Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/4111a6-b4cd-4415-84bd-593b774fb030/1/LI5SR1LthVF1oBQSyzfEqeTbYXA.mft
File: LI5SR1LthVF1oBQSyzfEqeTbYXA.mft (raw, json)
Hash identifier: RAK72gae68oZLh2n42L/olk/XsJsOm8f9ZRiTPobTcc=
Subject key identifier: B6:17:0D:B0:C2:C6:10:3E:28:8B:B1:6C:9E:5C:CF:90:B1:EF:AE:77
Authority key identifier: 2C:8E:52:47:52:ED:85:51:75:A0:14:12:CB:37:C4:A9:E4:DB:61:70
Certificate issuer: /CN=2c8e524752ed855175a01412cb37c4a9e4db6170
Certificate serial: 0194BCA97C4E1283B45774777253CF64811C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LI5SR1LthVF1oBQSyzfEqeTbYXA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/4111a6-b4cd-4415-84bd-593b774fb030/1/LI5SR1LthVF1oBQSyzfEqeTbYXA.mft
Manifest number: 1428
Signing time: Fri 31 Jan 2025 14:00:11 +0000
Manifest this update: Fri 31 Jan 2025 14:00:11 +0000
Manifest next update: Sat 01 Feb 2025 14:00:11 +0000
Files and hashes: 1: LI5SR1LthVF1oBQSyzfEqeTbYXA.crl (hash: 4t344VJzCT1myQ3yUnHSfp2wagS6NPwmYF3gyXhJD00=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:7c:4e:12:83:b4:57:74:77:72:53:cf:64:81:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c8e524752ed855175a01412cb37c4a9e4db6170
Validity
Not Before: Jan 31 14:00:11 2025 GMT
Not After : Feb 1 14:00:11 2025 GMT
Subject: CN=b6170db0c2c6103e288bb16c9e5ccf90b1efae77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:88:49:9d:40:74:90:ff:0a:43:ff:84:d3:e3:
02:4c:58:c4:ea:44:b2:33:b5:d5:f0:5c:bf:4a:51:
33:e8:e1:da:32:6a:f5:94:08:e6:d6:b7:68:1a:31:
40:78:07:89:4f:b1:e2:d5:5c:49:bb:ba:89:6a:4d:
40:85:8d:ac:36:b8:2c:81:f1:fc:e5:4c:64:4f:1a:
8b:9d:cf:e0:fc:68:ea:ff:3a:f6:6d:25:ff:8e:c6:
88:1f:7e:1a:27:11:a4:0e:5a:b3:4f:42:e6:ef:c1:
b8:1d:7f:16:35:05:6b:02:69:e8:e2:bc:48:28:0c:
b7:ea:13:8e:aa:a6:36:28:83:c9:d0:ab:f0:85:ff:
78:f6:ea:06:11:e8:d2:88:7e:ac:ab:15:23:1a:f0:
7d:0f:b3:4d:93:6c:b4:71:9a:c8:3b:51:ab:d2:71:
b9:5c:e1:5e:f8:1b:80:ca:d5:68:7d:9d:c0:6b:b3:
b7:ec:2c:68:85:bf:bc:dc:38:14:dc:8d:0c:98:67:
2e:5a:71:d9:12:b0:25:c8:df:72:60:a2:25:ec:46:
6b:08:27:16:45:4f:3d:a6:64:49:13:07:cd:38:cd:
01:dc:04:13:d8:80:38:3e:e7:f7:af:d0:cc:90:31:
7b:bf:86:e0:db:71:15:6e:cc:2f:a0:ce:eb:f2:d9:
6c:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:17:0D:B0:C2:C6:10:3E:28:8B:B1:6C:9E:5C:CF:90:B1:EF:AE:77
X509v3 Authority Key Identifier:
keyid:2C:8E:52:47:52:ED:85:51:75:A0:14:12:CB:37:C4:A9:E4:DB:61:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LI5SR1LthVF1oBQSyzfEqeTbYXA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/4111a6-b4cd-4415-84bd-593b774fb030/1/LI5SR1LthVF1oBQSyzfEqeTbYXA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/4111a6-b4cd-4415-84bd-593b774fb030/1/LI5SR1LthVF1oBQSyzfEqeTbYXA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:a1:a1:6c:d3:ed:d4:d1:48:5b:27:a3:c5:b0:2b:5b:f8:55:
9a:8d:58:93:d7:f5:95:c3:8d:53:5b:e9:12:dc:28:a7:e4:ca:
cd:63:ad:cc:a6:6b:0e:c6:02:82:1c:9d:bd:a2:f5:c0:13:78:
b2:00:e7:3b:78:28:1e:12:70:9b:c0:86:f8:57:0c:75:b0:cd:
41:dc:43:aa:03:f7:53:94:8f:db:d6:65:e9:4c:fa:b2:3e:17:
e1:ae:e4:dc:0e:05:12:1a:bb:6a:6c:50:b4:6a:7c:b4:37:a2:
fe:8d:a2:13:8f:31:19:07:71:39:f3:a6:9b:f4:df:d7:cc:ac:
1b:77:c2:ab:4a:1e:bc:e6:3c:29:55:49:6f:e5:a7:bc:03:95:
cd:68:44:1b:a0:c6:26:97:24:64:f4:20:59:3a:8e:06:88:fb:
86:4b:92:4a:d2:80:0e:9e:1d:22:f0:ed:48:77:a6:43:cf:bc:
86:a5:04:a9:12:06:f2:19:db:00:09:8f:f4:20:4b:52:cd:d4:
10:91:08:03:c1:2c:a1:6b:cf:07:65:3a:1c:e2:85:60:8e:93:
f3:52:d0:c3:00:7a:46:99:c9:52:93:2a:e2:ee:d1:19:53:3e:
e0:6f:ec:1c:ec:50:92:7e:cd:22:73:e4:60:64:a0:7d:e9:c8:
95:86:dc:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:37:25 2025 by rpki-client