Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/66ab8b-bb38-41be-9a8b-e359c9d7b907/1/LR08AN6C--6zs4rsMv19LHyamOs.mft
File: LR08AN6C--6zs4rsMv19LHyamOs.mft (raw, json)
Hash identifier: kxJOpFDNrrhIYDotYnAiAKZfsjwxxhHh81jrNeUK40o=
Subject key identifier: 09:7C:54:38:9E:6E:2C:E2:6D:4A:1B:8F:81:70:4C:37:2F:DB:F4:68
Authority key identifier: 2D:1D:3C:00:DE:82:FB:EE:B3:B3:8A:EC:32:FD:7D:2C:7C:9A:98:EB
Certificate issuer: /CN=2d1d3c00de82fbeeb3b38aec32fd7d2c7c9a98eb
Certificate serial: 0194BBCEA87B7E05AE5B66D131B40300464F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LR08AN6C--6zs4rsMv19LHyamOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/66ab8b-bb38-41be-9a8b-e359c9d7b907/1/LR08AN6C--6zs4rsMv19LHyamOs.mft
Manifest number: 0151
Signing time: Fri 31 Jan 2025 10:01:10 +0000
Manifest this update: Fri 31 Jan 2025 10:01:10 +0000
Manifest next update: Sat 01 Feb 2025 10:01:10 +0000
Files and hashes: 1: LR08AN6C--6zs4rsMv19LHyamOs.crl (hash: YleirdkVGfoalk6sKji+H/qsj+vLjZKmFSBXWdye1QU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:a8:7b:7e:05:ae:5b:66:d1:31:b4:03:00:46:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d1d3c00de82fbeeb3b38aec32fd7d2c7c9a98eb
Validity
Not Before: Jan 31 10:01:10 2025 GMT
Not After : Feb 1 10:01:10 2025 GMT
Subject: CN=097c54389e6e2ce26d4a1b8f81704c372fdbf468
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:e1:c1:19:c1:45:31:3d:76:7f:e9:2c:92:14:
42:d4:9d:8b:57:62:03:17:7c:9c:24:4e:4b:e7:4b:
ac:2a:39:3f:24:94:0e:ac:57:3a:2a:06:0c:a0:d7:
5e:8e:cc:a0:f0:27:e4:e0:41:4a:a9:7b:e5:d7:7a:
8c:0b:66:c9:8e:ab:10:b4:40:7e:66:5f:90:82:63:
60:d5:3d:22:49:7b:9f:ed:89:8a:e4:c6:4a:7a:2e:
a3:92:73:76:39:ee:87:e6:e7:c7:a7:4b:1e:ea:29:
d7:7b:f1:4b:bd:65:e6:59:31:f5:ed:53:5b:a4:d7:
6a:8d:82:de:c5:51:e6:da:c9:61:81:53:94:09:09:
59:c2:c4:22:d4:21:65:ec:7e:6a:87:8d:04:71:c2:
98:9f:f4:e7:cb:3e:ed:e0:62:04:34:67:58:fa:c0:
33:d5:fe:8f:59:33:24:bc:c8:36:3b:13:57:a9:f6:
32:01:c2:cc:f0:fc:b3:79:36:d9:cf:4c:75:74:4c:
fb:3d:b7:15:6b:54:d3:41:24:af:c7:a8:e1:93:0d:
09:29:da:02:c5:45:87:89:4e:bf:fd:6a:c4:7e:b7:
0e:bc:b4:c9:1e:b0:90:d7:5a:af:28:18:48:8f:3f:
35:f8:7d:4c:23:97:19:bc:55:56:18:fe:21:81:4b:
4f:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:7C:54:38:9E:6E:2C:E2:6D:4A:1B:8F:81:70:4C:37:2F:DB:F4:68
X509v3 Authority Key Identifier:
keyid:2D:1D:3C:00:DE:82:FB:EE:B3:B3:8A:EC:32:FD:7D:2C:7C:9A:98:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LR08AN6C--6zs4rsMv19LHyamOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/66ab8b-bb38-41be-9a8b-e359c9d7b907/1/LR08AN6C--6zs4rsMv19LHyamOs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/66ab8b-bb38-41be-9a8b-e359c9d7b907/1/LR08AN6C--6zs4rsMv19LHyamOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:d0:a3:1d:f1:b1:ce:89:34:63:73:de:20:15:be:f0:84:5a:
fb:fd:79:0b:ba:77:b7:fe:c4:7c:9f:4a:a1:9d:ea:52:a1:dc:
ca:ff:9f:54:a7:9c:e7:81:2a:fb:cf:37:3a:ab:5f:4b:3c:cf:
09:e2:aa:c0:f7:ad:36:79:70:6b:81:6e:88:73:b3:17:3b:a2:
87:1b:cb:4e:3b:e1:d4:35:fd:a7:be:86:e5:76:15:f1:58:ad:
3d:03:a2:3c:eb:0a:f6:31:e9:fe:9e:29:00:8d:30:23:4a:aa:
17:bb:01:d8:e2:27:d5:c4:37:fe:ee:ee:25:51:40:b8:65:c2:
d6:9b:d5:2a:24:9e:0f:4e:85:f8:b4:40:1f:0f:67:2f:c9:eb:
dd:74:8b:42:fe:ca:42:72:66:c2:7a:8e:e5:dd:42:09:b6:c0:
95:77:e7:84:ad:dd:ee:d4:74:f1:b4:01:59:11:df:27:db:f7:
f4:be:80:95:3d:7e:f3:ea:91:97:9b:7c:75:9b:6d:4d:fe:23:
ad:82:38:26:9e:2f:76:98:74:48:52:c7:b7:52:f7:08:00:f4:
0b:24:cd:98:4e:63:ba:83:f5:75:7e:df:79:fe:20:05:7c:43:
fb:8f:7f:45:f4:7f:5d:5f:9f:a7:55:f8:f2:ee:36:99:3a:3c:
5d:91:fa:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:36:35 2025 by rpki-client