Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/4a8da3-a7a9-42b3-8fb7-858487355bd3/1/lp8NNAHQCKqdqoKKQjWalR-UvQg.mft
File: lp8NNAHQCKqdqoKKQjWalR-UvQg.mft (raw, json)
Hash identifier: k4vHijYZKfIP62P/KYZARSIvbfzk51bAGQQiD28in+Q=
Subject key identifier: FD:F5:E6:56:A7:D5:18:63:74:E2:89:D2:0C:CE:19:F8:3F:79:7F:5C
Authority key identifier: 96:9F:0D:34:01:D0:08:AA:9D:AA:82:8A:42:35:9A:95:1F:94:BD:08
Certificate issuer: /CN=969f0d3401d008aa9daa828a42359a951f94bd08
Certificate serial: 0194BC04FFC35711437FD2AF966605280429
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lp8NNAHQCKqdqoKKQjWalR-UvQg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/4a8da3-a7a9-42b3-8fb7-858487355bd3/1/lp8NNAHQCKqdqoKKQjWalR-UvQg.mft
Manifest number: 0257
Signing time: Fri 31 Jan 2025 11:00:31 +0000
Manifest this update: Fri 31 Jan 2025 11:00:31 +0000
Manifest next update: Sat 01 Feb 2025 11:00:31 +0000
Files and hashes: 1: lp8NNAHQCKqdqoKKQjWalR-UvQg.crl (hash: wDPtOlHEbM2xlpUcODchjne7MzwG8mD/d0j7KyKd0ak=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:ff:c3:57:11:43:7f:d2:af:96:66:05:28:04:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=969f0d3401d008aa9daa828a42359a951f94bd08
Validity
Not Before: Jan 31 11:00:31 2025 GMT
Not After : Feb 1 11:00:31 2025 GMT
Subject: CN=fdf5e656a7d5186374e289d20cce19f83f797f5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:c4:12:61:73:79:ba:66:eb:2e:77:f6:77:f2:
51:7b:89:0d:dd:19:5d:ff:e5:a3:7c:a8:45:29:96:
26:a6:ca:1c:36:72:7e:8c:87:cf:df:b6:b1:45:4d:
a3:1d:fc:38:32:14:85:dd:38:02:a3:74:e2:3d:91:
62:96:b8:ea:10:58:07:4d:df:ed:ea:7d:69:6d:25:
f5:7c:4b:0f:b6:99:0b:86:5a:53:51:96:ce:4f:9d:
f1:be:5e:0c:29:f2:e3:c2:04:e3:dd:79:a7:c5:f6:
73:9f:8d:ba:fb:af:4a:53:6f:e6:b9:52:c4:fe:1e:
bd:3e:d0:46:8f:6a:74:96:27:54:f3:a5:9c:9a:84:
7e:2e:10:9b:bb:41:9a:f6:8b:05:d2:be:e0:05:86:
97:6e:75:a1:88:0a:b7:31:cb:d5:f7:96:2d:4f:3a:
fb:3d:a3:f0:37:67:f6:cb:da:1e:6b:5b:4d:16:a8:
66:a4:8c:8b:a1:96:68:dd:b1:82:60:0b:88:4b:53:
a0:ce:8a:d2:8d:a8:88:ce:0b:6c:ba:4e:13:d5:0b:
f6:4d:25:fc:2e:4d:29:ae:8c:d0:bb:2d:d6:ef:d8:
f0:35:b4:82:d9:cd:6a:21:19:96:4b:0c:47:76:dd:
06:7e:76:2e:6d:b6:42:b1:1a:bf:87:48:d3:ba:d5:
18:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:F5:E6:56:A7:D5:18:63:74:E2:89:D2:0C:CE:19:F8:3F:79:7F:5C
X509v3 Authority Key Identifier:
keyid:96:9F:0D:34:01:D0:08:AA:9D:AA:82:8A:42:35:9A:95:1F:94:BD:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lp8NNAHQCKqdqoKKQjWalR-UvQg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/4a8da3-a7a9-42b3-8fb7-858487355bd3/1/lp8NNAHQCKqdqoKKQjWalR-UvQg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/4a8da3-a7a9-42b3-8fb7-858487355bd3/1/lp8NNAHQCKqdqoKKQjWalR-UvQg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:f6:e5:59:6a:0a:9e:3e:b4:07:28:5c:6c:f6:33:2f:58:8f:
7f:57:41:87:11:2b:88:f4:99:f6:50:73:f2:20:f3:68:cf:69:
c4:aa:cd:b9:83:27:6f:ef:23:83:0e:a5:fc:f9:c7:a4:ff:8f:
25:da:ee:69:fd:f0:35:9c:72:7c:52:e9:21:76:20:cf:91:cb:
79:83:40:dc:41:8e:7f:ab:9f:43:c0:a6:09:40:c4:1a:e0:7a:
55:3a:37:9f:eb:d1:8b:2a:b1:c1:d9:ff:58:36:0c:bf:9f:df:
ce:2c:69:92:50:9d:ac:f6:0b:d5:f9:b1:9e:69:86:7e:52:f1:
e7:97:09:0c:61:87:c9:87:4f:82:e7:1c:a7:19:7a:92:6f:1e:
f4:f2:6b:97:24:da:25:e4:4c:e2:b8:4b:02:9f:52:d9:60:bc:
03:24:52:78:8e:c4:6c:18:88:67:b6:6f:1d:b8:4a:0c:07:e7:
eb:0d:55:94:f3:39:43:50:25:55:00:ed:cf:aa:23:2f:40:6b:
12:f7:b5:b5:4f:ec:68:43:80:93:c1:7d:75:db:eb:12:ba:be:
df:37:53:66:f2:47:09:5d:8d:35:d4:30:20:43:08:cc:a3:57:
a1:64:3c:80:48:84:0d:ee:b6:3a:f7:62:b4:16:2e:93:98:fe:
45:11:b8:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 23:05:47 2025 by rpki-client