Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/17472b-bd34-4b2b-ac5c-b0d2c72458f3/1/lhp9xzGJSmveuuDQLTLNaKE4z8c.mft
File: lhp9xzGJSmveuuDQLTLNaKE4z8c.mft (raw, json)
Hash identifier: Z8kef3SP+K/ZgzlJx6lRq9rjo6I2DKA+m1+pwY+gE9w=
Subject key identifier: 95:A6:A6:EA:FD:2D:29:1E:DA:19:79:0C:8E:65:47:0E:DF:19:04:B6
Authority key identifier: 96:1A:7D:C7:31:89:4A:6B:DE:BA:E0:D0:2D:32:CD:68:A1:38:CF:C7
Certificate issuer: /CN=961a7dc731894a6bdebae0d02d32cd68a138cfc7
Certificate serial: 018CA9DCE9B8FDFF097769B9055D346B8F3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lhp9xzGJSmveuuDQLTLNaKE4z8c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/17472b-bd34-4b2b-ac5c-b0d2c72458f3/1/lhp9xzGJSmveuuDQLTLNaKE4z8c.mft
Manifest number: 0AC2
Signing time: Wed 27 Dec 2023 06:01:16 +0000
Manifest this update: Wed 27 Dec 2023 06:01:16 +0000
Manifest next update: Thu 28 Dec 2023 06:01:16 +0000
Files and hashes: 1: lhp9xzGJSmveuuDQLTLNaKE4z8c.crl (hash: aU8PKOjn9DERiRP7oqskmCeI87TO9HTZ/9riCeUOfH8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:a9:dc:e9:b8:fd:ff:09:77:69:b9:05:5d:34:6b:8f:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=961a7dc731894a6bdebae0d02d32cd68a138cfc7
Validity
Not Before: Dec 27 06:01:16 2023 GMT
Not After : Dec 28 06:01:16 2023 GMT
Subject: CN=95a6a6eafd2d291eda19790c8e65470edf1904b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:25:bb:a3:cc:1e:02:c0:ea:05:60:87:e3:09:
5c:a9:c5:77:f3:ae:a5:c2:84:ed:dc:18:cd:a8:9a:
3e:2a:d1:d9:25:05:42:5f:eb:c0:86:38:ce:22:61:
48:43:4d:33:08:9c:25:ae:6b:25:4b:ff:f7:a1:e7:
f8:f7:50:38:6d:be:4b:3e:08:15:eb:4a:f3:ab:e3:
1c:8c:c7:60:72:20:d5:30:53:fc:69:95:8c:d0:49:
50:e4:8a:72:5b:c3:ba:9a:37:08:63:f6:17:b2:56:
1c:d6:e9:3b:a9:5e:9a:b3:a7:a5:d3:48:86:8e:8a:
43:47:47:91:cd:7e:38:ea:d3:0c:97:12:5a:ce:50:
f3:2d:37:fd:09:71:c7:5f:dd:10:f4:1f:2b:3d:86:
d8:2a:54:0b:10:93:fd:4f:df:60:0d:71:3d:45:61:
c2:d4:ee:19:46:eb:83:2c:87:0b:01:75:36:80:40:
6d:ad:1f:47:6c:8e:cf:4c:eb:4f:81:ae:9a:67:87:
d2:d8:ac:34:46:f2:d7:74:0a:f4:05:48:32:35:4b:
6e:82:51:81:ce:48:55:b9:9f:8b:87:1e:36:d4:0b:
97:01:c8:66:87:2f:b7:48:9a:98:29:6e:86:3d:3a:
76:03:f4:fc:79:dc:cd:7e:a5:b0:da:5e:13:bf:1d:
d5:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:A6:A6:EA:FD:2D:29:1E:DA:19:79:0C:8E:65:47:0E:DF:19:04:B6
X509v3 Authority Key Identifier:
keyid:96:1A:7D:C7:31:89:4A:6B:DE:BA:E0:D0:2D:32:CD:68:A1:38:CF:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lhp9xzGJSmveuuDQLTLNaKE4z8c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/17472b-bd34-4b2b-ac5c-b0d2c72458f3/1/lhp9xzGJSmveuuDQLTLNaKE4z8c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/17472b-bd34-4b2b-ac5c-b0d2c72458f3/1/lhp9xzGJSmveuuDQLTLNaKE4z8c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:b9:55:86:4a:ad:95:e8:b2:b6:a6:c8:9a:dc:83:c6:4f:57:
