Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/668bf3-77dc-43ea-8fdd-485eda34998f/1/LkWQWSMqS7ky9j-w37ZUk-ucgng.mft
File: LkWQWSMqS7ky9j-w37ZUk-ucgng.mft (raw, json)
Hash identifier: 52Rr4iNLkpBKHeUgXKSMLnKmyUpyA/7g2XKAM8pVDhM=
Subject key identifier: 02:0E:E0:99:BE:BD:9C:17:1F:3F:A8:86:FA:73:72:CE:B8:35:77:08
Authority key identifier: 2E:45:90:59:23:2A:4B:B9:32:F6:3F:B0:DF:B6:54:93:EB:9C:82:78
Certificate issuer: /CN=2e459059232a4bb932f63fb0dfb65493eb9c8278
Certificate serial: 0194BBCF00989318EF72E706310E9B08EACD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LkWQWSMqS7ky9j-w37ZUk-ucgng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/668bf3-77dc-43ea-8fdd-485eda34998f/1/LkWQWSMqS7ky9j-w37ZUk-ucgng.mft
Manifest number: 13B9
Signing time: Fri 31 Jan 2025 10:01:32 +0000
Manifest this update: Fri 31 Jan 2025 10:01:32 +0000
Manifest next update: Sat 01 Feb 2025 10:01:32 +0000
Files and hashes: 1: LkWQWSMqS7ky9j-w37ZUk-ucgng.crl (hash: wlUPHHcPyrOu1/9iolDcCalnwpLghZOnbaAqRINZWJU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cf:00:98:93:18:ef:72:e7:06:31:0e:9b:08:ea:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e459059232a4bb932f63fb0dfb65493eb9c8278
Validity
Not Before: Jan 31 10:01:32 2025 GMT
Not After : Feb 1 10:01:32 2025 GMT
Subject: CN=020ee099bebd9c171f3fa886fa7372ceb8357708
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:11:82:ca:f7:7b:4e:df:b8:bd:25:6f:70:68:
6d:b0:b0:06:c4:76:6c:9d:13:ac:58:c9:5c:88:ac:
1c:4b:1e:ca:db:85:0a:32:d4:ac:54:4c:57:28:9b:
f5:32:52:6a:2c:a9:2c:57:8a:e0:c9:85:89:18:54:
f3:74:1a:b6:e4:e9:1e:7c:fb:37:96:5c:57:58:91:
d3:15:3c:e9:f3:05:cd:c4:00:a7:2e:fc:e1:27:38:
3d:43:6b:81:1e:b3:3f:b7:08:8a:94:64:29:42:e1:
37:f2:1e:df:1c:54:ab:70:8f:2a:af:5e:4a:7a:62:
f8:ba:30:c6:0b:8b:3a:4a:c4:5a:91:a3:f6:b7:0a:
6f:26:30:bf:ab:0a:f4:01:98:9d:31:1b:b1:3d:a6:
79:a2:9f:f8:a3:fb:86:9e:db:65:ff:df:13:7e:3a:
4d:c6:c4:ca:99:7f:4b:57:da:33:40:22:ba:25:c1:
02:a6:b1:5e:69:19:2d:00:3d:35:2e:32:de:8a:1d:
7d:33:fe:35:99:2c:e0:db:4f:39:ca:85:48:e4:80:
ae:e4:b8:a1:80:ed:ab:dd:f6:c9:eb:2d:0f:a9:1b:
f2:eb:8c:ed:21:20:36:cb:33:dc:85:3f:48:0d:50:
cb:df:a1:7a:f3:71:dd:64:bb:21:7e:0a:7b:41:0b:
14:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:0E:E0:99:BE:BD:9C:17:1F:3F:A8:86:FA:73:72:CE:B8:35:77:08
X509v3 Authority Key Identifier:
keyid:2E:45:90:59:23:2A:4B:B9:32:F6:3F:B0:DF:B6:54:93:EB:9C:82:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LkWQWSMqS7ky9j-w37ZUk-ucgng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/668bf3-77dc-43ea-8fdd-485eda34998f/1/LkWQWSMqS7ky9j-w37ZUk-ucgng.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/668bf3-77dc-43ea-8fdd-485eda34998f/1/LkWQWSMqS7ky9j-w37ZUk-ucgng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:18:5f:f2:e8:ba:ec:8c:4e:af:8a:a9:cf:e9:7a:0b:90:6f:
89:3d:38:75:1f:c3:90:cd:98:56:47:28:c6:e0:79:a4:cf:6a:
48:de:5b:ba:64:42:e8:e1:80:33:fe:6d:a9:6a:c6:e2:b9:ea:
7c:d6:44:93:36:b2:05:e9:5d:d5:56:62:af:85:1e:71:1f:56:
4d:33:4c:00:35:b3:13:27:41:85:7d:0d:ec:04:0a:9c:2a:fc:
8d:5a:1d:33:2a:4c:e2:0a:00:a6:fb:b4:7e:d0:19:4d:bd:ae:
fe:66:48:45:f7:39:ca:3a:f9:5b:09:9b:5a:19:3e:a7:cb:ff:
ed:aa:41:ca:9b:58:77:59:d8:ae:cc:10:9b:11:d8:62:7d:76:
3a:a6:0c:a1:87:4d:6b:1d:04:e0:f7:87:41:cf:66:20:13:81:
6c:65:75:21:57:3d:37:2c:de:ac:a0:92:6e:4a:db:1e:2d:3a:
5e:d0:ac:3d:b4:14:7a:ab:46:f0:05:95:a5:eb:7e:52:fb:c3:
a9:e7:8a:0d:d7:c6:7e:17:fd:2d:da:49:65:cc:84:eb:89:00:
66:ff:80:de:ae:43:18:27:ee:ff:f1:05:64:7a:e9:a7:e6:e0:
6a:ae:99:f8:28:5b:a6:55:81:1d:5a:e1:c8:67:a3:ea:79:95:
be:be:c7:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:31:55 2025 by rpki-client