Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/2c513c-aa3a-48aa-ac9c-22242b9ab2b3/1/LyCNidN2_IiDt9BxMb00pwWa7_o.mft
File: LyCNidN2_IiDt9BxMb00pwWa7_o.mft (raw, json)
Hash identifier: NIQWWeaTE/WB/rmWws1guZoxwAt72Q4cPKRQAq5C0mk=
Subject key identifier: 78:F9:75:6A:84:E6:13:EC:28:C1:8B:23:1C:A3:B5:A5:E0:62:C9:CF
Authority key identifier: 2F:20:8D:89:D3:76:FC:88:83:B7:D0:71:31:BD:34:A7:05:9A:EF:FA
Certificate issuer: /CN=2f208d89d376fc8883b7d07131bd34a7059aeffa
Certificate serial: 0194BC3C8FAA147B54E5BEBAA430DDF279E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LyCNidN2_IiDt9BxMb00pwWa7_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/2c513c-aa3a-48aa-ac9c-22242b9ab2b3/1/LyCNidN2_IiDt9BxMb00pwWa7_o.mft
Manifest number: 13BA
Signing time: Fri 31 Jan 2025 12:01:12 +0000
Manifest this update: Fri 31 Jan 2025 12:01:12 +0000
Manifest next update: Sat 01 Feb 2025 12:01:12 +0000
Files and hashes: 1: LyCNidN2_IiDt9BxMb00pwWa7_o.crl (hash: suAXjyJ1QZunT689lK+CFAYsq/3B3G7JmJPjXDsA50E=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:8f:aa:14:7b:54:e5:be:ba:a4:30:dd:f2:79:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f208d89d376fc8883b7d07131bd34a7059aeffa
Validity
Not Before: Jan 31 12:01:12 2025 GMT
Not After : Feb 1 12:01:12 2025 GMT
Subject: CN=78f9756a84e613ec28c18b231ca3b5a5e062c9cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:82:4c:a4:06:67:27:db:66:c8:d4:09:b8:42:
13:b2:52:cd:85:5a:0a:a8:10:e8:42:05:1b:fd:5c:
34:c3:30:be:93:78:5d:12:76:69:54:f3:ae:71:95:
35:fa:1f:80:79:1e:da:fd:f2:8e:49:b8:19:14:cd:
7e:a7:d1:33:bb:70:3e:a8:1e:38:17:5b:44:fb:34:
36:14:70:c0:f1:8d:62:50:0b:bd:99:19:4e:da:d6:
27:07:af:1b:ef:20:79:f5:ce:89:a9:ec:6f:09:37:
78:85:f9:36:90:d7:fa:e9:7d:87:ed:99:6d:21:ac:
63:8b:25:02:56:a4:cb:a9:63:cd:17:a7:ab:3f:0e:
09:42:6b:4f:5e:37:e2:55:58:4e:ed:2b:39:74:eb:
02:a5:f6:73:a8:03:42:7f:c9:de:e5:7b:73:86:a9:
cd:86:7d:ea:14:bf:56:e5:30:4d:b4:10:ce:36:fa:
e3:b8:e8:f8:76:ef:c0:87:7f:43:67:40:6f:a7:56:
6a:95:52:0f:13:16:2c:93:ad:cb:1a:72:45:4c:f5:
8a:76:16:57:3e:c1:4c:7c:db:cd:c1:3e:30:7c:34:
91:59:79:26:9c:92:49:be:19:d1:6b:e2:64:b9:76:
14:32:63:7d:38:f8:0a:97:4a:b2:d6:76:22:fc:eb:
47:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:F9:75:6A:84:E6:13:EC:28:C1:8B:23:1C:A3:B5:A5:E0:62:C9:CF
X509v3 Authority Key Identifier:
keyid:2F:20:8D:89:D3:76:FC:88:83:B7:D0:71:31:BD:34:A7:05:9A:EF:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LyCNidN2_IiDt9BxMb00pwWa7_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/2c513c-aa3a-48aa-ac9c-22242b9ab2b3/1/LyCNidN2_IiDt9BxMb00pwWa7_o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/2c513c-aa3a-48aa-ac9c-22242b9ab2b3/1/LyCNidN2_IiDt9BxMb00pwWa7_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:aa:43:80:0d:d1:9f:b5:2e:b3:d0:23:e6:82:c0:2d:a0:f5:
01:41:d2:b4:5f:72:b3:c7:a8:dd:5e:6a:94:83:a2:e1:5e:b3:
1f:15:50:78:89:57:0a:e9:c9:b8:00:49:0b:4c:72:0b:89:1e:
b1:c0:6a:84:a1:b5:fd:09:f8:07:76:b2:4d:79:03:ad:22:b5:
73:e9:9a:4b:d4:a8:a5:30:0e:03:ee:29:9d:84:a2:54:12:e2:
9b:30:eb:67:9e:1f:34:64:5c:3e:c4:d0:3c:7f:d0:c8:94:6f:
ea:07:fc:cd:34:96:cf:6b:57:79:fc:3b:b9:76:8f:67:4b:59:
ae:37:bb:36:4b:03:11:65:e7:74:27:2b:60:81:eb:7b:93:2d:
8f:27:3e:90:2b:55:d8:40:42:f7:52:39:bb:4a:db:b4:98:df:
28:de:a3:c5:a2:93:88:bd:71:21:54:d8:bc:7f:2f:06:b8:73:
78:71:10:e5:60:6f:3d:22:13:2a:de:fd:82:41:c9:33:66:f6:
69:43:a1:ef:ee:b7:56:c9:a4:f6:75:45:72:dd:fb:d3:9b:75:
c8:8d:ed:07:47:7d:ff:9a:fc:0b:47:0e:6b:28:18:f1:3e:9d:
74:a4:3c:48:bf:8c:68:df:da:42:c0:d6:ea:d3:28:cc:f5:46:
c5:bc:1a:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:44:20 2025 by rpki-client