Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/dc9224-3cd7-437d-a1dc-e8c39cf66b3f/1/lPhZ34Ux35GpQAj0tJIKQSPrDws.mft
File: lPhZ34Ux35GpQAj0tJIKQSPrDws.mft (raw, json)
Hash identifier: 6h23CKdtxhy+fpNdU0rbDUdKT+YL6FqBzFgZ9j63ikw=
Subject key identifier: 48:32:6B:D2:57:4E:08:6A:49:5A:A3:61:B8:A4:D1:F5:AE:75:27:07
Authority key identifier: 94:F8:59:DF:85:31:DF:91:A9:40:08:F4:B4:92:0A:41:23:EB:0F:0B
Certificate issuer: /CN=94f859df8531df91a94008f4b4920a4123eb0f0b
Certificate serial: 0194BBCEC599F6B10CE16005A36332CAB9BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lPhZ34Ux35GpQAj0tJIKQSPrDws.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/dc9224-3cd7-437d-a1dc-e8c39cf66b3f/1/lPhZ34Ux35GpQAj0tJIKQSPrDws.mft
Manifest number: 12B1
Signing time: Fri 31 Jan 2025 10:01:17 +0000
Manifest this update: Fri 31 Jan 2025 10:01:17 +0000
Manifest next update: Sat 01 Feb 2025 10:01:17 +0000
Files and hashes: 1: lPhZ34Ux35GpQAj0tJIKQSPrDws.crl (hash: qQByxd8MhTmGmCLje6wl+AV71TFekoz/16j3DlnIKb4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:c5:99:f6:b1:0c:e1:60:05:a3:63:32:ca:b9:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94f859df8531df91a94008f4b4920a4123eb0f0b
Validity
Not Before: Jan 31 10:01:17 2025 GMT
Not After : Feb 1 10:01:17 2025 GMT
Subject: CN=48326bd2574e086a495aa361b8a4d1f5ae752707
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:63:dc:a5:98:f8:15:de:48:c1:91:4c:28:d9:
78:a3:49:71:f8:bc:25:56:f7:94:fb:f6:17:54:f7:
21:21:1c:29:98:01:fb:ca:5e:90:b5:c5:6f:cc:68:
84:5c:0a:50:bd:a4:75:e9:41:f6:62:1b:4e:59:53:
88:8a:3e:75:6e:86:d0:f2:22:48:00:03:c2:12:13:
af:a8:92:e3:1b:23:68:1b:99:4b:46:62:86:33:b0:
92:fd:15:ed:26:87:ba:9d:b2:7c:f3:e1:b7:7c:fa:
ad:6e:3c:67:ef:eb:4e:72:8b:83:10:2e:20:cb:74:
7e:18:e6:ab:77:42:f1:55:e3:cc:e9:64:fc:7a:93:
e8:72:64:3f:05:03:ed:33:5a:24:01:7d:fa:2e:a0:
b5:7f:53:4e:e6:d6:3f:c4:23:35:c1:c8:37:e8:ac:
8d:21:a0:f6:51:b3:0c:3a:3d:b7:d5:89:57:ed:91:
e5:a5:55:9c:11:b7:e4:cc:76:5a:0f:01:dc:81:43:
24:28:9a:13:b4:d3:a1:21:ed:b3:f0:8a:b8:d9:66:
97:cf:3d:f4:66:ea:b2:ac:3f:4e:be:33:cc:54:06:
bc:88:88:35:d2:e7:21:4a:07:92:98:d8:5c:87:e9:
18:fb:0f:54:13:33:92:78:fc:92:24:49:53:0f:e1:
47:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:32:6B:D2:57:4E:08:6A:49:5A:A3:61:B8:A4:D1:F5:AE:75:27:07
X509v3 Authority Key Identifier:
keyid:94:F8:59:DF:85:31:DF:91:A9:40:08:F4:B4:92:0A:41:23:EB:0F:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lPhZ34Ux35GpQAj0tJIKQSPrDws.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/dc9224-3cd7-437d-a1dc-e8c39cf66b3f/1/lPhZ34Ux35GpQAj0tJIKQSPrDws.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/dc9224-3cd7-437d-a1dc-e8c39cf66b3f/1/lPhZ34Ux35GpQAj0tJIKQSPrDws.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:43:85:36:5b:8e:2f:18:8f:3c:a1:de:df:08:27:e2:84:a6:
cb:54:fa:96:2b:f8:0a:b3:36:7d:53:72:c7:81:40:e7:cc:c6:
d1:58:9e:17:e2:cc:07:b6:d0:af:d7:44:aa:a1:39:29:cc:35:
b4:03:eb:b5:e4:98:89:50:ec:44:e1:f9:b7:05:de:ff:51:6f:
68:18:94:93:0d:47:dc:26:1a:86:b4:e0:16:ae:0d:11:c6:ea:
42:09:fc:9d:cf:0d:86:75:79:44:b4:5e:00:d6:66:93:e7:81:
96:43:7f:a1:95:92:89:b7:e5:ca:91:d0:88:77:5f:a8:cb:24:
3b:dc:21:a8:ae:6b:fb:2a:8d:7a:2b:f6:f9:52:c5:64:48:88:
f0:16:79:ba:87:a0:6b:48:3b:93:42:44:c0:a2:8f:ef:41:c8:
fd:ef:4c:41:e2:83:cc:b7:2c:9c:fb:d7:96:9b:3d:23:70:13:
f5:3f:77:66:f2:39:e8:53:92:06:e5:ed:62:ad:b6:d9:b6:8a:
91:a9:de:e3:a6:fc:45:4f:4d:db:fd:93:4e:bb:02:9f:36:4d:
e2:c2:e0:89:0f:f4:28:d8:69:84:2a:64:eb:f6:c2:c2:b1:6a:
6c:c1:38:d3:86:e6:ee:d8:9f:1a:72:d8:4d:24:47:de:e4:21:
8c:79:08:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 22:50:27 2025 by rpki-client