Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/6fff4a-f984-4b1f-9b2b-3d792fb905ee/1/LswQU0wEJcv21GXoQRT_euDwsFI.mft
File: LswQU0wEJcv21GXoQRT_euDwsFI.mft (raw, json)
Hash identifier: Vrcgyf8LqIYWDIRTHpcy+DgWrGRNrAKIij+dKBAd1Mg=
Subject key identifier: 17:C1:14:99:B3:0D:F7:90:67:83:26:93:5C:A6:73:6B:2C:42:CD:2A
Authority key identifier: 2E:CC:10:53:4C:04:25:CB:F6:D4:65:E8:41:14:FF:7A:E0:F0:B0:52
Certificate issuer: /CN=2ecc10534c0425cbf6d465e84114ff7ae0f0b052
Certificate serial: 0194BBCE8644F492160421771E2D81196572
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LswQU0wEJcv21GXoQRT_euDwsFI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/6fff4a-f984-4b1f-9b2b-3d792fb905ee/1/LswQU0wEJcv21GXoQRT_euDwsFI.mft
Manifest number: 04A9
Signing time: Fri 31 Jan 2025 10:01:01 +0000
Manifest this update: Fri 31 Jan 2025 10:01:01 +0000
Manifest next update: Sat 01 Feb 2025 10:01:01 +0000
Files and hashes: 1: LswQU0wEJcv21GXoQRT_euDwsFI.crl (hash: 35f1WJ95TadMjKxTJNnPmxfteJk/+CRQZJEQLL3pIIs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:86:44:f4:92:16:04:21:77:1e:2d:81:19:65:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ecc10534c0425cbf6d465e84114ff7ae0f0b052
Validity
Not Before: Jan 31 10:01:01 2025 GMT
Not After : Feb 1 10:01:01 2025 GMT
Subject: CN=17c11499b30df790678326935ca6736b2c42cd2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e2:a6:31:88:a1:ec:ca:05:7c:2d:03:73:8d:
a0:c6:30:40:38:06:c4:db:24:21:28:a1:c4:24:6e:
89:1a:be:1e:7c:63:bc:86:ca:2a:f2:c1:32:99:cd:
55:eb:15:85:2a:d5:2c:e2:95:0e:d5:8e:21:5c:a9:
73:0e:ff:5e:0b:8c:ac:7f:0a:72:86:e8:50:a7:49:
6b:ab:db:3c:58:ad:7c:bc:54:f6:da:39:e8:02:5d:
cd:4b:b4:45:4f:01:5f:21:f1:70:90:cb:31:ae:a4:
87:10:ac:ed:16:00:6d:65:12:15:ac:aa:30:70:3f:
41:2b:a7:f3:d9:8a:96:65:d8:b0:7b:69:f5:ff:de:
7d:a7:a2:79:ab:b0:1d:67:9d:79:f9:67:14:fa:1c:
c6:e6:89:e5:e7:e3:bf:c9:68:4b:d8:5b:f8:0e:24:
ae:c2:71:6a:50:52:bf:db:8c:d8:14:40:be:05:18:
a2:92:f8:cf:fd:eb:c9:ef:b8:f8:e6:fc:3d:6f:9d:
62:db:3a:1d:cb:2d:d6:57:8c:5e:f5:9e:f0:12:3d:
3b:57:50:7d:61:f0:06:6d:96:1a:61:47:0f:9f:d2:
f3:3c:c0:51:33:82:08:c8:2c:ad:e9:8f:84:a2:a4:
0b:c7:cf:ff:1e:04:6a:bb:a8:43:bc:36:eb:b0:59:
e2:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:C1:14:99:B3:0D:F7:90:67:83:26:93:5C:A6:73:6B:2C:42:CD:2A
X509v3 Authority Key Identifier:
keyid:2E:CC:10:53:4C:04:25:CB:F6:D4:65:E8:41:14:FF:7A:E0:F0:B0:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LswQU0wEJcv21GXoQRT_euDwsFI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6fff4a-f984-4b1f-9b2b-3d792fb905ee/1/LswQU0wEJcv21GXoQRT_euDwsFI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6fff4a-f984-4b1f-9b2b-3d792fb905ee/1/LswQU0wEJcv21GXoQRT_euDwsFI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:66:b3:9b:6e:e2:67:ba:a6:2d:aa:53:88:4a:71:69:ad:d9:
a7:7c:14:9f:47:c6:0c:3f:ad:10:aa:24:5d:43:da:70:3b:7d:
0c:75:5b:83:c5:8b:78:3b:f9:3d:ed:00:44:3a:f8:ac:62:6c:
b0:7e:74:b5:ad:77:62:99:35:bd:ba:c6:c6:d8:26:45:7f:d5:
cf:3f:17:f7:1d:1c:66:98:4a:2f:9f:18:fb:8b:29:b5:f3:9a:
78:bb:99:f0:ef:89:33:22:7c:59:3c:a9:13:31:7b:d9:98:12:
7d:01:29:43:9a:39:0f:cf:ae:19:2a:c9:42:3c:bf:0c:97:b2:
d7:92:c3:49:05:1b:27:91:91:2f:15:7d:16:9f:74:4c:10:05:
01:c2:d2:df:f5:08:a0:57:5d:69:77:d2:18:2c:04:ad:b9:da:
ff:09:90:2e:e4:db:b6:e2:84:bc:41:0c:ad:cf:e8:03:da:54:
b8:cb:e8:4c:6a:1d:05:65:7b:59:05:9f:f6:6a:b0:b8:c4:81:
3a:4f:b2:de:a6:20:9f:7e:27:4a:37:8e:96:cd:33:e4:d0:2f:
ee:b2:11:e1:e2:fb:91:0a:6b:18:4c:2c:c3:82:03:18:8a:dc:
79:a7:a2:f1:3d:22:99:52:81:7a:65:61:c5:bb:e3:3a:8a:5d:
06:03:3c:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:47:08 2025 by rpki-client