Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/7b9d2c-7d49-4a19-a55d-3b47666d1365/1/LjFjEq0rIaqaBIEfYq0Da_aIhdk.mft
File: LjFjEq0rIaqaBIEfYq0Da_aIhdk.mft (raw, json)
Hash identifier: FbnxYZOqI67u9ckUzF9LrczegP2PE7DMV6HAOUAKsCA=
Subject key identifier: F4:1A:A0:DA:C1:86:A2:C1:5F:92:FA:9A:C3:83:51:8C:94:F5:F4:11
Authority key identifier: 2E:31:63:12:AD:2B:21:AA:9A:04:81:1F:62:AD:03:6B:F6:88:85:D9
Certificate issuer: /CN=2e316312ad2b21aa9a04811f62ad036bf68885d9
Certificate serial: 0194BBCEF89235DD7AB62AB18A4F443427EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LjFjEq0rIaqaBIEfYq0Da_aIhdk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/7b9d2c-7d49-4a19-a55d-3b47666d1365/1/LjFjEq0rIaqaBIEfYq0Da_aIhdk.mft
Manifest number: 08A3
Signing time: Fri 31 Jan 2025 10:01:30 +0000
Manifest this update: Fri 31 Jan 2025 10:01:30 +0000
Manifest next update: Sat 01 Feb 2025 10:01:30 +0000
Files and hashes: 1: LjFjEq0rIaqaBIEfYq0Da_aIhdk.crl (hash: Nbtswq0OHL1tlzGR99NXQ9MOp5fumX3bN45y0o71MAQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:f8:92:35:dd:7a:b6:2a:b1:8a:4f:44:34:27:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e316312ad2b21aa9a04811f62ad036bf68885d9
Validity
Not Before: Jan 31 10:01:30 2025 GMT
Not After : Feb 1 10:01:30 2025 GMT
Subject: CN=f41aa0dac186a2c15f92fa9ac383518c94f5f411
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:34:1a:f3:f5:f8:34:37:df:3c:fd:61:06:66:
8f:af:1c:4f:c0:37:86:66:9c:a6:47:bf:52:80:72:
65:25:d2:53:c4:b1:25:60:b1:ac:6b:f7:ea:2d:b6:
28:8d:16:b7:fa:ef:27:57:fd:64:73:09:78:f9:67:
fb:8c:c8:ce:a7:06:8f:3e:74:36:d7:89:6e:e3:6b:
ea:e0:e1:03:71:3b:64:f2:7b:83:2a:2a:e7:e8:09:
f1:4d:94:44:94:60:02:b4:c2:e7:f9:e0:33:2c:8d:
23:17:e9:50:57:5b:9c:ef:c5:8d:17:9f:01:a5:c2:
78:c0:96:be:48:82:cb:b7:aa:c3:3b:67:c9:8e:1c:
08:99:a1:ad:52:b8:fa:04:4e:78:b9:b5:99:23:19:
10:a6:f1:85:73:8e:8a:8a:36:54:8a:62:b8:bb:55:
0c:32:fd:9b:48:4a:b8:13:51:b2:05:24:5e:66:4a:
0c:0d:91:27:81:dd:1e:b1:0e:95:a5:38:3c:cd:bf:
4d:0a:e8:28:47:5a:8b:b0:64:97:97:0f:26:c8:45:
81:79:4e:c6:d5:35:c0:b4:c2:b2:0a:8f:2f:d6:f7:
fb:94:8e:cf:e1:93:78:85:8c:ee:35:2c:2d:98:50:
49:25:95:df:8b:7a:e0:c4:40:16:34:d0:32:eb:ed:
c2:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:1A:A0:DA:C1:86:A2:C1:5F:92:FA:9A:C3:83:51:8C:94:F5:F4:11
X509v3 Authority Key Identifier:
keyid:2E:31:63:12:AD:2B:21:AA:9A:04:81:1F:62:AD:03:6B:F6:88:85:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LjFjEq0rIaqaBIEfYq0Da_aIhdk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/7b9d2c-7d49-4a19-a55d-3b47666d1365/1/LjFjEq0rIaqaBIEfYq0Da_aIhdk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/7b9d2c-7d49-4a19-a55d-3b47666d1365/1/LjFjEq0rIaqaBIEfYq0Da_aIhdk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:be:c1:0a:a7:23:45:a6:b1:aa:26:b7:bc:04:f6:9d:89:33:
f6:6e:97:49:92:de:d1:d1:de:23:4f:55:11:bb:6b:13:ff:51:
f9:d5:ae:0e:2b:c0:b7:72:f7:a7:30:61:72:92:e9:6b:e9:28:
12:37:7d:93:54:9b:3f:11:80:52:c2:de:c9:55:2b:e4:16:7b:
70:e5:f2:a7:b2:6b:13:11:ce:00:c6:a9:fe:84:13:8f:44:ba:
e1:49:75:7f:5c:a4:bd:50:6e:f3:93:ee:e1:34:af:36:93:14:
3a:95:50:80:a4:9a:b9:79:88:ad:2e:22:1a:44:d9:98:c2:09:
79:9b:44:04:e0:ec:b0:7c:6b:8b:9d:e2:4c:a1:3c:a9:d6:99:
72:a9:53:2f:65:0c:0a:1d:db:79:97:eb:69:90:23:65:b9:46:
64:ab:45:c2:41:0e:d7:9d:80:5e:d9:dd:d8:b5:3d:08:e2:cd:
76:f5:44:f9:a8:38:17:04:e6:5e:f8:a4:4b:b8:c5:63:ae:f8:
be:89:a2:4f:64:9f:7e:16:19:8a:37:82:18:0e:d3:16:66:95:
ac:09:ab:c3:aa:b1:7b:ac:3d:fb:57:7a:72:d5:25:26:38:cd:
aa:90:bd:fb:64:0b:2f:94:de:bd:e6:78:9b:b7:2d:ba:24:17:
1f:e8:f9:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:25:44 2025 by rpki-client