Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/d98481-727f-48e8-8e4c-cef4cccd490c/1/lMWh2nAnTj3wLFIIYD381KnvUd0.mft
File: lMWh2nAnTj3wLFIIYD381KnvUd0.mft (raw, json)
Hash identifier: ZShKMW18C9lFtBpUUew5n5mGboeylys9NnpAQsjuwzY=
Subject key identifier: EA:3E:28:0E:F3:71:72:34:0F:70:A9:A8:FA:E8:5A:DA:19:A5:C1:E6
Authority key identifier: 94:C5:A1:DA:70:27:4E:3D:F0:2C:52:08:60:3D:FC:D4:A9:EF:51:DD
Certificate issuer: /CN=94c5a1da70274e3df02c5208603dfcd4a9ef51dd
Certificate serial: 0183A70E8674377CA82E25B70BBFEC2E1363
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lMWh2nAnTj3wLFIIYD381KnvUd0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/d98481-727f-48e8-8e4c-cef4cccd490c/1/lMWh2nAnTj3wLFIIYD381KnvUd0.mft
Manifest number: 0AF8
Signing time: Wed 05 Oct 2022 07:31:30 +0000
Manifest this update: Wed 05 Oct 2022 07:31:30 +0000
Manifest next update: Thu 06 Oct 2022 07:31:30 +0000
Files and hashes: 1: lMWh2nAnTj3wLFIIYD381KnvUd0.crl (hash: 8udHkXThehCgzoGGqX4N+u1rtU/ERJVuHuYQK/uS+RU=)
2: us8tnJgK55kIvp26bCb6nhP6tTM.roa (hash: R/y0YK4LYfxWwQPR+z2yCIzHZfElw2rjUSZP8IVai3M=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:a7:0e:86:74:37:7c:a8:2e:25:b7:0b:bf:ec:2e:13:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94c5a1da70274e3df02c5208603dfcd4a9ef51dd
Validity
Not Before: Oct 5 07:31:30 2022 GMT
Not After : Oct 6 07:31:30 2022 GMT
Subject: CN=ea3e280ef37172340f70a9a8fae85ada19a5c1e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:20:6e:a2:9f:0e:ca:02:70:5b:81:d9:f1:ab:
a7:47:11:74:c6:a7:e2:88:13:cf:dd:8b:af:75:f2:
a0:d6:20:38:3c:9b:a9:26:d0:de:cd:db:92:50:3d:
56:fd:80:8d:64:cf:8f:9b:51:f5:f2:0c:af:cc:13:
79:3f:1e:ac:7b:5a:d5:9d:64:43:b6:6d:7e:55:5f:
0d:71:c9:be:f6:7d:9e:e4:79:ff:c6:e9:23:a6:08:
a0:72:e7:ab:00:34:ab:b4:8d:bd:92:91:96:fc:55:
da:32:e7:3b:6c:53:fa:35:30:75:45:3a:93:9d:ec:
b8:0d:fc:d1:a9:fe:c2:43:cd:bc:db:8a:89:56:9e:
50:c3:a8:c4:37:2f:c2:57:c7:59:51:f7:c8:8f:85:
58:1a:cd:6d:a2:a9:04:09:db:f5:c2:1d:34:28:84:
e0:1e:f7:c9:4c:c7:54:d5:d3:0e:9b:cc:40:2b:97:
6c:34:19:f1:8b:80:7a:8a:55:11:76:79:5e:74:2f:
81:a3:6f:79:5c:8d:33:4f:ad:9d:2c:71:93:fe:58:
ad:c8:70:e0:c8:89:b4:71:11:68:78:d7:2d:35:77:
60:25:29:20:3b:e4:51:f9:d7:3b:89:23:8d:b0:45:
6b:ca:f8:1e:9e:fd:b6:0e:23:14:ad:16:8e:ad:f8:
c6:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:3E:28:0E:F3:71:72:34:0F:70:A9:A8:FA:E8:5A:DA:19:A5:C1:E6
X509v3 Authority Key Identifier:
keyid:94:C5:A1:DA:70:27:4E:3D:F0:2C:52:08:60:3D:FC:D4:A9:EF:51:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lMWh2nAnTj3wLFIIYD381KnvUd0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/d98481-727f-48e8-8e4c-cef4cccd490c/1/lMWh2nAnTj3wLFIIYD381KnvUd0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/d98481-727f-48e8-8e4c-cef4cccd490c/1/lMWh2nAnTj3wLFIIYD381KnvUd0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:f0:2c:a3:19:80:01:c6:51:84:23:09:4c:c8:b3:b6:63:f9:
90:47:ec:a6:34:1e:8c:b3:22:47:49:31:87:b6:e2:bb:5f:64:
8b:7f:37:03:e4:fd:c2:e7:70:d3:9a:b7:5d:73:fc:6f:44:f7:
12:bc:67:f1:f4:83:08:73:14:a2:84:32:29:cb:13:2f:07:5b:
b7:04:99:66:93:e4:73:85:bf:fb:f2:21:33:24:88:e7:58:0f:
96:96:db:c3:4c:ae:ca:c1:b0:8a:08:3c:7d:0c:7b:bf:47:31:
62:08:4d:f2:53:8c:7f:5b:d6:40:aa:3a:62:0c:ae:51:52:52:
ac:65:77:02:8f:15:58:c8:12:9b:52:84:7a:87:c7:56:90:f4:
1d:72:4c:8f:4f:25:4e:3f:9d:e8:b8:a1:7c:ca:c4:1b:58:04:
67:e8:a8:71:1d:c3:f6:3f:b5:5e:be:22:40:92:7d:d0:12:19:
a4:c9:df:3e:4e:20:06:1c:54:cb:0d:8b:da:b4:cb:c5:bd:39:
c4:27:0e:d0:13:4f:93:c9:e6:1f:8b:25:42:ad:e4:55:16:69:
7e:26:91:5b:f7:92:36:84:79:07:5d:1c:a1:1b:63:e1:39:6c:
33:23:e5:1e:98:17:f3:f5:f2:02:d8:47:ee:71:8f:0e:b0:53:
3a:7b:14:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:39:09 2025 by rpki-client