
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/d43572-ad91-44ad-afa1-b3382e4aa7c3/1/lPO2Epw0Od376Q21BkyAZt6GSnI.mft
File: lPO2Epw0Od376Q21BkyAZt6GSnI.mft (raw, json)
Hash identifier: 0Af3JVvAPFIaMNch05AOu0FGvNrc9N5wSFkuAZhQlDE=
Subject key identifier: A6:13:52:AE:58:0B:34:75:16:F6:6E:B2:67:76:C1:3D:93:29:06:6F
Authority key identifier: 94:F3:B6:12:9C:34:39:DD:FB:E9:0D:B5:06:4C:80:66:DE:86:4A:72
Certificate issuer: /CN=94f3b6129c3439ddfbe90db5064c8066de864a72
Certificate serial: 0194BC72A08504931E3FAB47619FA0B7FFEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lPO2Epw0Od376Q21BkyAZt6GSnI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/d43572-ad91-44ad-afa1-b3382e4aa7c3/1/lPO2Epw0Od376Q21BkyAZt6GSnI.mft
Manifest number: 033E
Signing time: Fri 31 Jan 2025 13:00:16 +0000
Manifest this update: Fri 31 Jan 2025 13:00:16 +0000
Manifest next update: Sat 01 Feb 2025 13:00:16 +0000
Files and hashes: 1: lPO2Epw0Od376Q21BkyAZt6GSnI.crl (hash: qo1VzKmAYeaUuN+EhZVglPENryy2Bj2VsOpHvFxZyDA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:a0:85:04:93:1e:3f:ab:47:61:9f:a0:b7:ff:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94f3b6129c3439ddfbe90db5064c8066de864a72
Validity
Not Before: Jan 31 13:00:16 2025 GMT
Not After : Feb 1 13:00:16 2025 GMT
Subject: CN=a61352ae580b347516f66eb26776c13d9329066f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:7c:fe:f1:72:49:a1:20:61:be:1e:b0:f9:63:
1f:13:2f:8d:ca:c7:f1:9b:82:a2:db:a3:64:e6:12:
db:78:62:5a:36:5d:df:2a:fb:4c:71:2f:89:d2:d0:
aa:b0:11:82:b7:d5:94:bd:16:a7:cd:53:e2:c1:c0:
2a:92:d0:b7:aa:d2:9a:70:d8:bf:26:6a:48:ed:b6:
3c:45:53:2c:6f:5a:3a:a0:c7:ac:60:0d:fc:7e:d5:
6c:a1:fb:55:2f:5f:ce:4c:aa:df:d5:ab:52:2f:34:
8a:e5:a9:73:4b:3e:73:4b:fe:6d:bf:ca:68:c1:95:
37:4d:3c:d4:2a:da:a4:c3:09:73:da:1f:78:b9:48:
99:85:2d:c1:15:77:8c:fb:f2:56:76:35:f6:8a:42:
8c:82:d4:fb:60:08:81:26:06:72:c0:36:8e:7c:b8:
6a:4d:de:d1:e1:54:19:f6:61:d5:80:ad:de:2d:76:
bc:97:8c:44:20:76:1e:05:56:5c:88:3f:5e:9d:57:
e5:6d:be:cf:ec:aa:89:26:09:62:7f:d0:7f:10:63:
e1:6b:32:c9:43:0e:a7:e3:99:82:7a:1c:b7:f6:62:
ee:32:17:1b:1e:8d:8a:99:d5:51:39:3d:b9:f9:cb:
97:13:c1:ed:a0:48:97:f2:62:f2:88:96:23:c6:68:
71:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:13:52:AE:58:0B:34:75:16:F6:6E:B2:67:76:C1:3D:93:29:06:6F
X509v3 Authority Key Identifier:
keyid:94:F3:B6:12:9C:34:39:DD:FB:E9:0D:B5:06:4C:80:66:DE:86:4A:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lPO2Epw0Od376Q21BkyAZt6GSnI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/d43572-ad91-44ad-afa1-b3382e4aa7c3/1/lPO2Epw0Od376Q21BkyAZt6GSnI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/d43572-ad91-44ad-afa1-b3382e4aa7c3/1/lPO2Epw0Od376Q21BkyAZt6GSnI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:04:47:03:cf:b4:0f:ca:a8:de:ad:c7:1e:b2:03:04:57:19:
e5:2e:dd:e6:a4:84:1f:55:0d:9f:cf:8b:1e:10:ed:1a:cc:f3:
ff:81:55:d7:58:ed:5c:83:df:60:c5:3b:73:7b:3b:d0:32:13:
64:db:6b:35:69:53:00:b2:57:7f:ec:d6:52:c0:d1:72:8c:f8:
2e:12:8b:4e:b3:13:a3:3d:65:ca:98:fc:17:34:ce:0e:44:ec:
fe:95:15:c6:bf:d0:bf:b6:a0:08:86:03:1f:3d:7b:48:01:0e:
9b:7b:53:46:eb:01:1e:8f:d8:64:5b:a3:43:74:67:45:d7:74:
72:b0:93:ab:e4:c1:4c:31:01:3f:60:d7:4f:57:df:cb:a9:d5:
17:64:51:92:11:ce:ef:82:50:c9:3d:5d:43:dd:fc:24:10:18:
f5:fe:1a:3e:7f:ef:d3:6f:8e:8b:35:5b:50:11:ff:53:4a:42:
35:0f:30:7d:43:2e:80:71:42:ae:63:06:9d:8d:a3:d2:e5:06:
a1:3f:3f:f0:c7:df:b2:a3:c9:ba:67:99:d6:eb:87:e5:fb:99:
04:d6:31:d9:c8:53:2d:57:9b:b2:f3:16:37:08:86:71:6a:2c:
ca:1a:bb:b8:d2:b0:d8:cf:bb:fa:d4:4d:f5:71:9d:f0:0f:01:
27:2e:98:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:04:39 2025 by rpki-client