Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/23ca21-bceb-433e-b7d9-7b003984b863/1/lHXt3Klbc2ZTpMn52RVA0tPvtT0.mft
File: lHXt3Klbc2ZTpMn52RVA0tPvtT0.mft (raw, json)
Hash identifier: D8tBRBDj1DHy5NTjh0RQD0qWJ4PSUT9dznKaXuWRgP0=
Subject key identifier: B4:30:B5:53:31:9B:2D:E2:47:6E:C5:68:15:E6:9A:9C:98:49:13:FC
Authority key identifier: 94:75:ED:DC:A9:5B:73:66:53:A4:C9:F9:D9:15:40:D2:D3:EF:B5:3D
Certificate issuer: /CN=9475eddca95b736653a4c9f9d91540d2d3efb53d
Certificate serial: 0194BD85786192CFBA901128B8A3DE4F51A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lHXt3Klbc2ZTpMn52RVA0tPvtT0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/23ca21-bceb-433e-b7d9-7b003984b863/1/lHXt3Klbc2ZTpMn52RVA0tPvtT0.mft
Manifest number: 68
Signing time: Fri 31 Jan 2025 18:00:28 +0000
Manifest this update: Fri 31 Jan 2025 18:00:28 +0000
Manifest next update: Sat 01 Feb 2025 18:00:28 +0000
Files and hashes: 1: lHXt3Klbc2ZTpMn52RVA0tPvtT0.crl (hash: K1IZSS+kycYFbfeSrrWhNMXjlB6WHpvMbiZVElQqrm0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:78:61:92:cf:ba:90:11:28:b8:a3:de:4f:51:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9475eddca95b736653a4c9f9d91540d2d3efb53d
Validity
Not Before: Jan 31 18:00:28 2025 GMT
Not After : Feb 1 18:00:28 2025 GMT
Subject: CN=b430b553319b2de2476ec56815e69a9c984913fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:1f:84:99:ae:e1:43:17:fd:22:9d:1d:19:4d:
a8:d8:c6:e2:77:87:9f:d1:e6:7d:0f:2f:64:33:6a:
23:42:d4:de:c7:7f:9a:a8:8d:4b:16:dd:0e:05:89:
f7:77:6e:01:77:28:fa:54:3d:2b:18:6d:6b:56:96:
44:08:14:74:f2:3d:27:02:e4:4a:36:77:9d:d8:78:
f8:62:19:d5:73:0a:86:2b:37:14:e1:dc:db:cf:e1:
ad:f7:a8:4e:49:6b:ee:06:c8:9b:63:f3:d1:d0:69:
c5:1c:05:0a:d1:d3:0a:a7:ab:f0:7a:54:bf:02:c4:
1b:14:2f:ec:44:3d:ad:5f:a7:75:4b:70:e0:17:ba:
0a:e6:92:c3:72:d3:83:9a:a0:00:ce:21:6f:55:44:
31:a6:89:d3:a8:2d:dd:8c:b3:a2:cd:d5:c2:ea:9d:
49:0f:8f:fb:a3:56:9d:a0:bf:8c:9b:b2:dd:fd:c6:
28:35:43:2d:eb:6e:4e:97:ae:e3:a8:de:fd:61:8b:
52:21:8c:6d:1a:7a:22:98:d8:3c:e7:4f:7a:54:5e:
f7:57:06:60:10:e3:01:91:54:00:7e:0f:a8:43:5e:
a3:37:42:34:9b:99:57:80:37:aa:e6:ca:c4:24:2b:
42:84:e0:a8:0a:72:cd:22:ae:a4:dc:f6:34:dd:b6:
d5:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:30:B5:53:31:9B:2D:E2:47:6E:C5:68:15:E6:9A:9C:98:49:13:FC
X509v3 Authority Key Identifier:
keyid:94:75:ED:DC:A9:5B:73:66:53:A4:C9:F9:D9:15:40:D2:D3:EF:B5:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lHXt3Klbc2ZTpMn52RVA0tPvtT0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/23ca21-bceb-433e-b7d9-7b003984b863/1/lHXt3Klbc2ZTpMn52RVA0tPvtT0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/23ca21-bceb-433e-b7d9-7b003984b863/1/lHXt3Klbc2ZTpMn52RVA0tPvtT0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:de:68:fd:83:27:d8:7a:a7:cb:49:0c:78:e1:c2:47:79:a7:
26:3c:27:ac:dd:e6:e6:95:d5:2a:93:d3:37:7a:68:d0:47:cd:
f4:ff:71:81:81:0b:0d:15:60:58:26:7b:3e:21:81:2c:a0:7d:
ae:97:9d:85:f2:77:28:16:3c:86:51:e4:f4:21:af:02:8f:b4:
e1:2a:e7:9b:d4:c7:0e:ae:73:e6:55:89:df:e4:af:0c:de:06:
f7:a6:56:26:6b:45:b5:0b:8f:cc:49:39:63:7a:cf:fc:7e:5d:
7d:9f:e4:d1:35:aa:8f:c0:cd:28:67:1f:e7:7f:b7:c9:a2:20:
f1:27:9b:16:29:80:d7:d8:2e:cb:8e:72:18:fe:e4:82:44:5c:
0d:69:1f:e0:4a:c6:bb:0a:65:55:a6:11:e1:36:98:42:e5:38:
bb:ee:64:24:70:ef:5b:d3:d9:36:b9:d9:fb:84:6a:7d:ad:c7:
e0:75:f7:be:bb:ff:98:f3:09:6a:7c:02:0c:32:45:5d:6d:c6:
15:4f:9a:2a:91:fd:22:7d:54:1b:56:da:1d:dd:f2:b4:e5:92:
5c:69:56:9f:ee:33:14:59:fb:b2:6a:95:33:af:70:1e:0d:fb:
3a:c5:05:c5:90:a3:45:d9:e5:61:cf:64:e1:b4:86:e4:99:78:
af:72:3c:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:11:16 2025 by rpki-client