Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/17e999-e53d-48ca-980a-95ae64bd56ec/1/LKw-jWOxw6_HxsC_2p1ayBe27m0.mft
File: LKw-jWOxw6_HxsC_2p1ayBe27m0.mft (raw, json)
Hash identifier: WvE+z+OK/+BDxHOybh3DLPVKxMECTXZfoStIRnj3YCs=
Subject key identifier: B5:C2:B4:5B:DC:71:88:F1:55:1D:32:CD:6A:A6:7B:B9:DD:1C:37:7D
Authority key identifier: 2C:AC:3E:8D:63:B1:C3:AF:C7:C6:C0:BF:DA:9D:5A:C8:17:B6:EE:6D
Certificate issuer: /CN=2cac3e8d63b1c3afc7c6c0bfda9d5ac817b6ee6d
Certificate serial: 0194BD17BA7388A10646C2FD5BA651AB7967
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LKw-jWOxw6_HxsC_2p1ayBe27m0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/17e999-e53d-48ca-980a-95ae64bd56ec/1/LKw-jWOxw6_HxsC_2p1ayBe27m0.mft
Manifest number: 0E07
Signing time: Fri 31 Jan 2025 16:00:36 +0000
Manifest this update: Fri 31 Jan 2025 16:00:36 +0000
Manifest next update: Sat 01 Feb 2025 16:00:36 +0000
Files and hashes: 1: LKw-jWOxw6_HxsC_2p1ayBe27m0.crl (hash: 0yPIxZe5b6nr53bLZWfTPgOF6cM8ZNNOpSwP6yHBQsw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:ba:73:88:a1:06:46:c2:fd:5b:a6:51:ab:79:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cac3e8d63b1c3afc7c6c0bfda9d5ac817b6ee6d
Validity
Not Before: Jan 31 16:00:36 2025 GMT
Not After : Feb 1 16:00:36 2025 GMT
Subject: CN=b5c2b45bdc7188f1551d32cd6aa67bb9dd1c377d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:58:ab:fa:54:d7:2b:31:d9:bb:dc:01:33:cb:
e1:a1:09:ae:37:b7:65:1f:ce:0b:b9:6c:5e:5a:ce:
1e:cc:ef:20:5f:f3:a6:8a:dc:a3:f8:84:1c:f8:e8:
4d:2f:09:69:54:8b:58:54:0a:2d:6c:28:3d:14:b5:
54:96:4b:6e:36:cc:a5:35:2f:03:c5:55:b7:87:b4:
c8:33:c3:e6:80:65:c3:91:ba:f1:b5:28:f7:4f:18:
0a:0b:2d:85:0f:9e:67:e4:6b:47:04:33:58:29:e6:
9d:6e:6f:c0:a9:1c:6d:72:67:67:eb:b6:da:d7:bb:
ec:d3:aa:e9:24:33:2d:14:0f:45:62:f7:f4:4d:59:
f1:25:27:99:81:35:ce:11:64:58:ad:a2:3e:44:79:
ad:42:86:9a:6f:40:71:2d:e0:e4:5f:d0:4f:68:61:
9d:fa:c6:ac:ae:fb:4b:87:52:be:e8:37:b8:31:c3:
94:b5:35:bb:92:f0:4a:c9:bd:84:dc:db:c4:a0:10:
b0:a8:a6:e7:15:5c:1b:b6:6e:d3:c4:70:cc:73:0d:
f9:86:b5:20:c0:79:6e:75:95:78:42:75:6e:ae:41:
2d:de:de:bd:a9:5d:60:50:6e:f8:9c:3c:9b:c0:90:
fb:8f:4c:80:49:08:87:0f:ad:08:d2:70:31:3f:24:
5b:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:C2:B4:5B:DC:71:88:F1:55:1D:32:CD:6A:A6:7B:B9:DD:1C:37:7D
X509v3 Authority Key Identifier:
keyid:2C:AC:3E:8D:63:B1:C3:AF:C7:C6:C0:BF:DA:9D:5A:C8:17:B6:EE:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LKw-jWOxw6_HxsC_2p1ayBe27m0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/17e999-e53d-48ca-980a-95ae64bd56ec/1/LKw-jWOxw6_HxsC_2p1ayBe27m0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/17e999-e53d-48ca-980a-95ae64bd56ec/1/LKw-jWOxw6_HxsC_2p1ayBe27m0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:98:a8:0d:6a:09:f6:63:38:c4:50:f3:e9:7b:61:cb:0c:be:
e4:67:4a:9e:d1:db:d6:d1:bc:ea:2a:19:ba:b4:5a:80:05:30:
ef:20:8b:07:6d:98:03:da:96:81:89:e6:14:e4:86:f1:0b:a1:
73:0c:11:23:d4:74:b1:00:9e:12:e5:68:96:fa:21:ae:f8:59:
19:c2:77:36:aa:9f:c5:91:a2:02:db:76:10:75:b4:2d:0e:db:
81:b1:4b:09:32:63:b9:e6:23:0b:67:50:c0:3b:70:7b:31:a9:
c7:e4:86:97:43:dc:09:ee:b4:0a:d0:99:0d:e6:b9:8b:61:be:
7d:36:e9:71:22:40:ad:7a:e7:f8:dd:dc:5d:75:61:3c:7f:df:
15:fa:fd:6d:69:39:7b:bd:e9:5d:37:78:20:e6:c6:53:44:69:
2b:e2:43:6e:a4:a4:fe:4d:7f:02:3b:4f:39:e0:6a:be:70:e7:
ac:e2:3a:f2:ac:af:9e:23:3d:83:59:26:eb:67:99:72:ab:df:
36:a2:5c:73:81:74:df:8a:1e:dc:c3:c4:36:cb:66:1f:42:1e:
24:60:33:0a:09:eb:1a:9e:16:01:4d:f6:89:c3:0c:86:d1:e9:
c9:86:9d:29:59:67:20:00:67:5d:ca:4c:48:71:47:e7:1d:77:
39:a2:44:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:24:37 2025 by rpki-client