Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/552e68-611d-4ad8-a7e1-48bfac2cdc72/1/Ltf7wd8AcKz1s6Z85OIS29A6-tc.mft
File: Ltf7wd8AcKz1s6Z85OIS29A6-tc.mft (raw, json)
Hash identifier: zUgX670Mrj54NUghKX0+Ty+6TK48ZnJNyszaPngY2VU=
Subject key identifier: B1:31:8A:41:57:D0:C6:07:95:92:B6:66:15:5D:54:1A:B2:C8:1E:D4
Authority key identifier: 2E:D7:FB:C1:DF:00:70:AC:F5:B3:A6:7C:E4:E2:12:DB:D0:3A:FA:D7
Certificate issuer: /CN=2ed7fbc1df0070acf5b3a67ce4e212dbd03afad7
Certificate serial: 0194BBCE76A539D6ED36A0C4BEC9AB4F8F2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ltf7wd8AcKz1s6Z85OIS29A6-tc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/552e68-611d-4ad8-a7e1-48bfac2cdc72/1/Ltf7wd8AcKz1s6Z85OIS29A6-tc.mft
Manifest number: 0456
Signing time: Fri 31 Jan 2025 10:00:57 +0000
Manifest this update: Fri 31 Jan 2025 10:00:57 +0000
Manifest next update: Sat 01 Feb 2025 10:00:57 +0000
Files and hashes: 1: Ltf7wd8AcKz1s6Z85OIS29A6-tc.crl (hash: gWdQiVDm0Rvlru6Js7JQMXpJ9eVfYvuP6/53gvej/EQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:76:a5:39:d6:ed:36:a0:c4:be:c9:ab:4f:8f:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ed7fbc1df0070acf5b3a67ce4e212dbd03afad7
Validity
Not Before: Jan 31 10:00:57 2025 GMT
Not After : Feb 1 10:00:57 2025 GMT
Subject: CN=b1318a4157d0c6079592b666155d541ab2c81ed4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:86:d7:cf:28:9d:00:51:03:ae:b1:a8:a0:64:
90:56:ff:9a:8a:5c:66:d3:a4:a2:8a:5b:c0:6a:1e:
64:f8:c8:67:64:70:2d:ad:1e:64:9f:59:80:c4:da:
8b:68:5a:07:ca:b1:ca:68:f1:60:b5:60:a8:ce:26:
c9:05:21:fe:5c:2f:3d:87:a4:f8:9a:68:08:c8:9c:
7d:59:ff:1b:c3:2d:20:f0:65:2d:b1:1a:68:61:6c:
62:03:07:65:89:50:07:9e:4a:f6:5c:4e:c8:3c:e1:
e8:57:3b:f2:8e:d1:1f:0e:21:04:ce:02:78:82:fb:
97:51:cb:cf:ae:fe:96:13:22:28:29:ec:1f:87:f7:
d4:c2:6e:90:3c:93:76:c7:9d:b0:5b:a1:41:12:0d:
92:02:c5:53:56:5e:87:98:be:df:31:e6:1d:05:95:
36:37:d3:87:23:94:4f:92:07:e6:d2:89:9c:d5:25:
cb:ff:62:a1:72:1f:b3:d7:9d:a5:30:f9:24:a6:9c:
78:12:29:cd:31:ec:d3:9a:d0:86:fd:b4:e5:46:e9:
51:16:04:9d:44:5d:41:01:2e:27:b9:2e:fe:f2:49:
94:c4:3f:81:46:78:f7:d0:9d:ea:ed:2f:42:02:7f:
ec:eb:1d:66:57:2e:06:08:ad:57:13:18:02:ee:da:
a9:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:31:8A:41:57:D0:C6:07:95:92:B6:66:15:5D:54:1A:B2:C8:1E:D4
X509v3 Authority Key Identifier:
keyid:2E:D7:FB:C1:DF:00:70:AC:F5:B3:A6:7C:E4:E2:12:DB:D0:3A:FA:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ltf7wd8AcKz1s6Z85OIS29A6-tc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/552e68-611d-4ad8-a7e1-48bfac2cdc72/1/Ltf7wd8AcKz1s6Z85OIS29A6-tc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/552e68-611d-4ad8-a7e1-48bfac2cdc72/1/Ltf7wd8AcKz1s6Z85OIS29A6-tc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:0d:f9:11:18:11:5b:a6:46:1c:6e:16:d6:6f:43:91:f3:2d:
08:6f:31:20:77:5b:35:ef:c9:75:73:07:2a:3c:f7:6b:86:73:
01:b4:a4:6e:3c:dc:7a:86:0f:bb:35:37:03:d6:b5:0c:99:cc:
a9:b5:e1:21:c2:50:c0:c3:3a:b0:72:a6:84:e8:ea:08:f6:33:
db:a4:89:7f:d5:56:6c:90:97:f6:a2:73:37:ea:c6:07:a0:45:
70:05:cf:07:3f:b1:c9:59:6c:ee:35:ce:69:b8:b3:4d:64:5c:
2a:fb:79:ba:95:23:99:ac:c2:04:ba:4b:7d:2a:4b:18:20:6f:
1d:4e:54:71:ba:e0:55:13:25:8b:4b:4b:90:dd:01:15:31:dc:
64:26:04:33:64:0b:0d:79:39:33:3e:20:3e:52:5b:45:0d:b6:
b7:0e:13:9b:7d:92:e2:05:38:45:d8:3f:6b:c1:7d:9e:c7:42:
20:18:3c:a4:69:0b:19:09:43:0c:f0:b7:e4:f0:74:7a:89:b7:
b3:64:61:31:07:b4:7f:1f:60:fb:27:b5:cb:77:7c:0a:fc:85:
96:67:29:70:00:47:4a:5f:57:86:e3:37:a1:4b:a4:5b:b8:33:
b1:e8:49:8d:08:0e:a2:03:6d:be:f1:5f:8c:23:4d:b4:82:23:
28:43:25:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 16:44:02 2025 by rpki-client