Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/2823dd-25a1-44a0-bfc1-cbbd08ad3ec2/1/lUz3IcCMjpvFJC1WGWZ3IXNQRVw.mft
File: lUz3IcCMjpvFJC1WGWZ3IXNQRVw.mft (raw, json)
Hash identifier: ZCrAgoKU8cWOW4yEtJFDFdlje+z4qHt/FS5HSZ98C0c=
Subject key identifier: 2F:30:4E:62:91:23:DD:4E:D3:F1:91:08:8F:D5:2B:F3:BE:A6:51:0A
Authority key identifier: 95:4C:F7:21:C0:8C:8E:9B:C5:24:2D:56:19:66:77:21:73:50:45:5C
Certificate issuer: /CN=954cf721c08c8e9bc5242d56196677217350455c
Certificate serial: 0194BBCE5BB67281AFCD2F17DDA2D7C08511
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lUz3IcCMjpvFJC1WGWZ3IXNQRVw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/2823dd-25a1-44a0-bfc1-cbbd08ad3ec2/1/lUz3IcCMjpvFJC1WGWZ3IXNQRVw.mft
Manifest number: 0449
Signing time: Fri 31 Jan 2025 10:00:50 +0000
Manifest this update: Fri 31 Jan 2025 10:00:50 +0000
Manifest next update: Sat 01 Feb 2025 10:00:50 +0000
Files and hashes: 1: lUz3IcCMjpvFJC1WGWZ3IXNQRVw.crl (hash: gnuqzJERUgoZb/oBP1+q1Ig4cFAYXfkljupD8+wPbf0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:5b:b6:72:81:af:cd:2f:17:dd:a2:d7:c0:85:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=954cf721c08c8e9bc5242d56196677217350455c
Validity
Not Before: Jan 31 10:00:50 2025 GMT
Not After : Feb 1 10:00:50 2025 GMT
Subject: CN=2f304e629123dd4ed3f191088fd52bf3bea6510a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:dc:29:4a:5b:a9:ea:81:16:0a:cf:16:c8:a6:
59:7f:38:fe:b5:2f:01:d7:dd:46:9d:a7:01:69:59:
17:24:74:71:e9:e0:9e:69:36:62:8a:c4:40:63:56:
b1:1b:31:61:cb:c6:fc:34:ea:72:55:36:f4:8c:88:
14:30:ca:59:21:9d:05:27:25:e2:df:91:c0:08:26:
bb:58:9e:63:ce:d9:78:f7:79:9b:39:2e:90:88:7f:
49:6d:b1:f5:fb:ad:47:fa:a2:28:0e:19:76:63:5c:
17:7b:87:d0:0f:ed:4b:47:6d:85:80:5e:6e:73:f6:
51:87:4e:35:a9:34:19:dc:55:db:68:e1:23:28:c0:
99:6c:04:48:5e:d6:07:f7:1e:e0:68:95:c3:f6:d9:
a2:55:fd:3c:02:4a:6b:7f:09:fa:e5:4e:46:e5:82:
56:1d:af:1e:3f:51:80:73:58:59:a3:8c:b0:6c:44:
13:cd:03:89:52:10:22:13:bc:5e:c2:2b:eb:6a:fb:
d4:bf:ed:32:6c:e7:c3:35:ef:27:37:5f:50:bc:12:
fb:45:44:5c:49:b9:45:ec:f0:a5:64:a8:2a:32:82:
6b:5e:54:f5:6b:c9:2c:a1:84:aa:3e:2e:1d:29:11:
ef:68:25:7a:97:19:88:91:6e:2b:f3:6f:3b:81:3b:
3d:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:30:4E:62:91:23:DD:4E:D3:F1:91:08:8F:D5:2B:F3:BE:A6:51:0A
X509v3 Authority Key Identifier:
keyid:95:4C:F7:21:C0:8C:8E:9B:C5:24:2D:56:19:66:77:21:73:50:45:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lUz3IcCMjpvFJC1WGWZ3IXNQRVw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/2823dd-25a1-44a0-bfc1-cbbd08ad3ec2/1/lUz3IcCMjpvFJC1WGWZ3IXNQRVw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/2823dd-25a1-44a0-bfc1-cbbd08ad3ec2/1/lUz3IcCMjpvFJC1WGWZ3IXNQRVw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:ef:40:d9:00:24:5c:2c:ac:1b:dc:34:93:e2:9b:0c:43:eb:
8e:96:0b:f6:7d:06:4e:da:d7:12:d3:3d:8d:ac:80:36:35:4c:
be:9b:8d:a1:a1:eb:3c:6b:6e:d7:3d:fb:0d:9a:fd:ac:b8:64:
1e:7c:95:a1:5d:d9:c9:3b:2d:3a:61:3f:7a:4b:45:cd:22:93:
13:73:5c:64:8a:cf:ec:df:93:e9:26:d4:68:53:b9:c2:c3:73:
fa:77:6e:c6:37:f9:00:91:2e:e7:1b:37:1c:cb:cb:ce:ec:e2:
b4:d5:33:64:cc:cf:c7:2a:cc:b6:0a:45:33:af:79:68:2e:c3:
1f:3c:f4:bb:20:1c:bf:5b:7a:83:d8:fa:0e:06:ba:c1:be:56:
70:4f:e6:0c:d6:4d:55:ea:63:3b:ea:94:5d:f7:7b:d3:a1:48:
8a:57:79:a5:d8:89:a5:62:21:1b:20:6a:54:15:e6:23:d7:b8:
90:1c:da:a6:92:42:36:43:5a:1f:de:9a:0c:b3:fc:6b:ec:43:
58:68:8b:28:96:b9:99:d9:9c:b9:50:d2:bd:71:9c:8d:d0:25:
ec:8a:5a:42:b5:20:29:79:b4:f9:6e:31:21:b8:fa:9c:a9:fa:
df:2a:ba:09:c1:ba:fc:76:c2:37:c5:d3:62:a8:d2:e1:41:43:
62:af:04:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:49:35 2025 by rpki-client