Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/55314e-9156-4776-9e01-570dca7ad13e/1/LDfpq5czmfAvAyfJgRoYdQDEtsk.mft
File: LDfpq5czmfAvAyfJgRoYdQDEtsk.mft (raw, json)
Hash identifier: ImzNiyCwNV77XM6Yp1A2aYgknago8dRuR5rpqcuupZo=
Subject key identifier: A3:93:CD:69:9C:6C:DB:07:D5:F0:6F:12:94:AF:05:BE:87:B4:C0:53
Authority key identifier: 2C:37:E9:AB:97:33:99:F0:2F:03:27:C9:81:1A:18:75:00:C4:B6:C9
Certificate issuer: /CN=2c37e9ab973399f02f0327c9811a187500c4b6c9
Certificate serial: 0194BCA9D854BA77075CD926CF1A5B2D046A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LDfpq5czmfAvAyfJgRoYdQDEtsk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/55314e-9156-4776-9e01-570dca7ad13e/1/LDfpq5czmfAvAyfJgRoYdQDEtsk.mft
Manifest number: 0262
Signing time: Fri 31 Jan 2025 14:00:35 +0000
Manifest this update: Fri 31 Jan 2025 14:00:35 +0000
Manifest next update: Sat 01 Feb 2025 14:00:35 +0000
Files and hashes: 1: LDfpq5czmfAvAyfJgRoYdQDEtsk.crl (hash: YQ8Sx6kbcKmxU5L35W5m1SLZhjVMnQkV5wtHkGfL24o=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:d8:54:ba:77:07:5c:d9:26:cf:1a:5b:2d:04:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c37e9ab973399f02f0327c9811a187500c4b6c9
Validity
Not Before: Jan 31 14:00:35 2025 GMT
Not After : Feb 1 14:00:35 2025 GMT
Subject: CN=a393cd699c6cdb07d5f06f1294af05be87b4c053
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:dc:86:ed:90:7b:0e:0b:94:c4:6a:ef:f4:be:
49:d6:97:70:aa:4c:80:0d:d3:1d:58:9b:c2:79:ca:
61:d2:a3:e1:35:42:fb:03:a9:7d:92:62:12:cb:e5:
5c:a6:13:c4:f1:39:ac:86:63:44:f5:ac:73:c5:9b:
1d:10:1a:9a:d4:62:ad:c7:0c:b4:0d:24:cd:4a:35:
fc:6f:ce:b9:a1:30:de:c7:1f:4a:16:95:3b:ff:4e:
ec:8a:cb:f9:59:f2:0b:ac:35:5f:bb:cd:cd:43:bd:
b4:7b:92:7e:d9:f2:cf:e9:ed:27:7f:8c:76:db:0f:
6c:18:3e:22:7a:12:5d:1f:42:66:f1:c6:2a:b9:97:
33:2d:89:e7:6f:b6:20:73:c2:f6:c7:88:cc:3a:36:
70:bc:3a:66:3d:4e:d0:40:46:12:5b:03:ac:ac:5f:
3d:9a:0f:04:83:68:38:22:23:fe:ed:a5:93:0b:e7:
71:83:5f:d0:2e:74:cb:2a:f6:55:38:fe:72:ba:d1:
4a:ca:b9:48:46:a7:96:5f:3d:a2:7a:02:20:63:d6:
20:12:81:07:98:e2:bc:28:5e:9b:25:b2:ad:0f:18:
87:a3:ad:34:0d:c0:14:0b:93:7f:c8:f8:47:00:d2:
93:95:d5:c2:62:31:72:13:f4:1f:81:5c:da:03:2a:
c0:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:93:CD:69:9C:6C:DB:07:D5:F0:6F:12:94:AF:05:BE:87:B4:C0:53
X509v3 Authority Key Identifier:
keyid:2C:37:E9:AB:97:33:99:F0:2F:03:27:C9:81:1A:18:75:00:C4:B6:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LDfpq5czmfAvAyfJgRoYdQDEtsk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/55314e-9156-4776-9e01-570dca7ad13e/1/LDfpq5czmfAvAyfJgRoYdQDEtsk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/55314e-9156-4776-9e01-570dca7ad13e/1/LDfpq5czmfAvAyfJgRoYdQDEtsk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:f4:64:6c:2d:a8:09:5d:b3:a0:36:3d:53:94:0f:e2:11:06:
b5:a5:46:4d:53:c2:59:7a:fd:df:52:8a:02:f0:2b:f1:7e:fc:
77:67:01:23:a0:26:66:3b:9c:1d:6d:c7:cc:4a:48:9f:a4:82:
22:4f:2b:07:bc:fc:f3:56:72:19:4a:ba:a4:28:37:96:d8:64:
a9:d9:04:49:74:35:20:c2:f5:2b:e2:92:84:49:a7:ee:b7:0b:
bd:9e:4f:84:9c:11:aa:e9:53:f7:98:9a:16:44:a4:c5:e8:ea:
61:59:a8:14:31:da:f2:28:b4:ae:c7:94:ea:d9:15:d3:ee:2f:
85:da:f5:c6:5a:70:f2:a0:2f:68:3a:35:6a:b2:3b:38:c2:f3:
65:5a:35:c9:b2:38:1a:15:5b:d4:72:25:f9:10:aa:f6:a3:ca:
5f:ba:77:12:96:79:0d:37:cd:9f:49:62:34:35:ff:e1:9d:c7:
fd:19:94:fe:16:08:9f:4a:99:42:53:6a:c7:4b:e9:af:aa:a9:
5c:82:f3:a6:a0:2a:02:af:fd:63:2e:fd:f5:49:44:8f:65:40:
2e:5b:2d:12:1e:1c:3b:e9:fd:c1:e7:97:c3:80:ca:c6:44:1b:
c9:9c:6b:11:dd:b4:d2:d3:7a:fd:45:8a:ae:ef:46:dd:8b:93:
30:4d:07:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:49:03 2025 by rpki-client