Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/b7de46-60d9-48a1-9285-f21848fda61d/1/LKw4JAv6Xdr-hhMo0XTJ_XpOx2E.mft
File: LKw4JAv6Xdr-hhMo0XTJ_XpOx2E.mft (raw, json)
Hash identifier: 73L4Ri0rzgs+OBexTuFXpZTz7x4um/wIPImOnoHBG+M=
Subject key identifier: 38:F3:8C:5E:D5:D6:67:FA:00:1C:69:78:31:3A:99:04:83:22:C6:85
Authority key identifier: 2C:AC:38:24:0B:FA:5D:DA:FE:86:13:28:D1:74:C9:FD:7A:4E:C7:61
Certificate issuer: /CN=2cac38240bfa5ddafe861328d174c9fd7a4ec761
Certificate serial: 018BB3194FD5D43C99A96DCB3AF168CAE04D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LKw4JAv6Xdr-hhMo0XTJ_XpOx2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/b7de46-60d9-48a1-9285-f21848fda61d/1/LKw4JAv6Xdr-hhMo0XTJ_XpOx2E.mft
Manifest number: 0854
Signing time: Thu 09 Nov 2023 08:01:02 +0000
Manifest this update: Thu 09 Nov 2023 08:01:02 +0000
Manifest next update: Fri 10 Nov 2023 08:01:02 +0000
Files and hashes: 1: LKw4JAv6Xdr-hhMo0XTJ_XpOx2E.crl (hash: 8R+Gp1ZaXWr7nUSZjvpTR1XCYfDlKcBU9lRjw9CnWFU=)
2: aBSVqqkGOdb0jLOYeFS0CWm5IHM.roa (hash: irJnTgTl+bP0yStPhTR95AMjsVISY7Q0Y6uSguNfjb8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:b3:19:4f:d5:d4:3c:99:a9:6d:cb:3a:f1:68:ca:e0:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cac38240bfa5ddafe861328d174c9fd7a4ec761
Validity
Not Before: Nov 9 08:01:02 2023 GMT
Not After : Nov 10 08:01:02 2023 GMT
Subject: CN=38f38c5ed5d667fa001c6978313a99048322c685
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:44:d7:88:4a:d2:49:42:e7:4b:90:28:8b:87:
28:c1:dc:52:c9:b0:bd:a5:ac:75:b6:5a:b0:45:ed:
97:ee:e5:d2:48:9e:58:60:e0:65:0e:31:92:18:a3:
0a:51:20:c0:65:09:fa:e7:80:30:2e:f5:8b:50:af:
3f:74:c9:b9:27:9f:1b:a6:f4:a3:74:d6:41:4e:b7:
bd:2e:2b:d1:de:e7:6d:6f:25:30:83:d4:a4:85:7f:
0d:5f:94:07:cf:89:b8:fa:af:da:ec:e2:3e:14:3f:
78:aa:bf:21:ad:0a:47:f3:ab:b9:0d:e5:0b:1c:63:
32:0d:66:53:97:89:6d:62:cb:ca:ba:56:97:e5:f4:
d7:7b:5a:55:18:67:4c:2f:f5:66:42:04:26:45:27:
d4:c6:62:e1:36:62:b2:c0:0e:2f:34:9c:42:f6:58:
44:f1:58:e1:f7:9a:e9:66:27:be:4b:5c:ea:6b:47:
fe:a7:0c:47:15:bf:d0:82:1b:e6:0c:6d:22:1f:62:
94:43:96:e7:0d:b2:4d:90:14:67:96:b0:92:3b:ee:
77:f6:59:07:ad:ec:b4:1e:80:fc:f6:9f:09:45:d2:
e3:28:63:22:f3:ec:24:76:80:84:69:3d:f0:fc:d8:
dc:03:32:c3:bb:43:dc:b6:7b:c8:a9:f9:91:64:bc:
15:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:F3:8C:5E:D5:D6:67:FA:00:1C:69:78:31:3A:99:04:83:22:C6:85
X509v3 Authority Key Identifier:
keyid:2C:AC:38:24:0B:FA:5D:DA:FE:86:13:28:D1:74:C9:FD:7A:4E:C7:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LKw4JAv6Xdr-hhMo0XTJ_XpOx2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/b7de46-60d9-48a1-9285-f21848fda61d/1/LKw4JAv6Xdr-hhMo0XTJ_XpOx2E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/b7de46-60d9-48a1-9285-f21848fda61d/1/LKw4JAv6Xdr-hhMo0XTJ_XpOx2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:23:b4:5a:71:63:42:41:d9:4b:34:fd:1b:7e:05:b2:49:d4:
85:7f:4f:34:80:fa:be:55:b6:eb:f8:ae:9b:68:09:e7:d9:e8:
45:66:35:ea:ae:8c:e6:d7:2b:6d:d6:7f:ca:c5:9b:28:22:eb:
cd:18:ac:09:2a:43:e4:2c:3e:ca:4c:2e:ae:0e:4d:0b:0f:29:
dc:35:d4:20:f3:69:77:41:2d:7a:38:8c:10:27:fd:4d:f9:97:
70:ca:03:81:57:1c:d5:af:b0:1f:13:06:dc:f9:5e:1b:a0:ef:
0b:f7:5e:cf:52:d8:cb:48:25:21:0e:b2:d8:7f:24:e6:5f:39:
44:a6:ed:99:e6:b8:a3:91:18:40:b9:c5:aa:9c:e1:d8:5f:09:
14:2c:dc:ee:b0:2d:7c:6e:30:4f:88:e1:47:ff:f2:e4:d3:21:
06:c4:2a:7f:2d:c5:4e:21:a6:19:99:b6:bb:e1:b0:f8:79:ad:
a8:22:7e:b6:4d:f6:b1:2f:5a:24:42:63:0f:44:34:f8:ff:3c:
08:07:c7:a6:aa:91:20:40:a0:3b:3a:f6:29:90:e8:b3:55:73:
c2:0f:35:d5:7a:d1:a7:6a:67:ea:21:df:00:04:3f:82:bf:e1:
98:63:50:78:55:de:64:bb:1c:f8:c6:70:c4:52:1e:7e:af:2e:
7c:be:6c:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:37:13 2025 by rpki-client