Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/2370de-b8e7-4890-9999-ab307cb1e3bb/1/L9XGHpMiaUuHL10yzB-lwbu6sbY.mft
File: L9XGHpMiaUuHL10yzB-lwbu6sbY.mft (raw, json)
Hash identifier: +nt43iLpzKfhrXaa2ojYkhI4XPW0gH0oi1ZCvoxQa2g=
Subject key identifier: 20:B3:2D:E7:AB:B2:CB:34:D0:D5:31:70:8E:1C:0C:38:ED:94:B5:3F
Authority key identifier: 2F:D5:C6:1E:93:22:69:4B:87:2F:5D:32:CC:1F:A5:C1:BB:BA:B1:B6
Certificate issuer: /CN=2fd5c61e9322694b872f5d32cc1fa5c1bbbab1b6
Certificate serial: 0194BCA982E5901ECFFC00D3F3F3B2F5BEC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L9XGHpMiaUuHL10yzB-lwbu6sbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/2370de-b8e7-4890-9999-ab307cb1e3bb/1/L9XGHpMiaUuHL10yzB-lwbu6sbY.mft
Manifest number: 043C
Signing time: Fri 31 Jan 2025 14:00:13 +0000
Manifest this update: Fri 31 Jan 2025 14:00:13 +0000
Manifest next update: Sat 01 Feb 2025 14:00:13 +0000
Files and hashes: 1: L9XGHpMiaUuHL10yzB-lwbu6sbY.crl (hash: VibEybKb6jEdqC+wm1faEw7i/s1OpCbW+zM7R3XHc3k=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:82:e5:90:1e:cf:fc:00:d3:f3:f3:b2:f5:be:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fd5c61e9322694b872f5d32cc1fa5c1bbbab1b6
Validity
Not Before: Jan 31 14:00:13 2025 GMT
Not After : Feb 1 14:00:13 2025 GMT
Subject: CN=20b32de7abb2cb34d0d531708e1c0c38ed94b53f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:75:a9:d4:da:b4:2e:1b:9a:53:e4:3c:eb:70:
f8:f6:96:06:28:ac:32:71:b6:f7:3a:bb:21:30:60:
87:9d:5b:fb:b2:65:41:44:a6:cd:e1:ae:61:86:19:
7f:9b:83:01:a7:fc:28:56:a6:6c:a4:a0:b5:73:59:
9c:86:d7:eb:26:15:93:52:a2:23:93:0a:51:fe:5b:
6d:d4:4c:2c:43:31:4e:65:d2:f5:97:fb:a6:e6:53:
d4:99:4b:0e:c5:6c:2a:f0:cc:d1:04:a2:21:9a:6a:
f1:d2:45:9c:01:e4:b9:a5:58:ae:b7:ac:59:c4:2b:
12:c0:64:3d:a3:1a:24:58:36:ad:95:bd:07:ea:d0:
86:60:d6:df:e3:1f:8b:58:d2:c9:2d:6b:6c:8e:21:
88:e5:ed:36:81:73:03:5f:0a:f4:59:ab:a2:40:77:
61:a8:a0:ef:4e:82:44:bf:b6:6d:96:b7:6c:c7:68:
b1:b2:7d:73:7c:6e:79:bb:07:31:7b:23:80:c9:b5:
99:97:70:3a:6c:e0:65:53:ad:6f:17:84:95:b2:0c:
36:cf:2a:d3:95:f1:f3:66:39:cf:16:f2:3c:7b:89:
e0:c7:df:5c:c0:fd:cc:d2:2f:46:f2:89:49:e6:6f:
72:43:5a:7b:5c:3e:ef:78:6a:1f:7d:54:ec:d6:84:
fd:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:B3:2D:E7:AB:B2:CB:34:D0:D5:31:70:8E:1C:0C:38:ED:94:B5:3F
X509v3 Authority Key Identifier:
keyid:2F:D5:C6:1E:93:22:69:4B:87:2F:5D:32:CC:1F:A5:C1:BB:BA:B1:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L9XGHpMiaUuHL10yzB-lwbu6sbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/2370de-b8e7-4890-9999-ab307cb1e3bb/1/L9XGHpMiaUuHL10yzB-lwbu6sbY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/2370de-b8e7-4890-9999-ab307cb1e3bb/1/L9XGHpMiaUuHL10yzB-lwbu6sbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:5e:3f:73:b6:55:a2:c5:fd:a2:2b:70:09:90:8d:74:73:7c:
8d:c8:a7:e8:d7:a7:63:75:2d:9c:c9:82:2f:b1:ef:39:e3:2f:
cc:39:b3:00:3a:c2:39:a1:9c:43:fc:c9:f8:55:fc:d2:a9:65:
d9:d8:a1:e5:49:f4:20:04:5f:1f:26:0f:5d:bc:18:d6:ce:d3:
d3:cf:c3:02:49:b2:57:d8:e9:b1:e0:fc:00:c8:74:1d:07:1b:
f5:d4:ab:cd:20:20:c2:4b:dc:af:10:53:49:5b:8a:b4:b2:04:
a4:a6:fc:50:d1:71:ef:dc:7a:fa:27:92:ab:90:28:12:87:b0:
86:a0:8e:fc:39:ce:48:5b:6b:f1:37:7c:b5:39:b2:45:79:63:
39:db:54:17:bd:cd:79:32:29:8c:5f:de:5e:6c:7f:5d:c2:71:
83:63:7f:16:b2:40:5c:cb:5f:f3:c5:0d:96:56:8f:0c:a3:2f:
3f:e0:0a:25:d5:b8:b3:19:61:c5:52:00:0b:39:b3:ff:8c:75:
b3:fa:34:be:a0:f4:da:ea:b9:05:1a:07:68:39:68:21:79:62:
36:46:e1:42:9b:c7:95:29:64:22:d9:53:c4:df:c8:ed:49:6b:
c5:be:a4:5d:c3:dd:91:7b:ad:40:83:a3:6d:79:5a:5c:c1:ff:
34:6f:8a:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 16:01:43 2025 by rpki-client