Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/ca795e-716d-4be0-9cd9-0a6a5041d0aa/1/LnZvfxuh2rmnBg0BLh5Akx78dIg.mft
File: LnZvfxuh2rmnBg0BLh5Akx78dIg.mft (raw, json)
Hash identifier: BpCApcul7HiuhcWxIYIYCk/jhm1L24y6D2WJErhSW5A=
Subject key identifier: 62:EC:85:2A:E8:F8:11:02:EE:94:DC:5E:13:D3:E4:50:CD:42:DF:C3
Authority key identifier: 2E:76:6F:7F:1B:A1:DA:B9:A7:06:0D:01:2E:1E:40:93:1E:FC:74:88
Certificate issuer: /CN=2e766f7f1ba1dab9a7060d012e1e40931efc7488
Certificate serial: 01874AFE69BDB9FFCF34D782B8C2D8BEDCE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LnZvfxuh2rmnBg0BLh5Akx78dIg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/ca795e-716d-4be0-9cd9-0a6a5041d0aa/1/LnZvfxuh2rmnBg0BLh5Akx78dIg.mft
Manifest number: 0D0B
Signing time: Tue 04 Apr 2023 06:39:59 +0000
Manifest this update: Tue 04 Apr 2023 06:39:59 +0000
Manifest next update: Wed 05 Apr 2023 06:39:59 +0000
Files and hashes: 1: LnZvfxuh2rmnBg0BLh5Akx78dIg.crl (hash: 35/2qO2tdtggCkgyfdFn90II/f5TnDC/uuxvgWUSMqE=)
2: pBlChRm5yQvrB2OQudIiKupSooI.roa (hash: +ifbOBWmLNEac9fqKjvL8RlV0D1xTR/enuU2rsReAxI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:4a:fe:69:bd:b9:ff:cf:34:d7:82:b8:c2:d8:be:dc:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e766f7f1ba1dab9a7060d012e1e40931efc7488
Validity
Not Before: Apr 4 06:39:59 2023 GMT
Not After : Apr 5 06:39:59 2023 GMT
Subject: CN=62ec852ae8f81102ee94dc5e13d3e450cd42dfc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:0f:37:7c:e2:8c:47:f6:93:9c:fa:f4:37:b7:
a0:55:e2:b7:a6:c8:e5:ce:bd:c8:d9:c4:45:f7:a9:
ee:67:f3:b2:1a:4a:ae:5f:09:31:84:19:7d:fd:c5:
a1:dc:ac:db:2b:ea:66:67:cf:d0:42:0b:8d:a5:96:
c0:1b:96:74:34:e8:b0:8c:e3:cd:95:02:6d:83:50:
82:ed:d7:7e:a6:15:94:ba:74:10:69:08:b3:dc:38:
2e:31:84:5c:3e:8f:fa:b4:c7:48:7b:82:05:74:3f:
b7:4c:b2:58:4e:97:14:ab:12:48:96:a1:f1:1c:e5:
6e:2f:63:a1:30:55:f9:1d:b0:3f:54:4e:30:b8:c5:
30:70:2f:48:e7:e5:49:cd:a4:25:84:44:fd:b9:a8:
e5:01:ee:79:2e:f7:78:4e:a6:62:4d:c7:6d:b5:a5:
98:ef:ae:06:95:2e:d5:6d:20:60:37:71:cb:4a:f2:
b0:20:17:97:33:0b:67:61:27:5c:69:3d:c4:a4:12:
fe:ff:4e:bf:5d:39:59:86:2e:bb:0f:0a:ee:92:28:
1c:7d:fb:de:c2:e3:d2:81:18:54:f2:e1:54:9f:b3:
dc:e7:3b:82:0a:65:2f:37:cc:61:12:8b:40:8b:c2:
a2:f5:b8:78:f5:63:c1:49:f2:5e:ee:6f:cc:f6:7d:
34:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:EC:85:2A:E8:F8:11:02:EE:94:DC:5E:13:D3:E4:50:CD:42:DF:C3
X509v3 Authority Key Identifier:
keyid:2E:76:6F:7F:1B:A1:DA:B9:A7:06:0D:01:2E:1E:40:93:1E:FC:74:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LnZvfxuh2rmnBg0BLh5Akx78dIg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/ca795e-716d-4be0-9cd9-0a6a5041d0aa/1/LnZvfxuh2rmnBg0BLh5Akx78dIg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/ca795e-716d-4be0-9cd9-0a6a5041d0aa/1/LnZvfxuh2rmnBg0BLh5Akx78dIg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:04:0f:f5:8f:0b:92:06:d7:0d:26:bd:7d:eb:70:81:70:99:
