Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/43829a-83d2-46ca-beac-69bc9de7a737/1/lYKen9bqk5lTa8dFIer49297UGA.mft
File: lYKen9bqk5lTa8dFIer49297UGA.mft (raw, json)
Hash identifier: wFPucBTMQW3YcfPEu9ryCgxIktG91ndwf0vllMuUn/0=
Subject key identifier: 21:84:6C:22:6F:7A:07:D4:EA:D1:EA:3B:28:E6:6D:B5:70:7D:70:06
Authority key identifier: 95:82:9E:9F:D6:EA:93:99:53:6B:C7:45:21:EA:F8:F7:6F:7B:50:60
Certificate issuer: /CN=95829e9fd6ea9399536bc74521eaf8f76f7b5060
Certificate serial: 018E9C89DC823D63732AA3C1DC36F2F82AB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lYKen9bqk5lTa8dFIer49297UGA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/43829a-83d2-46ca-beac-69bc9de7a737/1/lYKen9bqk5lTa8dFIer49297UGA.mft
Manifest number: 07B7
Signing time: Tue 02 Apr 2024 02:01:04 +0000
Manifest this update: Tue 02 Apr 2024 02:01:04 +0000
Manifest next update: Wed 03 Apr 2024 02:01:04 +0000
Files and hashes: 1: lYKen9bqk5lTa8dFIer49297UGA.crl (hash: zJbXJanQM1MbjyKbZKVMyf7uUXb7io5xqYjAwa/YrEs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:9c:89:dc:82:3d:63:73:2a:a3:c1:dc:36:f2:f8:2a:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95829e9fd6ea9399536bc74521eaf8f76f7b5060
Validity
Not Before: Apr 2 02:01:04 2024 GMT
Not After : Apr 3 02:01:04 2024 GMT
Subject: CN=21846c226f7a07d4ead1ea3b28e66db5707d7006
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:b2:c1:1c:39:25:c2:dd:7c:0d:57:af:a5:d4:
4d:07:be:e9:c8:9d:08:d2:0d:54:91:17:cd:65:51:
a6:bb:eb:dc:be:66:bb:11:22:49:ca:e4:78:a9:c6:
03:29:e9:57:2b:c0:de:e9:d5:4a:b6:87:af:42:f5:
cf:b9:ac:8e:d8:28:a2:b6:47:44:dc:12:fb:6b:cb:
e9:2a:93:21:7d:fa:56:a4:7f:3b:a6:a2:9c:20:54:
33:c6:9f:9d:78:08:5c:c1:34:ba:b5:fc:68:cb:1b:
50:ba:c8:29:04:e6:59:c8:83:d1:36:41:01:c8:5c:
40:1d:52:60:4e:8f:8b:ed:57:f8:cd:fb:09:a7:91:
8c:6c:ad:ea:b2:99:68:b6:51:e2:d2:91:e5:81:06:
f3:20:32:00:f8:8f:23:6e:22:30:e3:34:10:c2:0d:
dc:4d:c6:ff:56:f9:32:d1:a2:ac:1b:e9:f6:05:b7:
a4:b1:ca:f2:05:28:55:45:c5:07:68:69:af:e4:d1:
32:53:14:04:bd:e4:0c:b6:20:f6:ac:90:72:5e:e3:
ab:1a:97:ff:4c:2e:d1:9a:8b:93:9b:6a:2c:f7:38:
0d:7b:0e:51:fb:81:48:d0:2c:7e:21:c1:a1:c8:4b:
6e:47:5d:de:1a:6f:45:1e:22:b8:74:a0:e6:41:de:
96:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:84:6C:22:6F:7A:07:D4:EA:D1:EA:3B:28:E6:6D:B5:70:7D:70:06
X509v3 Authority Key Identifier:
keyid:95:82:9E:9F:D6:EA:93:99:53:6B:C7:45:21:EA:F8:F7:6F:7B:50:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lYKen9bqk5lTa8dFIer49297UGA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/43829a-83d2-46ca-beac-69bc9de7a737/1/lYKen9bqk5lTa8dFIer49297UGA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/43829a-83d2-46ca-beac-69bc9de7a737/1/lYKen9bqk5lTa8dFIer49297UGA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:94:10:76:d0:c8:c5:35:b8:2c:1e:1f:80:3c:2e:3f:56:3e:
