Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/db48a4-942b-44d1-b1ba-7116a30da945/1/lGnTUGt3wa71sTcNqiu0vOOAbJQ.mft
File: lGnTUGt3wa71sTcNqiu0vOOAbJQ.mft (raw, json)
Hash identifier: TogM43fIpgaqwf7xM42hLcPOCvcUexU5eiRzbk6JTEw=
Subject key identifier: 64:93:3B:9E:D6:46:B1:25:C9:1E:47:6C:CA:27:0F:27:2C:6A:77:1D
Authority key identifier: 94:69:D3:50:6B:77:C1:AE:F5:B1:37:0D:AA:2B:B4:BC:E3:80:6C:94
Certificate issuer: /CN=9469d3506b77c1aef5b1370daa2bb4bce3806c94
Certificate serial: 0194BD17AB1FAE2D11D1658E4C9B7222C354
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lGnTUGt3wa71sTcNqiu0vOOAbJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/db48a4-942b-44d1-b1ba-7116a30da945/1/lGnTUGt3wa71sTcNqiu0vOOAbJQ.mft
Manifest number: 06EA
Signing time: Fri 31 Jan 2025 16:00:32 +0000
Manifest this update: Fri 31 Jan 2025 16:00:32 +0000
Manifest next update: Sat 01 Feb 2025 16:00:32 +0000
Files and hashes: 1: lGnTUGt3wa71sTcNqiu0vOOAbJQ.crl (hash: CqwoNCSYiK9nFBAdXiois1W0/FT8eOKZFOBqb8Zb9Z8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:ab:1f:ae:2d:11:d1:65:8e:4c:9b:72:22:c3:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9469d3506b77c1aef5b1370daa2bb4bce3806c94
Validity
Not Before: Jan 31 16:00:32 2025 GMT
Not After : Feb 1 16:00:32 2025 GMT
Subject: CN=64933b9ed646b125c91e476cca270f272c6a771d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:af:33:1f:eb:e5:51:3d:61:3d:7f:53:0e:15:
ee:a1:60:63:9e:a1:c4:31:ca:cd:d9:69:3b:d4:8f:
f6:4f:ec:a3:5a:98:09:83:07:68:fb:4b:32:87:57:
40:4c:d0:f9:4d:e6:8e:82:60:bc:35:82:a3:c5:70:
45:50:69:ab:ba:4d:e9:11:6d:e0:55:96:c5:0e:72:
e2:38:a0:ee:53:15:d4:bd:29:da:39:b1:51:76:11:
e9:94:74:12:49:eb:db:49:ab:50:15:77:91:86:85:
59:30:53:62:cd:0a:31:a0:82:b0:11:56:cf:62:88:
46:e4:e1:56:7e:bc:6d:1d:6b:30:e7:89:c6:46:30:
ca:a1:f6:c5:92:80:91:49:28:65:b6:e2:e6:9a:ab:
6d:aa:12:04:1c:2b:f6:86:30:3b:86:17:8d:0a:11:
b9:2c:ae:9f:d7:d3:c3:bd:fe:21:1a:38:e3:36:ed:
81:8b:e5:26:b3:28:ff:09:2f:16:ff:03:e5:39:d8:
f2:75:ac:6e:03:86:e5:c9:2b:64:02:de:23:65:da:
0c:40:c0:09:54:e3:4d:0b:74:d7:db:93:4e:11:7d:
aa:14:0a:e1:e8:45:42:c6:a0:ad:13:d3:59:7b:30:
b2:9f:a0:69:60:d4:02:9f:c0:74:d6:e4:d1:c1:97:
e4:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:93:3B:9E:D6:46:B1:25:C9:1E:47:6C:CA:27:0F:27:2C:6A:77:1D
X509v3 Authority Key Identifier:
keyid:94:69:D3:50:6B:77:C1:AE:F5:B1:37:0D:AA:2B:B4:BC:E3:80:6C:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lGnTUGt3wa71sTcNqiu0vOOAbJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/db48a4-942b-44d1-b1ba-7116a30da945/1/lGnTUGt3wa71sTcNqiu0vOOAbJQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/db48a4-942b-44d1-b1ba-7116a30da945/1/lGnTUGt3wa71sTcNqiu0vOOAbJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:a0:41:b3:03:73:7d:35:45:9e:1b:2f:b1:00:d2:25:c8:bb:
00:30:13:2a:d7:b7:b3:1c:68:5b:cb:c2:06:7a:05:75:df:ae:
d2:6d:a6:02:33:e0:a2:23:21:17:a2:9d:a0:89:66:19:c8:46:
6a:65:51:83:8a:f0:18:ab:bd:12:ee:27:f0:7f:63:a0:f6:9a:
9b:d1:93:d3:3e:2e:ff:bf:0e:3d:1f:0f:bf:a4:20:fb:13:9b:
60:7e:19:4e:60:b1:9d:4f:66:ed:23:8b:ed:b0:19:10:00:a6:
38:d5:10:62:6b:bb:df:0a:0c:fc:5a:13:2e:8e:0f:e2:74:5b:
c4:39:05:e7:67:54:6b:23:5c:13:b8:e8:63:f2:1b:41:31:78:
4a:0c:45:64:52:2d:43:be:8e:0f:01:4b:66:32:d6:9b:93:8f:
f0:1e:c5:28:09:af:19:3d:64:0a:1f:98:4b:6f:1d:ca:7e:81:
0c:e8:86:d6:fd:6f:78:0f:4f:73:94:2c:34:9b:02:98:c5:02:
ba:93:33:fd:a2:ac:1b:09:64:57:4f:b5:82:8a:8c:80:d5:54:
ee:fe:c4:d4:ed:9e:fd:0b:3d:eb:f3:cd:60:ad:46:bd:50:95:
62:6c:64:47:38:fd:20:e5:38:a8:39:04:f0:12:2e:91:bc:50:
da:4d:b2:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:26 2025 by rpki-client