Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/c637de-bef7-4da3-803f-84e5f1af6e92/1/LMNcIJCZlCHTPGNZybbmgYKg8nM.mft
File: LMNcIJCZlCHTPGNZybbmgYKg8nM.mft (raw, json)
Hash identifier: 4xq3RqsEw5oLmY2jlwr59wDVUV54ToVJuUgsBgXhebM=
Subject key identifier: 8D:8C:83:C0:D3:5C:40:FE:E9:D9:F1:BB:4D:41:B6:DD:CD:4D:F4:5B
Authority key identifier: 2C:C3:5C:20:90:99:94:21:D3:3C:63:59:C9:B6:E6:81:82:A0:F2:73
Certificate issuer: /CN=2cc35c2090999421d33c6359c9b6e68182a0f273
Certificate serial: 0194BC3C59494C5A66636F3CCF49256FA7D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LMNcIJCZlCHTPGNZybbmgYKg8nM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/c637de-bef7-4da3-803f-84e5f1af6e92/1/LMNcIJCZlCHTPGNZybbmgYKg8nM.mft
Manifest number: 13B9
Signing time: Fri 31 Jan 2025 12:00:59 +0000
Manifest this update: Fri 31 Jan 2025 12:00:59 +0000
Manifest next update: Sat 01 Feb 2025 12:00:59 +0000
Files and hashes: 1: LMNcIJCZlCHTPGNZybbmgYKg8nM.crl (hash: sTP5J5Rnhu+db9kpjseRJ+ZbaYX5CPcOpOgSBmsZ7+g=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:59:49:4c:5a:66:63:6f:3c:cf:49:25:6f:a7:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cc35c2090999421d33c6359c9b6e68182a0f273
Validity
Not Before: Jan 31 12:00:59 2025 GMT
Not After : Feb 1 12:00:59 2025 GMT
Subject: CN=8d8c83c0d35c40fee9d9f1bb4d41b6ddcd4df45b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:97:56:b4:78:2e:f0:39:3c:ee:15:ad:e3:ff:
b0:a1:d6:1a:d7:f5:1b:c6:bd:d9:11:9b:68:8c:2d:
5c:d1:5d:c0:98:79:02:d5:a8:46:8b:fc:01:b1:b2:
95:a5:a7:93:79:61:bb:00:2b:1e:28:90:5b:85:27:
ae:11:16:10:f4:b4:fa:68:38:7f:1e:8c:e9:be:aa:
34:e8:c9:65:72:dd:c5:bf:55:d1:83:ca:39:09:a4:
84:c4:03:5a:3c:61:68:05:9c:53:11:3c:1a:1b:9c:
be:35:8f:09:59:2f:d1:18:40:d8:d9:b7:a0:bf:64:
a9:d6:4c:c2:94:42:14:a9:e7:6d:89:ac:f7:89:41:
66:e4:cd:3d:dd:7a:3c:d4:d9:3e:2e:38:dd:d8:87:
23:f5:ac:94:d5:b6:90:0b:75:fa:de:1c:1a:4d:e6:
be:3d:42:81:c1:f4:98:4d:11:79:86:26:12:06:28:
88:95:d4:29:85:17:c3:4c:e7:3d:18:08:b2:84:c8:
9e:01:2e:11:f6:0a:2a:32:11:0a:53:a2:51:af:e7:
5e:52:ae:20:2d:83:62:e8:4d:1a:94:cd:87:52:27:
a9:e6:62:7f:07:0a:15:51:23:73:37:3b:0d:f4:31:
cb:41:bc:c0:66:08:65:e6:2e:af:5c:97:c0:2d:0a:
bd:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:8C:83:C0:D3:5C:40:FE:E9:D9:F1:BB:4D:41:B6:DD:CD:4D:F4:5B
X509v3 Authority Key Identifier:
keyid:2C:C3:5C:20:90:99:94:21:D3:3C:63:59:C9:B6:E6:81:82:A0:F2:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LMNcIJCZlCHTPGNZybbmgYKg8nM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/c637de-bef7-4da3-803f-84e5f1af6e92/1/LMNcIJCZlCHTPGNZybbmgYKg8nM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/c637de-bef7-4da3-803f-84e5f1af6e92/1/LMNcIJCZlCHTPGNZybbmgYKg8nM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:69:8d:9c:b7:83:43:79:5d:af:66:25:6c:a2:12:12:ba:56:
f9:c3:cf:be:df:34:46:0c:8d:c4:8e:ef:20:e7:d4:f2:2f:b6:
f4:e0:da:31:36:5e:e3:49:25:4a:a1:25:81:7a:c5:5e:19:2a:
ad:61:36:9b:cf:23:6a:ee:9c:f4:86:a6:be:de:12:db:63:08:
cc:7f:a1:b9:64:61:91:e7:13:df:02:1b:f5:23:bd:43:ab:bc:
7b:16:6c:1a:8c:16:36:b6:10:64:3b:5e:c4:b9:91:61:b7:e0:
2c:1f:72:32:3a:65:19:03:f6:31:fd:52:19:85:b8:da:f8:04:
5d:d6:03:fb:06:9d:55:dd:ea:0b:f3:c7:46:8e:f8:98:46:10:
57:d3:d1:56:96:81:ae:ad:c6:2b:18:c4:e1:1a:fd:1e:51:12:
44:d4:ee:84:c8:5c:6d:80:2b:da:03:ba:41:a0:b0:54:7b:57:
a9:05:e7:97:fe:3c:8f:45:6d:4b:80:c4:f1:af:79:a8:58:39:
d2:a9:92:4f:f0:a9:04:35:8c:25:9d:bf:e5:a4:ce:84:25:bf:
d5:62:29:2f:76:ef:b9:50:b0:c7:e4:92:99:55:10:46:e3:1a:
8e:c8:4a:20:60:9f:2a:85:75:e4:4b:64:26:9d:1e:78:98:b0:
84:15:77:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:22 2025 by rpki-client