Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/4ef629-12e2-4d99-9b4a-336623afe898/1/lM53iNLj_vf8ANXOEz19bcAPhik.mft
File: lM53iNLj_vf8ANXOEz19bcAPhik.mft (raw, json)
Hash identifier: CdZNec3QraOAQbxlDTKnnkV6fYOLzCnQuIT/cDUdMzU=
Subject key identifier: 43:86:74:8D:1F:B9:3D:CB:59:E4:8A:C2:59:97:3D:2B:F3:45:C6:11
Authority key identifier: 94:CE:77:88:D2:E3:FE:F7:FC:00:D5:CE:13:3D:7D:6D:C0:0F:86:29
Certificate issuer: /CN=94ce7788d2e3fef7fc00d5ce133d7d6dc00f8629
Certificate serial: 0194BC3C7752E45B6C1A8BBC963C97B861BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lM53iNLj_vf8ANXOEz19bcAPhik.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/4ef629-12e2-4d99-9b4a-336623afe898/1/lM53iNLj_vf8ANXOEz19bcAPhik.mft
Manifest number: 0BA0
Signing time: Fri 31 Jan 2025 12:01:06 +0000
Manifest this update: Fri 31 Jan 2025 12:01:06 +0000
Manifest next update: Sat 01 Feb 2025 12:01:06 +0000
Files and hashes: 1: lM53iNLj_vf8ANXOEz19bcAPhik.crl (hash: PY0Q5Z+iy044mdt3ZK0J85cb/iDNde1Ju4QHuHWdh2Y=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:77:52:e4:5b:6c:1a:8b:bc:96:3c:97:b8:61:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94ce7788d2e3fef7fc00d5ce133d7d6dc00f8629
Validity
Not Before: Jan 31 12:01:06 2025 GMT
Not After : Feb 1 12:01:06 2025 GMT
Subject: CN=4386748d1fb93dcb59e48ac259973d2bf345c611
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:c1:60:04:85:00:19:7c:aa:9e:59:80:d1:f1:
a9:d0:5b:28:8a:11:64:98:d7:fb:da:cd:bf:38:8a:
0c:70:5a:4a:50:73:0b:c0:53:81:32:cf:36:94:7f:
c2:67:b4:3b:64:c6:f1:ae:cc:65:50:a6:07:05:5d:
26:2d:67:36:d1:ab:ac:f2:32:a0:95:3f:67:13:72:
57:ca:a6:1b:9b:45:60:cc:e4:8b:f7:61:5b:51:00:
9a:a4:73:eb:41:34:6e:23:98:48:fe:9a:b9:90:de:
75:4b:35:de:e2:09:cc:a0:6f:fb:c9:be:51:b6:0f:
58:06:d8:fa:06:ef:e1:22:a8:0f:e2:4d:b2:a8:e6:
5c:99:2c:fd:89:82:db:5c:c9:35:c6:28:e7:fe:96:
31:58:70:c5:7b:e0:b0:c9:ae:7f:58:de:09:1c:5c:
cb:03:5b:de:2a:73:c8:c2:d7:14:74:fc:ee:64:4d:
e6:96:18:20:6d:1c:3e:05:a0:83:43:20:68:2b:f3:
23:b5:c5:a5:97:2f:5e:e0:ec:e6:cb:7d:ca:dc:96:
f1:af:1e:16:d9:80:e2:9e:c8:48:37:40:cf:55:de:
ef:a8:6c:c8:1d:c5:b7:0f:11:df:9f:4f:77:e4:1b:
3d:11:f3:8e:c4:f4:7d:1e:5b:e2:78:8d:3f:f9:c8:
ca:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:86:74:8D:1F:B9:3D:CB:59:E4:8A:C2:59:97:3D:2B:F3:45:C6:11
X509v3 Authority Key Identifier:
keyid:94:CE:77:88:D2:E3:FE:F7:FC:00:D5:CE:13:3D:7D:6D:C0:0F:86:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lM53iNLj_vf8ANXOEz19bcAPhik.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/4ef629-12e2-4d99-9b4a-336623afe898/1/lM53iNLj_vf8ANXOEz19bcAPhik.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/4ef629-12e2-4d99-9b4a-336623afe898/1/lM53iNLj_vf8ANXOEz19bcAPhik.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:b9:43:3f:1e:7e:1f:8c:09:b9:69:24:06:af:13:67:8e:62:
4d:a1:5a:65:26:dc:ad:7a:3e:a8:1a:32:a1:da:fa:d4:ae:0a:
9b:cd:f3:f4:47:fe:6f:54:50:da:0f:45:1c:a8:65:d8:c9:29:
05:a7:57:ef:68:b7:3b:2a:95:21:0e:dd:44:34:91:b8:fc:f8:
4b:e5:0f:e3:7b:60:30:46:04:f5:11:fe:a2:14:ed:ac:c6:2c:
11:03:d5:79:7d:fe:c3:59:cb:7e:22:d1:62:66:83:86:17:03:
39:b4:ba:54:28:0d:ff:92:db:3d:f6:21:9c:09:37:32:88:65:
59:62:78:cb:2d:59:f7:ef:73:0b:07:96:13:3b:dc:76:3c:30:
ec:8a:e5:d7:f7:c7:79:07:81:21:84:a5:4d:9e:6b:3e:72:66:
ef:9c:29:64:a3:ba:0b:01:7c:91:c1:b1:3e:38:78:35:b6:b5:
f4:c1:c0:1a:91:ef:d6:cb:15:f1:5a:86:ec:2e:0e:0b:e8:ce:
a7:c0:00:8e:be:99:a0:8a:b8:65:29:5b:2d:65:35:35:c6:fa:
b9:8e:01:3f:41:9d:c4:c5:de:ad:5e:9a:02:94:de:81:d2:3e:
a7:f4:17:b3:93:3f:ff:e9:f5:18:45:97:32:9f:9c:0a:75:32:
a9:e6:e2:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:27:44 2025 by rpki-client