Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/7bd8f3-4753-42cd-8ff3-6333186589a9/1/lg5oyDibCdw0VGSkAK8nZWjn-Wo.mft
File: lg5oyDibCdw0VGSkAK8nZWjn-Wo.mft (raw, json)
Hash identifier: 8hahGNFKSmC2yvIqRQu4wjLP76i3FgKySq0ET5Iq8XM=
Subject key identifier: 67:21:D0:AE:57:9B:20:F0:3A:83:8B:DC:BA:76:64:44:1A:39:28:39
Authority key identifier: 96:0E:68:C8:38:9B:09:DC:34:54:64:A4:00:AF:27:65:68:E7:F9:6A
Certificate issuer: /CN=960e68c8389b09dc345464a400af276568e7f96a
Certificate serial: 0194BC731821C014E83DF5C9DB24187FFEEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lg5oyDibCdw0VGSkAK8nZWjn-Wo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/7bd8f3-4753-42cd-8ff3-6333186589a9/1/lg5oyDibCdw0VGSkAK8nZWjn-Wo.mft
Manifest number: 0CAC
Signing time: Fri 31 Jan 2025 13:00:46 +0000
Manifest this update: Fri 31 Jan 2025 13:00:46 +0000
Manifest next update: Sat 01 Feb 2025 13:00:46 +0000
Files and hashes: 1: lg5oyDibCdw0VGSkAK8nZWjn-Wo.crl (hash: rrkWe6sVdRhxGbjHtuKMGYH1ENFeoMjLsVsinE5k4XA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:18:21:c0:14:e8:3d:f5:c9:db:24:18:7f:fe:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=960e68c8389b09dc345464a400af276568e7f96a
Validity
Not Before: Jan 31 13:00:46 2025 GMT
Not After : Feb 1 13:00:46 2025 GMT
Subject: CN=6721d0ae579b20f03a838bdcba7664441a392839
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e4:33:8a:20:96:3f:8e:78:98:4d:95:9b:66:
87:22:01:39:61:e3:fa:f9:f4:45:f6:5a:72:46:d1:
e0:50:28:b4:92:20:1f:22:92:56:3f:11:df:22:8f:
28:43:71:83:a1:14:ae:7a:b1:bf:1e:4f:93:2c:52:
25:9f:65:6a:16:8c:67:68:62:44:7c:a4:1c:0b:1a:
a3:31:29:6c:6c:1a:07:1a:98:46:ae:52:b2:8d:fd:
04:b5:3b:69:c2:17:34:fd:57:00:49:a1:3b:86:9b:
40:26:2c:ac:d6:d9:2b:fc:7a:8f:ae:b7:03:28:a6:
f3:5f:c4:06:3b:91:6a:a4:b8:cb:96:cf:ab:83:03:
04:84:8a:37:78:3f:c6:2a:14:fc:1f:85:8a:de:bf:
6a:eb:dc:fb:44:3d:7f:ce:6b:5f:92:58:26:0b:0c:
24:d8:48:f0:92:20:bc:1f:15:17:dc:ef:56:5b:b9:
1e:c9:0e:5f:0d:4a:c9:0b:82:c9:6a:33:36:3a:30:
6a:45:5d:9c:d7:0b:c2:b6:8f:7f:4d:f6:8d:13:a3:
d0:77:c2:47:8b:8d:44:1b:f9:49:3c:05:d7:52:02:
10:0f:3a:4f:50:9a:07:a6:06:bd:39:cd:59:cd:33:
88:55:ff:9f:66:49:b2:65:8f:07:cf:f6:ef:0f:f7:
7d:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:21:D0:AE:57:9B:20:F0:3A:83:8B:DC:BA:76:64:44:1A:39:28:39
X509v3 Authority Key Identifier:
keyid:96:0E:68:C8:38:9B:09:DC:34:54:64:A4:00:AF:27:65:68:E7:F9:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lg5oyDibCdw0VGSkAK8nZWjn-Wo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/7bd8f3-4753-42cd-8ff3-6333186589a9/1/lg5oyDibCdw0VGSkAK8nZWjn-Wo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/7bd8f3-4753-42cd-8ff3-6333186589a9/1/lg5oyDibCdw0VGSkAK8nZWjn-Wo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:a1:cc:be:12:18:9f:e7:46:b1:7a:4f:5e:70:9d:5a:c3:a9:
b1:ca:25:ef:af:c6:59:79:34:52:4c:e0:78:54:42:24:ab:c0:
19:1a:25:a1:c8:17:39:cc:d6:73:4e:a0:b0:a7:bb:3b:04:dd:
d3:ff:06:2c:1d:02:1c:0d:32:e5:ee:ab:29:3d:b3:e7:bc:5f:
87:f5:86:79:c7:be:26:e9:dc:92:b6:be:73:1e:5a:97:57:1e:
ed:6f:be:eb:99:b3:20:eb:68:a2:2a:65:67:1a:1c:af:26:3b:
dd:14:15:dd:b2:c0:3d:5f:2f:da:0a:29:a2:7e:13:79:d4:e0:
fe:d3:9a:9c:8a:26:a6:60:6a:eb:4e:d8:a9:9b:ad:da:43:8f:
77:e1:a0:62:81:66:e2:93:5e:f9:06:0e:1e:44:96:b9:82:3c:
5a:fd:b4:cc:54:f8:69:f3:dc:6a:c6:59:a0:13:13:e3:ff:cd:
09:aa:2c:1f:3a:0e:a5:53:fb:9a:fc:19:1d:3f:4f:ee:df:11:
f4:01:c8:42:95:5b:6c:50:52:30:2d:b1:c0:cd:db:15:a5:97:
e9:80:17:5d:52:bf:5a:1d:eb:3c:9c:de:82:53:2a:a3:d0:00:
89:64:45:af:8a:20:1a:20:ed:80:68:85:44:30:a8:cb:9b:d8:
a5:2b:73:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:47:07 2025 by rpki-client