Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/a7011a-6e15-4e9b-ba9e-32d79cc49f22/1/l0mtdlnaE07UgHT025NBzodRffQ.mft
File: l0mtdlnaE07UgHT025NBzodRffQ.mft (raw, json)
Hash identifier: B1kN/WUXfhIIq+Toakkz9CrlgP53QwE3NmlD+/8TzT8=
Subject key identifier: D0:34:34:90:FC:3E:AE:7A:4C:9D:89:2F:CB:00:BF:D8:97:A6:A1:C6
Authority key identifier: 97:49:AD:76:59:DA:13:4E:D4:80:74:F4:DB:93:41:CE:87:51:7D:F4
Certificate issuer: /CN=9749ad7659da134ed48074f4db9341ce87517df4
Certificate serial: 0194BBCE1D73FA8370D7254F1147F302EEBE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l0mtdlnaE07UgHT025NBzodRffQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/a7011a-6e15-4e9b-ba9e-32d79cc49f22/1/l0mtdlnaE07UgHT025NBzodRffQ.mft
Manifest number: 112C
Signing time: Fri 31 Jan 2025 10:00:34 +0000
Manifest this update: Fri 31 Jan 2025 10:00:34 +0000
Manifest next update: Sat 01 Feb 2025 10:00:34 +0000
Files and hashes: 1: l0mtdlnaE07UgHT025NBzodRffQ.crl (hash: rlAGA/xYnF3GlRRZ4VVoH4/SX6l3BMksoVHsj0LxB9E=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:1d:73:fa:83:70:d7:25:4f:11:47:f3:02:ee:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9749ad7659da134ed48074f4db9341ce87517df4
Validity
Not Before: Jan 31 10:00:34 2025 GMT
Not After : Feb 1 10:00:34 2025 GMT
Subject: CN=d0343490fc3eae7a4c9d892fcb00bfd897a6a1c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:85:1f:0b:66:8a:20:13:aa:88:84:a7:fb:e4:
4c:bc:a0:59:dd:6c:33:7c:82:4c:0c:42:4a:1b:62:
4a:e2:f5:7e:be:b2:a2:69:62:2f:1d:28:ab:a1:a0:
90:44:01:60:df:25:03:84:c5:a0:f0:e2:99:62:6a:
6c:0e:f1:07:56:be:42:27:7b:98:54:66:85:5e:2d:
e9:44:d5:fb:ce:af:10:a0:0a:a2:fc:9c:81:e4:8d:
14:6a:51:4f:8a:bc:64:b6:2f:c5:17:31:5d:86:9b:
e0:7f:6f:a8:22:b4:fb:b2:7f:e1:ad:bb:6a:21:de:
08:c2:a8:e6:55:4e:3c:57:e9:17:5d:0d:4a:90:21:
37:65:bd:bb:b2:2d:28:fa:61:39:b6:3b:0c:28:16:
7b:92:77:18:e2:2c:47:ea:09:8a:d6:92:4a:e3:c7:
d8:21:f2:ea:23:02:6f:94:86:ff:7d:73:94:07:fe:
14:8a:e1:ec:60:83:c4:41:4b:bc:6b:79:5c:ba:a4:
f2:08:fb:7d:00:79:23:a9:39:a4:cc:30:02:6f:52:
46:41:47:8a:86:96:85:1e:f3:df:28:b4:33:14:91:
57:88:b5:22:0c:05:80:cd:97:6b:8a:69:b0:5f:9a:
81:28:05:19:e8:9e:ea:c2:f8:e2:3d:b3:25:f8:7b:
1a:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:34:34:90:FC:3E:AE:7A:4C:9D:89:2F:CB:00:BF:D8:97:A6:A1:C6
X509v3 Authority Key Identifier:
keyid:97:49:AD:76:59:DA:13:4E:D4:80:74:F4:DB:93:41:CE:87:51:7D:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l0mtdlnaE07UgHT025NBzodRffQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/a7011a-6e15-4e9b-ba9e-32d79cc49f22/1/l0mtdlnaE07UgHT025NBzodRffQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/a7011a-6e15-4e9b-ba9e-32d79cc49f22/1/l0mtdlnaE07UgHT025NBzodRffQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:03:54:49:42:f0:4f:ff:fb:60:4f:e7:30:55:97:83:b0:5b:
b1:3a:f2:db:79:4c:14:4c:cf:ee:89:8f:49:67:e4:23:45:fb:
af:de:3e:55:68:a3:97:20:5e:89:c7:b3:f5:f3:be:44:b9:d4:
72:79:e4:f3:da:b2:8e:f8:7c:e9:96:53:3d:ec:19:a5:1b:25:
0a:b0:34:3a:60:7c:58:02:f6:71:bb:59:5c:97:c5:6c:49:2c:
be:f7:48:59:7e:03:5f:47:2d:54:b4:e7:51:98:0a:2a:e1:c6:
5f:f2:84:e2:fd:6d:c9:96:29:11:f4:cc:b3:a6:e5:2c:45:36:
1b:7c:cc:91:b7:16:87:36:25:aa:9a:57:15:6f:46:69:af:be:
dd:eb:a4:3b:bc:63:41:46:ca:f9:f2:7a:5d:95:e1:69:ab:86:
0d:bf:0c:9d:ec:5f:02:d8:87:ac:43:a2:49:83:d7:dd:9c:26:
d3:93:a3:cd:d8:a4:22:14:23:ab:ca:49:2b:73:d0:6d:6c:79:
18:81:1d:10:06:24:05:42:0d:fa:ec:09:39:3b:d8:af:13:2e:
88:03:81:5d:e9:c6:44:b2:2e:b0:b8:a3:76:8c:b3:d1:96:91:
58:5b:6e:89:89:c1:24:f1:d7:e9:6b:11:cb:b3:78:4c:db:de:
56:fe:18:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:25:44 2025 by rpki-client