Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/99323e-01f6-4959-9816-a86ac561ab56/1/LF3rfkKW4vu0wB_AZKH2gYlreXk.mft
File: LF3rfkKW4vu0wB_AZKH2gYlreXk.mft (raw, json)
Hash identifier: EoMW4BBSPKgWw2idy+wsELdTcXyXq95t0iRBxC/XkLQ=
Subject key identifier: CC:AC:21:7A:E7:66:08:1D:9B:55:34:AE:78:3C:18:3A:7E:AA:06:8C
Authority key identifier: 2C:5D:EB:7E:42:96:E2:FB:B4:C0:1F:C0:64:A1:F6:81:89:6B:79:79
Certificate issuer: /CN=2c5deb7e4296e2fbb4c01fc064a1f681896b7979
Certificate serial: 0194BCE0B53C0469B54DC2737F101D9C7AEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LF3rfkKW4vu0wB_AZKH2gYlreXk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/99323e-01f6-4959-9816-a86ac561ab56/1/LF3rfkKW4vu0wB_AZKH2gYlreXk.mft
Manifest number: 0402
Signing time: Fri 31 Jan 2025 15:00:30 +0000
Manifest this update: Fri 31 Jan 2025 15:00:30 +0000
Manifest next update: Sat 01 Feb 2025 15:00:30 +0000
Files and hashes: 1: LF3rfkKW4vu0wB_AZKH2gYlreXk.crl (hash: 8GsNJfdRMAZ2QpWLXYIp7LyL/AIGVfcCnWj6HxEH9QI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:b5:3c:04:69:b5:4d:c2:73:7f:10:1d:9c:7a:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c5deb7e4296e2fbb4c01fc064a1f681896b7979
Validity
Not Before: Jan 31 15:00:30 2025 GMT
Not After : Feb 1 15:00:30 2025 GMT
Subject: CN=ccac217ae766081d9b5534ae783c183a7eaa068c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:3f:9b:8d:b0:61:1d:58:92:e6:57:1f:76:cc:
21:af:03:38:86:69:a2:10:af:99:4e:38:b9:38:d9:
8e:28:76:37:06:1c:48:87:0e:eb:1b:72:4d:01:14:
33:10:e5:0e:a7:4a:d7:7a:47:aa:cb:4a:18:ff:c8:
94:16:24:15:c7:36:22:4d:1c:e3:4d:90:c5:f1:cc:
96:e8:8f:ca:50:6c:51:b2:c7:79:4e:92:99:d2:17:
4b:04:17:37:f0:e2:fa:dd:b6:11:cb:7a:a2:91:19:
a9:a0:82:94:20:fa:00:8c:7c:a0:09:e3:35:25:bf:
bc:09:4e:25:e5:d0:38:66:88:7b:b7:cc:35:1a:46:
aa:63:a3:a9:e1:75:05:c3:9f:9f:84:fb:26:ea:e1:
68:09:49:31:31:99:a6:aa:9d:5f:52:71:88:18:9b:
dd:0a:50:38:85:d1:de:73:7e:4d:0a:6d:51:28:db:
f5:02:83:71:26:33:b9:6c:cd:7d:8b:4b:ce:f4:3f:
f2:ba:c7:08:e9:f6:b3:d2:a1:df:df:f6:54:31:a8:
23:96:64:1a:03:fe:f9:a6:4b:6f:45:67:fe:d5:b8:
1a:f9:c7:96:e9:cc:90:d1:9b:04:17:42:56:9e:dc:
54:90:e3:8b:d2:eb:71:af:60:84:99:ef:68:7c:72:
84:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:AC:21:7A:E7:66:08:1D:9B:55:34:AE:78:3C:18:3A:7E:AA:06:8C
X509v3 Authority Key Identifier:
keyid:2C:5D:EB:7E:42:96:E2:FB:B4:C0:1F:C0:64:A1:F6:81:89:6B:79:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LF3rfkKW4vu0wB_AZKH2gYlreXk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/99323e-01f6-4959-9816-a86ac561ab56/1/LF3rfkKW4vu0wB_AZKH2gYlreXk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/99323e-01f6-4959-9816-a86ac561ab56/1/LF3rfkKW4vu0wB_AZKH2gYlreXk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:79:8d:43:75:f1:f9:33:a2:b4:6b:dd:75:0c:f9:0f:a4:c8:
8f:85:92:48:6e:00:9e:81:2e:02:d7:16:6b:ad:49:cb:9d:35:
da:d6:f0:94:55:0d:b6:e1:53:c7:93:eb:1d:38:bf:0f:d0:67:
e3:98:80:04:4d:f1:c1:27:bc:82:84:07:71:c5:17:94:2b:1a:
f3:c5:6c:b9:09:f4:1c:35:36:bc:67:12:f7:27:9c:ff:ac:30:
e5:ec:32:45:9f:84:7f:04:c7:bd:c9:5c:cf:8b:07:5e:49:0f:
6f:bc:c8:db:c6:6e:67:79:fa:1a:93:b1:e7:3c:62:80:9b:9a:
2b:20:83:8a:e1:16:d5:d4:ba:a2:0a:b8:c0:8b:98:8a:fa:00:
7f:54:e4:c4:e6:71:9c:27:5a:42:53:37:bf:f1:c2:05:c7:68:
f1:6d:0a:00:21:6e:57:f5:0e:8d:78:a6:a5:87:72:bd:44:ba:
90:27:01:75:dc:cd:d5:bc:3c:d5:98:31:4a:22:b1:85:12:a7:
3d:ae:60:59:4f:52:03:0e:11:b5:f3:83:06:2e:b2:cf:19:fa:
50:35:9d:2e:32:02:e7:af:9f:df:f1:b2:17:05:bc:6e:47:f2:
89:01:6b:ac:68:10:f0:2a:cc:3f:99:80:1a:4a:e7:40:5a:5a:
19:cf:cb:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:42:38 2025 by rpki-client