Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/4b1f9e-88fe-4939-ad58-f23f29cefee6/1/LKVMSc_kyVm2nIriZoMm8QX2K50.mft
File: LKVMSc_kyVm2nIriZoMm8QX2K50.mft (raw, json)
Hash identifier: Fh0jHpeig9GWST0gnDfq5QsLC+yOv3zWQXQI/aGF03w=
Subject key identifier: AB:76:6F:EA:A1:0D:AA:7D:4F:76:0B:12:1C:E9:CB:41:76:20:FB:44
Authority key identifier: 2C:A5:4C:49:CF:E4:C9:59:B6:9C:8A:E2:66:83:26:F1:05:F6:2B:9D
Certificate issuer: /CN=2ca54c49cfe4c959b69c8ae2668326f105f62b9d
Certificate serial: 0194BCE06A1A58DBD45C014BA1CDD120235D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LKVMSc_kyVm2nIriZoMm8QX2K50.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/4b1f9e-88fe-4939-ad58-f23f29cefee6/1/LKVMSc_kyVm2nIriZoMm8QX2K50.mft
Manifest number: 040C
Signing time: Fri 31 Jan 2025 15:00:11 +0000
Manifest this update: Fri 31 Jan 2025 15:00:11 +0000
Manifest next update: Sat 01 Feb 2025 15:00:11 +0000
Files and hashes: 1: LKVMSc_kyVm2nIriZoMm8QX2K50.crl (hash: 9Yt0qKsJ4FCkEvP42Mq+E3PUFM6OBxFv810VuYkboRg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:6a:1a:58:db:d4:5c:01:4b:a1:cd:d1:20:23:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ca54c49cfe4c959b69c8ae2668326f105f62b9d
Validity
Not Before: Jan 31 15:00:11 2025 GMT
Not After : Feb 1 15:00:11 2025 GMT
Subject: CN=ab766feaa10daa7d4f760b121ce9cb417620fb44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:68:39:7c:f0:5a:d5:c4:97:24:5c:57:d0:be:
00:7a:dd:1a:52:70:0e:82:36:ad:06:75:ff:14:85:
0e:dc:d4:af:84:a0:53:ab:2d:7c:d8:b2:f7:51:ba:
12:7f:fb:58:46:3f:ae:09:23:aa:20:29:08:65:a1:
61:4e:14:80:66:a7:2f:dd:86:55:dc:20:83:ae:80:
e4:3b:0a:1a:85:b9:92:c0:fb:ea:fc:4f:16:72:d4:
27:46:2c:94:0e:24:e6:95:ae:a4:43:1d:8f:68:d7:
38:0e:75:49:db:de:36:41:e8:33:05:f0:18:71:1f:
2a:fc:6d:88:80:76:ea:cc:54:5a:d2:11:0d:fd:b6:
13:f5:38:84:78:a3:8a:17:47:6b:88:ec:f6:43:3e:
1b:b9:39:89:1c:4e:d3:35:82:e8:c7:d9:6f:c8:14:
77:e4:1c:54:b7:8c:1a:ac:ca:91:ef:9e:69:89:81:
7e:0e:e2:e6:2c:c3:d5:5b:22:4a:07:5e:7a:93:d7:
34:19:dd:63:66:b6:bf:60:2d:3b:2a:f4:ea:bb:29:
6e:8c:d8:70:90:d2:c9:25:47:f7:c7:97:dc:2c:e8:
81:ff:67:be:23:48:b7:2d:d3:a3:2a:e5:24:08:04:
43:38:bb:44:4b:ea:21:31:fe:a4:39:af:2c:65:a0:
65:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:76:6F:EA:A1:0D:AA:7D:4F:76:0B:12:1C:E9:CB:41:76:20:FB:44
X509v3 Authority Key Identifier:
keyid:2C:A5:4C:49:CF:E4:C9:59:B6:9C:8A:E2:66:83:26:F1:05:F6:2B:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LKVMSc_kyVm2nIriZoMm8QX2K50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/4b1f9e-88fe-4939-ad58-f23f29cefee6/1/LKVMSc_kyVm2nIriZoMm8QX2K50.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/4b1f9e-88fe-4939-ad58-f23f29cefee6/1/LKVMSc_kyVm2nIriZoMm8QX2K50.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:2d:e1:00:25:ad:21:c1:60:2e:c5:7f:ff:19:d4:d3:ca:fe:
fb:1a:17:4e:ea:9e:39:a5:b3:37:39:4a:6a:11:ea:cb:f5:32:
aa:2c:38:93:c3:0f:5b:04:97:85:93:14:a0:43:4f:f1:2e:83:
21:cf:c9:1d:69:ae:ad:ad:90:c4:c0:49:ce:e0:56:3e:c4:8d:
82:5c:be:22:a4:6f:09:e5:bc:e9:85:4c:03:d8:65:d8:72:2f:
34:37:61:78:05:a4:9c:17:73:61:28:54:9e:28:cb:79:4b:5a:
3f:a1:b5:d7:b9:97:be:92:fc:80:59:e2:4e:12:eb:0a:12:3a:
be:df:2f:52:e6:61:e6:a5:6e:34:28:97:cb:a9:5d:13:16:4c:
05:d6:a5:80:f8:3f:ef:ae:80:59:0a:a0:29:ed:bf:90:10:a4:
97:c3:33:1f:4a:2e:00:cf:2f:12:20:e6:7e:35:de:e0:41:c4:
71:47:f2:bf:c4:a7:e5:a3:8e:fd:3b:2f:5e:8d:c6:a0:2e:d6:
75:ba:08:ba:f8:bc:fe:d7:f9:51:da:26:7e:bc:5b:f8:b0:c6:
ab:05:6c:e6:ee:6d:36:a6:ee:85:10:a6:82:c8:78:66:3e:93:
1d:87:cd:3a:ee:7f:78:32:d8:de:3a:f0:02:a1:28:72:ef:2e:
56:3d:1d:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:23:05 2025 by rpki-client