Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/8d7233-84ff-4355-8a25-2e73f254816f/1/LEmJB2bpWkn8REsi-qUaBouk_Jw.mft
File: LEmJB2bpWkn8REsi-qUaBouk_Jw.mft (raw, json)
Hash identifier: Xs/hmzVVt/ozH9Lto322j8jTHP9WdbtPvuCeCo2soiI=
Subject key identifier: 11:82:C0:23:06:27:59:76:5F:AD:57:91:F2:22:B6:19:99:28:C7:21
Authority key identifier: 2C:49:89:07:66:E9:5A:49:FC:44:4B:22:FA:A5:1A:06:8B:A4:FC:9C
Certificate issuer: /CN=2c49890766e95a49fc444b22faa51a068ba4fc9c
Certificate serial: 018963BC7882A38A74DAB1AC908790E9E43A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LEmJB2bpWkn8REsi-qUaBouk_Jw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/8d7233-84ff-4355-8a25-2e73f254816f/1/LEmJB2bpWkn8REsi-qUaBouk_Jw.mft
Manifest number: 029F
Signing time: Mon 17 Jul 2023 12:04:03 +0000
Manifest this update: Mon 17 Jul 2023 12:04:03 +0000
Manifest next update: Tue 18 Jul 2023 12:04:03 +0000
Files and hashes: 1: LEmJB2bpWkn8REsi-qUaBouk_Jw.crl (hash: K5s4QNYYJ75fpobiXYAM46CKwfWGlpJPzFz5EiKPENA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:63:bc:78:82:a3:8a:74:da:b1:ac:90:87:90:e9:e4:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c49890766e95a49fc444b22faa51a068ba4fc9c
Validity
Not Before: Jul 17 12:04:03 2023 GMT
Not After : Jul 18 12:04:03 2023 GMT
Subject: CN=1182c023062759765fad5791f222b6199928c721
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:02:ff:67:98:11:b0:26:8a:1a:4f:51:5f:df:
b3:1a:48:1d:01:f4:ab:96:58:c5:52:11:1c:98:2a:
9e:ed:96:8b:86:f5:08:59:95:a3:bc:ed:40:f3:f9:
2b:09:f3:bc:3b:74:0d:66:5f:fd:bd:63:77:7b:3f:
5e:70:70:ba:78:59:f2:08:ed:b6:1a:65:e1:f3:b1:
69:45:de:61:b4:83:6e:97:89:07:df:06:4c:ac:6b:
cb:42:dd:23:c5:5f:d5:64:cf:f4:9a:d4:af:31:7e:
da:09:48:cd:c5:6c:3a:b8:fe:c8:6b:94:e6:c2:5e:
4f:c6:4b:19:a2:2f:2f:64:00:7f:ed:a7:86:14:a6:
13:09:a2:f7:88:5e:4b:19:d7:23:06:3f:9b:d4:32:
42:bb:20:22:b9:c4:d5:cd:f9:09:19:cc:c2:8c:11:
74:93:c8:ef:fe:e5:e9:9b:44:f1:40:12:fe:67:40:
88:b3:fe:9f:6f:3f:92:22:43:9b:0e:08:50:74:69:
d8:9d:83:58:16:99:39:fc:e7:87:8a:77:ac:97:ce:
5a:20:ae:9f:49:b1:46:3a:a7:79:42:fa:04:1b:3a:
ec:b7:23:38:66:2c:74:c7:19:1b:6b:34:56:aa:22:
c3:3f:82:b9:0f:ff:8e:f5:ef:f1:ae:b3:8f:3a:04:
7c:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:82:C0:23:06:27:59:76:5F:AD:57:91:F2:22:B6:19:99:28:C7:21
X509v3 Authority Key Identifier:
keyid:2C:49:89:07:66:E9:5A:49:FC:44:4B:22:FA:A5:1A:06:8B:A4:FC:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LEmJB2bpWkn8REsi-qUaBouk_Jw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/8d7233-84ff-4355-8a25-2e73f254816f/1/LEmJB2bpWkn8REsi-qUaBouk_Jw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/8d7233-84ff-4355-8a25-2e73f254816f/1/LEmJB2bpWkn8REsi-qUaBouk_Jw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:d2:31:bd:d9:af:07:0f:f2:26:36:ee:32:c7:f1:3c:8a:8d:
f0:38:7e:bb:cb:80:18:54:a1:30:b4:39:61:53:3f:c6:25:5d:
62:6c:0c:c8:e9:eb:88:f1:30:7e:1d:37:2d:61:7a:d5:b4:0a:
45:0e:50:ae:8e:01:70:91:b2:e6:d2:05:cd:47:29:98:8b:f3:
d9:a3:7b:52:3b:a3:63:a5:41:16:da:bd:f8:ce:d1:13:e6:c3:
0f:a6:77:95:53:5a:26:34:19:91:1a:f9:a8:c3:99:d6:d5:39:
69:29:61:bc:d0:e5:e9:60:a2:08:18:3e:c2:e3:d7:9c:55:7e:
38:52:27:63:a8:2a:9d:a0:6e:7f:95:7e:ee:70:75:98:6b:fd:
6a:ed:2d:53:63:48:96:b5:46:62:da:10:3f:97:69:77:98:9a:
cb:d8:2b:fa:15:9e:94:7b:bb:0b:34:ac:34:c2:d4:80:cb:54:
84:f2:6d:87:87:98:28:5d:17:af:32:ea:30:c2:52:0d:90:07:
5f:32:87:64:da:d9:be:cd:a9:31:e5:6c:43:d3:3c:9c:8c:79:
c6:8a:25:bb:34:d1:60:60:b2:a9:19:77:2a:50:4f:1c:74:d7:
3d:ed:e4:cb:6a:2f:bd:ba:77:e1:86:18:78:10:43:0a:68:80:
7b:e6:94:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:26:24 2025 by rpki-client