Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/09f928-a27f-4e3a-b7ff-9e85436191ee/1/LcVu4MxDzuIoxAzk_Ect1OvbHfw.mft
File: LcVu4MxDzuIoxAzk_Ect1OvbHfw.mft (raw, json)
Hash identifier: Y+jUNBGOU7v9YzsHIEK1ian0dJY4u6UpL8hV0E2kGAI=
Subject key identifier: B1:65:29:60:96:BD:FD:0E:8E:D0:9E:2C:74:32:65:AD:58:DC:86:8C
Authority key identifier: 2D:C5:6E:E0:CC:43:CE:E2:28:C4:0C:E4:FC:47:2D:D4:EB:DB:1D:FC
Certificate issuer: /CN=2dc56ee0cc43cee228c40ce4fc472dd4ebdb1dfc
Certificate serial: 0194BD4E73A728C5486A1931FB701F6AE13C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LcVu4MxDzuIoxAzk_Ect1OvbHfw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/09f928-a27f-4e3a-b7ff-9e85436191ee/1/LcVu4MxDzuIoxAzk_Ect1OvbHfw.mft
Manifest number: E0
Signing time: Fri 31 Jan 2025 17:00:22 +0000
Manifest this update: Fri 31 Jan 2025 17:00:22 +0000
Manifest next update: Sat 01 Feb 2025 17:00:22 +0000
Files and hashes: 1: LcVu4MxDzuIoxAzk_Ect1OvbHfw.crl (hash: t1o9uqGmcdUW/AOa4WrdG+5yMuA35d+nzvgHxlu6TqM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:73:a7:28:c5:48:6a:19:31:fb:70:1f:6a:e1:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2dc56ee0cc43cee228c40ce4fc472dd4ebdb1dfc
Validity
Not Before: Jan 31 17:00:22 2025 GMT
Not After : Feb 1 17:00:22 2025 GMT
Subject: CN=b165296096bdfd0e8ed09e2c743265ad58dc868c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:dc:08:b7:a2:dc:2d:15:76:e5:6c:8c:38:1f:
98:07:11:12:26:f0:02:44:9c:78:4a:dd:5d:5f:3d:
f3:8d:6b:f5:8c:fa:f2:43:60:3a:f8:b1:29:20:72:
42:b4:22:61:47:61:61:13:c7:c4:cb:37:18:0e:32:
a6:92:68:0c:cb:a8:d9:14:58:3e:da:dc:c9:e1:66:
28:7c:3e:d3:74:20:0d:49:a7:a5:14:e0:36:f3:53:
99:47:1f:b1:f6:aa:d9:a6:98:f5:96:fb:3f:08:73:
84:f0:88:ce:db:c6:c0:80:43:ce:59:e8:5d:60:d9:
f9:bb:54:fc:62:32:46:61:2b:47:a8:2a:1c:3f:d5:
2e:b9:c2:a7:fe:52:9c:83:8f:a4:06:3f:14:b3:5d:
e7:1b:75:cc:0f:bf:04:55:0b:57:85:c3:b7:44:e6:
b2:6c:bd:46:b5:9c:d4:b0:d2:db:f1:30:f6:b4:6e:
1c:5e:37:6c:6a:39:89:ba:8f:4b:76:5d:81:ee:d2:
81:b4:26:93:07:bf:10:c6:c2:4f:40:84:ee:45:93:
b2:d7:59:75:81:06:3e:b5:6e:d7:e1:a6:50:e0:d6:
73:ee:48:e4:eb:c6:3a:ac:29:ad:b1:8d:e8:f4:90:
4a:c2:20:8e:b6:a1:e2:c3:f4:6d:fe:00:f0:e5:2b:
0c:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:65:29:60:96:BD:FD:0E:8E:D0:9E:2C:74:32:65:AD:58:DC:86:8C
X509v3 Authority Key Identifier:
keyid:2D:C5:6E:E0:CC:43:CE:E2:28:C4:0C:E4:FC:47:2D:D4:EB:DB:1D:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LcVu4MxDzuIoxAzk_Ect1OvbHfw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/09f928-a27f-4e3a-b7ff-9e85436191ee/1/LcVu4MxDzuIoxAzk_Ect1OvbHfw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/09f928-a27f-4e3a-b7ff-9e85436191ee/1/LcVu4MxDzuIoxAzk_Ect1OvbHfw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:db:58:f7:8d:98:67:e5:5f:8f:5d:92:66:74:a7:58:e6:45:
d1:6f:2a:c1:5f:9b:30:df:6a:ef:9b:61:70:02:30:35:85:5d:
91:91:d8:cd:66:28:00:5c:37:fe:bc:f5:84:68:bb:4f:2b:fd:
e6:48:f1:b2:e1:28:99:e7:fc:74:9e:c6:91:d7:3c:d2:52:58:
7a:fe:b6:d7:08:e2:c8:2a:7a:c5:14:ff:50:ce:a9:e1:0b:ed:
89:56:36:a6:97:50:d5:72:ec:1f:f9:ef:22:ca:73:5f:b5:7a:
9a:fb:d1:86:b1:3f:f8:be:f3:e9:b9:12:c3:38:61:5a:d3:22:
1e:4b:ae:d1:cc:d2:6b:10:ca:83:f2:7a:c0:f7:f8:93:7b:86:
d6:e8:4d:9e:2d:96:c6:aa:28:ba:95:0b:83:85:f6:e2:7f:d5:
5a:19:48:d2:21:af:50:7d:51:b7:c7:0e:aa:43:d4:91:fc:e0:
3c:3c:e1:22:cd:a4:3c:50:cb:47:25:44:aa:80:e4:ad:fc:3d:
b8:45:46:2d:3a:a7:4e:61:c4:fd:a1:30:2f:08:78:c5:cd:6a:
fb:8e:de:43:50:2f:22:ed:ad:ae:b3:e1:f0:64:80:00:fd:9f:
1b:59:84:cd:6a:f4:53:2a:50:be:61:22:93:4b:da:31:ea:cd:
10:08:de:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:51:17 2025 by rpki-client