Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/3daa87-e045-411e-b614-997355419b0a/1/LLKIuHK7hHRV1x4cCzE6YyZev9Q.mft
File: LLKIuHK7hHRV1x4cCzE6YyZev9Q.mft (raw, json)
Hash identifier: QUJa4+/o1lzM9CU19YL2nu2SSme2moUnYEghxyGy7UY=
Subject key identifier: D6:C9:C0:79:46:79:7D:51:9B:01:A0:90:81:D7:CD:CA:69:F4:53:BC
Authority key identifier: 2C:B2:88:B8:72:BB:84:74:55:D7:1E:1C:0B:31:3A:63:26:5E:BF:D4
Certificate issuer: /CN=2cb288b872bb847455d71e1c0b313a63265ebfd4
Certificate serial: 018B656C47D02344BE8CE85CB0F3645E9E63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LLKIuHK7hHRV1x4cCzE6YyZev9Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/3daa87-e045-411e-b614-997355419b0a/1/LLKIuHK7hHRV1x4cCzE6YyZev9Q.mft
Manifest number: 0864
Signing time: Wed 25 Oct 2023 06:01:16 +0000
Manifest this update: Wed 25 Oct 2023 06:01:16 +0000
Manifest next update: Thu 26 Oct 2023 06:01:16 +0000
Files and hashes: 1: LLKIuHK7hHRV1x4cCzE6YyZev9Q.crl (hash: pj+WDYQCQmgXyA6B5sZ5rxPcMm3ybog/vzMBC/HJix0=)
2: p4YGE4PY-hvQVU-DkoKMls2Jr20.roa (hash: o+QeYiQ1gQThM3fgxVtFLspe4YibHx+3CxXi+HqSafc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:65:6c:47:d0:23:44:be:8c:e8:5c:b0:f3:64:5e:9e:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cb288b872bb847455d71e1c0b313a63265ebfd4
Validity
Not Before: Oct 25 06:01:16 2023 GMT
Not After : Oct 26 06:01:16 2023 GMT
Subject: CN=d6c9c07946797d519b01a09081d7cdca69f453bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:11:88:b3:bd:b5:ae:d4:6b:6d:f5:14:d6:bf:
ee:3e:f6:0e:48:80:d1:2b:a7:80:db:58:ff:aa:64:
9a:e2:59:d8:7c:4c:c8:15:34:be:5c:3a:6b:ad:e2:
9e:42:93:8a:33:78:7b:28:71:e6:e5:61:b3:fa:19:
5f:a0:22:06:cc:83:d5:ca:9f:a2:9c:c0:d1:1c:b6:
96:2c:d1:ac:bc:79:b5:a4:e1:20:e1:10:f2:bc:50:
f0:89:3b:79:81:40:44:57:8f:97:99:f6:e7:86:11:
67:40:9d:fd:50:0a:e9:f0:8e:a9:5b:ab:65:48:80:
a3:62:4a:56:46:da:c2:6c:2c:cb:d7:9c:c9:c5:6d:
70:1d:a0:69:76:a7:02:86:e1:3f:e5:e5:58:a7:c2:
91:89:2b:5f:f4:9d:b8:db:0f:bf:08:af:b4:71:21:
22:82:1b:7e:db:ec:6a:b9:9c:9f:73:ee:fb:06:a5:
0e:9b:51:ce:88:fd:8a:46:1f:e5:9e:b3:c0:7f:44:
f0:29:6a:5e:99:cf:5a:76:10:74:b9:b7:db:99:55:
4e:17:61:30:d6:de:9a:5b:8b:fa:13:28:8d:5f:69:
e9:d6:2b:3a:93:11:62:22:7d:35:42:06:df:47:99:
40:97:61:6a:f4:04:ec:7f:91:d4:9c:31:4b:7e:ca:
86:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:C9:C0:79:46:79:7D:51:9B:01:A0:90:81:D7:CD:CA:69:F4:53:BC
X509v3 Authority Key Identifier:
keyid:2C:B2:88:B8:72:BB:84:74:55:D7:1E:1C:0B:31:3A:63:26:5E:BF:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LLKIuHK7hHRV1x4cCzE6YyZev9Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/3daa87-e045-411e-b614-997355419b0a/1/LLKIuHK7hHRV1x4cCzE6YyZev9Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/3daa87-e045-411e-b614-997355419b0a/1/LLKIuHK7hHRV1x4cCzE6YyZev9Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:ea:7a:1f:29:f8:53:c3:3a:3e:f1:a5:35:ff:e7:bb:d4:c2:
9c:93:73:4e:ba:7d:fa:20:d3:51:06:af:ea:b9:06:10:a5:8f:
bc:87:ca:bf:b7:ad:23:3c:62:85:c1:7d:f9:5e:e2:fa:9e:08:
b6:cc:69:49:5a:6b:e4:57:04:d2:56:a5:05:5d:0f:61:0b:d4:
7e:7e:82:ec:d3:33:15:14:6a:8f:7f:bd:60:aa:d2:25:35:e1:
85:22:7f:a4:87:d7:a2:d7:57:f5:b7:d8:b2:6e:9b:a5:43:ca:
cd:f2:40:41:b1:d9:52:cd:4f:53:66:81:52:2f:dc:42:85:f8:
d7:5a:fe:41:55:05:78:b2:fe:cb:34:7f:fb:5e:c7:fa:a3:de:
2e:04:3c:f8:2b:a6:4c:c2:8c:9c:ba:59:f1:6e:9b:98:86:f5:
94:7b:51:71:85:72:1d:68:d6:38:cc:e5:e2:55:ab:f3:ff:b9:
c0:20:c1:37:05:21:2a:99:e8:2e:7f:02:59:13:95:90:74:0f:
c6:15:0e:60:3b:2f:cb:e8:f1:0a:97:b5:58:1b:4f:ec:cc:dc:
33:11:00:e8:81:6d:9b:c5:4f:f6:cb:5a:a1:69:82:75:4a:9d:
f0:d6:8b:e4:73:a6:d9:a5:2f:e3:7b:b1:8d:f2:f9:41:da:6d:
e0:63:cc:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 22:56:54 2025 by rpki-client