Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/3ff7a7-27cb-4072-b33b-0248d6afd63f/1/lKTi_J7qzc9bD1CrkyhM07CUIXE.mft
File: lKTi_J7qzc9bD1CrkyhM07CUIXE.mft (raw, json)
Hash identifier: ClOmfEPezw47ZDvnVHpehgXtHY5DzXpp6gjCW1tRcnY=
Subject key identifier: 2F:5C:79:FA:55:7A:40:C0:9B:BA:1E:3C:BC:6E:E8:3B:7D:23:CA:49
Authority key identifier: 94:A4:E2:FC:9E:EA:CD:CF:5B:0F:50:AB:93:28:4C:D3:B0:94:21:71
Certificate issuer: /CN=94a4e2fc9eeacdcf5b0f50ab93284cd3b0942171
Certificate serial: 0194BBCE7EA39931589BCE98C66CAD4B8585
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lKTi_J7qzc9bD1CrkyhM07CUIXE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/3ff7a7-27cb-4072-b33b-0248d6afd63f/1/lKTi_J7qzc9bD1CrkyhM07CUIXE.mft
Manifest number: 0BE9
Signing time: Fri 31 Jan 2025 10:00:59 +0000
Manifest this update: Fri 31 Jan 2025 10:00:59 +0000
Manifest next update: Sat 01 Feb 2025 10:00:59 +0000
Files and hashes: 1: lKTi_J7qzc9bD1CrkyhM07CUIXE.crl (hash: 4rHiysgxVo9apOcoRfdVyDRhzzcFkuf614CrMd5kU/c=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:7e:a3:99:31:58:9b:ce:98:c6:6c:ad:4b:85:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94a4e2fc9eeacdcf5b0f50ab93284cd3b0942171
Validity
Not Before: Jan 31 10:00:59 2025 GMT
Not After : Feb 1 10:00:59 2025 GMT
Subject: CN=2f5c79fa557a40c09bba1e3cbc6ee83b7d23ca49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:45:6e:ad:f7:87:58:3c:64:28:3b:40:00:df:
90:d7:af:59:3d:a4:2b:9e:0f:1d:40:33:a5:03:32:
9a:af:91:e0:46:24:45:b2:15:74:6b:76:90:40:2e:
62:d1:29:d2:cc:c2:19:73:b9:b0:ca:57:86:e0:fe:
6e:fb:26:ac:a0:0c:64:30:44:d6:be:f5:cd:b0:86:
c5:55:be:08:ef:cd:39:6b:8d:3d:8f:48:e6:c9:9c:
19:dc:f7:4d:ad:50:72:ec:2c:68:91:06:b1:b5:3a:
e2:e2:df:47:54:4f:a2:52:78:2f:09:f5:13:63:b1:
8a:e1:75:4e:17:73:be:95:c9:1c:19:51:7e:9a:8f:
75:75:ea:93:a5:09:1c:b9:c4:65:b1:56:9a:94:eb:
b5:24:34:7f:fe:92:a6:8e:e8:e6:8e:5e:ee:2c:90:
0b:63:a1:0b:5b:34:82:6d:3f:78:7f:95:70:19:77:
8b:30:9c:11:c4:f3:00:9d:11:4e:dd:43:df:91:53:
3f:7b:90:84:30:8d:01:f2:50:a8:68:78:c9:cd:31:
00:65:d2:dc:96:19:9a:94:81:2f:d3:2f:14:93:25:
a9:30:03:57:4e:ef:5f:61:3c:52:1f:f8:bc:a8:31:
92:ca:32:b1:08:96:9a:29:b8:9c:5b:ae:e8:61:fd:
97:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:5C:79:FA:55:7A:40:C0:9B:BA:1E:3C:BC:6E:E8:3B:7D:23:CA:49
X509v3 Authority Key Identifier:
keyid:94:A4:E2:FC:9E:EA:CD:CF:5B:0F:50:AB:93:28:4C:D3:B0:94:21:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lKTi_J7qzc9bD1CrkyhM07CUIXE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3ff7a7-27cb-4072-b33b-0248d6afd63f/1/lKTi_J7qzc9bD1CrkyhM07CUIXE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3ff7a7-27cb-4072-b33b-0248d6afd63f/1/lKTi_J7qzc9bD1CrkyhM07CUIXE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:a6:63:c5:b8:ea:9d:d5:22:99:75:8f:fd:84:47:ba:1b:84:
a5:66:9f:c1:8b:c3:b8:70:38:4e:a0:fa:e0:7c:49:4a:7f:19:
b3:29:75:b0:0c:c0:a1:30:a7:3d:0c:ea:8a:5c:b9:87:db:ec:
ee:fb:1b:3b:32:ba:c5:07:34:1a:5c:08:3c:6c:70:c0:02:f3:
d0:04:51:7d:ef:8d:e0:2c:95:45:8e:17:b8:1d:79:55:27:9e:
3a:7a:7f:e2:af:c4:06:19:2a:ba:80:a2:f6:fe:aa:62:f0:b0:
68:5d:cf:42:10:a2:f4:d2:ae:de:be:ea:a9:1d:d0:b2:af:d5:
da:99:99:12:a7:bd:1e:54:c0:42:04:10:5e:19:60:fc:2c:f1:
a6:03:6a:38:98:c6:8b:d4:ce:40:a0:c7:59:c6:7f:19:fd:e9:
6a:fe:7c:c5:55:ef:ec:65:e9:8d:e3:cd:f4:e4:fe:f1:3a:4d:
66:13:dd:70:df:29:e5:75:a4:f2:62:7b:37:cc:61:e7:82:a1:
c5:b0:d1:20:38:19:67:a1:c0:1e:d3:28:5e:19:00:d5:ed:16:
a7:2d:78:d2:46:cb:fc:2a:71:cc:ac:dd:58:80:e8:56:01:45:
66:83:f5:45:d9:da:11:aa:65:d3:2b:ee:90:2e:42:b4:c6:6e:
e1:f9:35:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:25:34 2025 by rpki-client