0d:47:ab:86:97:85:05:4a:be:02:ab:6f:e8:ca:46:0a:9a:d0:
82:f2:cf:d7:b3:a8:1c:7d:c5:f8:da:eb:0f:11:86:c6:3e:2f:
6d:43:de:7f:b3:7b:bf:76:18:98:9b:f1:ad:ed:77:61:f4:94:
42:7e:67:01:61:25:67:41:ad:ab:91:d1:6b:6a:ad:32:d8:55:
10:bf:ac:6a:ab:5d:a3:a7:b1:ed:9b:17:94:bb:8e:75:01:df:
78:da:79:b6:e1:12:70:32:64:d0:f8:40:99:96:4c:76:71:f0:
42:75:52:d7:87:8e:44:e2:44:7e:3e:ea:b9:86:81:f8:32:1f:
ad:7a:c8:1e:da:60:28:65:44:32:04:82:a6:e5:99:df:cd:0e:
2f:de:b4:0f:67:c1:6b:98:91:d8:89:4c:01:a6:1e:40:ae:36:
e8:97:89:40:ed:d0:a5:d8:77:e4:6b:0a:72:93:09:41:63:d1:
4c:0e:cd:06:91:67:9d:f3:f6:6a:80:e7:8b:4d:c1:fa:2b:90:
55:3d:33:16:d6:b7:9d:0b:86:47:b9:5f:2f:f8:d4:3a:0a:8f:
c7:dc:87:08:70:e4:76:f4:ed:80:a9:38:b0:c6:a8:5c:55:44:
70:df:5e:ca
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYyp3Om4/f8Jd2m5BV00a48+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2MWE3ZGM3MzE4OTRhNmJkZWJhZTBkMDJkMzJjZDY4YTEz
OGNmYzcwHhcNMjMxMjI3MDYwMTE2WhcNMjMxMjI4MDYwMTE2WjAzMTEwLwYDVQQD
Eyg5NWE2YTZlYWZkMmQyOTFlZGExOTc5MGM4ZTY1NDcwZWRmMTkwNGI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoSW7o8weAsDqBWCH4wlcqcV3866l
woTt3BjNqJo+KtHZJQVCX+vAhjjOImFIQ00zCJwlrmslS//3oef491A4bb5LPggV
60rzq+McjMdgciDVMFP8aZWM0ElQ5IpyW8O6mjcIY/YXslYc1uk7qV6as6el00iG
jopDR0eRzX446tMMlxJazlDzLTf9CXHHX90Q9B8rPYbYKlQLEJP9T99gDXE9RWHC
1O4ZRuuDLIcLAXU2gEBtrR9HbI7PTOtPga6aZ4fS2Kw0RvLXdAr0BUgyNUtuglGB
zkhVuZ+Lhx421AuXAchmhy+3SJqYKW6GPTp2A/T8edzNfqWw2l4Tvx3VeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJWmpur9LSke2hl5DI5lRw7fGQS2MB8GA1UdIwQY
MBaAFJYafccxiUpr3rrg0C0yzWihOM/HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbGhwOXh6R0pTbXZldXVEUUxUTE5hS0U0ejhjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My8xNzQ3MmItYmQzNC00YjJiLWFjNWMt
YjBkMmM3MjQ1OGYzLzEvbGhwOXh6R0pTbXZldXVEUUxUTE5hS0U0ejhjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85My8xNzQ3MmItYmQzNC00YjJiLWFjNWMtYjBkMmM3MjQ1OGYz
LzEvbGhwOXh6R0pTbXZldXVEUUxUTE5hS0U0ejhjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdLlVhkqt
leiytqbImtyDxk9XDUerhpeFBUq+Aqtv6MpGCprQgvLP17OoHH3F+NrrDxGGxj4v
bUPef7N7v3YYmJvxre13YfSUQn5nAWElZ0Gtq5HRa2qtMthVEL+saqtdo6ex7ZsX
lLuOdQHfeNp5tuEScDJk0PhAmZZMdnHwQnVS14eOROJEfj7quYaB+DIfrXrIHtpg
KGVEMgSCpuWZ380OL960D2fBa5iR2IlMAaYeQK426JeJQO3Qpdh35GsKcpMJQWPR
TA7NBpFnnfP2aoDni03B+iuQVT0zFta3nQuGR7lfL/jUOgqPx9yHCHDkdvTtgKk4
sMaoXFVEcN9eyg==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:57:42 2025 by rpki-client