Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/3a749d-519b-4319-b434-6426667f0141/1/LvKZ1K2_ieYMNf42FZe12PMl_0w.mft
File: LvKZ1K2_ieYMNf42FZe12PMl_0w.mft (raw, json)
Hash identifier: G5TlrsonhDrZqk2KikVHmmmmX6ghTxYGoyCs9XjZI54=
Subject key identifier: DB:FC:E9:52:DD:FF:7F:7C:32:2B:3E:CE:42:3E:81:38:1F:4C:A3:61
Authority key identifier: 2E:F2:99:D4:AD:BF:89:E6:0C:35:FE:36:15:97:B5:D8:F3:25:FF:4C
Certificate issuer: /CN=2ef299d4adbf89e60c35fe361597b5d8f325ff4c
Certificate serial: 0185BF2FF9B9DD3420F05F4559B6638DCA5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LvKZ1K2_ieYMNf42FZe12PMl_0w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/3a749d-519b-4319-b434-6426667f0141/1/LvKZ1K2_ieYMNf42FZe12PMl_0w.mft
Manifest number: 0968
Signing time: Tue 17 Jan 2023 10:04:30 +0000
Manifest this update: Tue 17 Jan 2023 10:04:30 +0000
Manifest next update: Wed 18 Jan 2023 10:04:30 +0000
Files and hashes: 1: LvKZ1K2_ieYMNf42FZe12PMl_0w.crl (hash: iofvfXjKGj4IWVdRmODBcc/60oXM8B13d31Eh0o6LME=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:bf:2f:f9:b9:dd:34:20:f0:5f:45:59:b6:63:8d:ca:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ef299d4adbf89e60c35fe361597b5d8f325ff4c
Validity
Not Before: Jan 17 10:04:30 2023 GMT
Not After : Jan 18 10:04:30 2023 GMT
Subject: CN=dbfce952ddff7f7c322b3ece423e81381f4ca361
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:50:c3:15:96:ea:1c:b5:cc:5d:a0:83:2f:63:
66:ea:37:5b:04:d7:7b:bb:32:3a:3b:37:73:74:38:
e1:f6:dc:3e:16:ac:73:60:1a:10:1d:36:2f:0d:5a:
e8:60:a9:b5:11:3b:75:1c:b2:6c:75:9d:b7:b6:f2:
b9:09:99:68:01:c0:ea:54:42:1b:bb:98:83:b1:f8:
a5:d7:22:db:07:cc:a4:2f:ae:4b:9b:cb:bd:92:f1:
37:e3:5f:d2:9a:92:09:27:3a:6b:f8:49:cb:3e:87:
75:54:1c:88:a6:aa:c4:f6:3b:e4:de:0c:22:42:17:
a4:08:dd:c3:fe:3f:99:2f:2a:d2:0b:75:f7:cf:f3:
10:ea:04:0a:99:83:a9:74:07:1e:4f:4b:3b:c9:9e:
39:95:65:87:10:9f:b8:bf:15:bc:e1:1f:9a:23:a8:
9f:a0:8c:13:cd:91:f1:5d:69:f4:63:f6:ad:10:36:
c9:10:e4:60:c8:17:e3:fd:32:1c:6a:73:f8:5f:37:
8e:50:ea:d8:16:f6:05:7a:5a:f5:70:df:26:21:d4:
35:9b:e3:b6:b8:1a:e1:7c:df:b7:c2:56:5b:a0:ae:
4b:fc:92:64:8d:e4:2a:24:0d:f0:4e:62:52:53:89:
17:84:25:6a:c4:3c:72:cc:7d:75:e7:2e:69:8e:ef:
74:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:FC:E9:52:DD:FF:7F:7C:32:2B:3E:CE:42:3E:81:38:1F:4C:A3:61
X509v3 Authority Key Identifier:
keyid:2E:F2:99:D4:AD:BF:89:E6:0C:35:FE:36:15:97:B5:D8:F3:25:FF:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LvKZ1K2_ieYMNf42FZe12PMl_0w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/3a749d-519b-4319-b434-6426667f0141/1/LvKZ1K2_ieYMNf42FZe12PMl_0w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/3a749d-519b-4319-b434-6426667f0141/1/LvKZ1K2_ieYMNf42FZe12PMl_0w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:a5:83:9a:a1:2e:5e:91:6c:13:1f:25:4a:52:be:3d:8a:e6:
48:99:76:c6:b5:25:29:43:62:f2:e9:92:38:38:6e:6d:e7:c1:
3f:f3:6f:55:9b:22:bf:9e:a0:c9:8c:19:cc:e3:fe:6f:7f:e1:
e0:8b:dc:09:20:8e:b7:e9:45:18:79:2b:c7:b3:dc:0e:c8:17:
9c:a0:86:61:69:a1:c4:f3:61:d1:e0:3d:6b:58:9e:c3:4b:05:
33:d8:14:f5:f3:03:ee:02:43:89:04:f3:8b:c4:94:fc:f4:e8:
dc:1f:89:1e:69:e7:f1:89:07:04:50:27:53:c9:0e:6e:e7:fc:
73:51:0a:9f:20:6c:37:ae:91:af:91:a1:e9:fd:31:c6:f0:51:
76:48:7f:83:5f:38:3f:dc:10:cc:ee:92:68:50:05:1d:25:b9:
1b:f9:98:d8:78:e9:a5:1b:2c:2e:a0:c1:9c:eb:fd:88:66:29:
4f:66:eb:39:a0:d3:f4:b4:6d:bc:85:93:38:11:54:3d:52:75:
85:4b:e7:b0:35:8e:1a:c4:4a:e4:6c:1d:44:c6:cd:51:69:2e:
86:a2:f5:1f:69:76:86:a8:61:b0:73:b1:79:f8:3c:4c:8e:e1:
61:e9:46:3b:2a:ef:29:02:75:d4:fb:32:0a:bb:d9:54:af:5e:
88:15:61:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 06:41:17 2025 by rpki-client