Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/6b0dc9-c1b9-4fae-acd9-6bff1c0e68ae/1/lkyqlAOgjTc7kLcQpW0-roE5T_A.mft
File: lkyqlAOgjTc7kLcQpW0-roE5T_A.mft (raw, json)
Hash identifier: 8GSVhlM2OWDqkW/xrh3sxEQyBUip1e1aUzSrLmjQcaw=
Subject key identifier: F8:E9:AA:6D:8C:2B:85:DF:BD:10:83:1A:6A:C5:15:F1:DC:D6:59:13
Authority key identifier: 96:4C:AA:94:03:A0:8D:37:3B:90:B7:10:A5:6D:3E:AE:81:39:4F:F0
Certificate issuer: /CN=964caa9403a08d373b90b710a56d3eae81394ff0
Certificate serial: 0194BC3BE3D64FF43BDB8A18D59065B29427
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lkyqlAOgjTc7kLcQpW0-roE5T_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/6b0dc9-c1b9-4fae-acd9-6bff1c0e68ae/1/lkyqlAOgjTc7kLcQpW0-roE5T_A.mft
Manifest number: 13B7
Signing time: Fri 31 Jan 2025 12:00:29 +0000
Manifest this update: Fri 31 Jan 2025 12:00:29 +0000
Manifest next update: Sat 01 Feb 2025 12:00:29 +0000
Files and hashes: 1: lkyqlAOgjTc7kLcQpW0-roE5T_A.crl (hash: 91pPT/+X+es8eiWfFfy159yhnOwwjAXQ0KPqYhB/BX8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:e3:d6:4f:f4:3b:db:8a:18:d5:90:65:b2:94:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=964caa9403a08d373b90b710a56d3eae81394ff0
Validity
Not Before: Jan 31 12:00:29 2025 GMT
Not After : Feb 1 12:00:29 2025 GMT
Subject: CN=f8e9aa6d8c2b85dfbd10831a6ac515f1dcd65913
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:2c:b1:0d:83:a5:2e:31:47:5f:81:77:4a:76:
0c:65:4e:54:3d:cc:48:47:2b:c7:c7:21:9f:43:ad:
e3:b4:a7:8b:42:9b:d5:7e:aa:f3:63:7f:f7:2b:9a:
e2:13:44:86:46:8d:80:41:f0:c9:95:2d:8b:8a:8c:
f9:e0:1a:f3:b3:b9:23:a0:b0:37:66:73:06:dd:a0:
eb:7e:77:c2:7c:c5:b3:65:3a:ce:5b:47:9b:8c:a2:
51:6f:13:eb:2e:2a:9a:28:b4:90:d1:71:f8:5d:97:
ac:43:77:dd:f6:2c:4a:9c:2d:c4:54:48:5e:5d:73:
70:9b:e6:bf:b4:fa:27:ad:23:c5:b2:8a:f0:11:72:
39:17:7b:2e:0b:3b:d1:60:56:b9:67:ee:49:53:22:
6b:9f:fa:6a:2b:f3:1c:26:62:77:67:12:44:a5:e8:
9b:1b:09:5b:f5:fd:0e:5d:83:10:e0:96:3f:73:85:
90:f6:dc:99:d4:54:36:77:c8:4b:fa:91:70:be:24:
89:d0:d2:e9:09:31:16:ed:7a:ea:cb:53:b3:c9:5b:
68:83:02:6b:19:c4:97:e2:73:f6:27:32:e5:c1:79:
58:45:aa:be:72:93:87:87:f3:a1:db:e5:42:f2:ad:
84:aa:19:5d:75:e9:a6:e1:98:5c:c7:79:66:e6:ef:
ce:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:E9:AA:6D:8C:2B:85:DF:BD:10:83:1A:6A:C5:15:F1:DC:D6:59:13
X509v3 Authority Key Identifier:
keyid:96:4C:AA:94:03:A0:8D:37:3B:90:B7:10:A5:6D:3E:AE:81:39:4F:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lkyqlAOgjTc7kLcQpW0-roE5T_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/6b0dc9-c1b9-4fae-acd9-6bff1c0e68ae/1/lkyqlAOgjTc7kLcQpW0-roE5T_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/6b0dc9-c1b9-4fae-acd9-6bff1c0e68ae/1/lkyqlAOgjTc7kLcQpW0-roE5T_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:20:94:66:bf:44:66:fb:ed:6c:b6:a8:4e:9d:9b:eb:6b:fc:
17:52:43:f7:fe:87:ed:c5:4a:45:1e:96:6f:14:8b:89:2e:66:
e7:52:fd:f6:6f:c9:2d:fa:2b:7a:87:5b:2e:d7:5e:6b:a8:83:
a8:23:62:b4:9d:99:06:4c:f9:79:ba:df:d2:a7:da:26:5b:74:
42:5a:81:9d:7e:81:94:dd:ca:af:53:24:ef:3c:c5:ce:8c:a6:
47:19:fa:9b:2e:da:2a:01:9b:45:97:cd:6d:e9:3b:5d:f9:06:
c7:f6:d3:f4:e0:84:72:65:2d:be:b6:0e:11:de:1d:a4:7e:49:
2a:83:c4:d5:de:52:26:21:62:90:e8:cf:82:f2:47:6e:71:4b:
1d:63:bf:b1:0a:ff:76:90:e0:c5:9b:fd:34:47:39:e2:d5:2e:
92:86:47:d1:0f:d2:c9:4a:03:a4:85:17:50:43:4f:55:3c:5a:
69:8d:ae:2a:02:22:46:45:10:59:d3:20:09:5c:e3:80:6a:bd:
dc:06:22:c5:a5:a7:1b:15:26:0a:1d:da:07:d1:a1:ec:62:cc:
5a:5f:32:4a:df:68:71:7a:28:5a:bb:ea:c8:28:96:d4:0c:91:
07:d2:bf:12:23:1e:0f:be:ab:3d:2c:83:a7:89:bc:b9:cf:5c:
7e:35:ba:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:39:19 2025 by rpki-client