Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/cab198-3e84-4b01-bfba-82b9e5fe9b06/1/lPNHF_8y_ix2RK610O6iMBYX8SQ.mft
File: lPNHF_8y_ix2RK610O6iMBYX8SQ.mft (raw, json)
Hash identifier: sddLIVtVqeKUGfMDGndEua84bEDRED+Knp8zAJdH8v4=
Subject key identifier: A5:96:80:DF:54:BD:99:1F:6E:E2:63:77:76:9C:91:8B:25:68:2A:81
Authority key identifier: 94:F3:47:17:FF:32:FE:2C:76:44:AE:B5:D0:EE:A2:30:16:17:F1:24
Certificate issuer: /CN=94f34717ff32fe2c7644aeb5d0eea2301617f124
Certificate serial: 0194BCE06B37DBF4E26BCAEC943F1669AD6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lPNHF_8y_ix2RK610O6iMBYX8SQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/cab198-3e84-4b01-bfba-82b9e5fe9b06/1/lPNHF_8y_ix2RK610O6iMBYX8SQ.mft
Manifest number: 03AC
Signing time: Fri 31 Jan 2025 15:00:11 +0000
Manifest this update: Fri 31 Jan 2025 15:00:11 +0000
Manifest next update: Sat 01 Feb 2025 15:00:11 +0000
Files and hashes: 1: lPNHF_8y_ix2RK610O6iMBYX8SQ.crl (hash: YRZ0qp3ROmbtdNAEC2f9Eu8FyVWN23t9jgwDOVjXnsQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:6b:37:db:f4:e2:6b:ca:ec:94:3f:16:69:ad:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94f34717ff32fe2c7644aeb5d0eea2301617f124
Validity
Not Before: Jan 31 15:00:11 2025 GMT
Not After : Feb 1 15:00:11 2025 GMT
Subject: CN=a59680df54bd991f6ee26377769c918b25682a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:2f:17:c1:ce:66:44:26:cd:cc:76:a7:79:b0:
aa:1f:35:12:60:c2:71:22:ec:1e:92:3b:47:e9:1a:
ca:8d:22:63:28:a9:e3:70:fc:01:45:a2:e9:80:77:
40:62:1d:f9:dc:a3:b1:d5:c4:2f:c0:6d:87:47:21:
d2:8c:3e:7e:9e:de:c0:ea:8e:42:82:58:e7:a3:00:
62:95:ed:5c:be:72:2b:09:af:fa:39:d0:ca:5a:ba:
cb:3c:f1:0d:a2:f3:b8:0e:39:6a:b7:40:b0:63:54:
c3:11:b5:c7:b7:1a:a7:d4:0d:d8:95:df:da:64:16:
a7:c7:2d:5c:33:2f:68:d5:83:8d:72:0a:25:1f:66:
4c:3e:26:62:cc:23:ca:6c:48:18:4c:b5:8a:53:d2:
31:26:66:2c:29:1b:84:f6:87:48:c8:67:48:7b:33:
67:5b:03:83:98:04:e3:58:73:fe:2a:34:7d:89:8a:
c8:63:ba:8b:47:ab:22:3f:92:8a:aa:de:ad:7e:6e:
f6:56:31:4e:7e:ae:e9:23:d0:ed:a4:b1:b7:a2:cb:
26:d8:98:7c:32:5d:e4:5a:cc:d3:02:cb:75:eb:7a:
05:80:4a:75:64:15:46:f8:ba:62:aa:01:8c:73:2e:
00:d8:a1:9a:2d:7c:4f:39:fa:ac:07:43:a8:f6:1b:
2c:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:96:80:DF:54:BD:99:1F:6E:E2:63:77:76:9C:91:8B:25:68:2A:81
X509v3 Authority Key Identifier:
keyid:94:F3:47:17:FF:32:FE:2C:76:44:AE:B5:D0:EE:A2:30:16:17:F1:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lPNHF_8y_ix2RK610O6iMBYX8SQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/cab198-3e84-4b01-bfba-82b9e5fe9b06/1/lPNHF_8y_ix2RK610O6iMBYX8SQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/cab198-3e84-4b01-bfba-82b9e5fe9b06/1/lPNHF_8y_ix2RK610O6iMBYX8SQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:e9:a2:18:f0:ce:08:11:6b:f2:f7:06:8a:98:7f:a6:99:22:
bf:ec:8e:6b:1b:7a:23:a1:04:e8:d5:e3:5d:5f:00:2e:59:d1:
a6:0c:36:54:8f:96:81:01:95:08:3e:37:37:79:fd:1a:24:fb:
82:90:7e:b7:0f:91:d3:b2:e4:ab:d8:34:7b:16:6d:62:ef:c0:
4c:a6:23:7f:94:43:48:6b:9f:3b:92:56:7e:0c:40:a0:60:95:
56:0c:41:f7:63:99:ce:5c:c5:18:cd:e0:f4:e5:f5:b3:73:7c:
3a:84:6e:e4:4d:3d:9c:da:8f:14:77:e4:0c:64:ec:54:a0:4e:
3a:c2:c8:5b:90:ab:0c:22:00:bc:24:87:09:0f:76:e8:60:40:
78:03:1f:d9:e3:25:31:98:89:d4:0c:a2:ea:c3:4b:4a:6a:e9:
68:21:a8:fa:f1:79:86:8c:51:e5:a0:ac:cc:3e:f8:aa:84:c8:
c1:9d:97:63:3a:fb:a3:5d:ea:34:21:49:85:33:ef:88:8e:3c:
eb:e8:d8:b3:6e:81:43:5d:9b:75:8d:55:82:f6:ec:95:59:b0:
7a:ec:92:03:bb:17:f3:ab:5a:74:38:4c:ca:52:29:ad:3c:a4:
e5:d7:da:00:de:7c:24:18:6c:1f:2c:80:c2:34:7e:6e:0b:a6:
c0:9f:2e:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:47:28 2025 by rpki-client