Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/1780ce-ca88-4bf9-afb9-8f980fece54e/1/LYJEaf3IV8Hlux9TLOPDTTuW82E.mft
File: LYJEaf3IV8Hlux9TLOPDTTuW82E.mft (raw, json)
Hash identifier: Of41g6QDlOxp+IedeTa20B7uH5my3II07zt6buSUWJQ=
Subject key identifier: E8:7B:C8:62:D5:40:98:F6:C5:91:72:BA:68:6B:08:8B:31:A6:94:75
Authority key identifier: 2D:82:44:69:FD:C8:57:C1:E5:BB:1F:53:2C:E3:C3:4D:3B:96:F3:61
Certificate issuer: /CN=2d824469fdc857c1e5bb1f532ce3c34d3b96f361
Certificate serial: 018C6D5982CE98AD02CCDA681AFAE820606B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LYJEaf3IV8Hlux9TLOPDTTuW82E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/1780ce-ca88-4bf9-afb9-8f980fece54e/1/LYJEaf3IV8Hlux9TLOPDTTuW82E.mft
Manifest number: 0562
Signing time: Fri 15 Dec 2023 12:00:31 +0000
Manifest this update: Fri 15 Dec 2023 12:00:31 +0000
Manifest next update: Sat 16 Dec 2023 12:00:31 +0000
Files and hashes: 1: LYJEaf3IV8Hlux9TLOPDTTuW82E.crl (hash: QbjxF7JYoVoFv4Pr0YgVLjNz0x9PqEsV9okrWGg1Gl8=)
2: mWiAna7aLnQmNOy_1CR3YmbBJ2o.roa (hash: Ts4doYgQlz2rDtsWbHl4vBwIvfJRfoILIId0ERVWaWQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:6d:59:82:ce:98:ad:02:cc:da:68:1a:fa:e8:20:60:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d824469fdc857c1e5bb1f532ce3c34d3b96f361
Validity
Not Before: Dec 15 12:00:31 2023 GMT
Not After : Dec 16 12:00:31 2023 GMT
Subject: CN=e87bc862d54098f6c59172ba686b088b31a69475
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:5a:82:94:b1:f1:31:38:ec:36:66:3e:6a:7a:
ed:f8:9b:9c:68:23:ca:9d:66:af:15:1b:27:7c:0f:
31:33:21:42:74:f9:be:38:ed:c2:21:8a:73:0a:e1:
db:81:d7:1d:c9:5b:45:b4:f0:ef:1b:28:7c:50:b4:
a1:20:d8:12:8e:4a:de:14:38:a9:24:ab:3e:ad:30:
68:01:21:46:b5:75:ba:cd:36:a6:61:65:09:a8:d4:
79:8c:1a:d8:d3:44:14:92:c1:12:20:e2:68:d2:8e:
e5:95:5a:29:4a:9a:9f:62:2d:80:19:7a:0a:57:9e:
eb:61:c9:c0:39:d0:7d:f6:b4:ff:c6:49:d8:24:0e:
ab:7b:92:ac:15:52:82:15:f6:ea:72:c8:6e:78:bc:
1f:de:ca:5b:22:ed:b0:16:76:cc:0c:06:5d:8d:6f:
82:62:90:8a:7f:5b:aa:51:14:f4:5e:59:79:3f:7a:
7b:a9:da:94:09:62:d7:0b:36:8f:03:d0:f9:d4:de:
db:09:61:27:dc:48:7b:b1:b1:5d:bb:71:00:53:0b:
8a:49:dd:45:13:b0:84:a7:65:af:38:12:a0:e4:70:
99:93:19:f6:9b:95:1c:90:19:aa:3b:27:9d:37:3b:
0d:0b:50:0b:d3:15:b7:a9:fa:63:15:85:e2:bd:09:
fa:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:7B:C8:62:D5:40:98:F6:C5:91:72:BA:68:6B:08:8B:31:A6:94:75
X509v3 Authority Key Identifier:
keyid:2D:82:44:69:FD:C8:57:C1:E5:BB:1F:53:2C:E3:C3:4D:3B:96:F3:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LYJEaf3IV8Hlux9TLOPDTTuW82E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/1780ce-ca88-4bf9-afb9-8f980fece54e/1/LYJEaf3IV8Hlux9TLOPDTTuW82E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/1780ce-ca88-4bf9-afb9-8f980fece54e/1/LYJEaf3IV8Hlux9TLOPDTTuW82E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:d3:5d:fb:3c:10:4e:40:25:1e:a1:1d:53:f6:ed:5c:73:82:
63:84:28:c1:5e:05:51:82:10:85:cd:ba:3f:39:7f:8e:a8:ad:
e6:bc:65:57:52:b6:b3:a1:ad:78:e8:6d:c0:28:d2:80:00:16:
16:7e:4c:72:60:90:69:e6:93:5a:4c:88:a1:a7:75:68:52:32:
73:db:b9:75:75:7a:ec:4f:56:61:54:0b:6d:b5:60:de:81:3e:
3e:b1:9d:ee:aa:35:08:6d:32:a8:04:5c:c0:86:bf:d3:be:41:
19:e2:73:4e:e9:05:31:79:29:14:85:fb:06:d2:09:d9:8d:d1:
92:64:98:3c:1d:9a:cf:58:24:c5:56:83:fa:53:5e:bb:d6:b2:
5e:4b:e5:ca:63:c5:a3:8d:6b:b2:10:d0:89:a1:c1:e1:4c:63:
fd:6a:d8:9b:93:44:d9:cd:b1:90:1c:95:08:16:24:e2:53:8b:
83:e9:b1:7a:5a:62:0a:2c:29:52:95:ae:ad:05:b7:43:a7:dc:
29:f7:d7:b4:70:d0:1e:9f:04:07:ca:a3:25:31:0f:61:5c:2d:
a6:63:31:d3:de:dc:b6:1a:26:5e:42:de:c3:77:d5:d9:70:07:
dc:17:de:32:1b:b2:5e:1f:1d:39:30:00:51:eb:2e:e1:f4:df:
da:e2:54:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:52:58 2025 by rpki-client