d:35:0e:66:f9:65:74:eb:22:7f:6f:02:
79:9a:45:38:f7:4d:64:1f:3e:e2:10:78:e3:dc:ff:65:97:dd:
e1:e6:cc:ba:b1:30:73:e2:31:31:b6:99:fe:3f:fd:89:09:dc:
c1:d3:f3:67:d8:88:0a:32:44:fb:3e:ab:17:5b:e3:23:86:68:
18:40:0c:36:e2:80:6e:7a:18:f6:7c:d9:a1:0d:47:cf:3f:1f:
0f:c1:30:ae:a3:98:ab:8e:f3:ea:83:d0:37:97:3b:63:33:a0:
57:36:15:7c:f0:84:54:f5:50:34:40:25:81:3a:53:12:0e:a6:
be:f9:44:5f:f4:4e:65:0a:26:0d:99:13:0d:f1:bb:ee:58:44:
51:65:6a:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:04:10 2025 by rpki-client