Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/871d8b-2219-46c4-a490-2571369c202b/1/LSNrVIulmiq7JYI0HVYMqJP0l2M.mft
File: LSNrVIulmiq7JYI0HVYMqJP0l2M.mft (raw, json)
Hash identifier: UEKApn6TYEgV7ZXE1RCmX42TBpxlJU4yrUFy1TjlppA=
Subject key identifier: E8:0D:FC:EB:7C:A0:FA:45:0C:4D:5E:0E:7E:36:68:CE:7E:C7:09:AC
Authority key identifier: 2D:23:6B:54:8B:A5:9A:2A:BB:25:82:34:1D:56:0C:A8:93:F4:97:63
Certificate issuer: /CN=2d236b548ba59a2abb2582341d560ca893f49763
Certificate serial: 0194BD175409344EC80171FDD7AD58BDDAA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LSNrVIulmiq7JYI0HVYMqJP0l2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/871d8b-2219-46c4-a490-2571369c202b/1/LSNrVIulmiq7JYI0HVYMqJP0l2M.mft
Manifest number: 11C9
Signing time: Fri 31 Jan 2025 16:00:10 +0000
Manifest this update: Fri 31 Jan 2025 16:00:10 +0000
Manifest next update: Sat 01 Feb 2025 16:00:10 +0000
Files and hashes: 1: LSNrVIulmiq7JYI0HVYMqJP0l2M.crl (hash: Z2PNj24wSw3fkvIkGZMOlyVaIzyav4KnLt7bNcgcjNY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:54:09:34:4e:c8:01:71:fd:d7:ad:58:bd:da:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d236b548ba59a2abb2582341d560ca893f49763
Validity
Not Before: Jan 31 16:00:10 2025 GMT
Not After : Feb 1 16:00:10 2025 GMT
Subject: CN=e80dfceb7ca0fa450c4d5e0e7e3668ce7ec709ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:6c:b9:89:24:80:92:29:f3:14:ec:3b:1e:03:
36:bb:d8:a1:8b:c1:76:97:bf:2c:12:25:3a:6a:a0:
57:bb:fd:e8:e6:cb:55:37:f6:55:17:13:f3:39:b4:
7e:3a:5e:71:82:44:fe:93:c2:a6:0a:4f:54:92:70:
31:d6:a5:ba:9e:3c:40:61:5e:87:14:fb:c8:56:8e:
74:97:5e:79:44:16:f4:42:26:07:63:b0:ff:98:a1:
65:74:7a:c8:0a:9c:13:5e:bf:9c:98:ca:27:67:be:
8c:4c:10:33:2b:ed:af:3a:ee:e4:39:c5:74:a8:98:
e8:dc:9e:28:b1:66:5d:f5:ac:f7:e5:52:ec:cc:ad:
f2:eb:37:b0:bd:c4:c9:2a:77:67:d2:5b:64:8c:56:
c4:f4:e3:3d:97:0b:fb:ca:ff:1b:6f:d4:8d:c1:ec:
66:d1:18:f5:76:fc:e8:53:25:af:5a:30:fc:27:4d:
b1:b9:4f:cc:34:d2:d2:a9:0a:f5:c5:a3:02:0c:a2:
8b:6b:a9:b6:7e:ca:a5:64:6b:4a:b7:37:61:df:ed:
5a:c0:44:1d:b1:a1:31:67:18:2a:df:4d:1c:aa:74:
7e:9b:13:7f:8e:92:38:bb:f3:40:fe:36:f0:ab:4f:
b8:ba:65:2f:7f:6b:77:ff:88:01:bc:6b:31:50:a8:
0a:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:0D:FC:EB:7C:A0:FA:45:0C:4D:5E:0E:7E:36:68:CE:7E:C7:09:AC
X509v3 Authority Key Identifier:
keyid:2D:23:6B:54:8B:A5:9A:2A:BB:25:82:34:1D:56:0C:A8:93:F4:97:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LSNrVIulmiq7JYI0HVYMqJP0l2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/871d8b-2219-46c4-a490-2571369c202b/1/LSNrVIulmiq7JYI0HVYMqJP0l2M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/871d8b-2219-46c4-a490-2571369c202b/1/LSNrVIulmiq7JYI0HVYMqJP0l2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:db:97:b7:da:a5:2e:14:21:96:e9:31:13:c3:7a:24:78:1a:
37:2d:25:8f:87:f9:c2:5b:98:5f:28:50:90:9e:3e:1e:6a:ce:
fa:b2:ac:45:22:9e:f1:da:54:43:52:70:05:07:5b:c4:09:70:
92:f0:de:0f:1f:27:b9:6a:cf:26:02:40:67:d4:06:cb:d6:31:
02:e4:84:f5:7b:2e:16:bb:2e:b2:e1:6c:59:10:6a:b6:fc:ce:
0f:88:8a:99:bc:8e:11:c7:e7:9c:25:63:29:84:c5:ce:3b:a5:
05:5c:59:4d:41:0a:bd:92:ef:d0:01:30:a0:17:73:b6:e0:a7:
d3:a6:92:66:68:50:a8:b9:6f:9e:5c:1c:73:f9:fe:d5:d2:22:
da:83:bf:90:3b:57:f1:fb:0e:2e:50:76:08:66:2f:be:d6:06:
8f:2e:21:3f:60:b7:ef:80:bd:e5:31:c1:02:8b:e2:3b:2b:d0:
68:b9:2f:a6:a2:56:24:8b:a4:3c:64:b9:d0:7b:9b:7b:be:ad:
cd:d7:22:4f:fa:d2:96:7e:e7:dc:08:37:96:a8:1e:e2:d6:48:
f3:60:a4:75:1e:d2:0d:5c:a6:ee:b4:56:21:16:c1:3d:c6:5f:
42:44:88:5f:40:8d:a9:d5:c3:9d:dc:9c:30:a3:7a:51:3d:52:
bc:ce:bf:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:52:05 2025 by rpki-client