00:34:84:03:1f:4c:80:d0:0f:4c:8a:f8:03:76:fa:4d:11:2d:
91:65:00:b8:c5:e5:a1:b8:81:df:7a:fe:ee:68:7f:34:27:19:
99:b4:c4:44:f0:c8:24:2d:73:a0:a8:82:bc:7d:75:1a:2e:ed:
e1:04:14:7a:55:ea:d4:6b:7a:f5:81:e7:8f:ea:13:2c:5d:09:
c3:07:52:e0:1e:c7:36:f4:c6:9d:95:58:d8:36:04:48:c7:26:
5e:23:6e:48:63:d9:97:6e:17:fb:0f:d7:3d:ce:a2:f0:4e:68:
ca:6a:ff:f1:58:d1:87:c3:5b:e3:49:0d:b8:91:0c:29:39:5e:
33:49:92:95:8c:55:34:6a:40:60:44:c8:a2:df:34:f7:74:6e:
94:d2:33:11:a5:8b:64:f9:e1:66:82:0e:d5:32:eb:d2:50:2f:
3f:2a:ff:86:53:eb:ad:23:b5:a5:9b:8d:9f:28:08:dd:ad:f5:
d0:36:54:89:e3:5b:65:08:76:b2:74:42:44:37:d1:63:1f:d3:
b3:e7:28:48:47:b6:91:20:98:e6:73:ea:de:e0:1d:41:26:b8:
2f:10:8b:85:d3:2b:72:40:71:d6:29:61:b1:66:b5:ae:88:9d:
c0:31:9a:59
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY6cidyCPWNzKqPB3Dby+CqyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1ODI5ZTlmZDZlYTkzOTk1MzZiYzc0NTIxZWFmOGY3NmY3
YjUwNjAwHhcNMjQwNDAyMDIwMTA0WhcNMjQwNDAzMDIwMTA0WjAzMTEwLwYDVQQD
EygyMTg0NmMyMjZmN2EwN2Q0ZWFkMWVhM2IyOGU2NmRiNTcwN2Q3MDA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzLLBHDklwt18DVevpdRNB77pyJ0I
0g1UkRfNZVGmu+vcvma7ESJJyuR4qcYDKelXK8De6dVKtoevQvXPuayO2CiitkdE
3BL7a8vpKpMhffpWpH87pqKcIFQzxp+deAhcwTS6tfxoyxtQusgpBOZZyIPRNkEB
yFxAHVJgTo+L7Vf4zfsJp5GMbK3qsplotlHi0pHlgQbzIDIA+I8jbiIw4zQQwg3c
Tcb/Vvky0aKsG+n2BbekscryBShVRcUHaGmv5NEyUxQEveQMtiD2rJByXuOrGpf/
TC7RmouTm2os9zgNew5R+4FI0Cx+IcGhyEtuR13eGm9FHiK4dKDmQd6WiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCGEbCJvegfU6tHqOyjmbbVwfXAGMB8GA1UdIwQY
MBaAFJWCnp/W6pOZU2vHRSHq+Pdve1BgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbFlLZW45YnFrNWxUYThkRkllcjQ5Mjk3VUdBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC80MzgyOWEtODNkMi00NmNhLWJlYWMt
NjliYzlkZTdhNzM3LzEvbFlLZW45YnFrNWxUYThkRkllcjQ5Mjk3VUdBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC80MzgyOWEtODNkMi00NmNhLWJlYWMtNjliYzlkZTdhNzM3
LzEvbFlLZW45YnFrNWxUYThkRkllcjQ5Mjk3VUdBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVJQQdtDI
xTW4LB4fgDwuP1Y+ADSEAx9MgNAPTIr4A3b6TREtkWUAuMXlobiB33r+7mh/NCcZ
mbTERPDIJC1zoKiCvH11Gi7t4QQUelXq1Gt69YHnj+oTLF0JwwdS4B7HNvTGnZVY
2DYESMcmXiNuSGPZl24X+w/XPc6i8E5oymr/8VjRh8Nb40kNuJEMKTleM0mSlYxV
NGpAYETIot8093RulNIzEaWLZPnhZoIO1TLr0lAvPyr/hlPrrSO1pZuNnygI3a31
0DZUieNbZQh2snRCRDfRYx/Ts+coSEe2kSCY5nPq3uAdQSa4LxCLhdMrckBx1ilh
sWa1roidwDGaWQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:58 2024 by rpki-client on console-ams.rpki-client.org