Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/50f086-30c4-4d8e-97d3-fa8dcc5cc5d1/1/lpNUGUJnQr91j4SE65ldaakM3oM.mft
File: lpNUGUJnQr91j4SE65ldaakM3oM.mft (raw, json)
Hash identifier: Ra0BGLinQ4CLfN2gtaNStaSWGyI9wchJX41LzkF/L2c=
Subject key identifier: ED:25:B3:7A:20:DD:B6:1F:E9:55:D3:F9:67:A3:CF:3E:8F:21:A8:41
Authority key identifier: 96:93:54:19:42:67:42:BF:75:8F:84:84:EB:99:5D:69:A9:0C:DE:83
Certificate issuer: /CN=96935419426742bf758f8484eb995d69a90cde83
Certificate serial: 0194485D1EA7598396B956AF19B7834BF8B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lpNUGUJnQr91j4SE65ldaakM3oM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/50f086-30c4-4d8e-97d3-fa8dcc5cc5d1/1/lpNUGUJnQr91j4SE65ldaakM3oM.mft
Manifest number: 0961
Signing time: Thu 09 Jan 2025 00:00:49 +0000
Manifest this update: Thu 09 Jan 2025 00:00:49 +0000
Manifest next update: Fri 10 Jan 2025 00:00:49 +0000
Files and hashes: 1: lpNUGUJnQr91j4SE65ldaakM3oM.crl (hash: xF7TGQYgwnbMygYNusmgt6Zlug9OXwcFaY+5+c6JPQ4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:48:5d:1e:a7:59:83:96:b9:56:af:19:b7:83:4b:f8:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96935419426742bf758f8484eb995d69a90cde83
Validity
Not Before: Jan 9 00:00:49 2025 GMT
Not After : Jan 10 00:00:49 2025 GMT
Subject: CN=ed25b37a20ddb61fe955d3f967a3cf3e8f21a841
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:c4:b5:97:f7:9f:a3:4a:1c:a6:57:85:86:05:
43:36:d8:96:57:79:85:fd:42:a8:70:1f:c0:c0:70:
92:24:3e:9c:d1:e6:07:68:7c:82:6c:32:26:85:56:
17:c0:34:06:eb:61:64:f6:b2:a8:23:b8:f0:8d:59:
78:b7:8a:81:41:0f:f7:de:98:1f:72:f4:ae:db:22:
f3:e2:b6:d1:92:f3:b6:1b:5c:fd:08:56:fe:d3:ce:
5e:cb:d7:c5:21:fe:a0:34:3f:2d:fc:97:a5:0a:fd:
17:95:96:48:51:ea:9a:0d:4d:b4:33:2b:2d:40:81:
b4:89:5b:47:b8:00:6c:36:38:de:f1:6d:a3:79:98:
07:f7:89:e4:60:55:54:0b:f2:39:c2:2e:16:89:db:
4c:52:b8:15:b1:25:e4:b1:59:eb:62:63:6b:4e:c7:
50:03:f4:7e:4f:b5:c9:41:88:b8:5f:c2:c9:41:e4:
4b:6d:e7:e8:75:3e:f7:a8:2d:db:7b:3f:c4:1f:8a:
c4:82:39:8d:a9:b0:f0:99:8c:1d:fe:01:01:37:6e:
ae:fe:ef:ba:b7:73:27:b1:f0:59:36:d7:41:a9:37:
ff:7d:ff:38:6f:a3:8e:28:be:95:d4:1b:a8:7d:c4:
59:67:5f:a2:c7:84:4e:7f:50:f2:5b:c4:26:78:75:
c5:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:25:B3:7A:20:DD:B6:1F:E9:55:D3:F9:67:A3:CF:3E:8F:21:A8:41
X509v3 Authority Key Identifier:
keyid:96:93:54:19:42:67:42:BF:75:8F:84:84:EB:99:5D:69:A9:0C:DE:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lpNUGUJnQr91j4SE65ldaakM3oM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/50f086-30c4-4d8e-97d3-fa8dcc5cc5d1/1/lpNUGUJnQr91j4SE65ldaakM3oM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/50f086-30c4-4d8e-97d3-fa8dcc5cc5d1/1/lpNUGUJnQr91j4SE65ldaakM3oM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:ab:d9:bd:d7:5a:d4:67:1d:4a:08:1d:29:66:a9:00:ab:49:
b5:67:67:ad:0f:ed:e9:69:93:43:e3:bc:bd:74:94:1f:c5:40:
54:f3:65:78:84:2d:67:f3:e8:9e:4c:91:22:57:5d:9f:06:17:
f8:60:39:21:b0:a9:37:ee:e3:14:e2:23:99:6b:8f:3c:e0:a6:
76:00:4f:4d:8b:33:35:2d:91:10:f3:e2:f4:dd:0e:0b:55:23:
1a:26:f3:a4:da:8a:0e:6b:7e:cc:db:7d:22:79:64:cf:d1:df:
1f:c4:55:33:17:d8:be:f9:73:30:c5:d1:b4:cb:68:ae:cf:82:
45:24:10:83:cb:5a:7a:fa:35:67:47:a3:e5:6e:76:ec:d9:94:
ee:12:a6:88:7a:c0:38:18:4f:e5:e6:b5:b9:38:f9:2f:52:e1:
d0:5b:86:0b:d3:de:8f:ee:13:05:b4:88:4b:55:71:58:4e:8b:
7e:6a:55:7c:ea:5c:50:ab:48:70:83:5c:97:ff:0c:44:ce:2d:
a2:ce:27:ae:5e:00:ae:7b:c2:dd:7d:34:14:47:c0:c3:d3:87:
fc:ff:38:18:78:f9:62:ff:e5:b0:2a:18:0a:dd:ff:44:32:9c:
ad:84:71:f0:38:57:25:87:c3:7b:e2:70:62:4a:d5:e7:84:7a:
3d:65:dd:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:15:02 2025 by rpki-client