Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/4edd8b-3cab-453b-b376-d2c968b0fedc/1/LhBSUuEMtSELqyYdm8MiDKb7z3M.mft
File: LhBSUuEMtSELqyYdm8MiDKb7z3M.mft (raw, json)
Hash identifier: AZBBop6U7/VgwGwMvDbBb8D1s0iCci++2+eF/al6BAk=
Subject key identifier: F5:DF:F9:D2:BE:67:FA:4E:C8:06:37:7A:57:9C:87:45:91:EC:CE:1F
Authority key identifier: 2E:10:52:52:E1:0C:B5:21:0B:AB:26:1D:9B:C3:22:0C:A6:FB:CF:73
Certificate issuer: /CN=2e105252e10cb5210bab261d9bc3220ca6fbcf73
Certificate serial: 019589CD58128BFB3A285F4A3F4FB535C50E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LhBSUuEMtSELqyYdm8MiDKb7z3M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/4edd8b-3cab-453b-b376-d2c968b0fedc/1/LhBSUuEMtSELqyYdm8MiDKb7z3M.mft
Manifest number: 141E
Signing time: Wed 12 Mar 2025 10:01:30 +0000
Manifest this update: Wed 12 Mar 2025 10:01:30 +0000
Manifest next update: Thu 13 Mar 2025 10:01:30 +0000
Files and hashes: 1: LhBSUuEMtSELqyYdm8MiDKb7z3M.crl (hash: f6KMlwg+4t/2NHG94FynfRtPMmFo3BICwv0IOtyZTGM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:89:cd:58:12:8b:fb:3a:28:5f:4a:3f:4f:b5:35:c5:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e105252e10cb5210bab261d9bc3220ca6fbcf73
Validity
Not Before: Mar 12 10:01:30 2025 GMT
Not After : Mar 13 10:01:30 2025 GMT
Subject: CN=f5dff9d2be67fa4ec806377a579c874591ecce1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:82:0e:e9:71:ad:ca:fa:cb:e7:cf:09:c4:eb:
26:8c:d4:cb:90:26:73:88:69:54:f9:e6:b5:fa:c8:
b4:f8:dc:83:7d:bd:3b:e0:26:ef:d7:d0:69:99:a5:
0a:6f:2b:62:72:9d:78:1e:47:59:e7:81:8d:85:9e:
2f:85:09:82:dd:4d:1a:64:57:3f:32:38:06:16:23:
25:c5:87:c8:7d:8b:e6:1f:b2:43:04:09:f7:58:81:
a3:c4:bb:ac:17:a3:08:56:a9:fd:a1:a9:35:27:d7:
e8:21:9d:a3:28:4f:93:b8:ad:c5:95:49:34:04:87:
7b:a4:57:89:8b:4a:8b:0f:37:89:2d:a5:61:20:f0:
60:44:39:9e:6a:b9:a1:a5:14:65:79:8d:4d:a9:5b:
b6:ee:86:e9:c2:89:da:05:93:cc:d3:88:b3:0f:8b:
4f:2b:29:09:ce:fa:a9:ad:2f:c2:6e:16:38:66:0d:
4c:3e:0c:73:2e:9c:26:c0:b2:2a:ee:8b:0b:cf:99:
3d:cb:86:ff:c3:d6:70:f5:ba:31:bb:b8:7c:a1:2c:
ec:07:a1:cd:57:61:d5:83:eb:44:f4:27:36:d3:ed:
a5:d9:1e:c6:52:de:34:5b:55:f5:4d:83:08:43:64:
e6:6e:84:96:b1:f3:c6:1c:ef:6a:21:d9:e9:7b:b2:
72:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:DF:F9:D2:BE:67:FA:4E:C8:06:37:7A:57:9C:87:45:91:EC:CE:1F
X509v3 Authority Key Identifier:
keyid:2E:10:52:52:E1:0C:B5:21:0B:AB:26:1D:9B:C3:22:0C:A6:FB:CF:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LhBSUuEMtSELqyYdm8MiDKb7z3M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/4edd8b-3cab-453b-b376-d2c968b0fedc/1/LhBSUuEMtSELqyYdm8MiDKb7z3M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/4edd8b-3cab-453b-b376-d2c968b0fedc/1/LhBSUuEMtSELqyYdm8MiDKb7z3M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:df:ac:49:39:ac:56:b6:92:16:26:1d:eb:83:6a:3e:56:2a:
ef:18:e5:b6:21:31:ed:a8:cf:db:86:63:d0:29:2a:57:41:92:
ce:7b:1f:3e:2e:be:37:92:6b:3e:4c:99:a0:19:13:65:a4:8c:
51:ca:44:ac:eb:00:ec:37:0c:3d:a0:63:2f:ae:8d:12:14:f2:
f5:af:14:77:87:30:03:20:24:08:ae:11:77:ef:38:8a:9e:46:
dd:53:f1:af:75:8e:9a:1a:1c:3d:6a:65:93:7b:7e:07:66:a5:
bf:27:71:7f:90:71:14:d0:5b:86:f3:fa:6e:3b:81:30:9f:ee:
69:58:f6:ba:ca:b4:c5:bb:80:22:bf:46:12:0d:ce:c4:58:3d:
6f:0e:97:7c:c2:af:6a:2a:00:69:29:bd:9e:1f:53:52:b2:69:
ca:87:94:8d:a4:f6:ba:29:fc:c0:4c:69:2f:b1:3d:e6:fd:0b:
7c:f7:22:eb:38:35:ba:7e:b1:7f:78:6b:94:48:4f:d2:c6:94:
f3:d2:da:a9:6d:71:43:7d:ef:a9:b7:34:be:63:54:14:ad:60:
cf:9d:f4:ba:3e:1b:04:36:ed:53:7d:ac:45:a4:bf:6c:6b:f2:
05:d0:72:b9:a8:da:4d:8d:83:6a:19:67:05:0d:f5:35:e5:0a:
8c:27:e3:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 15:01:53 2025 by rpki-client