0e:df:98:0e:6a:1b:fc:11:e2:48:04:d1:f7:d8:57:5b:3d:ef:
7e:df:21:ce:da:01:8d:0a:19:26:db:93:b4:ab:f4:fc:8b:40:
a2:93:75:d0:b4:81:67:fa:4d:d7:80:53:7d:d4:90:82:45:97:
76:2f:15:8d:c3:0f:e0:c0:2b:4c:68:03:dd:29:46:75:1f:df:
04:be:28:70:a4:0e:7f:79:c1:86:27:71:1e:bc:a8:8a:32:93:
05:43:27:f8:ff:0e:86:d0:92:e1:bd:fe:55:b0:80:43:71:0e:
ca:77:6d:f8:7d:a5:78:d7:74:a2:9c:12:d0:09:da:c8:88:69:
ee:3e:23:91:eb:04:4e:bf:29:a0:2f:8b:94:57:ac:d2:e6:5e:
21:a0:1a:45:3c:16:15:69:cf:f3:f6:86:b5:27:eb:f0:c5:68:
cf:dd:4e:96:58:3d:1d:b1:96:fd:de:52:ec:b3:8d:17:69:0f:
1d:9b:1a:0b:0a:9e:bd:1e:f3:2f:ce:48:4e:17:3c:b8:bf:c7:
4a:b4:ac:59:f3:72:1f:57:9c:f9:6f:ae:b0:40:35:f6:84:14:
0d:60:cb:e8:40:72:84:09:a1:1d:92:7d:28:87:68:77:4b:76:
b1:8f:27:06
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYdK/mm9uf/PNNeCuMLYvtzhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlNzY2ZjdmMWJhMWRhYjlhNzA2MGQwMTJlMWU0MDkzMWVm
Yzc0ODgwHhcNMjMwNDA0MDYzOTU5WhcNMjMwNDA1MDYzOTU5WjAzMTEwLwYDVQQD
Eyg2MmVjODUyYWU4ZjgxMTAyZWU5NGRjNWUxM2QzZTQ1MGNkNDJkZmMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnA83fOKMR/aTnPr0N7egVeK3psjl
zr3I2cRF96nuZ/OyGkquXwkxhBl9/cWh3KzbK+pmZ8/QQguNpZbAG5Z0NOiwjOPN
lQJtg1CC7dd+phWUunQQaQiz3DguMYRcPo/6tMdIe4IFdD+3TLJYTpcUqxJIlqHx
HOVuL2OhMFX5HbA/VE4wuMUwcC9I5+VJzaQlhET9uajlAe55Lvd4TqZiTcdttaWY
764GlS7VbSBgN3HLSvKwIBeXMwtnYSdcaT3EpBL+/06/XTlZhi67Dwrukigcffve
wuPSgRhU8uFUn7Pc5zuCCmUvN8xhEotAi8Ki9bh49WPBSfJe7m/M9n00YQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGLshSro+BEC7pTcXhPT5FDNQt/DMB8GA1UdIwQY
MBaAFC52b38bodq5pwYNAS4eQJMe/HSIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTG5admZ4dWgycm1uQmcwQkxoNUFreDc4ZElnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC9jYTc5NWUtNzE2ZC00YmUwLTljZDkt
MGE2YTUwNDFkMGFhLzEvTG5admZ4dWgycm1uQmcwQkxoNUFreDc4ZElnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZC9jYTc5NWUtNzE2ZC00YmUwLTljZDktMGE2YTUwNDFkMGFh
LzEvTG5admZ4dWgycm1uQmcwQkxoNUFreDc4ZElnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVwQP9Y8L
kgbXDSa9fetwgXCZDt+YDmob/BHiSATR99hXWz3vft8hztoBjQoZJtuTtKv0/ItA
opN10LSBZ/pN14BTfdSQgkWXdi8VjcMP4MArTGgD3SlGdR/fBL4ocKQOf3nBhidx
HryoijKTBUMn+P8OhtCS4b3+VbCAQ3EOyndt+H2leNd0opwS0AnayIhp7j4jkesE
Tr8poC+LlFes0uZeIaAaRTwWFWnP8/aGtSfr8MVoz91Ollg9HbGW/d5S7LONF2kP
HZsaCwqevR7zL85IThc8uL/HSrSsWfNyH1ec+W+usEA19oQUDWDL6EByhAmhHZJ9
KIdod0t2sY8nBg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:26:17 2024 by rpki-client on console-ams.rpki-client.org