Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/37fd9d-61e6-4df3-9c07-6b6ad0456b65/1/LphQiZ2cq14AM9C-lyKn6zBdfGA.mft
File: LphQiZ2cq14AM9C-lyKn6zBdfGA.mft (raw, json)
Hash identifier: CKhjImzdvTZEULjP1RiZs5+O9bhMbRp2pJ234UOcqwk=
Subject key identifier: B5:5E:52:8B:CF:00:09:BF:2C:8C:EB:FC:A4:E0:E9:28:4C:BE:B9:CB
Authority key identifier: 2E:98:50:89:9D:9C:AB:5E:00:33:D0:BE:97:22:A7:EB:30:5D:7C:60
Certificate issuer: /CN=2e9850899d9cab5e0033d0be9722a7eb305d7c60
Certificate serial: 0194BBCEE3B6B4A66FA97F1D4AEC21FF583B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LphQiZ2cq14AM9C-lyKn6zBdfGA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/37fd9d-61e6-4df3-9c07-6b6ad0456b65/1/LphQiZ2cq14AM9C-lyKn6zBdfGA.mft
Manifest number: 1427
Signing time: Fri 31 Jan 2025 10:01:25 +0000
Manifest this update: Fri 31 Jan 2025 10:01:25 +0000
Manifest next update: Sat 01 Feb 2025 10:01:25 +0000
Files and hashes: 1: LphQiZ2cq14AM9C-lyKn6zBdfGA.crl (hash: x8MSQm1DrfvtQUZyNce5/wBX8j1Nu2HKDfMEJziqOqM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:e3:b6:b4:a6:6f:a9:7f:1d:4a:ec:21:ff:58:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e9850899d9cab5e0033d0be9722a7eb305d7c60
Validity
Not Before: Jan 31 10:01:25 2025 GMT
Not After : Feb 1 10:01:25 2025 GMT
Subject: CN=b55e528bcf0009bf2c8cebfca4e0e9284cbeb9cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:3a:4e:b8:73:c3:e4:ed:85:3e:db:7e:19:2e:
b7:b0:cb:18:df:37:64:eb:de:f1:c6:e1:66:0d:da:
62:b8:7c:2d:b3:85:7b:d3:f2:9a:58:fa:1d:5a:25:
45:63:1a:a9:e3:ed:17:d0:bd:d0:5b:a9:4e:a5:be:
1d:f0:bd:19:8d:ae:cc:4e:ef:91:84:65:75:29:bb:
63:e9:1b:b7:db:ee:75:ac:ae:56:7d:fc:65:24:89:
0d:85:6f:0e:69:be:6b:cb:be:7a:e3:7b:ee:a0:e8:
65:35:81:a1:8d:9a:0d:7b:46:ec:bd:a3:e1:75:f8:
3d:79:b2:56:ac:ea:38:3c:b7:6c:69:c3:23:13:c7:
b7:cf:ef:0c:b5:e5:16:08:f5:52:5f:33:d1:d6:14:
bb:40:81:f9:bd:56:52:ca:89:76:85:c0:04:b7:c4:
a0:2b:3b:76:03:cf:00:2c:54:34:60:5d:e7:d8:5e:
8f:df:32:03:0c:fe:2e:62:56:fc:31:11:e9:3e:40:
5e:17:49:8e:f4:e5:a7:34:f8:6a:74:3e:57:49:b9:
75:1b:c7:a2:df:6e:08:8f:ac:05:84:46:ec:70:a2:
bb:8a:fc:c3:8d:e4:ae:57:c2:0e:d2:1d:c8:54:9c:
16:29:14:68:22:55:2e:dd:13:85:79:4d:9d:d7:9d:
9d:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:5E:52:8B:CF:00:09:BF:2C:8C:EB:FC:A4:E0:E9:28:4C:BE:B9:CB
X509v3 Authority Key Identifier:
keyid:2E:98:50:89:9D:9C:AB:5E:00:33:D0:BE:97:22:A7:EB:30:5D:7C:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LphQiZ2cq14AM9C-lyKn6zBdfGA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/37fd9d-61e6-4df3-9c07-6b6ad0456b65/1/LphQiZ2cq14AM9C-lyKn6zBdfGA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/37fd9d-61e6-4df3-9c07-6b6ad0456b65/1/LphQiZ2cq14AM9C-lyKn6zBdfGA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
eb:0a:79:1f:a6:0c:e7:cd:f5:da:3d:99:fd:97:41:32:e7:64:
43:8d:c0:23:50:45:bc:d7:db:e0:fb:75:2e:ca:7e:79:45:d6:
bf:cf:0f:9f:70:c3:58:47:a7:a6:66:40:6d:e5:ca:74:ae:45:
7b:45:c0:a2:a4:9d:c4:61:7b:43:8b:44:aa:3a:34:9c:09:c1:
d8:6a:32:1a:01:6e:48:91:18:a1:f0:a5:c1:c1:e4:8e:a8:61:
a4:f3:dc:84:51:49:5f:4d:49:c1:55:e8:a0:65:85:36:39:a5:
06:39:15:b9:53:24:87:e3:69:45:e3:5d:92:7e:e1:59:27:5a:
88:23:a4:14:7f:a4:03:b0:d1:78:5a:5b:77:c3:ae:44:3e:2d:
f7:d3:19:f4:8b:d4:31:27:2c:1c:e7:06:f1:ee:6a:35:16:a2:
73:8f:3e:76:9a:bc:a7:9e:14:fe:4f:94:d3:4c:94:1a:5d:a3:
6c:04:82:08:f4:2e:48:c2:82:1a:81:f2:48:de:24:b2:a5:26:
dd:33:b8:5f:62:59:de:a1:24:fc:84:23:89:92:2e:dc:b5:5d:
f3:f8:9d:62:83:0d:c1:8c:ed:d2:26:51:c1:4b:04:bc:58:03:
4c:ca:98:35:9c:c3:1c:96:95:a6:ff:85:0e:1e:ad:08:c5:63:
b9:44:39:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 05:55:11 2025 by rpki-client