Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/109558-4319-46c0-9ab2-12ea10714a56/1/LJwIvyHH9ZiFu1ptSB_8MGeWmhk.mft
File: LJwIvyHH9ZiFu1ptSB_8MGeWmhk.mft (raw, json)
Hash identifier: xO/roHIIpNzQZjFV7dKepblxq22inAnIO1I36MEu/1c=
Subject key identifier: DF:36:87:68:36:53:CE:92:32:35:5C:32:59:78:06:50:12:AB:5C:2F
Authority key identifier: 2C:9C:08:BF:21:C7:F5:98:85:BB:5A:6D:48:1F:FC:30:67:96:9A:19
Certificate issuer: /CN=2c9c08bf21c7f59885bb5a6d481ffc3067969a19
Certificate serial: 0194BCA9E7CD40C549FF90CE1D63A6051287
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LJwIvyHH9ZiFu1ptSB_8MGeWmhk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/109558-4319-46c0-9ab2-12ea10714a56/1/LJwIvyHH9ZiFu1ptSB_8MGeWmhk.mft
Manifest number: 0338
Signing time: Fri 31 Jan 2025 14:00:39 +0000
Manifest this update: Fri 31 Jan 2025 14:00:39 +0000
Manifest next update: Sat 01 Feb 2025 14:00:39 +0000
Files and hashes: 1: LJwIvyHH9ZiFu1ptSB_8MGeWmhk.crl (hash: dCrrHaPfl/tipO+y1qvP+dLTY4ey+AqH//+4JTHqlss=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:e7:cd:40:c5:49:ff:90:ce:1d:63:a6:05:12:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c9c08bf21c7f59885bb5a6d481ffc3067969a19
Validity
Not Before: Jan 31 14:00:39 2025 GMT
Not After : Feb 1 14:00:39 2025 GMT
Subject: CN=df3687683653ce9232355c325978065012ab5c2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:01:7a:00:6d:05:f6:f9:65:ac:b8:c0:1c:8c:
f4:80:30:d3:71:c9:be:ca:6e:24:af:9b:6f:f6:0c:
e1:50:dc:c3:9b:3e:ea:d9:25:8b:2e:9d:86:8f:8e:
2b:7a:a2:e2:e4:e8:a8:75:d7:ad:8c:a5:77:55:97:
09:5e:b7:98:93:8c:0e:c8:f9:c6:08:2b:10:97:ae:
83:af:1f:d0:4e:14:16:f9:33:e2:be:c3:1b:51:f1:
05:c0:42:6a:f1:6d:16:f6:95:5b:c3:97:ac:77:e8:
7e:7d:3c:16:c0:e1:67:62:6e:72:7e:78:7b:c4:ab:
0c:7e:56:a5:c8:ad:56:2e:d2:86:1a:e8:26:5b:64:
df:cd:09:7c:ac:2d:a7:69:c0:7f:15:1d:52:5e:7b:
c4:ca:eb:c3:5b:56:d7:70:f2:9b:50:63:88:e3:91:
5c:d9:a4:d7:3e:c5:28:9d:40:c4:2e:10:b9:6c:54:
01:f8:2f:78:64:03:0c:b4:bc:ec:00:28:98:be:4b:
cd:bd:3b:c4:9b:13:77:f0:fc:0e:75:19:1a:30:1a:
5c:8b:df:78:2d:a3:4f:94:c6:4e:50:16:66:ef:da:
52:26:9b:79:41:19:23:e6:0b:61:7b:fb:f2:ed:cb:
2b:58:df:58:f2:6f:43:14:db:e6:ae:4c:e6:8b:f2:
2c:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:36:87:68:36:53:CE:92:32:35:5C:32:59:78:06:50:12:AB:5C:2F
X509v3 Authority Key Identifier:
keyid:2C:9C:08:BF:21:C7:F5:98:85:BB:5A:6D:48:1F:FC:30:67:96:9A:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LJwIvyHH9ZiFu1ptSB_8MGeWmhk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/109558-4319-46c0-9ab2-12ea10714a56/1/LJwIvyHH9ZiFu1ptSB_8MGeWmhk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/109558-4319-46c0-9ab2-12ea10714a56/1/LJwIvyHH9ZiFu1ptSB_8MGeWmhk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:2a:18:85:73:ae:3d:94:ec:cb:8a:6d:3b:94:b5:3f:6c:53:
5a:a7:74:3a:7a:60:bb:55:38:35:e2:b7:bc:27:65:ae:70:d2:
1c:6a:69:78:7c:1b:63:a4:fa:cd:ec:c8:59:61:6a:96:25:4d:
0b:d6:0c:e7:8f:fc:88:da:8f:8f:58:23:ee:e8:81:6b:13:6a:
f9:79:e6:7b:8c:38:06:46:11:83:7c:f7:3a:43:fc:19:26:4a:
8d:8a:3d:3f:a9:23:04:9b:51:10:01:3b:f2:22:6a:4d:e1:7b:
79:86:3b:ff:c9:a5:c4:0a:48:fa:77:9e:67:20:32:d5:4d:4a:
44:14:65:4d:08:a3:2f:39:8d:dc:80:47:39:4e:d3:ca:e6:e8:
26:06:5f:79:52:26:fa:1b:c8:f9:21:3c:c1:a7:59:49:7d:84:
e5:29:72:c9:00:1e:72:b0:19:27:cb:fa:83:6d:13:16:7c:22:
09:9b:c2:f0:0d:85:92:b1:c3:95:ba:54:fe:39:e3:e9:15:12:
b5:80:a3:e6:64:c1:0f:11:5e:62:c9:68:63:c7:1c:a8:77:f7:
d3:c0:ee:60:73:7f:4e:0a:24:3d:ba:6b:b2:dc:c5:e2:45:c9:
c7:4f:bd:fb:0e:22:e5:41:a4:87:18:00:35:52:fe:10:6b:5a:
8e:24:d8:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:05:41 2025 by rpki-client