Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/808302-c983-43d5-a75c-4e4ec42afd02/1/lSMYKrvpBrysyVJMizwUQfrINtE.mft
File: lSMYKrvpBrysyVJMizwUQfrINtE.mft (raw, json)
Hash identifier: rzvPrOPnBj6MCEt6icbj4pjM2mC/yaJOqhX9deLvjgg=
Subject key identifier: 06:04:A8:31:F7:A4:4B:1F:C6:4E:E2:F5:CD:AA:2D:1C:2A:4A:E9:F9
Authority key identifier: 95:23:18:2A:BB:E9:06:BC:AC:C9:52:4C:8B:3C:14:41:FA:C8:36:D1
Certificate issuer: /CN=9523182abbe906bcacc9524c8b3c1441fac836d1
Certificate serial: 018D8C060CFBCA59C43B285E9F05AA89D494
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lSMYKrvpBrysyVJMizwUQfrINtE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/808302-c983-43d5-a75c-4e4ec42afd02/1/lSMYKrvpBrysyVJMizwUQfrINtE.mft
Manifest number: 0861
Signing time: Fri 09 Feb 2024 04:00:23 +0000
Manifest this update: Fri 09 Feb 2024 04:00:23 +0000
Manifest next update: Sat 10 Feb 2024 04:00:23 +0000
Files and hashes: 1: lSMYKrvpBrysyVJMizwUQfrINtE.crl (hash: KsMnBiY8sSz9Nj87h66HG1tQONwWONdkmITPmwnv6i8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:8c:06:0c:fb:ca:59:c4:3b:28:5e:9f:05:aa:89:d4:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9523182abbe906bcacc9524c8b3c1441fac836d1
Validity
Not Before: Feb 9 04:00:23 2024 GMT
Not After : Feb 10 04:00:23 2024 GMT
Subject: CN=0604a831f7a44b1fc64ee2f5cdaa2d1c2a4ae9f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:2b:fa:c5:69:83:55:78:49:ac:ed:7b:e2:30:
1f:d9:ca:78:aa:4b:9e:7b:65:85:d2:fa:a5:e7:a5:
68:d9:d5:71:da:eb:3d:83:f8:e1:de:1e:3e:39:b5:
d7:6b:4f:37:47:31:58:19:9d:10:ff:ba:0b:b9:b9:
65:4c:73:78:ef:dd:4f:99:eb:fd:80:38:eb:49:a5:
48:0e:b8:74:94:a4:4d:d9:5a:76:03:de:39:43:bb:
ec:fe:48:97:a8:04:23:56:1c:fb:2e:e0:d1:26:f5:
a8:4b:09:6f:b4:b2:95:11:40:77:da:f6:95:7b:75:
0b:ac:ec:a8:55:86:b1:3e:b0:79:01:28:54:be:0a:
52:8c:d8:0a:22:e8:e2:23:a7:a1:c9:49:b4:5a:73:
f8:9c:a3:ec:8c:ef:62:f9:57:78:d2:42:11:9c:ba:
af:49:ab:18:c8:eb:0e:ec:ed:7e:39:66:7b:fd:65:
ed:04:d4:54:0a:2b:04:f3:ec:67:79:aa:2b:82:3c:
8b:f9:15:b0:cc:b9:15:9f:96:1f:9d:ef:7b:0e:12:
9f:32:05:76:d3:57:bf:f5:75:66:a7:16:b0:8a:ed:
b7:f4:c6:66:39:38:ca:17:8d:8c:86:c9:e2:6e:e4:
5e:56:26:4d:b5:c7:1a:7d:30:e8:a8:ba:88:14:26:
6f:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:04:A8:31:F7:A4:4B:1F:C6:4E:E2:F5:CD:AA:2D:1C:2A:4A:E9:F9
X509v3 Authority Key Identifier:
keyid:95:23:18:2A:BB:E9:06:BC:AC:C9:52:4C:8B:3C:14:41:FA:C8:36:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lSMYKrvpBrysyVJMizwUQfrINtE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/808302-c983-43d5-a75c-4e4ec42afd02/1/lSMYKrvpBrysyVJMizwUQfrINtE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/808302-c983-43d5-a75c-4e4ec42afd02/1/lSMYKrvpBrysyVJMizwUQfrINtE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:24:60:48:80:ad:9f:1a:dd:43:5e:1f:0a:48:87:94:df:14:
