Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/8d9aa5-d52a-486f-b64c-7c605d32165d/1/lGIh95q-ptPAw0gGQlkN0K4Mqjs.mft
File: lGIh95q-ptPAw0gGQlkN0K4Mqjs.mft (raw, json)
Hash identifier: 6RXfNo3AT7wGd5w8+y2CKOSqlZaqVJmzcb7USz0PLkg=
Subject key identifier: 23:ED:C4:61:AA:B9:FC:F4:E7:2B:5C:F4:43:FE:41:D0:23:76:19:28
Authority key identifier: 94:62:21:F7:9A:BE:A6:D3:C0:C3:48:06:42:59:0D:D0:AE:0C:AA:3B
Certificate issuer: /CN=946221f79abea6d3c0c3480642590dd0ae0caa3b
Certificate serial: 0194BBCE23B243C5BBBCF804DD0AF9ADCD62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lGIh95q-ptPAw0gGQlkN0K4Mqjs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/8d9aa5-d52a-486f-b64c-7c605d32165d/1/lGIh95q-ptPAw0gGQlkN0K4Mqjs.mft
Manifest number: 112A
Signing time: Fri 31 Jan 2025 10:00:36 +0000
Manifest this update: Fri 31 Jan 2025 10:00:36 +0000
Manifest next update: Sat 01 Feb 2025 10:00:36 +0000
Files and hashes: 1: lGIh95q-ptPAw0gGQlkN0K4Mqjs.crl (hash: BpLbVjKHguty/P2uV9RE2JGj6YMJwPQcIpwpQ3vVYy4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:23:b2:43:c5:bb:bc:f8:04:dd:0a:f9:ad:cd:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=946221f79abea6d3c0c3480642590dd0ae0caa3b
Validity
Not Before: Jan 31 10:00:36 2025 GMT
Not After : Feb 1 10:00:36 2025 GMT
Subject: CN=23edc461aab9fcf4e72b5cf443fe41d023761928
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:50:28:18:3a:5f:f6:43:a0:19:24:d8:28:af:
c6:4b:6a:61:cf:b4:8f:e7:02:42:41:73:25:41:60:
06:92:d9:42:30:9f:30:80:d9:8b:03:3b:b7:76:22:
82:72:85:ad:bf:2f:9a:90:7a:c3:1a:60:8b:10:ca:
8d:37:e4:6d:b0:ce:1d:79:41:5e:4c:82:ef:7b:08:
d7:ec:42:dc:85:bb:1a:21:3e:22:f7:06:50:46:bc:
ae:e7:28:9b:e1:ec:d9:7d:3e:17:ca:7d:96:ec:0a:
69:3c:52:44:0f:6e:a2:ac:db:e7:60:ea:53:b4:0d:
91:7a:bf:b2:97:ec:51:4e:eb:36:f2:bd:85:8e:ce:
79:bd:23:73:24:d7:a8:e2:79:ea:51:6e:47:54:6f:
79:b0:9c:7f:52:1b:87:67:f2:3e:53:e3:12:0f:f0:
99:4d:b4:1a:71:bc:45:13:dd:e7:18:55:00:63:ca:
dd:64:7a:2c:49:5d:77:19:f9:4f:58:3f:d2:42:31:
98:0c:21:2c:ef:40:7a:61:3b:e6:ea:84:3b:74:85:
55:8a:07:5f:88:58:74:42:f6:c3:d9:7b:4d:1a:42:
37:4d:ac:57:28:9f:be:be:6f:13:56:b3:32:20:2c:
94:22:b6:e2:95:e4:ca:af:92:ef:f9:34:3f:07:8f:
65:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:ED:C4:61:AA:B9:FC:F4:E7:2B:5C:F4:43:FE:41:D0:23:76:19:28
X509v3 Authority Key Identifier:
keyid:94:62:21:F7:9A:BE:A6:D3:C0:C3:48:06:42:59:0D:D0:AE:0C:AA:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lGIh95q-ptPAw0gGQlkN0K4Mqjs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/8d9aa5-d52a-486f-b64c-7c605d32165d/1/lGIh95q-ptPAw0gGQlkN0K4Mqjs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/8d9aa5-d52a-486f-b64c-7c605d32165d/1/lGIh95q-ptPAw0gGQlkN0K4Mqjs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:ce:c9:9c:e6:53:eb:f1:6d:4e:2c:84:40:d5:23:74:19:e0:
02:a8:a8:72:80:d5:47:75:f1:1e:6c:ad:c7:59:32:95:65:41:
74:2e:1d:f9:4e:3d:b2:04:ee:5d:7b:a2:28:a1:b8:dc:5a:71:
fc:8e:e3:94:c8:b1:e5:ad:41:30:45:41:8e:f3:f9:30:ba:1f:
38:78:2d:79:a5:dd:38:3d:61:59:53:45:8a:a8:72:1b:95:0e:
a9:b5:f2:33:59:f6:fd:2e:27:5d:34:31:6e:fb:b1:05:4f:37:
b6:25:47:91:af:4f:d6:76:f4:41:99:b6:76:cb:f5:98:bf:7d:
7f:2f:55:de:26:5a:9b:6c:4c:c7:45:53:79:26:db:8a:7d:47:
a2:1a:68:7b:77:95:e7:24:f3:7a:ca:4d:11:d4:90:f5:de:ad:
4e:85:bb:05:05:79:e1:c7:2f:31:4b:12:fe:d4:8e:96:06:61:
9d:88:82:5e:dd:9f:07:bd:36:2d:55:cc:6a:b4:73:47:25:f1:
3c:e0:c1:0b:6d:5a:8c:91:02:c9:45:89:4a:a8:c2:e2:cc:eb:
d8:d8:8e:65:1f:08:c9:7c:2a:8e:5a:ef:01:85:66:9b:b9:96:
1d:fc:c2:be:7b:0a:7f:bc:34:0a:4b:be:5a:93:ba:49:5f:bb:
0a:55:a5:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 23:43:59 2025 by rpki-client