Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/cd41ba-2ea7-474f-8941-5fdb3228fe1f/1/L5FDTuFsYTNOwnDfVox3oLXeBSo.mft
File: L5FDTuFsYTNOwnDfVox3oLXeBSo.mft (raw, json)
Hash identifier: lcE9MjJUeBh6EeDkQAHI5Tiu3fxbbVLTkk/FsltIlI8=
Subject key identifier: 46:50:78:34:12:2D:9C:8E:07:9C:1C:3B:A1:35:71:9B:5F:3F:9B:DA
Authority key identifier: 2F:91:43:4E:E1:6C:61:33:4E:C2:70:DF:56:8C:77:A0:B5:DE:05:2A
Certificate issuer: /CN=2f91434ee16c61334ec270df568c77a0b5de052a
Certificate serial: 0194BC3C751FAF4C62FD60FADA7B9E89F29B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L5FDTuFsYTNOwnDfVox3oLXeBSo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/cd41ba-2ea7-474f-8941-5fdb3228fe1f/1/L5FDTuFsYTNOwnDfVox3oLXeBSo.mft
Manifest number: 0B0F
Signing time: Fri 31 Jan 2025 12:01:06 +0000
Manifest this update: Fri 31 Jan 2025 12:01:06 +0000
Manifest next update: Sat 01 Feb 2025 12:01:06 +0000
Files and hashes: 1: L5FDTuFsYTNOwnDfVox3oLXeBSo.crl (hash: WJubzi6mxOo65sMka9DE80UDXkz7y/7IDcXASdUbNCQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:75:1f:af:4c:62:fd:60:fa:da:7b:9e:89:f2:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f91434ee16c61334ec270df568c77a0b5de052a
Validity
Not Before: Jan 31 12:01:06 2025 GMT
Not After : Feb 1 12:01:06 2025 GMT
Subject: CN=46507834122d9c8e079c1c3ba135719b5f3f9bda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:73:01:99:77:34:87:8a:96:66:e2:0a:b8:83:
c8:f0:42:4b:3c:c3:a2:9d:75:69:ac:af:1f:d3:fb:
b6:a8:db:8b:53:af:4a:86:be:6e:79:87:cf:d3:22:
bb:14:f0:bd:13:4c:ee:15:fd:c0:bd:c0:41:ec:b2:
f9:a8:72:d2:18:83:07:78:be:db:25:f1:8f:33:fa:
1a:88:7e:3a:c9:18:de:59:4a:f8:88:b9:27:c2:d4:
7b:54:fd:ee:40:43:a3:f4:74:66:f5:07:85:1d:bc:
41:16:5a:8d:6c:99:4d:11:9f:81:da:a6:fc:0b:dd:
9d:ab:be:e2:14:92:4c:5e:12:4c:83:15:72:fc:03:
ba:cc:01:08:24:53:2b:49:bc:e4:f2:e7:56:02:22:
23:ce:4d:d7:41:be:03:c3:2a:d9:74:64:01:a6:2c:
82:9d:1e:ff:41:57:ae:2d:3d:1c:a0:1d:00:13:ec:
75:d0:46:a3:23:5a:29:17:c8:f8:10:82:26:82:2f:
87:17:d4:96:a1:00:66:f1:b9:93:01:10:ae:51:6b:
1a:19:38:5d:91:7b:a7:01:bd:82:4f:5f:2b:f3:b5:
58:b6:b7:ff:57:95:3f:86:ed:5a:be:b5:05:c5:05:
f8:06:9a:f2:54:0c:6e:c3:0d:a8:07:5d:d4:3e:dd:
2f:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:50:78:34:12:2D:9C:8E:07:9C:1C:3B:A1:35:71:9B:5F:3F:9B:DA
X509v3 Authority Key Identifier:
keyid:2F:91:43:4E:E1:6C:61:33:4E:C2:70:DF:56:8C:77:A0:B5:DE:05:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L5FDTuFsYTNOwnDfVox3oLXeBSo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/cd41ba-2ea7-474f-8941-5fdb3228fe1f/1/L5FDTuFsYTNOwnDfVox3oLXeBSo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/cd41ba-2ea7-474f-8941-5fdb3228fe1f/1/L5FDTuFsYTNOwnDfVox3oLXeBSo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:25:d1:c4:62:c9:9f:f7:ef:95:31:0c:17:24:ed:a2:a0:12:
a6:e8:4f:35:91:c2:01:5c:1b:ea:54:a0:0c:22:b9:c9:bc:a1:
72:8d:d3:8c:56:b3:9d:82:b6:7e:cb:65:5e:fa:34:62:1d:36:
17:33:c3:0b:99:f7:b8:9b:c9:bf:75:50:25:94:d3:47:9d:2b:
76:c4:eb:03:51:74:02:16:1d:c2:1a:d4:f5:44:ee:0e:31:5a:
3b:e5:41:59:20:cb:34:52:ae:ea:20:a7:0b:b9:e5:b9:9e:59:
5d:cb:28:41:38:25:2e:e6:45:d4:6a:ce:8f:ef:0f:47:38:89:
85:29:83:31:b2:be:6e:48:5e:79:4b:da:44:a0:0e:58:a9:c1:
48:d4:6e:5d:21:9a:2d:fb:ca:6a:e4:d6:17:86:df:35:90:a2:
1d:c3:d1:79:d2:f3:4f:e0:c6:07:06:14:81:bd:78:25:9d:79:
5e:a6:ce:bf:70:90:61:cd:d7:77:6f:0d:06:c5:a8:96:06:af:
0c:b5:1c:91:04:10:82:27:a6:eb:ed:30:ef:15:2b:6e:2e:1c:
b2:2e:1c:ae:ee:6f:d0:1f:a0:bf:c7:1c:a5:f2:6f:b4:89:46:
ec:ca:7d:bc:06:10:f8:46:64:58:f8:c8:d0:5d:7e:2a:de:3d:
fa:dc:6c:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:15:56 2025 by rpki-client