Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/35cf7b-0144-4507-bf39-cc68dc854e88/1/LuUlFj3AHc0wibsdz7CRLnftr5g.mft
File: LuUlFj3AHc0wibsdz7CRLnftr5g.mft (raw, json)
Hash identifier: kgA3k2yjZQjYSWgIhYE+SKm9TEoV4RE/e3JpLqtrW9c=
Subject key identifier: 4C:65:E9:28:87:18:A2:95:49:68:9F:1E:01:CC:B2:25:F2:3A:CD:6D
Authority key identifier: 2E:E5:25:16:3D:C0:1D:CD:30:89:BB:1D:CF:B0:91:2E:77:ED:AF:98
Certificate issuer: /CN=2ee525163dc01dcd3089bb1dcfb0912e77edaf98
Certificate serial: 0194BCA9EE516B24B59C5B4299C0B812A5E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LuUlFj3AHc0wibsdz7CRLnftr5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/35cf7b-0144-4507-bf39-cc68dc854e88/1/LuUlFj3AHc0wibsdz7CRLnftr5g.mft
Manifest number: 1428
Signing time: Fri 31 Jan 2025 14:00:40 +0000
Manifest this update: Fri 31 Jan 2025 14:00:40 +0000
Manifest next update: Sat 01 Feb 2025 14:00:40 +0000
Files and hashes: 1: LuUlFj3AHc0wibsdz7CRLnftr5g.crl (hash: 9gdeAwv5g6UT8HH21r5beoQ06brIK6m0YP8GN1EOCYI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:ee:51:6b:24:b5:9c:5b:42:99:c0:b8:12:a5:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ee525163dc01dcd3089bb1dcfb0912e77edaf98
Validity
Not Before: Jan 31 14:00:40 2025 GMT
Not After : Feb 1 14:00:40 2025 GMT
Subject: CN=4c65e9288718a29549689f1e01ccb225f23acd6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:50:2b:08:38:5e:22:e6:03:30:39:ba:2e:d4:
ed:0b:35:ee:8d:67:66:0f:51:f1:74:c8:86:97:49:
1a:c9:3c:cf:f2:ac:ea:1a:79:2a:1a:14:58:7b:a6:
80:aa:65:7c:b6:9e:d9:0e:2f:80:bc:31:90:a5:fd:
48:c6:bb:d2:a2:fd:ac:85:68:88:61:7d:77:f0:5c:
97:86:4b:dd:b7:55:f2:d0:3e:38:06:44:3f:0e:83:
17:7a:b9:af:36:94:b5:b8:0f:30:01:f8:62:2b:22:
d2:29:fc:20:8d:ed:4e:ec:85:8e:47:8a:4e:2b:04:
10:6a:c6:ff:dd:9a:d9:a8:86:c0:de:1c:18:8c:c8:
83:fe:61:e7:47:4b:1e:22:fd:0c:25:d8:80:30:3c:
1c:e1:3a:8d:cf:90:f3:2b:04:31:4e:25:4a:43:67:
c3:bf:5a:8f:70:2a:d4:a5:c6:c9:6d:43:de:61:5b:
db:19:3c:f9:2e:ef:0f:2a:3b:1e:aa:c4:d8:58:d0:
82:a4:8f:f4:b4:b5:c3:f2:fb:ab:a0:f4:f1:6e:04:
20:d4:39:4c:99:af:4e:32:43:f4:4c:26:dd:09:32:
21:1d:61:56:7b:c1:ad:5d:a8:6f:57:d2:10:92:55:
0b:3c:5f:15:0f:ab:3b:f2:03:b6:3b:92:7c:dc:5b:
9e:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:65:E9:28:87:18:A2:95:49:68:9F:1E:01:CC:B2:25:F2:3A:CD:6D
X509v3 Authority Key Identifier:
keyid:2E:E5:25:16:3D:C0:1D:CD:30:89:BB:1D:CF:B0:91:2E:77:ED:AF:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LuUlFj3AHc0wibsdz7CRLnftr5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/35cf7b-0144-4507-bf39-cc68dc854e88/1/LuUlFj3AHc0wibsdz7CRLnftr5g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/35cf7b-0144-4507-bf39-cc68dc854e88/1/LuUlFj3AHc0wibsdz7CRLnftr5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:9c:3c:d9:bf:2a:d5:9b:13:c9:cf:84:1c:92:a9:e3:67:5c:
80:f2:61:43:dc:31:ae:3c:3f:6e:ff:67:df:00:96:08:bd:14:
98:6e:20:bc:d4:89:a2:8d:8e:7d:84:0a:2b:46:1c:22:5c:a7:
0b:42:56:83:2c:72:73:01:e3:ae:cc:c5:7e:9a:80:a2:80:a9:
e2:a2:63:fe:59:26:16:f6:4a:55:70:6a:5c:a5:f9:bf:aa:82:
3d:55:0b:dd:6f:8f:4e:c3:6a:2f:28:0a:1c:b6:55:52:36:c4:
ab:90:fc:35:fd:28:58:a4:49:ea:1f:c8:ae:4b:ff:37:37:cf:
b4:93:97:7d:97:94:0a:31:69:54:02:b4:c0:16:9b:d9:e4:27:
a2:66:b9:e8:28:18:5f:ca:a2:b4:e0:a1:26:5c:4b:50:1f:37:
b2:c4:ca:12:f9:cf:e3:e6:94:52:79:2e:62:18:9c:32:5a:58:
71:5e:a6:25:f3:84:0f:7c:82:87:26:95:88:ed:5c:8e:85:3b:
c5:2f:92:94:33:fb:20:88:0b:11:2c:96:48:86:17:1d:3b:78:
a0:72:39:83:55:24:fc:38:65:03:07:6b:6e:26:cd:a1:e9:f9:
6f:47:dd:26:df:12:26:fb:ae:7b:2b:e5:b6:36:e9:f2:2b:ac:
f0:bb:f5:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:51:18 2025 by rpki-client