Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/085bd3-c34f-48cf-9a73-ec43fd6c227a/1/1lcpIU0Paz-lGho4A32rjeSOBVg.mft
File: 1lcpIU0Paz-lGho4A32rjeSOBVg.mft (raw, json)
Hash identifier: 49O5S6Pb0eQms/indJAfJEIPVKlY2WTVF+4t+S5beTA=
Subject key identifier: 7F:A3:28:BD:1E:99:5A:7B:1A:AA:39:19:79:D8:E0:24:6B:A1:6C:53
Authority key identifier: D6:57:29:21:4D:0F:6B:3F:A5:1A:1A:38:03:7D:AB:8D:E4:8E:05:58
Certificate issuer: /CN=d65729214d0f6b3fa51a1a38037dab8de48e0558
Certificate serial: 0194BC72D364B1D423B9809CA3C4BCCD267B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1lcpIU0Paz-lGho4A32rjeSOBVg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/085bd3-c34f-48cf-9a73-ec43fd6c227a/1/1lcpIU0Paz-lGho4A32rjeSOBVg.mft
Manifest number: 048B
Signing time: Fri 31 Jan 2025 13:00:29 +0000
Manifest this update: Fri 31 Jan 2025 13:00:29 +0000
Manifest next update: Sat 01 Feb 2025 13:00:29 +0000
Files and hashes: 1: 1lcpIU0Paz-lGho4A32rjeSOBVg.crl (hash: jLbF5y8zclJ1o1SCKZqzXsOzlHH8xf2FkQQFXpmjIAk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:d3:64:b1:d4:23:b9:80:9c:a3:c4:bc:cd:26:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d65729214d0f6b3fa51a1a38037dab8de48e0558
Validity
Not Before: Jan 31 13:00:29 2025 GMT
Not After : Feb 1 13:00:29 2025 GMT
Subject: CN=7fa328bd1e995a7b1aaa391979d8e0246ba16c53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:29:f5:9d:fb:4b:1f:fa:89:2d:3f:75:7e:3a:
59:d4:38:49:e9:6d:bc:fb:94:5c:56:60:a7:1d:8e:
a7:ad:5a:03:da:d1:ab:7e:0a:11:e5:08:c3:ae:f0:
1e:0e:9c:84:53:41:9e:3b:5b:14:26:48:c2:9e:8b:
db:78:a7:dd:8d:0c:9d:24:bd:38:6e:77:23:8d:6c:
b0:5e:cf:cc:d9:3f:a1:d0:2f:93:7a:71:12:29:4b:
e3:66:b0:07:3e:d4:8b:a0:9c:5d:21:3d:f8:0b:a1:
e5:11:71:77:1c:7c:1e:a6:2f:cf:d7:53:9c:e2:92:
5c:11:f7:cb:c9:cf:29:ed:86:c7:25:87:77:73:d2:
5c:cb:14:21:a7:4a:71:70:8f:24:72:e1:cb:b9:4d:
e9:a8:46:99:34:de:ae:74:e6:15:7d:3b:24:5e:4d:
2f:7f:c1:d6:9c:24:f4:a9:89:f6:10:47:e2:f3:10:
b7:d6:ba:26:db:a2:a1:18:3c:db:15:99:4a:cf:cb:
b2:8b:e0:59:bd:c9:86:42:e3:a9:95:3f:3e:4f:79:
2b:60:79:01:aa:79:94:6e:2c:36:81:a5:73:14:fc:
ee:3c:83:43:de:64:76:82:6a:86:a3:00:22:3a:5c:
1a:e6:e2:9a:b0:12:4e:3d:ba:fe:bc:5a:f1:04:78:
b8:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:A3:28:BD:1E:99:5A:7B:1A:AA:39:19:79:D8:E0:24:6B:A1:6C:53
X509v3 Authority Key Identifier:
keyid:D6:57:29:21:4D:0F:6B:3F:A5:1A:1A:38:03:7D:AB:8D:E4:8E:05:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1lcpIU0Paz-lGho4A32rjeSOBVg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/085bd3-c34f-48cf-9a73-ec43fd6c227a/1/1lcpIU0Paz-lGho4A32rjeSOBVg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/085bd3-c34f-48cf-9a73-ec43fd6c227a/1/1lcpIU0Paz-lGho4A32rjeSOBVg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:2a:08:3c:a4:22:7c:12:94:7d:49:d6:d8:5b:8b:62:27:b7:
ac:e6:03:b1:a5:bd:38:e4:e6:b1:7f:05:3c:da:89:f1:7a:a7:
ab:f1:0a:56:e9:68:4e:bb:3d:8b:ee:1f:35:73:5f:0d:31:b9:
37:9b:4c:9d:f7:72:2f:b4:51:dc:af:b8:dd:94:e7:c4:98:1a:
43:a4:ad:a0:fa:3a:9a:0d:de:e9:33:5c:a8:0c:f8:95:cb:d9:
37:3a:d6:cc:4d:93:86:51:9a:fe:55:ed:e7:b7:fd:41:d6:c9:
8a:97:c5:b2:af:f6:be:34:c8:43:2b:61:c5:18:48:9d:ac:d3:
1c:b1:30:d2:33:98:06:4c:f4:86:81:ed:40:5b:e0:1a:d4:ef:
c6:77:94:a6:69:3d:16:75:7a:a8:27:88:a6:d2:15:2a:84:5f:
55:a2:1e:a8:6d:48:e7:54:9f:7d:aa:0b:71:75:ff:41:d0:86:
90:a8:f8:22:e5:95:9a:6a:6f:b4:8d:e7:99:c6:d8:a0:cd:ef:
f8:1d:4f:c1:96:89:1d:cc:8c:58:3a:58:7f:2c:40:53:e5:0e:
0a:4d:6f:d7:02:cb:75:3d:c3:56:f4:04:b9:a3:82:50:31:bb:
30:a1:5a:ad:10:70:79:ad:75:5a:dc:6c:bd:dc:69:73:e9:c0:
4e:e0:53:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:46:49 2025 by rpki-client