Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/9eaf5c-8c54-45ed-bfc4-673c3889161d/1/lQSgmkWW2BV9pp3DNGxavOTOThM.mft
File: lQSgmkWW2BV9pp3DNGxavOTOThM.mft (raw, json)
Hash identifier: CN9GMcnwKfzhhX1xy4O9PE1EIXVodx5he8zn3UJYdW0=
Subject key identifier: 1D:DC:D8:1B:6E:53:9D:F1:40:86:F6:A9:0A:EA:86:DF:24:75:A1:D5
Authority key identifier: 95:04:A0:9A:45:96:D8:15:7D:A6:9D:C3:34:6C:5A:BC:E4:CE:4E:13
Certificate issuer: /CN=9504a09a4596d8157da69dc3346c5abce4ce4e13
Certificate serial: 0194BC04AA39AFAA1BFC6F74084AE9963719
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lQSgmkWW2BV9pp3DNGxavOTOThM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/9eaf5c-8c54-45ed-bfc4-673c3889161d/1/lQSgmkWW2BV9pp3DNGxavOTOThM.mft
Manifest number: 86
Signing time: Fri 31 Jan 2025 11:00:09 +0000
Manifest this update: Fri 31 Jan 2025 11:00:09 +0000
Manifest next update: Sat 01 Feb 2025 11:00:09 +0000
Files and hashes: 1: lQSgmkWW2BV9pp3DNGxavOTOThM.crl (hash: MAOdihnXkykJ7yv/06G2qZa1ocUCOJcR35Hy+9iTrhc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:aa:39:af:aa:1b:fc:6f:74:08:4a:e9:96:37:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9504a09a4596d8157da69dc3346c5abce4ce4e13
Validity
Not Before: Jan 31 11:00:09 2025 GMT
Not After : Feb 1 11:00:09 2025 GMT
Subject: CN=1ddcd81b6e539df14086f6a90aea86df2475a1d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:2a:fd:c8:93:88:02:ad:bd:15:fe:c9:66:a2:
5c:82:4a:ec:e3:60:11:2e:da:22:ca:9e:0c:3b:60:
8d:6a:c3:0e:17:0b:01:bd:84:2e:4f:51:c9:3a:31:
0c:37:79:87:ec:a0:ce:d5:d8:54:92:b0:18:c3:c5:
f4:ff:81:c4:66:16:92:6f:12:0a:28:2e:62:42:d7:
f7:49:90:6d:07:c1:34:38:0e:4a:2d:f5:4b:75:e5:
b2:2c:20:69:57:94:bf:f3:37:af:d4:86:80:9d:44:
0f:3e:d6:46:50:77:9d:61:be:25:2c:58:a8:29:f9:
1b:0a:43:6b:d7:c1:17:7f:ae:7c:de:ef:6e:a7:01:
9c:03:a7:d3:dc:58:db:d0:d5:51:0e:37:fb:e9:07:
fe:47:eb:c2:62:bf:07:fa:3a:e8:76:50:b8:03:bd:
16:ba:5a:5b:6c:fd:dc:aa:5e:8e:14:90:6c:10:d1:
ab:9f:f9:62:29:2e:12:ef:b6:df:2c:18:6d:67:9d:
e9:77:19:50:3f:3d:d2:57:22:54:0b:34:ce:1a:11:
be:a8:3c:85:7d:6a:cf:7c:45:92:a8:4c:1a:9b:87:
7c:6f:31:3e:04:77:8e:53:57:27:16:2f:8f:d5:42:
67:5a:a2:02:01:0b:42:eb:0c:a6:b5:13:8f:aa:88:
b0:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:DC:D8:1B:6E:53:9D:F1:40:86:F6:A9:0A:EA:86:DF:24:75:A1:D5
X509v3 Authority Key Identifier:
keyid:95:04:A0:9A:45:96:D8:15:7D:A6:9D:C3:34:6C:5A:BC:E4:CE:4E:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lQSgmkWW2BV9pp3DNGxavOTOThM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/9eaf5c-8c54-45ed-bfc4-673c3889161d/1/lQSgmkWW2BV9pp3DNGxavOTOThM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/9eaf5c-8c54-45ed-bfc4-673c3889161d/1/lQSgmkWW2BV9pp3DNGxavOTOThM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:8e:0f:0f:a1:c5:74:eb:6b:36:6d:47:ba:7b:d6:a1:2f:69:
b4:4c:06:93:46:52:16:76:56:75:a3:7e:cf:f4:e4:2c:63:5b:
3d:28:2b:f1:18:14:0d:32:51:2d:59:58:63:93:c4:79:84:5a:
94:71:59:81:03:3a:f8:2a:38:2a:51:ca:b9:39:3b:81:7e:c2:
5e:a7:d8:3f:18:09:ee:ea:f3:46:80:81:74:21:7a:59:63:ce:
36:ba:40:a3:5a:b9:d9:d5:39:56:5e:e1:5b:50:ff:18:df:4e:
c0:47:41:97:13:8e:2e:a7:8a:c2:82:46:e2:ac:38:95:00:40:
69:93:e5:44:f5:22:f1:8a:83:f5:f1:bf:59:2f:2f:71:25:bf:
80:a3:26:46:b6:b6:a6:8e:b8:7b:9b:49:8f:7a:4b:66:14:9a:
73:06:f3:95:73:07:3c:44:c2:5b:52:36:49:24:4a:35:eb:b7:
bf:ef:f4:5e:d6:ba:34:94:db:ee:ba:29:5c:53:f2:df:1d:08:
8e:27:22:93:37:45:0a:3b:b0:03:c9:04:04:e4:8d:f3:86:89:
c4:b8:44:a9:6f:53:5a:11:c2:34:51:19:66:c4:9d:66:f1:f0:
2a:25:ac:16:d5:c8:54:17:4c:45:ad:b1:24:f6:22:86:53:68:
81:a1:20:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:44:35 2025 by rpki-client