Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/436b56-5b55-4ff4-83bf-98ac665b1908/1/lm-ON-SmyEs_O1unfiEJ0-9ZquA.mft
File: lm-ON-SmyEs_O1unfiEJ0-9ZquA.mft (raw, json)
Hash identifier: NF0TVVpWvR9bQc6cOyz7BV7YK4C7vk5ZWqAYOOc+TOk=
Subject key identifier: FC:6C:78:F7:5F:D4:C7:36:28:49:1F:72:53:23:37:9B:FC:33:C4:92
Authority key identifier: 96:6F:8E:37:E4:A6:C8:4B:3F:3B:5B:A7:7E:21:09:D3:EF:59:AA:E0
Certificate issuer: /CN=966f8e37e4a6c84b3f3b5ba77e2109d3ef59aae0
Certificate serial: 0194BC3C46A6FB8653C5E35CA3B28F2F1BE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lm-ON-SmyEs_O1unfiEJ0-9ZquA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/436b56-5b55-4ff4-83bf-98ac665b1908/1/lm-ON-SmyEs_O1unfiEJ0-9ZquA.mft
Manifest number: 16
Signing time: Fri 31 Jan 2025 12:00:54 +0000
Manifest this update: Fri 31 Jan 2025 12:00:54 +0000
Manifest next update: Sat 01 Feb 2025 12:00:54 +0000
Files and hashes: 1: lm-ON-SmyEs_O1unfiEJ0-9ZquA.crl (hash: aDPuofJUIlArv5VbwyXwXlxnbb/D5KPjLMM7NZgtg1s=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:46:a6:fb:86:53:c5:e3:5c:a3:b2:8f:2f:1b:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=966f8e37e4a6c84b3f3b5ba77e2109d3ef59aae0
Validity
Not Before: Jan 31 12:00:54 2025 GMT
Not After : Feb 1 12:00:54 2025 GMT
Subject: CN=fc6c78f75fd4c73628491f725323379bfc33c492
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d0:0e:8e:72:10:af:f3:9b:2d:ce:87:9c:b7:
1b:be:1b:86:43:37:b6:93:1f:23:29:17:8f:ce:46:
e8:52:ef:b9:ef:36:53:b1:45:74:76:7e:bd:1a:ed:
8d:79:7e:21:74:ee:a9:2f:c1:10:8f:36:03:42:f7:
1f:5b:3c:e9:ec:8f:bd:2d:13:db:48:27:d5:99:68:
cb:6a:fd:c4:82:70:de:1b:5e:ab:74:c0:a4:9f:df:
5f:d9:94:ae:22:ae:23:ab:af:96:be:d1:51:60:8f:
1c:44:8e:15:05:49:b5:c1:4a:e1:8a:e3:81:2a:da:
4b:8c:b8:22:b8:a4:f4:cf:15:36:68:b4:e4:57:7b:
57:63:1a:4b:14:6f:04:b4:ad:80:c8:19:32:08:d3:
dd:ef:ec:fb:b6:a7:1b:77:d7:50:2c:8c:34:0b:52:
31:a5:3b:aa:57:10:81:01:61:d3:15:b0:16:ce:61:
d3:f7:de:e5:f9:c7:44:10:de:c6:dc:80:f8:e0:39:
8e:a3:6f:22:06:75:c4:cf:46:63:ba:10:4a:f8:f9:
80:e3:6c:e6:23:ab:74:ce:75:9e:18:f6:d5:6d:80:
a8:6e:15:da:92:4b:07:a8:7e:cc:5e:b5:d2:28:9c:
1c:30:0c:49:12:f0:4f:71:6a:cb:5f:1a:91:50:82:
29:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:6C:78:F7:5F:D4:C7:36:28:49:1F:72:53:23:37:9B:FC:33:C4:92
X509v3 Authority Key Identifier:
keyid:96:6F:8E:37:E4:A6:C8:4B:3F:3B:5B:A7:7E:21:09:D3:EF:59:AA:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lm-ON-SmyEs_O1unfiEJ0-9ZquA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/436b56-5b55-4ff4-83bf-98ac665b1908/1/lm-ON-SmyEs_O1unfiEJ0-9ZquA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/436b56-5b55-4ff4-83bf-98ac665b1908/1/lm-ON-SmyEs_O1unfiEJ0-9ZquA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:99:7a:b3:c1:30:3c:64:f0:83:5a:37:33:16:67:a1:a2:84:
1d:32:06:b3:6d:55:eb:63:c3:ff:2c:3d:97:8b:0a:06:84:0c:
7a:29:6d:5f:95:b0:41:13:13:02:6e:72:2a:b6:5d:02:78:01:
df:c0:fd:7b:65:f7:1e:53:71:02:f1:0e:c2:01:09:2c:45:02:
4f:7e:32:63:1a:e6:f8:ef:6d:e8:5d:fa:cf:9c:e4:7f:eb:1c:
b2:ea:8e:c5:8a:5a:99:5d:51:06:e5:da:31:85:d4:af:27:2d:
fe:8a:f5:80:e9:63:e4:f9:22:0f:98:8b:89:8b:bf:8b:1c:b7:
49:5f:93:fd:d3:fb:35:25:16:c3:04:63:7c:be:8f:6b:65:df:
8b:a7:96:e4:c4:9e:2a:43:93:91:bd:db:bc:fc:12:1b:70:75:
c2:08:30:c8:e6:0c:3c:dc:59:22:3a:c8:fa:31:90:66:da:5e:
4b:18:b1:b5:fe:35:47:f2:fc:c3:5c:a3:04:8c:99:40:40:c1:
85:d2:18:8a:bc:7b:3f:fa:24:38:10:99:3a:1b:5a:56:92:26:
47:98:16:51:47:5b:23:e3:58:d7:ec:40:26:70:c5:9b:5e:24:
c0:9a:48:1b:28:3a:56:45:31:32:f9:d8:ac:12:0a:63:1d:82:
8b:f7:71:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:07:06 2025 by rpki-client