Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/3c6142-4208-4960-9a24-ca9219cfb992/1/LiM0uQviK2Ggyoc_AQd06ONWGRY.mft
File: LiM0uQviK2Ggyoc_AQd06ONWGRY.mft (raw, json)
Hash identifier: k9idwhPcFAHd+xxJoxBEMqU/PpytYiht0YL0MqhCpTg=
Subject key identifier: 5A:43:65:FD:DD:52:F6:C9:B2:7F:6C:47:D5:93:F3:37:EA:71:E5:12
Authority key identifier: 2E:23:34:B9:0B:E2:2B:61:A0:CA:87:3F:01:07:74:E8:E3:56:19:16
Certificate issuer: /CN=2e2334b90be22b61a0ca873f010774e8e3561916
Certificate serial: 0194BC3C4F0ABC150872B727ACEBBE6BB5C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LiM0uQviK2Ggyoc_AQd06ONWGRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/3c6142-4208-4960-9a24-ca9219cfb992/1/LiM0uQviK2Ggyoc_AQd06ONWGRY.mft
Manifest number: 084A
Signing time: Fri 31 Jan 2025 12:00:56 +0000
Manifest this update: Fri 31 Jan 2025 12:00:56 +0000
Manifest next update: Sat 01 Feb 2025 12:00:56 +0000
Files and hashes: 1: LiM0uQviK2Ggyoc_AQd06ONWGRY.crl (hash: gZnWx58BITUM+AuoDleY+cJ3D11WrM9Th/XPCbEkPF4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:4f:0a:bc:15:08:72:b7:27:ac:eb:be:6b:b5:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e2334b90be22b61a0ca873f010774e8e3561916
Validity
Not Before: Jan 31 12:00:56 2025 GMT
Not After : Feb 1 12:00:56 2025 GMT
Subject: CN=5a4365fddd52f6c9b27f6c47d593f337ea71e512
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:f4:0d:86:f2:49:07:03:e2:03:4f:e6:32:a8:
58:55:90:15:e9:72:83:4f:ae:6d:cf:8c:3c:b3:ba:
21:9c:9d:64:1b:78:a3:da:78:b4:56:c4:ca:c2:b5:
1f:d4:81:c8:f9:ea:e7:46:7f:c2:54:8d:33:68:4e:
25:93:f5:b0:fb:dd:9c:9f:54:01:3e:2a:d3:dd:bc:
ec:df:95:df:96:d0:74:61:04:b1:15:a2:6e:02:50:
d9:9d:7e:19:4f:44:6d:c9:58:8a:6d:8d:55:8c:dc:
42:0d:f5:af:11:c7:c0:f2:99:90:74:bd:55:ae:92:
b8:d6:18:a4:b6:7d:0c:61:7e:de:1d:04:16:49:7b:
a7:d2:8e:a1:32:26:10:ba:1d:d1:40:45:b0:32:11:
85:9d:38:0f:5c:2f:94:a9:b6:d8:3b:95:08:df:63:
9d:8e:0f:4d:75:ca:68:fb:ae:1e:02:bb:99:65:a0:
05:df:cb:2f:18:a9:41:4f:83:b9:91:08:87:f5:5e:
3b:0b:b3:79:bd:2e:4c:3f:0c:86:34:75:b5:11:cc:
59:83:07:53:f4:21:bb:be:80:b9:71:5c:d3:fc:95:
8a:90:07:76:0a:26:dd:91:1c:5d:ff:88:42:e2:b7:
06:e7:a9:75:f2:90:b9:06:87:ac:1c:9a:1b:f2:69:
e3:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:43:65:FD:DD:52:F6:C9:B2:7F:6C:47:D5:93:F3:37:EA:71:E5:12
X509v3 Authority Key Identifier:
keyid:2E:23:34:B9:0B:E2:2B:61:A0:CA:87:3F:01:07:74:E8:E3:56:19:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LiM0uQviK2Ggyoc_AQd06ONWGRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/3c6142-4208-4960-9a24-ca9219cfb992/1/LiM0uQviK2Ggyoc_AQd06ONWGRY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/3c6142-4208-4960-9a24-ca9219cfb992/1/LiM0uQviK2Ggyoc_AQd06ONWGRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:6d:c3:a7:a9:26:dc:65:37:57:d8:21:b9:fc:87:9b:37:48:
ba:ec:2b:20:37:67:38:c9:05:b5:d9:f5:40:12:55:e6:51:3b:
29:65:ff:b6:bb:ab:43:74:c9:8d:fe:3c:04:16:2d:f2:6d:cc:
be:73:53:d4:f8:f3:31:84:63:35:4a:e3:a7:6d:f1:7b:3c:7a:
1e:a6:30:24:e0:c4:49:85:03:b5:2f:25:f8:6d:49:88:f8:dc:
03:25:eb:1b:d8:5f:c3:88:07:26:68:86:8e:ba:2f:ca:3c:33:
ef:7a:fd:4e:b7:ce:6d:44:fe:43:f4:de:65:0c:76:fb:81:18:
d2:14:f8:ad:62:24:e4:01:3a:9f:e5:90:f7:86:6b:8b:71:2d:
d5:7b:df:e5:f0:6c:c2:8d:67:4e:63:f5:05:24:40:51:d5:19:
42:8b:89:21:d3:df:89:09:dd:2f:62:c4:bd:09:ed:67:4e:b4:
19:41:3b:89:ac:0b:17:a9:59:a8:de:8b:e3:f2:8e:9a:62:3e:
7e:bd:b3:65:58:2f:3c:ce:5b:41:40:92:27:dd:89:56:54:b0:
b9:ee:44:0a:66:1c:5a:26:f0:97:9e:4f:3f:44:f0:9a:61:69:
ac:81:8d:ae:13:fb:d7:af:3c:85:68:72:75:ca:0d:54:ad:91:
89:b0:6b:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:44:30 2025 by rpki-client