Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/e83290-277a-4c39-9301-390791a1507f/1/lWLCDg-8UJrXOb-MDhxeDqJaqlU.mft
File: lWLCDg-8UJrXOb-MDhxeDqJaqlU.mft (raw, json)
Hash identifier: PMUYrFqpNfa/nxnizAetkuRhR829LLfHJzlUMDFW15k=
Subject key identifier: 5D:0D:A8:C1:7B:AF:34:04:15:DC:54:BE:37:EB:BE:15:89:E8:07:CB
Authority key identifier: 95:62:C2:0E:0F:BC:50:9A:D7:39:BF:8C:0E:1C:5E:0E:A2:5A:AA:55
Certificate issuer: /CN=9562c20e0fbc509ad739bf8c0e1c5e0ea25aaa55
Certificate serial: 0183C1AA6ACE6125BA7ACB81357D82ECFC8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lWLCDg-8UJrXOb-MDhxeDqJaqlU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/e83290-277a-4c39-9301-390791a1507f/1/lWLCDg-8UJrXOb-MDhxeDqJaqlU.mft
Manifest number: 0A3F
Signing time: Mon 10 Oct 2022 11:31:54 +0000
Manifest this update: Mon 10 Oct 2022 11:31:54 +0000
Manifest next update: Tue 11 Oct 2022 11:31:54 +0000
Files and hashes: 1: lWLCDg-8UJrXOb-MDhxeDqJaqlU.crl (hash: eEOZexb2Z/qIxhiGqxx0QHkqWgAs7o8Qcq//E5an/74=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:c1:aa:6a:ce:61:25:ba:7a:cb:81:35:7d:82:ec:fc:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9562c20e0fbc509ad739bf8c0e1c5e0ea25aaa55
Validity
Not Before: Oct 10 11:31:54 2022 GMT
Not After : Oct 11 11:31:54 2022 GMT
Subject: CN=5d0da8c17baf340415dc54be37ebbe1589e807cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:57:75:ea:0a:91:8b:56:62:8a:59:c8:30:e2:
be:83:83:8b:5d:d8:34:fc:3b:62:15:2a:6e:22:28:
e4:63:1c:f1:b4:60:3c:e8:5d:64:ed:88:08:ae:81:
82:a4:12:aa:81:a7:c6:24:3d:e2:e3:12:7f:df:41:
f2:b6:c1:75:41:7d:e9:11:44:32:1a:5e:96:bf:14:
96:87:8c:f4:4d:98:1a:f0:6f:17:78:49:f0:37:b7:
91:27:04:72:90:4d:33:82:2a:4f:3f:75:35:04:6d:
e5:57:25:fe:9b:6c:e5:3b:b3:90:cd:d8:39:28:98:
1b:d4:f3:26:e3:e9:ab:c6:97:c0:88:fb:f9:2d:f9:
e0:7d:c3:36:3f:89:2f:fa:26:30:d2:90:72:36:eb:
19:75:8c:67:ab:22:26:90:47:2c:dd:59:57:3d:e6:
b5:de:d1:48:d1:d7:69:32:b0:d4:d9:0a:98:21:b7:
b4:3a:da:03:07:30:65:60:2b:40:17:57:59:3c:1d:
3b:99:dc:e4:5a:28:ca:15:1e:5c:97:f5:4e:0d:14:
83:64:7b:c7:2a:86:fc:87:44:7b:85:9b:5e:4a:a2:
94:54:2c:c8:1b:da:14:30:86:84:ac:c3:6d:eb:76:
f9:bf:a0:d7:28:d8:76:2d:02:b9:10:c6:cc:c3:9a:
5d:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:0D:A8:C1:7B:AF:34:04:15:DC:54:BE:37:EB:BE:15:89:E8:07:CB
X509v3 Authority Key Identifier:
keyid:95:62:C2:0E:0F:BC:50:9A:D7:39:BF:8C:0E:1C:5E:0E:A2:5A:AA:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lWLCDg-8UJrXOb-MDhxeDqJaqlU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/e83290-277a-4c39-9301-390791a1507f/1/lWLCDg-8UJrXOb-MDhxeDqJaqlU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/e83290-277a-4c39-9301-390791a1507f/1/lWLCDg-8UJrXOb-MDhxeDqJaqlU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:79:69:b7:7b:0c:29:aa:d9:28:17:bc:13:c9:e1:69:8a:33:
96:14:10:9a:e3:ff:58:a1:7f:c5:a5:91:95:e7:3d:31:f0:a4:
97:0d:24:cf:02:55:08:3e:4c:66:59:f7:09:ab:82:d8:02:a0:
26:7f:95:87:05:aa:77:6d:f0:82:87:f2:11:00:b7:94:c3:45:
a4:73:7a:c0:b7:09:25:ce:57:d9:69:35:bf:68:52:e5:53:6a:
63:38:41:c0:eb:cd:3a:8d:1b:f9:8a:3b:8d:c3:cd:4c:6a:98:
d6:5b:7a:c0:95:5b:76:02:31:4e:a5:ea:39:5c:ab:29:ed:a1:
19:5a:94:20:c4:fd:ca:e3:6c:4d:d5:32:71:48:56:d0:fb:ad:
df:10:52:97:25:82:95:6f:3b:44:3a:d5:79:3e:af:3c:82:f5:
de:1b:ad:a3:a7:07:fb:94:df:bb:a0:b7:56:65:65:60:52:73:
fe:05:55:3f:21:4f:51:e0:73:92:e4:57:73:2f:d8:f6:d4:f7:
85:c1:c5:18:7a:07:1b:eb:f2:f9:fc:93:d2:61:c4:f2:02:e9:
74:f2:98:b4:00:80:f6:7f:2d:08:4c:70:3f:3f:ec:72:0c:71:
a9:2d:07:e1:e2:33:86:19:d4:ea:f3:17:a5:f3:88:c9:8d:3a:
59:c5:68:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 11 05:10:40 2025 by rpki-client