Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/d6c18a-55ef-4118-970c-60d1ed80c7cf/1/lEcuhZlXNV2l3dE0ltcNcHc0kfk.mft
File: lEcuhZlXNV2l3dE0ltcNcHc0kfk.mft (raw, json)
Hash identifier: i5zdVBA+xp5koKAnunsxQF8U0Wmi6HZEy2qljcyMNXY=
Subject key identifier: 70:E7:D0:F4:53:2A:E4:5E:A9:77:D5:36:E6:AA:1F:5E:FE:2E:98:10
Authority key identifier: 94:47:2E:85:99:57:35:5D:A5:DD:D1:34:96:D7:0D:70:77:34:91:F9
Certificate issuer: /CN=94472e859957355da5ddd13496d70d70773491f9
Certificate serial: 0194BC3C5642EB502209846DF43E3112A261
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lEcuhZlXNV2l3dE0ltcNcHc0kfk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/d6c18a-55ef-4118-970c-60d1ed80c7cf/1/lEcuhZlXNV2l3dE0ltcNcHc0kfk.mft
Manifest number: 0D4D
Signing time: Fri 31 Jan 2025 12:00:58 +0000
Manifest this update: Fri 31 Jan 2025 12:00:58 +0000
Manifest next update: Sat 01 Feb 2025 12:00:58 +0000
Files and hashes: 1: lEcuhZlXNV2l3dE0ltcNcHc0kfk.crl (hash: YH07TrJuic7AvR9JHoD0uGr9wohFwk9ildA2nKuaBt0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:56:42:eb:50:22:09:84:6d:f4:3e:31:12:a2:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94472e859957355da5ddd13496d70d70773491f9
Validity
Not Before: Jan 31 12:00:58 2025 GMT
Not After : Feb 1 12:00:58 2025 GMT
Subject: CN=70e7d0f4532ae45ea977d536e6aa1f5efe2e9810
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:8b:eb:28:c7:b5:7f:36:4a:72:12:c3:35:38:
76:94:67:ae:9c:63:3e:c3:fe:9c:0b:ff:c7:d8:85:
e4:ec:58:45:e5:f0:11:d0:ee:64:26:5f:33:27:d1:
51:94:ec:cb:d8:bf:7b:c6:08:06:36:37:35:84:dc:
ea:59:7d:ef:2f:bc:a1:47:3f:af:16:da:2c:f7:ce:
80:cd:1c:0e:61:ce:25:d6:df:6b:fc:62:41:6a:9a:
90:00:67:26:bd:ae:b8:6e:f7:53:a2:e6:95:41:84:
c1:94:0d:41:02:68:22:c4:ed:b1:d9:37:b4:12:ec:
1d:a8:fd:ee:19:3e:5e:f6:3f:68:89:74:e5:38:95:
2a:42:b3:2b:6d:12:09:d8:6f:a1:e3:64:a7:d9:9e:
e5:3f:d8:dd:32:39:08:db:58:3d:e8:48:13:8f:30:
69:af:19:35:fb:ba:68:18:64:ea:9a:6d:99:b6:b5:
19:97:3a:4c:f6:9e:85:25:cb:67:63:8c:50:7f:09:
f7:21:79:56:b8:c0:50:48:84:7e:1e:85:5b:c8:c1:
55:1c:1a:3d:6e:93:ef:83:5f:30:23:11:d3:70:77:
ba:8a:71:0c:e4:71:f8:31:0f:a4:29:39:2f:5f:95:
62:8b:4f:89:05:d8:dc:a8:91:a8:f3:96:08:57:09:
a3:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:E7:D0:F4:53:2A:E4:5E:A9:77:D5:36:E6:AA:1F:5E:FE:2E:98:10
X509v3 Authority Key Identifier:
keyid:94:47:2E:85:99:57:35:5D:A5:DD:D1:34:96:D7:0D:70:77:34:91:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lEcuhZlXNV2l3dE0ltcNcHc0kfk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/d6c18a-55ef-4118-970c-60d1ed80c7cf/1/lEcuhZlXNV2l3dE0ltcNcHc0kfk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/d6c18a-55ef-4118-970c-60d1ed80c7cf/1/lEcuhZlXNV2l3dE0ltcNcHc0kfk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:d8:56:93:9c:b0:3a:fc:da:c2:5c:ae:41:d8:1d:24:0f:27:
c0:ea:9c:d4:c8:a9:6c:18:05:df:c9:c6:8e:d1:0a:d7:bd:c7:
8a:1e:de:60:a1:70:8e:d1:bc:3a:8c:d8:95:50:a6:0d:7e:ed:
fc:a6:4c:3c:5d:6a:9c:55:0c:f4:07:37:c2:b0:ba:f8:94:06:
46:ea:b3:8c:10:8f:2b:b8:bb:31:45:f7:34:d7:25:91:86:71:
0f:61:36:df:ea:e5:28:fa:8f:8c:1d:b1:08:fc:17:13:e6:76:
b8:78:b9:b4:14:b1:f6:b0:f4:b1:d4:dc:77:61:35:bf:23:97:
a5:03:27:43:ec:ef:7d:9a:ea:46:d3:42:e4:02:88:c2:e4:8c:
1d:dc:6a:ee:d0:ea:91:d0:a3:bb:bf:0e:3e:56:2e:07:fa:26:
68:0a:7d:35:d6:9a:80:0d:42:35:bf:bd:20:07:6e:0e:cf:a5:
96:ae:f0:4e:03:33:7d:85:1a:74:59:20:ca:ea:93:f7:cd:a7:
86:b3:5d:fd:4e:a5:f1:b0:8c:70:71:1b:33:76:5c:a6:ee:7b:
a8:9e:2e:96:ec:d0:77:08:97:02:b6:7c:87:ef:1b:bb:84:0c:
0d:a3:c1:db:d8:cf:b7:5c:a5:d7:39:39:1a:b9:d3:4b:04:4e:
47:7a:a7:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:40:18 2025 by rpki-client