Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/f78d7d-44f8-4099-9a12-6db826b87994/1/LHPvCB4tVzHERXQ5c6lqv96xQss.mft
File: LHPvCB4tVzHERXQ5c6lqv96xQss.mft (raw, json)
Hash identifier: dAzAPxnNzb6mPMMfhiTbIspoKuZffEl1LadEvDFdoZU=
Subject key identifier: DD:E1:15:ED:F7:FC:DE:60:AC:37:9C:C1:B8:13:D6:0D:BD:16:87:EC
Authority key identifier: 2C:73:EF:08:1E:2D:57:31:C4:45:74:39:73:A9:6A:BF:DE:B1:42:CB
Certificate issuer: /CN=2c73ef081e2d5731c445743973a96abfdeb142cb
Certificate serial: 0194BBCEB920A6C6AFE44AF13F8523992DC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LHPvCB4tVzHERXQ5c6lqv96xQss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/f78d7d-44f8-4099-9a12-6db826b87994/1/LHPvCB4tVzHERXQ5c6lqv96xQss.mft
Manifest number: 0523
Signing time: Fri 31 Jan 2025 10:01:14 +0000
Manifest this update: Fri 31 Jan 2025 10:01:14 +0000
Manifest next update: Sat 01 Feb 2025 10:01:14 +0000
Files and hashes: 1: LHPvCB4tVzHERXQ5c6lqv96xQss.crl (hash: FmJVFVciU6yVMpUVakrGvqi1B1YBKs4ygwJMovTEfRc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:b9:20:a6:c6:af:e4:4a:f1:3f:85:23:99:2d:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c73ef081e2d5731c445743973a96abfdeb142cb
Validity
Not Before: Jan 31 10:01:14 2025 GMT
Not After : Feb 1 10:01:14 2025 GMT
Subject: CN=dde115edf7fcde60ac379cc1b813d60dbd1687ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:db:46:16:d5:ac:49:c6:e0:b9:37:02:4e:6a:
87:a4:65:f1:cb:e2:5f:4f:60:5f:7a:f6:a2:e4:46:
d6:17:20:49:57:11:94:b5:fb:c2:bb:86:e0:af:2b:
d2:2f:a5:a8:2a:7f:59:b8:91:67:38:13:00:fc:c2:
79:e9:46:97:56:e2:a4:17:37:2d:ac:54:38:30:c4:
e3:82:43:af:4b:80:47:29:9d:4d:31:8a:3d:b1:ea:
db:e8:96:50:41:bb:50:2c:3f:46:09:38:7d:f0:94:
27:27:8f:4b:24:e9:07:46:12:29:cd:96:1d:77:62:
6e:c8:48:11:93:4d:11:f6:02:97:9b:14:15:97:94:
ab:a2:8b:8f:7f:9e:cc:6f:da:7a:96:94:fc:4f:6a:
40:f2:ed:30:0a:62:0e:61:26:0a:58:d2:0b:05:a2:
f4:6f:8f:52:69:77:58:73:27:53:42:10:9a:64:99:
75:8d:87:f2:df:16:03:95:e0:81:ec:9b:4f:9f:2f:
b5:2e:2d:c1:a3:4f:6f:f3:92:bc:9a:61:1c:eb:90:
e6:2b:cd:55:69:80:2c:f2:19:01:bd:bd:23:96:24:
b2:e7:94:a9:53:88:31:5b:e8:8a:4a:f5:cc:37:8e:
93:72:ba:e1:d9:cf:98:0e:c7:d8:a7:a5:5e:7c:5a:
31:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:E1:15:ED:F7:FC:DE:60:AC:37:9C:C1:B8:13:D6:0D:BD:16:87:EC
X509v3 Authority Key Identifier:
keyid:2C:73:EF:08:1E:2D:57:31:C4:45:74:39:73:A9:6A:BF:DE:B1:42:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LHPvCB4tVzHERXQ5c6lqv96xQss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/f78d7d-44f8-4099-9a12-6db826b87994/1/LHPvCB4tVzHERXQ5c6lqv96xQss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/f78d7d-44f8-4099-9a12-6db826b87994/1/LHPvCB4tVzHERXQ5c6lqv96xQss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:cb:68:46:b2:b7:a4:e5:98:37:5e:00:8a:80:89:2f:fa:56:
2e:56:8b:42:38:7d:ab:56:5a:7c:bf:1f:19:78:04:ae:4a:b3:
da:ef:2c:b3:85:71:be:24:77:1f:fa:67:28:9d:d7:97:98:02:
1b:85:e8:ce:58:ea:e5:0d:90:d9:6a:3d:21:a5:1c:0e:89:82:
e5:61:53:a3:2a:6c:d2:a3:62:29:2f:1e:d4:c8:5d:bf:69:55:
58:6e:53:fa:d8:a4:29:2b:76:13:f8:27:46:d4:2a:b6:86:18:
53:7b:cc:03:47:d2:8a:d6:f2:82:72:e0:a1:04:6c:2a:c3:a6:
37:f1:cd:87:c6:22:62:a1:f5:c7:ef:3b:c1:78:3a:b3:4d:3d:
ea:7f:e4:bf:ba:b9:b7:19:90:ec:f3:42:bc:35:18:cd:09:a7:
d0:e3:0b:3b:2d:35:f3:0d:5d:dc:5f:6d:66:67:3c:ce:6d:6c:
54:bb:f2:52:24:27:6b:12:a5:53:7e:d2:d9:3c:7d:78:0f:42:
8d:2c:03:63:c3:47:62:7d:ba:bc:42:44:42:39:ab:61:19:37:
b0:ca:2e:54:6a:05:a7:0e:71:51:c9:2b:fa:cd:b7:7c:a9:02:
32:ff:af:29:44:30:e5:93:70:a3:4a:a5:e8:3b:bc:98:6b:84:
af:3c:aa:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:48:14 2025 by rpki-client