Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/68ce51-bd3e-4cd1-bcc2-dd2a584a62bb/1/LhgQ1ckRtKgQc_rmOJcbV33XpkI.mft
File: LhgQ1ckRtKgQc_rmOJcbV33XpkI.mft (raw, json)
Hash identifier: UaT7DQj9YzWx/sERZld0l4SKVm5a3fKIK+t9ECauj5c=
Subject key identifier: 6A:A4:F8:B2:45:D5:89:4B:C3:E6:56:47:14:DB:FF:77:33:8F:0C:EB
Authority key identifier: 2E:18:10:D5:C9:11:B4:A8:10:73:FA:E6:38:97:1B:57:7D:D7:A6:42
Certificate issuer: /CN=2e1810d5c911b4a81073fae638971b577dd7a642
Certificate serial: 0194BBCE7F21D9374D57CE0FAAF67180EE75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LhgQ1ckRtKgQc_rmOJcbV33XpkI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/68ce51-bd3e-4cd1-bcc2-dd2a584a62bb/1/LhgQ1ckRtKgQc_rmOJcbV33XpkI.mft
Manifest number: 0EF6
Signing time: Fri 31 Jan 2025 10:00:59 +0000
Manifest this update: Fri 31 Jan 2025 10:00:59 +0000
Manifest next update: Sat 01 Feb 2025 10:00:59 +0000
Files and hashes: 1: LhgQ1ckRtKgQc_rmOJcbV33XpkI.crl (hash: CYF+g1cXPB3z0Yfr2+0AVb7HJrgQPIO+Xzw9HlzQH8c=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:7f:21:d9:37:4d:57:ce:0f:aa:f6:71:80:ee:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e1810d5c911b4a81073fae638971b577dd7a642
Validity
Not Before: Jan 31 10:00:59 2025 GMT
Not After : Feb 1 10:00:59 2025 GMT
Subject: CN=6aa4f8b245d5894bc3e6564714dbff77338f0ceb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:db:f6:80:47:6f:88:50:8d:cf:31:ff:39:0b:
60:2c:df:57:a6:94:2f:9f:b1:56:ae:85:cd:ee:6e:
53:f4:42:63:32:93:d7:00:c7:26:89:f6:f3:7a:e9:
b7:f9:a0:e3:15:35:65:74:b3:50:2e:3c:0a:91:a5:
5e:fb:86:c1:21:5e:13:22:a9:c8:0c:09:3d:05:2f:
ab:9c:a6:b3:38:66:03:bd:57:ac:13:d3:8d:4d:c0:
80:f9:99:97:37:43:24:d6:d3:52:54:47:b7:99:e1:
00:a8:14:7e:a6:72:fa:4c:5a:c4:73:5b:75:8c:95:
3d:66:82:c1:6e:06:29:3a:06:37:ae:41:4b:af:ff:
ff:53:73:f7:2c:fe:86:b0:f8:2c:a2:5a:7f:01:f6:
dc:01:87:06:8e:86:22:96:3e:61:59:46:49:c1:43:
41:e6:55:8c:45:3b:3a:43:32:c0:ac:ed:b1:23:8d:
a6:1c:c3:6d:f5:f9:75:f5:0e:18:16:bb:38:79:b4:
39:f2:95:1f:c7:5c:ea:99:c4:13:5c:53:ea:ea:06:
a1:21:be:79:4a:06:9c:da:fc:eb:7b:a0:d8:4d:fb:
89:e1:d6:d8:20:4a:5e:40:9b:94:40:95:fd:67:52:
04:ef:b9:08:06:19:99:30:21:d5:90:85:d6:f9:74:
e7:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:A4:F8:B2:45:D5:89:4B:C3:E6:56:47:14:DB:FF:77:33:8F:0C:EB
X509v3 Authority Key Identifier:
keyid:2E:18:10:D5:C9:11:B4:A8:10:73:FA:E6:38:97:1B:57:7D:D7:A6:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LhgQ1ckRtKgQc_rmOJcbV33XpkI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/68ce51-bd3e-4cd1-bcc2-dd2a584a62bb/1/LhgQ1ckRtKgQc_rmOJcbV33XpkI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/68ce51-bd3e-4cd1-bcc2-dd2a584a62bb/1/LhgQ1ckRtKgQc_rmOJcbV33XpkI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:12:b6:a9:09:d8:5b:18:d2:c2:25:07:6d:9f:2b:41:24:0d:
b1:eb:64:1f:85:16:6d:9a:86:97:78:41:21:a3:93:a4:72:e3:
bb:0a:0f:df:38:59:ba:3a:aa:d5:b7:2a:0e:85:7b:bf:fd:00:
6b:42:4b:d3:2d:c6:2e:97:5f:cc:68:96:19:5d:93:5c:96:ac:
c0:b9:a1:be:ff:fd:3b:5a:69:91:d1:13:90:1f:ea:e6:fb:8a:
69:0e:6a:40:72:d5:26:39:69:62:bb:d0:72:50:33:75:9a:23:
02:a6:4f:d3:bb:b0:aa:fb:ac:13:b3:59:60:d2:77:ad:35:f0:
a0:35:9b:ca:2d:48:3d:eb:9c:27:47:3f:11:82:a0:33:b5:56:
29:dc:0a:5f:5c:fc:cf:c2:b4:4e:e1:87:4d:1e:4a:1c:11:ae:
53:de:3d:60:31:d3:cd:4e:d7:8b:77:8f:d6:d6:e6:2b:43:dc:
63:73:05:00:93:bc:71:23:13:c1:d6:90:ec:a6:63:6e:41:cb:
fc:42:e5:55:25:1b:84:7c:5f:bb:32:1a:fb:56:13:ba:7b:d7:
af:82:3b:06:df:39:2c:f6:3a:04:6f:52:b9:84:9d:e4:de:f3:
f8:b5:8c:d5:87:ba:37:a0:86:09:91:bd:47:29:89:5d:f2:25:
50:fc:e2:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:51:29 2025 by rpki-client