Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/843281-3712-419b-8e15-9ae9e3c7439a/1/lsE5kO_a65htmv2oLF386CK0-TA.mft
File: lsE5kO_a65htmv2oLF386CK0-TA.mft (raw, json)
Hash identifier: mPJoWMKzjn6B7fs1nlrsuUXsKbAxScgQoPcT39kYYgE=
Subject key identifier: 12:72:44:83:00:72:CC:90:9B:45:AA:B8:C2:E8:A5:76:B5:1B:E3:7D
Authority key identifier: 96:C1:39:90:EF:DA:EB:98:6D:9A:FD:A8:2C:5D:FC:E8:22:B4:F9:30
Certificate issuer: /CN=96c13990efdaeb986d9afda82c5dfce822b4f930
Certificate serial: 01853776A494F4AA78672B63117E3F24A05D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lsE5kO_a65htmv2oLF386CK0-TA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/843281-3712-419b-8e15-9ae9e3c7439a/1/lsE5kO_a65htmv2oLF386CK0-TA.mft
Manifest number: 0666
Signing time: Thu 22 Dec 2022 01:33:20 +0000
Manifest this update: Thu 22 Dec 2022 01:33:20 +0000
Manifest next update: Fri 23 Dec 2022 01:33:20 +0000
Files and hashes: 1: lsE5kO_a65htmv2oLF386CK0-TA.crl (hash: +y0Zwuq36s2L2GjVInHQVyKuGiFi12V0gLvVvwsXXPI=)
2: tAQWZRF3-alfsDd49cUs_dAHiZU.roa (hash: mNahYU5bSbbU8hWRfe59G8C/TITpX+fK8xFO+zWIIQU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:37:76:a4:94:f4:aa:78:67:2b:63:11:7e:3f:24:a0:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96c13990efdaeb986d9afda82c5dfce822b4f930
Validity
Not Before: Dec 22 01:33:20 2022 GMT
Not After : Dec 23 01:33:20 2022 GMT
Subject: CN=127244830072cc909b45aab8c2e8a576b51be37d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:ba:34:19:27:70:4c:15:67:19:83:61:dd:c6:
d6:17:a4:5d:9f:3b:ae:4e:71:38:2e:4b:77:63:45:
a5:64:ef:f0:d9:0a:5f:50:2a:8c:90:32:64:53:d0:
bd:ad:1e:67:95:71:4c:29:5c:05:66:5d:de:85:0a:
86:5d:30:d7:ea:45:a1:6f:75:a8:df:7a:93:07:66:
45:1d:b9:88:1a:b2:6a:e3:53:2a:27:c4:b6:a5:ac:
09:1f:b9:f0:05:95:bd:2b:07:5a:63:89:ee:a3:39:
0b:77:21:72:6b:af:24:f5:31:4f:38:f6:71:5b:6a:
bf:7b:37:3c:af:49:42:ac:3e:36:f9:3e:66:29:85:
67:a4:f6:f5:ea:c0:5f:66:01:29:f3:47:e3:cf:bf:
38:49:08:01:0a:9b:ca:27:00:91:ab:27:ea:7a:9b:
65:34:6d:d7:5b:1f:c8:2a:f2:f4:e9:17:dc:95:ba:
7b:76:c2:a2:e6:53:92:ab:fc:9f:1c:8d:6b:03:6c:
9f:8b:57:c7:37:ec:4e:55:dd:cb:21:69:85:94:3e:
a5:52:c4:99:9c:e2:9d:db:f1:bc:6e:c2:d5:48:fe:
0b:28:8e:24:61:35:97:ce:4e:55:48:be:4e:d4:98:
2e:ac:f5:e9:50:fa:ca:c6:a4:d0:11:66:85:37:e0:
43:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:72:44:83:00:72:CC:90:9B:45:AA:B8:C2:E8:A5:76:B5:1B:E3:7D
X509v3 Authority Key Identifier:
keyid:96:C1:39:90:EF:DA:EB:98:6D:9A:FD:A8:2C:5D:FC:E8:22:B4:F9:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lsE5kO_a65htmv2oLF386CK0-TA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/843281-3712-419b-8e15-9ae9e3c7439a/1/lsE5kO_a65htmv2oLF386CK0-TA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/843281-3712-419b-8e15-9ae9e3c7439a/1/lsE5kO_a65htmv2oLF386CK0-TA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:93:45:3e:84:82:24:b2:0d:9d:83:6c:d7:1e:a4:89:88:c8:
0d:ab:7b:2c:a8:c9:94:27:36:c1:b1:ef:63:00:16:8d:59:ac:
0c:c0:e4:0e:1d:f6:a8:7e:a9:1b:ec:d9:15:2e:7b:2b:94:f1:
91:0b:36:12:3d:b4:fe:27:e0:d8:c4:46:fb:03:e2:c6:22:55:
76:8b:56:e4:d4:9f:d3:50:18:c1:8a:71:06:de:8e:95:71:7f:
e9:8a:0f:50:95:33:bd:49:67:03:73:69:38:3b:a9:d2:15:8e:
bf:7f:37:37:36:ab:44:4d:8e:95:3d:aa:3a:68:f7:17:35:60:
a9:48:3d:fc:84:68:b0:c5:24:f5:74:0b:10:87:8a:40:6e:ba:
fc:11:31:77:6a:d1:35:27:f9:da:1a:54:ba:4f:49:59:3b:ab:
83:89:ad:71:55:fa:e8:4e:95:fd:78:23:83:45:ce:d0:53:03:
6c:4e:27:6c:df:bf:9d:14:96:ec:de:dc:ba:c1:0e:79:97:4a:
9f:3b:af:cb:ef:6b:a5:de:b5:7f:63:2a:08:84:3b:c3:fd:f3:
e1:8f:8b:e9:ac:e5:5d:ec:71:05:81:de:a0:fe:f3:05:f1:e1:
ad:6f:2a:50:4f:92:ab:09:81:36:5a:02:b2:3c:43:89:39:20:
7a:0a:8b:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:26 2024 by rpki-client on console-fra.rpki-client.org