Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/fa735c-357b-4194-be74-80c866849546/1/LNX6Kvwzj4QeAM92apA5IkUdN7g.mft
File: LNX6Kvwzj4QeAM92apA5IkUdN7g.mft (raw, json)
Hash identifier: cP1JJZiISOozrQSDYEzoaOdiDnwIy2p0fVc51/Ta2pc=
Subject key identifier: EB:5A:B2:82:FA:3C:BA:8E:65:29:85:15:67:61:84:F4:54:C9:2A:C6
Authority key identifier: 2C:D5:FA:2A:FC:33:8F:84:1E:00:CF:76:6A:90:39:22:45:1D:37:B8
Certificate issuer: /CN=2cd5fa2afc338f841e00cf766a903922451d37b8
Certificate serial: 0194BCA9FFF9B508BED0B2E6731EE080AC7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LNX6Kvwzj4QeAM92apA5IkUdN7g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/fa735c-357b-4194-be74-80c866849546/1/LNX6Kvwzj4QeAM92apA5IkUdN7g.mft
Manifest number: 0481
Signing time: Fri 31 Jan 2025 14:00:45 +0000
Manifest this update: Fri 31 Jan 2025 14:00:45 +0000
Manifest next update: Sat 01 Feb 2025 14:00:45 +0000
Files and hashes: 1: LNX6Kvwzj4QeAM92apA5IkUdN7g.crl (hash: 7NMj+HheuAdMucRDgOosbXdvK+5T/Ec2awOD+nUciYs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:ff:f9:b5:08:be:d0:b2:e6:73:1e:e0:80:ac:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cd5fa2afc338f841e00cf766a903922451d37b8
Validity
Not Before: Jan 31 14:00:45 2025 GMT
Not After : Feb 1 14:00:45 2025 GMT
Subject: CN=eb5ab282fa3cba8e65298515676184f454c92ac6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:8c:e9:06:53:a2:3d:af:78:6f:c6:2c:30:c5:
d6:a8:fe:56:97:a5:17:6b:c1:7c:64:c5:dd:72:ba:
18:f4:02:28:ba:58:50:63:35:16:e6:37:31:a9:2f:
86:81:a1:87:98:36:31:e1:aa:a6:3e:17:c6:a0:c7:
5f:88:f1:a3:ef:3e:6e:06:6c:a2:12:36:74:77:c5:
5c:cd:97:72:e7:ec:5f:e7:c4:55:53:76:9d:8b:c1:
33:a0:08:59:5f:9d:ce:31:8b:5f:08:8f:6b:62:5d:
3e:09:7c:6c:7b:97:6d:a0:c4:35:65:af:ed:eb:65:
6e:92:83:0d:85:5d:6f:fb:b4:f9:fe:16:3c:0c:77:
ff:e5:35:c6:6d:4f:86:9f:43:a8:4f:a3:95:2c:22:
32:94:d5:18:e3:c8:69:b4:3e:00:ee:94:5b:af:e5:
a8:41:0c:e5:81:88:1b:24:17:a8:bf:04:f9:16:42:
47:c4:90:f1:76:68:4b:6b:e0:95:40:90:a5:e1:13:
49:ef:ec:0f:1e:e0:af:f3:cb:d7:c5:b1:d1:68:ba:
f7:ea:64:00:de:db:78:b0:6e:18:76:6e:67:17:17:
0a:f7:de:bd:6f:13:f3:eb:e3:df:fe:b9:4f:8a:4b:
52:98:58:ad:ba:9d:2f:7b:64:7e:a5:7f:4f:ea:59:
dc:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:5A:B2:82:FA:3C:BA:8E:65:29:85:15:67:61:84:F4:54:C9:2A:C6
X509v3 Authority Key Identifier:
keyid:2C:D5:FA:2A:FC:33:8F:84:1E:00:CF:76:6A:90:39:22:45:1D:37:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LNX6Kvwzj4QeAM92apA5IkUdN7g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/fa735c-357b-4194-be74-80c866849546/1/LNX6Kvwzj4QeAM92apA5IkUdN7g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/fa735c-357b-4194-be74-80c866849546/1/LNX6Kvwzj4QeAM92apA5IkUdN7g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:af:90:0a:80:54:5a:fb:4b:d0:5f:53:09:20:43:f9:cb:a3:
5b:18:49:cc:2b:8d:1f:66:26:95:ec:cb:12:48:7b:cd:9c:3f:
d9:96:ce:8d:f3:8b:2b:c1:21:4a:8f:49:2b:7b:af:86:23:3a:
2c:7d:c1:12:62:68:59:7f:f6:4e:61:2e:7b:ea:fd:6e:df:4b:
87:fd:f7:64:31:c8:6d:4e:13:5e:5f:2f:1a:e0:61:30:62:cd:
91:29:ac:0f:81:de:93:4b:a6:1b:a2:2a:31:c6:8b:c1:78:5e:
64:8e:26:a2:99:1e:c2:06:07:80:4f:05:8f:c9:3d:b5:c0:7d:
62:d2:24:fb:3c:56:7c:b1:d8:65:d5:83:43:7d:08:cc:e6:c6:
cc:51:80:a1:42:7e:51:0a:c7:7b:ce:fc:aa:ea:6f:18:2c:43:
2d:38:88:34:f1:76:c1:dc:8a:58:6f:a1:34:54:61:b0:dc:4b:
5f:8d:6d:1e:cb:bb:7a:77:25:29:0d:fe:c8:a8:73:54:c7:6b:
70:bb:a1:cf:1c:cb:56:b7:8c:12:02:96:26:25:27:b6:d5:eb:
2e:b0:ef:dc:0a:a0:58:8b:8b:58:a2:6b:93:46:f1:4b:18:09:
f2:b4:5e:35:97:cd:f3:64:ff:e0:a8:3b:04:ab:ee:ee:29:5a:
59:1f:1a:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:04:23 2025 by rpki-client