Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/d05895-d98b-4d6c-af87-172f66b0933c/1/SEpnLpkiPCcMFLXib_82qLzOTPI.mft
File: SEpnLpkiPCcMFLXib_82qLzOTPI.mft (raw, json)
Hash identifier: mQtq94k50WNAKACGOPNE2NoNW7nfZYUXmALg9VrUAeQ=
Subject key identifier: 2E:4A:BD:A9:E8:CE:4E:E5:6D:D5:0C:09:9E:FA:73:4A:7E:44:7E:16
Authority key identifier: 48:4A:67:2E:99:22:3C:27:0C:14:B5:E2:6F:FF:36:A8:BC:CE:4C:F2
Certificate issuer: /CN=484a672e99223c270c14b5e26fff36a8bcce4cf2
Certificate serial: 0194BCAA12C17F68059882E7ABCD3C62DCB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SEpnLpkiPCcMFLXib_82qLzOTPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/d05895-d98b-4d6c-af87-172f66b0933c/1/SEpnLpkiPCcMFLXib_82qLzOTPI.mft
Manifest number: 1428
Signing time: Fri 31 Jan 2025 14:00:49 +0000
Manifest this update: Fri 31 Jan 2025 14:00:49 +0000
Manifest next update: Sat 01 Feb 2025 14:00:49 +0000
Files and hashes: 1: SEpnLpkiPCcMFLXib_82qLzOTPI.crl (hash: Nx8QDdoItI6ZHN6q3zGOSntTwURDMY39oAqSBhbSF3M=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:12:c1:7f:68:05:98:82:e7:ab:cd:3c:62:dc:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=484a672e99223c270c14b5e26fff36a8bcce4cf2
Validity
Not Before: Jan 31 14:00:49 2025 GMT
Not After : Feb 1 14:00:49 2025 GMT
Subject: CN=2e4abda9e8ce4ee56dd50c099efa734a7e447e16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:6e:28:dd:04:18:17:31:b7:f9:a4:94:fc:7b:
00:f9:61:48:0a:6d:6c:ee:d7:76:23:99:9b:73:8b:
66:35:9d:87:e5:8f:8d:8b:c2:1b:79:0b:ff:10:4f:
6d:70:6f:9c:bf:0d:7a:ba:32:cb:64:62:ec:c5:0f:
01:03:dd:40:51:c6:6c:43:17:87:94:36:9a:95:f4:
12:f2:cc:0e:27:ea:3c:17:3c:2a:af:da:84:5d:8e:
c7:48:90:79:05:20:90:2e:32:24:42:a3:e0:65:38:
36:da:5b:15:d0:be:81:d0:11:dd:ad:a5:a0:50:b4:
e1:28:f9:57:93:e8:ef:80:a1:fb:a9:78:6e:19:f2:
84:24:d4:ec:bc:99:5e:39:82:02:38:53:16:46:fe:
09:90:cf:fc:81:a3:32:d2:07:d7:ce:9a:28:5c:79:
85:b0:70:74:95:09:bd:17:ff:41:84:f4:87:1a:9c:
0f:5f:07:5e:d9:e2:2f:4d:27:00:72:b3:9c:9d:37:
43:52:12:13:ab:11:3f:19:fd:30:31:04:51:b1:b5:
32:2c:ad:fb:71:cb:d8:60:b7:39:bf:26:21:1e:e0:
d8:46:71:29:51:f2:a7:fc:f6:9d:cb:bc:39:e6:36:
31:98:62:f6:98:f4:d8:85:e8:8e:0c:48:c9:0d:31:
31:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:4A:BD:A9:E8:CE:4E:E5:6D:D5:0C:09:9E:FA:73:4A:7E:44:7E:16
X509v3 Authority Key Identifier:
keyid:48:4A:67:2E:99:22:3C:27:0C:14:B5:E2:6F:FF:36:A8:BC:CE:4C:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SEpnLpkiPCcMFLXib_82qLzOTPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/d05895-d98b-4d6c-af87-172f66b0933c/1/SEpnLpkiPCcMFLXib_82qLzOTPI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/d05895-d98b-4d6c-af87-172f66b0933c/1/SEpnLpkiPCcMFLXib_82qLzOTPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:4f:3b:07:bd:79:57:52:21:a0:67:e9:62:69:11:59:4a:cb:
dd:b5:e2:a2:30:01:d0:6e:05:d9:98:3c:a6:a3:1b:de:5a:09:
11:b8:17:a9:d2:54:4b:91:08:e8:cc:b6:b7:df:e1:47:4a:3f:
3c:91:62:b8:4f:5a:af:be:a6:d4:cc:e0:42:67:56:84:19:83:
d1:41:0a:2e:e5:69:c4:2e:a2:bb:c4:3b:f8:6f:5f:46:04:29:
e1:a2:49:37:72:69:bf:72:f4:a8:a5:da:df:d4:be:8d:d5:ba:
a6:27:87:8a:ae:93:62:cc:4b:3b:25:eb:57:d6:16:c7:2a:39:
86:35:f6:5f:92:3a:43:55:0b:2f:09:0b:88:19:f4:7e:2a:e3:
08:51:37:e8:01:e5:38:81:c9:e1:f2:4d:5d:e4:49:ae:24:65:
b0:72:27:35:75:50:46:af:66:e0:36:c8:60:bd:98:22:7d:ad:
af:c7:c7:78:5f:c4:9b:62:8b:66:67:eb:a1:a1:da:28:ae:e6:
d8:ca:5c:07:9e:d9:36:43:7d:dd:e0:e4:4c:0a:fe:7f:cf:82:
5a:ff:77:89:c7:79:3d:03:14:d7:07:bf:c3:79:bd:3f:8a:f2:
26:07:ec:86:82:c3:3c:a9:60:8e:d5:57:7c:5b:c3:26:74:da:
9a:e7:21:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:39:33 2025 by rpki-client