Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/edc41e-352e-412b-9ae6-a0951ef7dfcd/1/lkptHqRrxAuqMavE9ByQZn7-Nu0.mft
File: lkptHqRrxAuqMavE9ByQZn7-Nu0.mft (raw, json)
Hash identifier: 8H/vnKXld1lF7LW9aywexe0Skw8uAELX/tkuwzBYi6c=
Subject key identifier: 46:BC:EC:05:51:BF:E9:91:16:A4:A1:BA:D2:87:CD:76:25:00:17:1C
Authority key identifier: 96:4A:6D:1E:A4:6B:C4:0B:AA:31:AB:C4:F4:1C:90:66:7E:FE:36:ED
Certificate issuer: /CN=964a6d1ea46bc40baa31abc4f41c90667efe36ed
Certificate serial: 0194BBCDF87529F42AA1386D8DC65FAF0226
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lkptHqRrxAuqMavE9ByQZn7-Nu0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/edc41e-352e-412b-9ae6-a0951ef7dfcd/1/lkptHqRrxAuqMavE9ByQZn7-Nu0.mft
Manifest number: 04F6
Signing time: Fri 31 Jan 2025 10:00:25 +0000
Manifest this update: Fri 31 Jan 2025 10:00:25 +0000
Manifest next update: Sat 01 Feb 2025 10:00:25 +0000
Files and hashes: 1: lkptHqRrxAuqMavE9ByQZn7-Nu0.crl (hash: SYNSOzNPV1hD/PQW8gh48IHvI7d08BZ0d9j9JKWD+GI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:f8:75:29:f4:2a:a1:38:6d:8d:c6:5f:af:02:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=964a6d1ea46bc40baa31abc4f41c90667efe36ed
Validity
Not Before: Jan 31 10:00:25 2025 GMT
Not After : Feb 1 10:00:25 2025 GMT
Subject: CN=46bcec0551bfe99116a4a1bad287cd762500171c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:d0:63:5b:34:d0:9d:55:78:b8:c1:4a:50:dd:
42:29:66:8b:8b:f3:c9:a5:7c:64:41:8d:7b:26:5d:
40:d5:53:90:55:92:d6:e0:3c:9a:eb:87:a2:43:8a:
b3:21:85:dd:e6:3d:e2:b5:f1:0a:18:5c:2a:16:fb:
b1:a3:36:be:b8:ea:87:24:20:d8:97:55:d5:62:64:
95:36:e7:8e:41:2b:5d:41:04:d4:e0:52:d6:eb:d6:
11:42:96:25:16:20:a3:96:cb:1d:a4:42:ca:ce:6b:
c8:93:3e:de:3e:67:27:a6:89:f6:8b:1a:85:87:7f:
f0:28:d7:23:e1:e4:a7:5d:f7:84:86:b4:40:c0:d6:
08:b6:8c:1f:0a:91:0e:28:e3:14:92:17:16:17:7f:
cf:df:e6:f7:06:0f:6b:ba:5b:a9:ab:63:da:01:f3:
4b:ff:3b:61:60:4d:19:ec:7d:e3:1c:25:08:82:ea:
7b:e2:31:7d:a5:fd:22:46:03:0a:ee:63:c4:7c:20:
1a:30:65:fa:fa:c2:ff:b7:a4:cf:34:42:71:a2:bb:
df:62:9e:cd:bd:da:bf:d7:71:e5:00:d9:91:e6:f0:
0c:b5:ca:07:63:fa:54:21:90:ab:c9:4c:84:b5:b3:
38:f0:ac:15:1f:92:93:89:6b:d9:40:ec:54:4d:2b:
f0:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:BC:EC:05:51:BF:E9:91:16:A4:A1:BA:D2:87:CD:76:25:00:17:1C
X509v3 Authority Key Identifier:
keyid:96:4A:6D:1E:A4:6B:C4:0B:AA:31:AB:C4:F4:1C:90:66:7E:FE:36:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lkptHqRrxAuqMavE9ByQZn7-Nu0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/edc41e-352e-412b-9ae6-a0951ef7dfcd/1/lkptHqRrxAuqMavE9ByQZn7-Nu0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/edc41e-352e-412b-9ae6-a0951ef7dfcd/1/lkptHqRrxAuqMavE9ByQZn7-Nu0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:3b:52:c0:d6:29:7c:64:70:dd:07:fc:f4:a7:6e:ab:04:36:
a7:54:b6:f0:03:86:d4:92:2e:9e:23:b7:f0:70:c4:a6:e2:b0:
e4:ce:7e:a7:d2:bd:db:e8:1f:08:6f:8d:bc:79:3e:ce:a9:f6:
8e:ef:64:15:78:64:24:7f:44:e6:9f:8f:81:71:5e:10:09:2a:
d0:2a:bc:04:e8:ad:22:29:e5:6d:5e:81:41:69:eb:41:2b:1f:
8c:26:e0:48:bf:08:d7:85:5e:35:3e:fd:7b:6d:ad:d6:1a:f8:
5f:c0:8c:6e:f8:85:73:b7:25:94:84:bd:bd:b1:92:4e:1d:e9:
85:d1:40:4f:3e:c4:8d:c2:ff:21:b1:a1:7c:f4:b6:fa:5b:87:
23:0d:f7:9c:f4:8c:ce:84:5b:1f:53:0c:22:00:41:8e:c8:c3:
56:23:5f:9f:67:25:c0:67:1f:e2:c3:51:53:fc:ea:68:5f:d4:
37:7d:9d:bd:30:39:30:c3:26:fb:be:7f:22:e8:9f:31:f1:5c:
88:de:07:f2:45:c5:48:cc:71:6b:a8:ea:c6:0f:14:7e:f3:b4:
e7:23:23:f8:92:d9:99:38:a1:2c:4a:42:5d:9c:2f:83:d5:22:
e2:75:72:fa:24:1b:dc:72:25:12:62:5e:44:17:3d:5a:de:e2:
42:08:c7:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 11:26:08 2025 by rpki-client