Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/c1a14c-a78c-40a7-bf53-d96ce42a113b/1/LUFhUhEtrymCRCUnsPlE5IKFgy4.mft
File: LUFhUhEtrymCRCUnsPlE5IKFgy4.mft (raw, json)
Hash identifier: DG+6NmbF/Mj0Act7fetZtSMpsP66UGLyTEqDaV/T9FU=
Subject key identifier: 34:9E:73:D4:57:63:D0:23:7B:BE:A1:66:E5:DF:9B:16:D5:15:EC:CC
Authority key identifier: 2D:41:61:52:11:2D:AF:29:82:44:25:27:B0:F9:44:E4:82:85:83:2E
Certificate issuer: /CN=2d416152112daf2982442527b0f944e48285832e
Certificate serial: 0194BD17F46683FB2C4579CDE556109836F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LUFhUhEtrymCRCUnsPlE5IKFgy4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/c1a14c-a78c-40a7-bf53-d96ce42a113b/1/LUFhUhEtrymCRCUnsPlE5IKFgy4.mft
Manifest number: 03AE
Signing time: Fri 31 Jan 2025 16:00:51 +0000
Manifest this update: Fri 31 Jan 2025 16:00:51 +0000
Manifest next update: Sat 01 Feb 2025 16:00:51 +0000
Files and hashes: 1: LUFhUhEtrymCRCUnsPlE5IKFgy4.crl (hash: llp/08HTu6E7EYKUXht7no8fVFO0NfGrGrhF/3OO07k=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:f4:66:83:fb:2c:45:79:cd:e5:56:10:98:36:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d416152112daf2982442527b0f944e48285832e
Validity
Not Before: Jan 31 16:00:51 2025 GMT
Not After : Feb 1 16:00:51 2025 GMT
Subject: CN=349e73d45763d0237bbea166e5df9b16d515eccc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:46:59:93:fd:bc:d6:9a:64:01:c5:0e:fa:ad:
4b:f5:02:2a:83:2d:ae:87:24:71:8b:ee:67:09:ff:
f8:db:eb:bf:91:c9:9e:07:b4:40:66:af:bb:25:42:
6b:b4:f5:7f:52:db:88:c3:19:11:a6:4b:51:94:e2:
03:75:9d:00:8a:24:65:b8:e4:c9:2f:39:87:e0:4f:
14:b6:19:be:e2:d9:e9:22:ac:4b:05:5e:d2:50:68:
d4:fe:21:3e:d3:4f:19:30:1b:e0:c1:03:09:b3:c8:
9d:7d:d7:d9:dd:6a:bc:e5:4b:98:b5:ad:1e:38:5e:
d9:10:7c:bf:82:f7:35:b3:aa:60:cc:9d:9f:a7:0c:
27:53:0e:d9:24:b4:f6:c2:a1:8c:94:f2:da:54:1d:
d2:64:2c:76:75:05:fe:47:32:e4:3d:2e:83:37:7b:
bc:c6:3f:65:69:ad:94:6b:a9:2f:7e:1e:32:38:d2:
91:33:a6:72:ba:ce:9e:9f:ed:37:f7:53:cb:01:a1:
ad:5d:30:c5:d1:f6:77:09:1f:e5:f8:b6:a8:51:3b:
33:f6:5d:dc:18:3d:b3:ad:bf:f3:a2:32:32:f5:01:
48:f8:fb:56:eb:ad:6b:92:29:7c:d9:45:16:ce:a5:
25:ca:c4:6b:a0:01:10:54:cf:ef:c4:aa:e2:65:23:
c2:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:9E:73:D4:57:63:D0:23:7B:BE:A1:66:E5:DF:9B:16:D5:15:EC:CC
X509v3 Authority Key Identifier:
keyid:2D:41:61:52:11:2D:AF:29:82:44:25:27:B0:F9:44:E4:82:85:83:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LUFhUhEtrymCRCUnsPlE5IKFgy4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/c1a14c-a78c-40a7-bf53-d96ce42a113b/1/LUFhUhEtrymCRCUnsPlE5IKFgy4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/c1a14c-a78c-40a7-bf53-d96ce42a113b/1/LUFhUhEtrymCRCUnsPlE5IKFgy4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:d6:2e:af:9f:d6:88:0c:f1:ec:1b:7c:b1:65:07:5f:3c:c8:
aa:a6:0c:5d:eb:8b:57:35:cc:64:b5:9f:25:71:21:86:8b:cb:
73:a8:2e:0a:48:c9:df:bd:4f:95:75:2f:85:5e:97:6f:9e:cb:
dd:9d:3f:95:3e:eb:9b:0d:85:cd:60:96:22:42:b1:48:bc:e5:
dc:a1:7e:c9:66:ef:be:ee:15:1e:e0:cb:91:2b:36:d4:6e:87:
f6:de:78:c6:e6:41:3e:d8:d8:3d:8d:81:99:08:9e:d5:2a:e9:
18:15:d0:e5:d6:0f:f1:58:77:90:bc:71:5b:a3:3e:e0:9f:9c:
6e:f2:7f:e2:60:8d:e6:c9:9d:56:cb:1b:94:36:e8:e8:a8:28:
de:a0:29:f6:ad:87:46:52:77:4a:b1:6b:63:95:40:91:ef:73:
d1:2e:cd:c3:76:b6:ca:cb:a4:3d:8c:0f:1b:e6:e7:ed:a0:76:
ec:7c:af:48:af:2b:53:38:dc:55:6d:13:d1:77:0f:76:53:54:
1a:70:a2:9a:58:ac:ae:48:63:97:1e:b9:ed:02:ad:86:56:0e:
7a:ca:ac:80:5e:10:00:ce:c0:e8:7b:95:5b:ef:88:a8:38:d8:
b2:33:37:1e:d9:47:f8:11:87:6f:ad:66:0c:20:2f:8c:27:1e:
ce:aa:e1:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:29:21 2025 by rpki-client