Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/50b550-f85e-489b-8473-e0365381bb85/1/Lokc9xG_fhxC4ILWoviaBL7rldE.mft
File: Lokc9xG_fhxC4ILWoviaBL7rldE.mft (raw, json)
Hash identifier: JsWblwCxvPrsytFfcoeeJM9nnsocd+0wmFhdoecJOfY=
Subject key identifier: C3:61:FA:87:3A:48:37:B1:4A:E2:9A:7A:18:49:44:FB:6B:45:41:37
Authority key identifier: 2E:89:1C:F7:11:BF:7E:1C:42:E0:82:D6:A2:F8:9A:04:BE:EB:95:D1
Certificate issuer: /CN=2e891cf711bf7e1c42e082d6a2f89a04beeb95d1
Certificate serial: 0194BC72888A3FF0E69D0825A4D251D346B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lokc9xG_fhxC4ILWoviaBL7rldE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/50b550-f85e-489b-8473-e0365381bb85/1/Lokc9xG_fhxC4ILWoviaBL7rldE.mft
Manifest number: 2E
Signing time: Fri 31 Jan 2025 13:00:10 +0000
Manifest this update: Fri 31 Jan 2025 13:00:10 +0000
Manifest next update: Sat 01 Feb 2025 13:00:10 +0000
Files and hashes: 1: Lokc9xG_fhxC4ILWoviaBL7rldE.crl (hash: cGsalc6lCl9eh7FGT4WIuazFhbmIfFhyegF7k72Tqhc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:88:8a:3f:f0:e6:9d:08:25:a4:d2:51:d3:46:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e891cf711bf7e1c42e082d6a2f89a04beeb95d1
Validity
Not Before: Jan 31 13:00:10 2025 GMT
Not After : Feb 1 13:00:10 2025 GMT
Subject: CN=c361fa873a4837b14ae29a7a184944fb6b454137
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:9d:e2:1a:7e:00:23:36:fa:d3:74:36:84:80:
1c:5f:a1:e6:e8:41:47:69:02:60:78:d8:3f:af:be:
04:69:37:fc:4d:44:ed:04:8b:1b:7e:14:df:ba:85:
37:61:6f:14:ad:82:41:81:40:1f:b9:45:dc:3a:f7:
34:95:62:7e:b7:79:9b:ce:db:de:02:79:26:36:45:
23:63:4d:99:e5:bf:98:55:51:a7:62:9b:f5:16:6b:
5d:ea:90:86:51:db:1b:c8:c6:48:a7:69:1b:cd:16:
3b:00:c3:66:ee:c5:08:4b:a7:30:71:86:ef:03:2c:
31:28:b0:73:0e:50:10:f4:bb:8d:48:d1:19:95:8e:
cd:8f:a8:be:15:2c:ac:d9:60:7f:41:b0:07:34:8c:
57:a1:63:a1:19:54:28:54:13:23:df:2e:ef:57:bc:
2c:86:5e:16:4a:1b:ea:30:2f:9a:44:ff:79:05:7e:
5c:75:c3:2f:d5:f4:f8:56:2f:55:0f:95:99:3b:ab:
d1:83:4c:60:5f:d4:68:09:97:9d:a8:72:e5:b5:4e:
5e:6e:a2:96:df:27:0a:32:00:62:15:68:ce:4f:34:
9d:79:79:f9:82:d9:4f:fc:74:3a:cc:b8:85:8b:6c:
75:7c:d7:15:41:17:65:e2:af:8e:cd:f5:5b:b1:54:
9b:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:61:FA:87:3A:48:37:B1:4A:E2:9A:7A:18:49:44:FB:6B:45:41:37
X509v3 Authority Key Identifier:
keyid:2E:89:1C:F7:11:BF:7E:1C:42:E0:82:D6:A2:F8:9A:04:BE:EB:95:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lokc9xG_fhxC4ILWoviaBL7rldE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/50b550-f85e-489b-8473-e0365381bb85/1/Lokc9xG_fhxC4ILWoviaBL7rldE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/50b550-f85e-489b-8473-e0365381bb85/1/Lokc9xG_fhxC4ILWoviaBL7rldE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:57:a2:ad:e5:85:6b:a1:8e:cc:c8:20:c3:95:e0:0a:dd:42:
9c:2e:7b:ec:43:cc:88:13:7c:95:7f:31:34:9e:6c:b8:f6:92:
de:83:b0:34:af:93:06:39:44:6e:bb:e5:c7:ab:37:07:69:b8:
ec:5f:49:0e:25:a6:ed:1a:df:9b:2d:bb:d5:c3:45:3f:bf:25:
7d:f2:a6:9b:fb:8b:f9:0e:ba:ae:25:d5:b4:43:77:e0:94:00:
c5:d1:6c:28:71:e8:77:1f:50:1f:16:f8:0f:43:fe:da:a0:00:
5b:04:3e:ee:cf:dd:67:63:21:44:f8:ea:81:6a:76:b9:1a:15:
72:7c:ea:68:d4:87:cd:72:43:e1:04:fd:54:be:ca:85:8d:63:
9b:19:45:8f:4a:ef:68:97:59:44:4c:d6:8d:87:0d:fe:04:01:
f0:dd:44:d3:26:f9:6c:77:04:b7:8a:a5:d1:69:24:d1:2a:9b:
7a:59:e1:ef:32:ed:aa:d3:09:cf:d5:de:ce:e0:cf:3f:cc:e7:
1b:e3:51:93:2f:19:5c:db:53:2c:29:a5:54:d6:c2:1d:f7:37:
54:ff:fd:71:a5:39:68:2d:96:4d:75:10:c3:2b:8a:98:39:f9:
0a:9b:e2:17:8f:32:01:35:83:62:bc:3e:95:3e:a5:1e:f7:98:
ee:77:d7:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:37 2025 by rpki-client