Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/d7a04c-3999-42e7-ae7c-861184b881b0/1/_lTc_6IG9BAIIGtR8O8ZycWA3Sg.mft
File: _lTc_6IG9BAIIGtR8O8ZycWA3Sg.mft (raw, json)
Hash identifier: eRauu21vsT2PHM+T2WrDEoWTdT62L7g01+Mz7UEpDSw=
Subject key identifier: C3:E8:32:44:97:26:F1:9F:06:E0:BD:60:83:81:02:2B:50:3A:A0:64
Authority key identifier: FE:54:DC:FF:A2:06:F4:10:08:20:6B:51:F0:EF:19:C9:C5:80:DD:28
Certificate issuer: /CN=fe54dcffa206f41008206b51f0ef19c9c580dd28
Certificate serial: 0194BBCDE3AAB7EAB4B7AD88C403694F661B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_lTc_6IG9BAIIGtR8O8ZycWA3Sg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/d7a04c-3999-42e7-ae7c-861184b881b0/1/_lTc_6IG9BAIIGtR8O8ZycWA3Sg.mft
Manifest number: 1147
Signing time: Fri 31 Jan 2025 10:00:19 +0000
Manifest this update: Fri 31 Jan 2025 10:00:19 +0000
Manifest next update: Sat 01 Feb 2025 10:00:19 +0000
Files and hashes: 1: _lTc_6IG9BAIIGtR8O8ZycWA3Sg.crl (hash: 9TnQEJ06tbvfZTqsTNy3kh7227u5eZQp+b9mGcp6/qg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:e3:aa:b7:ea:b4:b7:ad:88:c4:03:69:4f:66:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe54dcffa206f41008206b51f0ef19c9c580dd28
Validity
Not Before: Jan 31 10:00:19 2025 GMT
Not After : Feb 1 10:00:19 2025 GMT
Subject: CN=c3e832449726f19f06e0bd608381022b503aa064
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:4b:57:02:8c:d2:e4:14:e1:c2:3e:93:06:be:
e5:83:6f:32:8f:b8:58:f4:21:0a:06:b1:6a:3d:bf:
52:91:e6:75:cb:94:db:2f:59:fb:8b:c2:fc:e4:cf:
0f:37:58:47:9d:da:81:24:c8:75:67:49:d5:ea:ee:
24:12:5d:f8:fb:68:e0:4e:c4:99:d7:6d:a0:08:1c:
29:db:49:07:6d:4a:4a:05:40:ee:75:e9:bd:af:a4:
63:ec:8a:5e:fb:df:2a:21:a3:ee:f0:3a:5a:f2:6f:
f4:44:12:46:47:7e:66:8d:fc:f9:76:df:84:23:52:
c4:2a:38:66:ca:53:89:f9:a4:b1:dd:5f:65:15:a0:
74:f5:2a:07:dc:44:0d:8d:39:07:03:7a:e4:fa:2e:
20:4c:3c:89:f4:fd:c2:1b:45:b6:98:29:a9:73:97:
da:c2:67:74:09:82:e1:1a:38:6d:04:e4:de:25:b6:
2e:94:96:a7:3b:07:de:a9:e8:02:05:f3:39:78:99:
97:63:ac:06:4f:3d:56:84:2c:bf:cc:6a:47:7b:07:
d5:70:bf:ac:6c:8d:6b:02:7e:a8:dd:6d:d0:47:25:
8b:0c:5b:b5:09:13:8e:c4:d4:f0:ed:dc:6e:f0:c1:
49:a6:3a:2a:32:a0:62:e8:9b:7d:d8:2b:34:ba:dd:
df:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:E8:32:44:97:26:F1:9F:06:E0:BD:60:83:81:02:2B:50:3A:A0:64
X509v3 Authority Key Identifier:
keyid:FE:54:DC:FF:A2:06:F4:10:08:20:6B:51:F0:EF:19:C9:C5:80:DD:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_lTc_6IG9BAIIGtR8O8ZycWA3Sg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d7a04c-3999-42e7-ae7c-861184b881b0/1/_lTc_6IG9BAIIGtR8O8ZycWA3Sg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d7a04c-3999-42e7-ae7c-861184b881b0/1/_lTc_6IG9BAIIGtR8O8ZycWA3Sg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:93:0d:b5:4c:94:98:b5:39:7c:08:6a:a9:ea:01:57:d5:bc:
ae:52:55:2d:10:d9:e9:d2:7f:b2:be:61:83:ad:d3:e5:11:97:
fc:85:e5:41:5c:3b:02:2a:99:f5:83:0c:8e:12:bf:3e:ad:5a:
ad:4c:bb:e7:40:fd:77:6e:47:c9:26:5d:82:a1:5f:e2:ac:8c:
d7:10:16:0f:20:4c:e3:1a:5e:a8:78:eb:05:c2:64:cb:46:49:
a2:5f:4f:7e:b3:9a:41:4d:06:7e:24:37:72:ce:ab:19:05:1b:
30:c9:4c:53:f4:3c:e8:79:01:20:84:0a:78:8d:07:27:9e:b5:
e2:23:54:d0:86:80:e5:de:08:3c:6c:a5:d5:37:b3:38:f7:8a:
1b:e0:37:58:bd:a0:be:7b:ba:a1:e5:f8:ba:e5:ec:2f:4b:c8:
ba:b3:39:7d:e0:60:76:15:d6:74:40:29:f6:dd:77:0d:04:09:
68:ce:d4:16:c9:3c:92:ec:81:49:73:e6:86:86:07:d2:ad:6d:
d8:79:c4:05:fa:5d:fc:3a:39:ce:cb:33:1d:65:c4:64:75:b4:
9e:9b:8b:a8:60:6e:df:f3:e0:df:09:17:98:86:f9:48:0b:13:
f1:6c:d5:f1:19:a7:42:a3:72:01:04:e8:02:d8:43:d9:1d:17:
b6:3f:b8:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:02:13 2025 by rpki-client