Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/e4b789-3c0f-4a3b-815f-06978f18c734/1/LKv1dU_-Ghz7ibTysL8QZYI7Es8.mft
File: LKv1dU_-Ghz7ibTysL8QZYI7Es8.mft (raw, json)
Hash identifier: Lhrtt3/Q76hANWF3xbC/KGnOoyAZVeLuEi1n5kQTJ+A=
Subject key identifier: DA:21:EC:2E:B3:E7:E6:8A:C0:5F:64:C3:4F:35:CB:DF:49:13:E5:F5
Authority key identifier: 2C:AB:F5:75:4F:FE:1A:1C:FB:89:B4:F2:B0:BF:10:65:82:3B:12:CF
Certificate issuer: /CN=2cabf5754ffe1a1cfb89b4f2b0bf1065823b12cf
Certificate serial: 0194BBCE82B5D9BE796D8491E885401AB7BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LKv1dU_-Ghz7ibTysL8QZYI7Es8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/e4b789-3c0f-4a3b-815f-06978f18c734/1/LKv1dU_-Ghz7ibTysL8QZYI7Es8.mft
Manifest number: 0D5E
Signing time: Fri 31 Jan 2025 10:01:00 +0000
Manifest this update: Fri 31 Jan 2025 10:01:00 +0000
Manifest next update: Sat 01 Feb 2025 10:01:00 +0000
Files and hashes: 1: LKv1dU_-Ghz7ibTysL8QZYI7Es8.crl (hash: Mkez7PLFPTyi/xQUZgst455wTynUHgH6HNZSMvZFPpI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:82:b5:d9:be:79:6d:84:91:e8:85:40:1a:b7:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cabf5754ffe1a1cfb89b4f2b0bf1065823b12cf
Validity
Not Before: Jan 31 10:01:00 2025 GMT
Not After : Feb 1 10:01:00 2025 GMT
Subject: CN=da21ec2eb3e7e68ac05f64c34f35cbdf4913e5f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:09:93:c8:c6:da:aa:b1:89:13:c3:62:8f:bf:
b6:47:14:8c:5a:e3:14:03:ff:42:85:91:a1:15:2a:
5c:c5:25:57:e0:92:6c:cf:e4:a0:89:c6:f8:c9:b0:
c7:7c:6c:d2:de:fe:c7:26:e6:c1:4e:cd:03:05:ed:
36:8a:59:d7:81:ad:0c:c7:fd:ce:f5:7c:98:cc:a2:
53:86:3b:91:af:4a:3b:c7:26:6f:4e:2f:f1:18:30:
88:c4:77:5c:03:26:c9:b9:5b:4c:eb:ff:89:86:27:
dd:cd:5f:b7:06:77:c7:43:b2:cc:43:17:56:3e:c0:
03:38:07:e5:c7:d1:34:db:a4:63:8d:db:0e:a2:37:
ab:31:84:19:f3:88:66:fd:5e:78:77:11:de:f1:54:
6d:a5:ea:96:66:6f:a9:96:92:d6:74:89:df:fd:bb:
7a:30:e0:d5:79:04:b0:55:a4:31:4d:f5:d1:3c:6a:
ab:90:b9:c7:97:f6:29:a7:40:bf:64:fc:0a:11:0d:
9c:8f:80:0f:a0:1d:08:60:de:35:ad:f6:4f:e3:cc:
2d:7c:a2:e6:c0:9b:f4:59:bd:bb:6d:7f:41:d5:d2:
b9:62:03:f9:27:86:c2:d9:f8:18:41:22:31:c3:36:
31:9d:c2:6f:25:75:b7:0f:b7:5b:ed:f8:a6:37:51:
05:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:21:EC:2E:B3:E7:E6:8A:C0:5F:64:C3:4F:35:CB:DF:49:13:E5:F5
X509v3 Authority Key Identifier:
keyid:2C:AB:F5:75:4F:FE:1A:1C:FB:89:B4:F2:B0:BF:10:65:82:3B:12:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LKv1dU_-Ghz7ibTysL8QZYI7Es8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/e4b789-3c0f-4a3b-815f-06978f18c734/1/LKv1dU_-Ghz7ibTysL8QZYI7Es8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/e4b789-3c0f-4a3b-815f-06978f18c734/1/LKv1dU_-Ghz7ibTysL8QZYI7Es8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:09:42:3b:18:77:a8:1a:14:30:bd:1d:8e:06:a7:fd:6e:bb:
23:4f:f3:20:c9:69:5f:3f:e8:09:e7:79:31:0c:b6:dd:64:0b:
e8:68:39:c3:86:e1:8a:b2:ab:06:ca:0f:5e:0b:5f:60:37:e8:
05:b4:be:60:34:80:6f:ca:2a:a9:d0:96:0f:f4:6a:60:f5:6c:
7c:a6:59:f2:43:f5:bb:f8:53:20:9e:87:1b:b8:af:22:0b:58:
db:63:a8:77:3b:be:a7:a1:78:0e:21:61:34:bf:e4:46:a9:55:
8c:1f:6d:d6:8c:6c:2d:7d:c4:30:22:37:cc:bd:11:16:a7:a7:
84:95:f8:70:a2:62:17:79:94:18:85:d0:28:ce:19:57:4b:20:
39:e7:86:b7:93:30:cf:8d:40:af:1b:c4:98:d4:aa:cf:40:4f:
9c:b7:a9:0f:ef:3f:9c:cc:ad:a9:e8:20:fb:f7:3a:88:de:ce:
fb:2b:aa:a6:3f:fe:f1:46:b9:5a:7a:a2:74:65:65:8c:fa:6b:
2c:df:4b:57:a9:bc:05:9d:a1:60:8c:0e:7c:19:e6:e6:66:19:
b0:ea:ce:76:2e:04:de:9e:54:83:91:c1:23:5c:30:1f:8d:71:
d9:f6:ed:45:db:3a:b4:7d:7b:e7:bb:04:5b:8c:4a:13:83:ad:
fb:91:b0:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 08:04:56 2025 by rpki-client