Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/4c16e9-cc8d-435e-ad81-cd2de77b2ae4/1/lGj8whds8snKZwR6_3acdoK-0aQ.mft
File: lGj8whds8snKZwR6_3acdoK-0aQ.mft (raw, json)
Hash identifier: IVDwI8iE/CtNawL6um74SvbSmA0gwnUkLU0HTml70lc=
Subject key identifier: 29:C3:36:C1:26:F6:96:47:F8:93:F6:C0:4E:7D:B0:06:F2:76:CD:2F
Authority key identifier: 94:68:FC:C2:17:6C:F2:C9:CA:67:04:7A:FF:76:9C:76:82:BE:D1:A4
Certificate issuer: /CN=9468fcc2176cf2c9ca67047aff769c7682bed1a4
Certificate serial: 018BDA949A5F5D7B7BC960922BAC89A0C4A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lGj8whds8snKZwR6_3acdoK-0aQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/4c16e9-cc8d-435e-ad81-cd2de77b2ae4/1/lGj8whds8snKZwR6_3acdoK-0aQ.mft
Manifest number: 087A
Signing time: Fri 17 Nov 2023 00:00:53 +0000
Manifest this update: Fri 17 Nov 2023 00:00:53 +0000
Manifest next update: Sat 18 Nov 2023 00:00:53 +0000
Files and hashes: 1: KtTdGckqjG-ghODDWZFkFu3Kpdg.roa (hash: pKaWP576p0y+Vp845q2Sp5H4GNCnNKazIB6U9gplqms=)
2: lGj8whds8snKZwR6_3acdoK-0aQ.crl (hash: NLGRyutK0JxPp8Wa+QpsZCcYF28hnjNO6QrL5s0zfJg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:da:94:9a:5f:5d:7b:7b:c9:60:92:2b:ac:89:a0:c4:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9468fcc2176cf2c9ca67047aff769c7682bed1a4
Validity
Not Before: Nov 17 00:00:53 2023 GMT
Not After : Nov 18 00:00:53 2023 GMT
Subject: CN=29c336c126f69647f893f6c04e7db006f276cd2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:3b:2d:b6:2b:a9:6f:9e:30:15:fd:40:eb:bc:
03:dc:91:26:54:d7:55:90:d6:d8:c0:b2:49:3c:8e:
4b:02:01:ba:76:ca:08:2b:ef:58:fc:b7:3e:c9:f4:
db:7b:b1:0c:f3:b1:73:03:83:64:9d:37:9d:c9:c3:
67:2a:aa:1e:76:8f:fc:08:05:59:2b:6b:e9:1c:ea:
01:ea:40:17:82:c1:4c:32:2c:91:68:73:5f:1e:2b:
79:7f:15:5d:0a:10:ce:11:ae:49:77:7f:2a:3f:82:
bb:a0:70:9a:5c:dd:d9:26:f7:8e:23:5c:74:8f:41:
24:ad:f0:bd:b8:15:8d:e8:d4:7a:4a:84:13:7e:a5:
77:75:a9:35:ce:ac:0e:a2:dc:0f:4d:7d:fb:7f:66:
16:ac:b4:5f:34:00:4e:b7:d2:55:42:51:9a:5f:59:
75:a2:bf:c4:18:fe:34:45:22:db:5b:db:3e:f7:05:
5f:20:2c:ff:02:05:2f:b0:b3:f9:c0:b5:15:95:fd:
7c:6f:8e:2e:f7:34:3f:5d:2a:dc:24:90:61:c2:c9:
8f:32:a3:39:d9:24:32:f8:ee:c8:d4:94:4e:16:66:
16:9d:01:08:5f:2e:0d:81:ef:42:5e:9a:76:39:c2:
d7:b4:b6:43:fb:95:e0:a4:9a:db:b7:46:6c:ad:ba:
8d:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:C3:36:C1:26:F6:96:47:F8:93:F6:C0:4E:7D:B0:06:F2:76:CD:2F
X509v3 Authority Key Identifier:
keyid:94:68:FC:C2:17:6C:F2:C9:CA:67:04:7A:FF:76:9C:76:82:BE:D1:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lGj8whds8snKZwR6_3acdoK-0aQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/4c16e9-cc8d-435e-ad81-cd2de77b2ae4/1/lGj8whds8snKZwR6_3acdoK-0aQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/4c16e9-cc8d-435e-ad81-cd2de77b2ae4/1/lGj8whds8snKZwR6_3acdoK-0aQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:b1:2b:99:72:cc:a0:ec:b4:cf:63:b3:90:8a:68:ff:eb:0c:
fd:4a:0e:0e:f7:f3:f1:e7:d9:bc:c5:0f:9a:0c:ff:a0:07:5d:
72:9b:a0:8a:3f:df:5f:6a:95:34:4b:aa:e0:45:49:b8:9a:ab:
e7:7c:d9:97:d9:ff:71:db:13:93:7f:74:4c:36:57:c7:0a:8d:
6c:50:e1:32:71:ac:4e:c7:78:a5:16:03:16:9e:a4:16:ac:e7:
7e:8f:d6:b7:ae:b2:88:18:8d:a9:78:00:17:a4:fa:80:79:26:
4e:be:22:61:af:93:01:dd:56:58:07:7a:8a:8e:2e:a6:e1:47:
e3:b1:cb:09:56:f2:67:c7:40:a5:11:5b:1f:5b:d0:aa:15:13:
48:cc:3e:c5:43:b0:35:b5:0e:8b:ff:81:aa:0f:0b:19:93:15:
09:19:56:9b:5b:39:af:44:5b:b2:54:8a:e7:c3:00:cd:49:95:
af:c4:54:bd:77:d7:5b:b4:e0:3d:4b:5c:1d:13:b2:10:15:54:
8d:07:35:07:95:46:f0:b8:b0:f4:14:7c:56:ff:a5:e1:a2:b6:
7e:5c:42:75:04:34:99:cb:56:fd:f3:a5:b1:68:77:2b:e1:e1:
5b:de:1a:3f:27:bc:36:33:94:1f:ff:a7:98:51:63:92:f0:fc:
82:26:49:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:34:20 2025 by rpki-client