Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/dddf3d-e887-4273-bb7b-681fa0d99821/1/lo-QT-7x95FiuCGaikg7hY9UC_o.mft
File: lo-QT-7x95FiuCGaikg7hY9UC_o.mft (raw, json)
Hash identifier: oy0cJF9SnNqhDLfLk5Icj8JXr1clOK+MTSwlqLbPBSc=
Subject key identifier: E6:3A:1D:A9:9D:FA:62:37:92:58:17:DB:CB:16:8C:94:8D:15:35:70
Authority key identifier: 96:8F:90:4F:EE:F1:F7:91:62:B8:21:9A:8A:48:3B:85:8F:54:0B:FA
Certificate issuer: /CN=968f904feef1f79162b8219a8a483b858f540bfa
Certificate serial: 0194BBCDFC85BA574794609C735DAD241E2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lo-QT-7x95FiuCGaikg7hY9UC_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/dddf3d-e887-4273-bb7b-681fa0d99821/1/lo-QT-7x95FiuCGaikg7hY9UC_o.mft
Manifest number: 1426
Signing time: Fri 31 Jan 2025 10:00:26 +0000
Manifest this update: Fri 31 Jan 2025 10:00:26 +0000
Manifest next update: Sat 01 Feb 2025 10:00:26 +0000
Files and hashes: 1: lo-QT-7x95FiuCGaikg7hY9UC_o.crl (hash: HCd+AvggG+rlplp1oEmPnOTbYN8tGPWgXlFA7sEmKv8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:fc:85:ba:57:47:94:60:9c:73:5d:ad:24:1e:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=968f904feef1f79162b8219a8a483b858f540bfa
Validity
Not Before: Jan 31 10:00:26 2025 GMT
Not After : Feb 1 10:00:26 2025 GMT
Subject: CN=e63a1da99dfa6237925817dbcb168c948d153570
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:86:01:1f:ee:80:c5:b2:2c:59:d4:bc:93:c2:
b9:78:d6:0f:85:0e:9d:5c:64:0c:ef:a3:0f:72:ae:
c0:ff:6c:b2:a9:da:83:af:5d:ad:b4:21:4d:c3:80:
9c:9f:57:86:83:ca:dc:f5:79:1a:35:a7:6d:f9:ea:
3d:56:66:6e:72:84:b4:8a:26:98:0a:73:f3:02:7f:
43:ed:df:b4:f0:a6:ce:b6:bb:e0:23:0c:f2:02:e8:
ea:5b:64:78:b9:65:11:fa:ce:96:39:9c:7f:d6:36:
a2:e9:91:1e:42:27:46:95:57:f5:74:a8:b9:77:21:
5c:85:67:55:53:83:30:33:66:c9:a0:f4:07:b2:68:
45:04:9c:65:f9:57:0a:4f:14:c8:e4:3d:ad:90:f2:
94:8b:37:55:78:8e:9c:77:16:49:49:38:25:be:49:
1d:16:99:96:cb:68:71:0e:24:b9:85:47:42:d4:c3:
fc:42:88:38:39:03:6f:07:25:5b:e9:11:48:39:c8:
82:d2:9d:ed:25:3e:18:5b:e8:41:05:90:3e:d9:f1:
14:c3:ba:cf:db:80:e1:0b:92:4e:e1:99:c9:54:59:
84:3c:51:09:c2:c7:bf:5c:d7:30:6a:8c:d0:e8:d4:
2d:9f:5b:7d:fb:8f:d0:da:f1:a8:1b:30:54:7a:75:
80:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:3A:1D:A9:9D:FA:62:37:92:58:17:DB:CB:16:8C:94:8D:15:35:70
X509v3 Authority Key Identifier:
keyid:96:8F:90:4F:EE:F1:F7:91:62:B8:21:9A:8A:48:3B:85:8F:54:0B:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lo-QT-7x95FiuCGaikg7hY9UC_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/dddf3d-e887-4273-bb7b-681fa0d99821/1/lo-QT-7x95FiuCGaikg7hY9UC_o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/dddf3d-e887-4273-bb7b-681fa0d99821/1/lo-QT-7x95FiuCGaikg7hY9UC_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:2b:bb:60:07:f2:63:34:df:6a:ed:f3:c0:da:8b:64:87:42:
b1:93:3d:12:eb:3a:a7:83:46:81:11:0b:2b:4b:1b:08:8c:ab:
bc:d1:79:35:de:3c:15:a1:32:46:8f:1a:96:f4:26:79:d2:49:
9c:01:78:bb:1d:56:40:ae:76:d5:c5:f7:ac:b9:30:6d:0e:96:
d5:67:5f:b1:7e:aa:de:1e:a5:bc:88:78:68:94:f9:7f:c6:0d:
fb:c5:f6:c9:d4:a9:11:26:5b:7e:03:be:0e:27:98:86:73:15:
ab:2b:45:e8:76:f3:31:a2:c6:85:54:00:59:02:6b:a8:46:04:
08:53:a0:b2:a7:b1:f9:17:60:7d:5e:0b:7d:1b:45:8a:0f:ea:
35:03:a7:a7:86:f1:54:a7:5e:ba:d9:db:22:12:18:c7:4f:65:
b2:af:8c:b2:f9:3a:2a:ff:68:8c:66:64:af:ef:1b:f4:5c:48:
9b:da:78:47:7b:59:00:df:5b:a1:1f:99:b5:b3:98:01:30:73:
e1:19:e5:3b:9c:df:5d:bc:fa:3a:02:fd:96:e8:02:7d:ff:17:
77:f7:27:c8:86:9d:2c:cf:72:80:ea:47:45:40:d4:ba:80:a5:
46:b3:e3:90:f6:bd:47:2a:fc:0d:9f:b2:7b:0d:2f:19:20:db:
bb:ea:fa:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:54:33 2025 by rpki-client