Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/395b0b-ea14-419e-b2f3-94eb300a7c9f/1/lsyccmIsZLdi5NvnZAXL9yp7Hwg.mft
File: lsyccmIsZLdi5NvnZAXL9yp7Hwg.mft (raw, json)
Hash identifier: LbqNSZhxQ51yeIzJqgvn824oDYowUTpQG1jUM6Gt0HM=
Subject key identifier: 58:09:F1:60:83:2A:C5:46:99:61:AA:DC:4A:40:7B:2D:B3:09:C2:C8
Authority key identifier: 96:CC:9C:72:62:2C:64:B7:62:E4:DB:E7:64:05:CB:F7:2A:7B:1F:08
Certificate issuer: /CN=96cc9c72622c64b762e4dbe76405cbf72a7b1f08
Certificate serial: 018C6D90CE2932DC1BFAB436BFDF05E0E55C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lsyccmIsZLdi5NvnZAXL9yp7Hwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/395b0b-ea14-419e-b2f3-94eb300a7c9f/1/lsyccmIsZLdi5NvnZAXL9yp7Hwg.mft
Manifest number: 0562
Signing time: Fri 15 Dec 2023 13:00:55 +0000
Manifest this update: Fri 15 Dec 2023 13:00:55 +0000
Manifest next update: Sat 16 Dec 2023 13:00:55 +0000
Files and hashes: 1: lsyccmIsZLdi5NvnZAXL9yp7Hwg.crl (hash: 4dWK3ic6ko8Wy260AsNtDrcbQABdtuGJOdsscX0LLic=)
2: qIk9qgKswVnOk-gLqbN4Hqxpy4I.roa (hash: kfGtNVAbpV8OYsdXmk7bn4BM2RB8c2irP7amTHzNBrw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:6d:90:ce:29:32:dc:1b:fa:b4:36:bf:df:05:e0:e5:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96cc9c72622c64b762e4dbe76405cbf72a7b1f08
Validity
Not Before: Dec 15 13:00:55 2023 GMT
Not After : Dec 16 13:00:55 2023 GMT
Subject: CN=5809f160832ac5469961aadc4a407b2db309c2c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:13:8d:ef:98:3b:07:b6:ea:93:bb:1d:1e:b7:
ae:08:ff:e8:3f:8b:0c:58:d3:db:d9:48:75:6f:ae:
e1:1a:f0:0f:0b:91:4b:67:4f:1b:d5:48:4d:ff:b8:
f7:4a:7c:c9:e1:7e:c0:4b:68:1c:8a:f6:b0:d6:9e:
48:ca:2d:65:25:28:a3:52:8d:51:ca:b2:e4:b5:5f:
ab:54:99:ad:ac:46:8a:a3:b5:d3:aa:48:cb:07:cb:
01:3d:ba:cc:f7:8e:87:33:db:e1:92:e6:e3:fc:0c:
f4:e8:d5:32:c7:f9:7a:e3:00:c1:b1:59:f7:02:9c:
93:80:fb:a6:40:2f:78:77:d5:0c:e2:a2:dc:70:06:
bf:39:f0:68:47:0e:59:60:19:3e:f3:18:ff:13:7f:
fe:be:9f:c4:f9:d4:c4:51:01:d1:84:d9:cb:1f:97:
a8:66:56:76:f2:e7:87:eb:ba:a2:bc:82:36:a4:41:
dd:f6:44:39:68:55:44:65:92:92:79:9b:c8:8c:01:
7e:f6:2c:5a:73:52:a0:16:17:8f:80:04:89:31:aa:
3c:9b:49:39:f3:bd:3d:a2:b0:98:27:c3:ed:58:ed:
68:6e:14:c1:a4:61:0e:41:1d:6f:87:fe:77:af:aa:
c8:84:7e:ff:c6:d4:17:d6:07:2c:63:08:24:67:e6:
20:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:09:F1:60:83:2A:C5:46:99:61:AA:DC:4A:40:7B:2D:B3:09:C2:C8
X509v3 Authority Key Identifier:
keyid:96:CC:9C:72:62:2C:64:B7:62:E4:DB:E7:64:05:CB:F7:2A:7B:1F:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lsyccmIsZLdi5NvnZAXL9yp7Hwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/395b0b-ea14-419e-b2f3-94eb300a7c9f/1/lsyccmIsZLdi5NvnZAXL9yp7Hwg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/395b0b-ea14-419e-b2f3-94eb300a7c9f/1/lsyccmIsZLdi5NvnZAXL9yp7Hwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:71:fe:62:16:29:cf:59:9e:c1:7f:6d:cb:ea:cc:b6:1a:ed:
1f:71:15:fc:1e:5f:09:e7:f9:6b:4b:36:eb:04:4c:de:5d:ef:
37:e2:3d:9f:5c:00:f7:90:4b:16:3b:6e:b2:6d:25:a0:00:00:
55:e6:3b:43:24:09:ac:ad:e0:df:ee:48:17:0d:96:21:7e:f3:
5f:17:ff:35:3a:30:5f:f5:8e:28:e6:a8:38:06:52:c6:cc:dc:
68:34:ce:a5:6c:63:f4:7d:9f:5c:61:e3:3a:f9:15:a2:dc:29:
d0:f5:1a:4a:e4:2e:d1:4f:4c:6e:22:81:fc:92:6e:7c:82:12:
08:4c:6b:98:f4:11:eb:20:7c:98:de:b7:e5:9b:cf:53:25:5b:
16:97:4a:fe:15:64:53:6c:d2:6c:ad:1e:fd:79:ab:e1:86:5b:
34:88:90:11:ce:59:78:0f:78:f6:38:87:20:ba:df:05:25:0e:
eb:cc:5b:e8:b3:b7:16:eb:a2:dd:f7:3d:99:94:86:b6:23:97:
12:6b:7f:0e:94:2a:f7:47:ab:df:77:16:48:b2:55:65:01:3e:
bc:06:11:ad:01:89:fc:ec:9a:9f:45:92:0d:39:c5:4e:8b:97:
8c:d9:c4:45:94:1e:a9:8e:d4:42:d5:ba:cc:db:85:8e:ce:e0:
76:37:4f:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 03:03:40 2025 by rpki-client