ae:b5:86:87:8f:cd:09:f4:00:1e:ce:86:0b:4a:19:6f:ab:eb:
8c:2e:54:90:e4:23:7a:02:d7:1f:b7:76:09:03:11:89:f7:8d:
eb:18:12:5e:f3:f1:3a:11:d2:4b:73:58:50:e3:07:7b:26:82:
7c:de:ae:6b:cd:35:47:5a:35:7a:d1:ae:0a:ce:26:33:40:a2:
a0:84:1c:1e:de:71:16:91:e8:8d:d6:5a:9e:c8:bd:ac:44:64:
44:48:36:fe:da:7b:85:06:4d:84:93:4a:1c:46:d1:24:9b:fe:
6b:8c:20:e2:a4:fd:1a:a1:be:48:17:f5:7d:f8:21:11:82:a1:
eb:54:c1:b7:08:88:32:12:84:ba:b2:84:b4:19:18:7f:48:fa:
59:15:16:bd:36:48:3d:84:b0:ee:14:61:61:55:bd:be:46:df:
cf:d8:77:c9:40:b9:92:17:10:7d:8b:3d:be:2d:8e:a7:55:d6:
79:96:44:21:5e:ba:1e:cf:bc:a0:32:0e:95:fb:32:e7:54:34:
bf:a9:11:62:45:70:d0:d9:13:17:da:90:42:f3:60:ad:5c:95:
9d:45:25:ff:e2:b8:2b:6b:3f:35:a4:49:17:72:ec:0d:f9:31:
ec:98:2f:fd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY2MBgz7ylnEOyhenwWqidSUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1MjMxODJhYmJlOTA2YmNhY2M5NTI0YzhiM2MxNDQxZmFj
ODM2ZDEwHhcNMjQwMjA5MDQwMDIzWhcNMjQwMjEwMDQwMDIzWjAzMTEwLwYDVQQD
EygwNjA0YTgzMWY3YTQ0YjFmYzY0ZWUyZjVjZGFhMmQxYzJhNGFlOWY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAziv6xWmDVXhJrO174jAf2cp4qkue
e2WF0vql56Vo2dVx2us9g/jh3h4+ObXXa083RzFYGZ0Q/7oLubllTHN4791Pmev9
gDjrSaVIDrh0lKRN2Vp2A945Q7vs/kiXqAQjVhz7LuDRJvWoSwlvtLKVEUB32vaV
e3ULrOyoVYaxPrB5AShUvgpSjNgKIujiI6ehyUm0WnP4nKPsjO9i+Vd40kIRnLqv
SasYyOsO7O1+OWZ7/WXtBNRUCisE8+xneaorgjyL+RWwzLkVn5Yfne97DhKfMgV2
01e/9XVmpxawiu239MZmOTjKF42MhsnibuReViZNtccafTDoqLqIFCZvZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAYEqDH3pEsfxk7i9c2qLRwqSun5MB8GA1UdIwQY
MBaAFJUjGCq76Qa8rMlSTIs8FEH6yDbRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbFNNWUtydnBCcnlzeVZKTWl6d1VRZnJJTnRFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy84MDgzMDItYzk4My00M2Q1LWE3NWMt
NGU0ZWM0MmFmZDAyLzEvbFNNWUtydnBCcnlzeVZKTWl6d1VRZnJJTnRFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy84MDgzMDItYzk4My00M2Q1LWE3NWMtNGU0ZWM0MmFmZDAy
LzEvbFNNWUtydnBCcnlzeVZKTWl6d1VRZnJJTnRFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFyRgSICt
nxrdQ14fCkiHlN8UrrWGh4/NCfQAHs6GC0oZb6vrjC5UkOQjegLXH7d2CQMRifeN
6xgSXvPxOhHSS3NYUOMHeyaCfN6ua801R1o1etGuCs4mM0CioIQcHt5xFpHojdZa
nsi9rERkREg2/tp7hQZNhJNKHEbRJJv+a4wg4qT9GqG+SBf1ffghEYKh61TBtwiI
MhKEurKEtBkYf0j6WRUWvTZIPYSw7hRhYVW9vkbfz9h3yUC5khcQfYs9vi2Op1XW
eZZEIV66Hs+8oDIOlfsy51Q0v6kRYkVw0NkTF9qQQvNgrVyVnUUl/+K4K2s/NaRJ
F3LsDfkx7Jgv/Q==
-----END CERTIFICATE-----
Generated at Sun Apr 20 02:13:37 2025 by rpki-client