Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/e1f171-a889-4395-9cfc-0805419d721a/1/lnRtO9Pi3eYWQCDesLXYkixkdm0.mft
File: lnRtO9Pi3eYWQCDesLXYkixkdm0.mft (raw, json)
Hash identifier: 3ULCk+sRiqTRT/kEGOKa+2e3ZWMESPTqEhdtUTB3PKQ=
Subject key identifier: 06:C4:E4:39:C2:19:55:30:A3:BC:15:1D:18:08:E5:A3:B4:35:82:5F
Authority key identifier: 96:74:6D:3B:D3:E2:DD:E6:16:40:20:DE:B0:B5:D8:92:2C:64:76:6D
Certificate issuer: /CN=96746d3bd3e2dde6164020deb0b5d8922c64766d
Certificate serial: 0194BC72A3246BBF76DCDB38D006B50DAC32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lnRtO9Pi3eYWQCDesLXYkixkdm0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/e1f171-a889-4395-9cfc-0805419d721a/1/lnRtO9Pi3eYWQCDesLXYkixkdm0.mft
Manifest number: E0
Signing time: Fri 31 Jan 2025 13:00:16 +0000
Manifest this update: Fri 31 Jan 2025 13:00:16 +0000
Manifest next update: Sat 01 Feb 2025 13:00:16 +0000
Files and hashes: 1: lnRtO9Pi3eYWQCDesLXYkixkdm0.crl (hash: gpumObrGR5ptkSnBcnMUgB+qC7R3FvvAZE2XnvYWOas=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:a3:24:6b:bf:76:dc:db:38:d0:06:b5:0d:ac:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96746d3bd3e2dde6164020deb0b5d8922c64766d
Validity
Not Before: Jan 31 13:00:16 2025 GMT
Not After : Feb 1 13:00:16 2025 GMT
Subject: CN=06c4e439c2195530a3bc151d1808e5a3b435825f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:69:b4:25:6c:f1:67:81:6a:7b:4d:64:cc:b8:
b2:03:62:e6:cb:6c:8e:b0:45:ba:1e:4a:56:c9:01:
4e:ae:b8:e9:ff:8c:ee:5a:16:70:b7:a5:23:b0:7b:
1f:86:56:ce:ff:7b:2e:88:45:c4:79:66:d5:07:c3:
3f:59:e6:f3:5f:f3:04:d1:9f:2e:f8:e2:3d:70:b8:
e5:83:67:24:36:37:b7:2e:a7:ed:0b:bc:83:35:ce:
62:39:c5:99:e2:62:cf:81:23:cd:bf:57:12:8c:e0:
d7:ed:e4:5b:ae:d0:76:b8:c8:fe:9c:17:c1:4c:39:
63:51:d3:5f:89:69:64:63:9d:dd:f6:51:84:01:0a:
ac:38:c0:71:75:c5:f2:ee:43:04:ff:c3:30:65:1f:
a9:37:6a:cd:24:f1:dc:e5:b4:de:c6:23:e6:cd:03:
6a:4e:4b:7a:d1:02:20:a3:a6:86:b6:92:61:89:28:
67:e4:d8:9b:b9:0b:52:db:d3:2b:0e:c9:e5:e9:ef:
8b:5e:71:fd:39:f2:f1:f8:5c:5d:52:54:b0:7a:43:
e7:84:5f:e1:16:f8:d2:d9:32:fd:89:fd:ff:fd:73:
cf:18:f6:d9:dd:8a:57:1c:fc:f9:9b:57:81:0f:91:
7d:dc:95:0c:54:89:46:c3:ce:3c:de:63:29:a2:28:
81:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:C4:E4:39:C2:19:55:30:A3:BC:15:1D:18:08:E5:A3:B4:35:82:5F
X509v3 Authority Key Identifier:
keyid:96:74:6D:3B:D3:E2:DD:E6:16:40:20:DE:B0:B5:D8:92:2C:64:76:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lnRtO9Pi3eYWQCDesLXYkixkdm0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/e1f171-a889-4395-9cfc-0805419d721a/1/lnRtO9Pi3eYWQCDesLXYkixkdm0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/e1f171-a889-4395-9cfc-0805419d721a/1/lnRtO9Pi3eYWQCDesLXYkixkdm0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:5f:4f:cb:20:2a:34:b4:06:d9:fd:b0:4a:5a:ec:06:ab:2a:
d1:67:65:f2:5b:46:29:ab:31:db:91:e3:c8:86:18:61:c4:70:
d5:6f:fb:e6:6b:d3:31:6b:d6:f1:6f:e3:0b:1d:1a:12:44:ab:
83:0a:7f:96:b6:04:6d:b6:34:a9:a5:50:cf:1c:6b:3e:b6:2a:
44:9c:fd:6d:cf:aa:4c:26:a5:7e:3e:59:10:97:bc:42:de:ee:
4e:4b:57:6f:f1:46:58:b2:37:3f:7f:b9:cf:97:5a:d7:5b:16:
1b:7b:31:f7:da:85:e6:31:01:c3:16:5e:82:21:ce:cf:dd:e6:
e8:f8:04:1f:7c:1c:f1:57:10:b9:23:b2:88:df:49:4c:96:cc:
ea:34:b9:b2:0d:f7:93:2e:d2:40:94:4d:50:1f:bd:8c:3f:5a:
7d:48:06:8a:35:0e:3a:b6:53:a4:4e:37:cf:fd:fc:44:84:a5:
e5:c7:3c:70:b8:68:47:90:bb:ba:db:0d:5d:f7:4b:f8:bd:b2:
64:2f:bf:39:b4:7a:5e:4c:bc:6c:ab:42:97:4a:d7:9e:38:ff:
64:37:5c:3d:c2:ac:db:ec:4d:40:2d:b9:5b:26:33:24:fb:e0:
6f:09:b8:95:9b:4a:b0:8c:30:5d:7e:2b:cb:59:44:29:91:b8:
68:f9:3f:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:43:11 2025 by rpki-client