Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/e37f95-91d9-44ca-81b5-15cf404dc925/1/lFGzJi_XU62BB8nKEnqS8NA3WHc.mft
File: lFGzJi_XU62BB8nKEnqS8NA3WHc.mft (raw, json)
Hash identifier: yBydw2Sr/Jr4IO8jk7ZKKCFMLCVEzs2elNj3r2DQuAI=
Subject key identifier: 11:0A:F3:95:8B:96:CE:0B:BB:3D:26:0C:58:BB:B8:9E:8C:FF:C9:C7
Authority key identifier: 94:51:B3:26:2F:D7:53:AD:81:07:C9:CA:12:7A:92:F0:D0:37:58:77
Certificate issuer: /CN=9451b3262fd753ad8107c9ca127a92f0d0375877
Certificate serial: 018457AF6FC46F14CEC05AB2AC2180224FB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lFGzJi_XU62BB8nKEnqS8NA3WHc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/e37f95-91d9-44ca-81b5-15cf404dc925/1/lFGzJi_XU62BB8nKEnqS8NA3WHc.mft
Manifest number: 07EF
Signing time: Tue 08 Nov 2022 14:40:25 +0000
Manifest this update: Tue 08 Nov 2022 14:40:25 +0000
Manifest next update: Wed 09 Nov 2022 14:40:25 +0000
Files and hashes: 1: LbK9dYdYzM0g6Qtehtb_iQ99pwk.roa (hash: +uOpigQ9GCaPRETMU/8WxNUa2FpREScuovSvsr4wDLM=)
2: lFGzJi_XU62BB8nKEnqS8NA3WHc.crl (hash: N/J8awQ8C+FJSkyRG7nDh9+rzdweB0JZFrBQsH2DPXM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:57:af:6f:c4:6f:14:ce:c0:5a:b2:ac:21:80:22:4f:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9451b3262fd753ad8107c9ca127a92f0d0375877
Validity
Not Before: Nov 8 14:40:25 2022 GMT
Not After : Nov 9 14:40:25 2022 GMT
Subject: CN=110af3958b96ce0bbb3d260c58bbb89e8cffc9c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:fe:4d:38:4f:23:2f:f2:97:8b:cf:05:ef:6c:
7e:ed:08:1d:ce:06:1d:11:e7:ba:87:15:e4:d8:6f:
13:d2:75:b1:e2:22:4a:01:46:90:6e:82:6b:8a:0d:
41:a4:c2:9a:6e:f8:38:29:a5:f4:83:44:24:db:9c:
11:4d:6e:de:1a:e7:97:3b:bb:42:7c:b2:31:20:c1:
d6:83:60:af:11:ee:ae:0d:0a:f4:cf:9d:ae:03:c1:
db:ee:4f:8d:ac:55:a5:e3:cf:97:11:26:4f:e4:1f:
b7:82:87:50:70:3c:53:3d:e5:22:09:4b:ff:4e:f0:
43:62:c1:18:0e:2d:94:a1:26:cc:47:b3:91:4e:8a:
e9:a2:8c:22:85:f3:3b:c6:b7:e9:a9:f3:23:0a:03:
d4:c1:69:5e:b8:d9:2a:c8:b5:03:b4:89:bf:92:60:
92:29:3a:37:00:93:c2:ce:20:e9:05:c9:33:66:df:
42:02:df:de:c1:30:89:de:e7:af:0b:7c:99:1b:ab:
39:7b:27:35:95:d3:c4:3c:c6:86:64:05:c3:45:b7:
89:1a:05:df:28:b7:18:ce:8d:79:35:93:22:3b:09:
11:a5:c5:b8:1e:83:e7:21:15:0e:1e:a2:f4:c7:93:
78:97:75:9e:d7:8c:c3:45:ca:e0:fc:ac:fc:9a:5d:
92:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:0A:F3:95:8B:96:CE:0B:BB:3D:26:0C:58:BB:B8:9E:8C:FF:C9:C7
X509v3 Authority Key Identifier:
keyid:94:51:B3:26:2F:D7:53:AD:81:07:C9:CA:12:7A:92:F0:D0:37:58:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lFGzJi_XU62BB8nKEnqS8NA3WHc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/e37f95-91d9-44ca-81b5-15cf404dc925/1/lFGzJi_XU62BB8nKEnqS8NA3WHc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/e37f95-91d9-44ca-81b5-15cf404dc925/1/lFGzJi_XU62BB8nKEnqS8NA3WHc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:67:36:58:46:fd:06:0f:98:f4:2b:b5:69:0f:ed:91:27:e1:
d4:7d:fd:c2:f4:d1:6a:ab:ac:09:04:5b:97:a9:7c:a3:bf:52:
e5:08:7d:52:84:82:5a:fa:0a:8c:8a:96:c0:48:d6:fc:4e:9f:
d7:c4:58:1c:d0:85:49:a8:2f:1e:e1:1f:da:39:96:e1:30:19:
cc:0f:4a:fb:29:e6:dc:75:53:e1:d6:d0:81:9f:2b:7c:af:da:
b7:48:7f:7c:0e:61:2e:33:80:f8:6e:d9:eb:86:2f:6d:9c:19:
94:81:79:1b:5e:ea:c8:e3:35:be:34:4e:af:e8:ab:38:b2:d6:
19:8c:b9:1d:b5:99:ab:4f:9b:95:53:5c:5f:01:88:a6:dd:1b:
9c:60:cd:33:3e:0c:1a:29:ec:d9:c6:88:77:8e:88:75:fa:eb:
37:84:ae:60:1c:d4:ed:1c:c0:b0:a3:ab:0b:f3:01:cf:a8:54:
ef:ef:d0:d5:a0:55:13:ff:a9:c6:85:84:32:45:df:ea:55:20:
87:5a:00:a2:26:d6:91:8b:f4:64:83:d7:5c:d6:ab:fd:1b:17:
1f:b8:d5:bf:78:ce:a4:19:2c:50:2a:37:6a:b8:b8:7c:ec:72:
3e:a3:77:0a:af:a5:0a:f0:d4:10:a0:d7:92:58:03:35:cb:05:
b2:20:55:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:24:08 2025 by rpki-client