Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/1e19cf-c262-4c7c-8fba-0d0e449d09d5/1/lhFAEAOT0vurLcgcGZs1Bqvk59A.mft
File: lhFAEAOT0vurLcgcGZs1Bqvk59A.mft (raw, json)
Hash identifier: U7rbOQpBY0J3DZeEICcvqqQ7jQolUh9lVC38wtnLe20=
Subject key identifier: 59:AE:8A:EB:CA:68:F6:B1:A5:1A:4B:20:59:69:65:D4:12:07:2A:CB
Authority key identifier: 96:11:40:10:03:93:D2:FB:AB:2D:C8:1C:19:9B:35:06:AB:E4:E7:D0
Certificate issuer: /CN=961140100393d2fbab2dc81c199b3506abe4e7d0
Certificate serial: 0188DD5276CA49FC7D15BA48B13840F3078A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lhFAEAOT0vurLcgcGZs1Bqvk59A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/1e19cf-c262-4c7c-8fba-0d0e449d09d5/1/lhFAEAOT0vurLcgcGZs1Bqvk59A.mft
Manifest number: 07D9
Signing time: Wed 21 Jun 2023 09:39:09 +0000
Manifest this update: Wed 21 Jun 2023 09:39:09 +0000
Manifest next update: Thu 22 Jun 2023 09:39:09 +0000
Files and hashes: 1: LL00jLioRqxrzEIqGq4L9KSsOOw.roa (hash: BfsIVu0pRykCIzcp4KvbmsAp93Jh+8gBar9uDU9FdZc=)
2: lhFAEAOT0vurLcgcGZs1Bqvk59A.crl (hash: BY07ezo/g1yVUwJT/8Dur+m69RePsUSB4rhzlYSJoAA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:dd:52:76:ca:49:fc:7d:15:ba:48:b1:38:40:f3:07:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=961140100393d2fbab2dc81c199b3506abe4e7d0
Validity
Not Before: Jun 21 09:39:09 2023 GMT
Not After : Jun 22 09:39:09 2023 GMT
Subject: CN=59ae8aebca68f6b1a51a4b20596965d412072acb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:ba:fb:a1:d2:b9:5e:02:61:d1:b5:de:40:36:
5c:fb:44:14:a2:7d:06:4b:10:32:62:5f:9c:bc:9a:
f1:c9:3e:cf:78:23:16:df:d7:69:ec:82:a3:3f:0c:
bc:53:1f:77:28:4f:2b:e6:ea:3f:8d:cb:af:b6:fd:
d6:24:61:0a:46:26:9a:77:ee:1f:0b:99:ad:e9:69:
0c:a2:db:ac:f1:73:90:5f:64:e5:c5:f0:7c:07:8a:
9f:e2:4f:66:b5:f9:e4:58:e7:61:7a:48:f0:aa:81:
77:30:7a:64:ae:b9:ae:3c:b8:ef:82:48:9e:dd:55:
83:e4:5d:1a:66:38:42:d9:f0:7a:ad:91:89:1b:99:
4d:60:ef:69:fd:f2:e1:d1:77:54:61:68:24:eb:f4:
3a:76:1e:e9:60:f5:de:45:32:c0:43:74:8f:e3:a1:
3c:74:22:72:7d:c3:34:04:13:91:ba:04:97:da:e0:
92:9d:01:d0:6a:4e:19:d6:ec:a3:85:52:86:55:f2:
58:b0:c0:1a:eb:2f:39:9c:a0:9f:69:70:58:3f:6f:
02:6d:10:04:7d:73:8a:03:17:14:6d:9f:43:f4:99:
e0:32:0c:0a:74:92:cc:b1:1e:37:35:67:5a:35:dd:
b0:02:c9:77:ca:a1:c9:33:f7:9e:86:33:da:fd:a9:
20:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:AE:8A:EB:CA:68:F6:B1:A5:1A:4B:20:59:69:65:D4:12:07:2A:CB
X509v3 Authority Key Identifier:
keyid:96:11:40:10:03:93:D2:FB:AB:2D:C8:1C:19:9B:35:06:AB:E4:E7:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lhFAEAOT0vurLcgcGZs1Bqvk59A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/1e19cf-c262-4c7c-8fba-0d0e449d09d5/1/lhFAEAOT0vurLcgcGZs1Bqvk59A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/1e19cf-c262-4c7c-8fba-0d0e449d09d5/1/lhFAEAOT0vurLcgcGZs1Bqvk59A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:16:98:b0:1a:78:0e:44:02:e8:81:5d:6f:94:01:8f:ce:24:
8d:87:31:68:d4:f8:42:d5:17:25:c6:e9:eb:21:10:1f:17:95:
44:ec:52:41:fb:45:a1:1f:b7:bf:89:52:25:69:f3:e0:03:29:
a5:58:e7:a7:2c:6e:fc:04:ea:d5:90:9a:a6:a4:b0:8f:36:9d:
8e:ec:95:1e:d4:4a:01:9b:91:d2:ec:73:c9:15:63:c4:6f:95:
da:f3:d1:ea:e2:79:8e:48:9e:a6:91:7c:5e:fe:d1:da:d0:28:
40:59:46:ed:2d:35:3b:b4:09:e9:57:ea:0c:7c:dd:f3:b2:9d:
b3:70:1b:b4:dc:85:ab:43:2d:79:79:67:4f:6f:38:ef:15:d6:
9e:43:9a:77:66:26:a0:73:20:66:47:d5:11:32:ca:6a:16:cf:
ac:9d:4c:0a:17:1a:3a:8f:cf:07:f0:9e:49:f0:b2:bf:70:9f:
36:8d:85:47:cf:1d:a8:83:44:12:1c:9b:0d:65:89:3a:26:c1:
97:39:f1:33:16:e9:dc:5c:44:ed:63:61:d0:06:0e:61:5e:24:
d8:39:79:c5:74:a5:63:ff:6a:11:78:18:a7:39:57:40:77:82:
88:c4:ba:83:35:31:0c:a9:93:e3:88:85:85:94:5c:64:65:98:
0f:b3:a7:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:21:23 2025 by rpki-client