Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/76a471-08e0-49e6-9537-53b55fae023d/1/LSdW5QjQEzSbJE4wfX8jliafJwg.mft
File: LSdW5QjQEzSbJE4wfX8jliafJwg.mft (raw, json)
Hash identifier: rBA65+pOo5WG5wXi5vErM5NirDmyvxJxt1I0MpOwAhg=
Subject key identifier: 24:23:CD:4E:72:C9:17:5B:B4:A5:3C:EA:40:DD:89:1A:D3:C1:E5:98
Authority key identifier: 2D:27:56:E5:08:D0:13:34:9B:24:4E:30:7D:7F:23:96:26:9F:27:08
Certificate issuer: /CN=2d2756e508d013349b244e307d7f2396269f2708
Certificate serial: 0194BD17C537CFF1FE243DF6A27792EB9F67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LSdW5QjQEzSbJE4wfX8jliafJwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/76a471-08e0-49e6-9537-53b55fae023d/1/LSdW5QjQEzSbJE4wfX8jliafJwg.mft
Manifest number: 10BB
Signing time: Fri 31 Jan 2025 16:00:39 +0000
Manifest this update: Fri 31 Jan 2025 16:00:39 +0000
Manifest next update: Sat 01 Feb 2025 16:00:39 +0000
Files and hashes: 1: LSdW5QjQEzSbJE4wfX8jliafJwg.crl (hash: Cw4Je62BtBT9hCGsd4ZeD7ap/HiuC5q0ijTAQ29+k6A=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:c5:37:cf:f1:fe:24:3d:f6:a2:77:92:eb:9f:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d2756e508d013349b244e307d7f2396269f2708
Validity
Not Before: Jan 31 16:00:39 2025 GMT
Not After : Feb 1 16:00:39 2025 GMT
Subject: CN=2423cd4e72c9175bb4a53cea40dd891ad3c1e598
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:89:c5:53:72:f7:b1:5b:80:45:93:04:0d:bb:
8f:12:c5:b7:cb:da:08:80:bc:3f:1f:b1:f9:e2:69:
2f:cc:e2:bf:55:b0:85:16:1f:32:61:1b:71:d4:ad:
54:12:f3:06:b3:15:2c:59:dc:1f:b6:f1:a9:23:13:
0f:0c:01:7a:f6:46:f8:1a:09:95:a2:86:e2:08:52:
a8:07:87:ac:f2:d5:70:73:9a:14:c8:82:4e:2e:e9:
ed:f5:49:76:a1:98:b2:1d:1e:20:ae:43:67:0f:81:
5c:fa:b2:71:2a:e3:c0:35:40:81:3b:c4:7f:a2:26:
9b:85:b5:3d:a0:e6:8c:76:54:8b:34:46:46:c2:57:
20:05:10:a7:26:26:b1:07:d7:be:45:33:46:d9:a7:
ce:17:66:91:64:bc:a8:64:c0:e3:1c:75:14:b7:c1:
e7:65:dc:46:5e:48:ab:9a:6e:5b:60:a9:07:67:98:
37:d1:0f:d5:0b:86:7e:b1:0c:53:ce:a2:64:e4:31:
82:98:80:49:05:c3:f4:c8:ca:8c:71:4e:eb:2e:a1:
ca:a3:1f:64:dc:f5:64:68:e3:d3:00:4c:e4:a9:80:
a8:b4:8f:bf:a7:4e:90:d0:9e:a2:44:c0:58:6e:b5:
fa:7f:86:db:f4:d2:41:0c:1f:a3:71:65:f7:a9:d8:
e0:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:23:CD:4E:72:C9:17:5B:B4:A5:3C:EA:40:DD:89:1A:D3:C1:E5:98
X509v3 Authority Key Identifier:
keyid:2D:27:56:E5:08:D0:13:34:9B:24:4E:30:7D:7F:23:96:26:9F:27:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LSdW5QjQEzSbJE4wfX8jliafJwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/76a471-08e0-49e6-9537-53b55fae023d/1/LSdW5QjQEzSbJE4wfX8jliafJwg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/76a471-08e0-49e6-9537-53b55fae023d/1/LSdW5QjQEzSbJE4wfX8jliafJwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:48:39:e8:03:ad:92:fd:ad:ca:bc:10:be:99:60:4d:02:03:
d2:c3:02:57:ba:04:ff:56:41:2e:28:cc:bf:85:48:9b:b0:99:
bf:0e:7f:4e:86:47:5d:21:0b:5a:37:a5:0d:c8:6a:df:aa:f6:
75:2d:8d:2c:c0:67:1f:09:3f:56:4c:ef:71:e7:6c:7a:be:74:
c2:11:9c:13:0f:90:44:7d:9b:3d:5d:79:b0:65:3a:eb:e8:60:
66:bd:fb:ad:d5:af:ae:ab:b5:b6:6e:af:0b:21:71:55:84:9b:
df:05:af:85:62:1b:8b:1d:ee:61:90:47:3f:5d:16:3d:3d:de:
74:29:72:01:77:15:c9:c1:37:aa:d8:cc:54:41:8b:02:c7:c2:
92:d6:8d:21:fc:22:ab:cf:d1:e5:85:a3:ac:77:e8:0c:ed:1a:
5c:77:f6:2f:39:bf:93:9b:61:af:0c:da:5e:0f:06:28:2b:2f:
e2:77:af:9d:df:f2:b9:8c:a5:48:1b:78:52:82:72:84:54:b8:
ec:1f:e3:da:5a:fd:89:39:1f:d6:34:85:b9:7b:37:6f:6b:38:
20:0c:25:b0:ed:f5:56:c6:83:2d:ab:79:31:70:40:b8:84:c1:
89:11:1c:c6:19:3a:a9:d1:56:af:67:57:16:91:ce:74:f8:07:
35:09:2e:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:51:45 2025 by rpki-client