Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/cbd3e2-39bd-43bd-a2ee-0fe07e2100b4/1/lSh5Uz1xIE7GyMPqIXrFFlpXb1k.mft
File: lSh5Uz1xIE7GyMPqIXrFFlpXb1k.mft (raw, json)
Hash identifier: LiJgkBHvGvYVg6GwKAyv5wJyJgj99k0ZJVr8a1lYgWo=
Subject key identifier: AA:64:83:CA:65:C8:59:65:CF:98:92:3E:5F:5F:EA:F1:60:3D:38:35
Authority key identifier: 95:28:79:53:3D:71:20:4E:C6:C8:C3:EA:21:7A:C5:16:5A:57:6F:59
Certificate issuer: /CN=952879533d71204ec6c8c3ea217ac5165a576f59
Certificate serial: 01840D5C2699D9091301D37B60E695BA9B8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lSh5Uz1xIE7GyMPqIXrFFlpXb1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/cbd3e2-39bd-43bd-a2ee-0fe07e2100b4/1/lSh5Uz1xIE7GyMPqIXrFFlpXb1k.mft
Manifest number: 0B33
Signing time: Tue 25 Oct 2022 04:17:33 +0000
Manifest this update: Tue 25 Oct 2022 04:17:33 +0000
Manifest next update: Wed 26 Oct 2022 04:17:33 +0000
Files and hashes: 1: lSh5Uz1xIE7GyMPqIXrFFlpXb1k.crl (hash: 8uL5Nx7L6/WhoKGpIavFXHbsmbYf6vYdbKjBX/QLXo0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:0d:5c:26:99:d9:09:13:01:d3:7b:60:e6:95:ba:9b:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=952879533d71204ec6c8c3ea217ac5165a576f59
Validity
Not Before: Oct 25 04:17:33 2022 GMT
Not After : Oct 26 04:17:33 2022 GMT
Subject: CN=aa6483ca65c85965cf98923e5f5feaf1603d3835
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:37:f2:10:fb:fa:b0:8d:30:76:00:30:8f:47:
9f:7c:0f:4e:ce:a2:2d:78:1e:0a:bf:03:c9:bc:67:
59:62:32:b6:dc:93:de:6c:2d:82:15:4c:4b:ba:12:
d7:db:7c:99:c3:dc:25:80:75:9c:fa:cc:b5:36:3b:
78:cb:62:02:e4:23:56:88:b1:2d:aa:91:ad:a3:d5:
98:c0:b8:71:af:d8:1e:2c:22:29:58:8d:b2:b0:81:
00:99:1f:f4:b3:7d:72:f2:34:62:02:cb:00:11:14:
1a:cf:3f:32:80:45:6f:f4:5e:76:10:c5:75:39:d5:
7c:40:48:fa:d9:af:47:9c:8f:4f:86:21:c2:24:9d:
8f:bd:d2:c4:a1:0b:62:18:4b:d6:81:dc:5f:62:5e:
64:68:da:79:68:dd:6a:f0:1a:f5:03:52:3c:d8:ff:
c3:5b:9b:c8:56:6e:1e:63:e4:b9:7e:71:b5:07:b9:
b4:90:95:03:fd:6b:14:aa:0b:57:a1:3c:d9:8a:c3:
42:ae:aa:e1:e7:de:f2:e6:24:86:da:53:27:0b:78:
2c:2d:e1:86:d6:0b:1c:66:18:eb:2a:a4:3e:a4:0d:
51:68:7f:1e:d9:65:30:90:61:d5:35:cb:b6:ed:da:
a1:49:4f:7a:7a:41:fb:79:b5:de:88:60:3a:7d:90:
8f:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:64:83:CA:65:C8:59:65:CF:98:92:3E:5F:5F:EA:F1:60:3D:38:35
X509v3 Authority Key Identifier:
keyid:95:28:79:53:3D:71:20:4E:C6:C8:C3:EA:21:7A:C5:16:5A:57:6F:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lSh5Uz1xIE7GyMPqIXrFFlpXb1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/cbd3e2-39bd-43bd-a2ee-0fe07e2100b4/1/lSh5Uz1xIE7GyMPqIXrFFlpXb1k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/cbd3e2-39bd-43bd-a2ee-0fe07e2100b4/1/lSh5Uz1xIE7GyMPqIXrFFlpXb1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:ef:a8:8a:5c:14:7d:58:49:af:d0:19:3d:0c:ca:11:b6:c6:
3e:61:44:3c:f7:c9:11:8c:70:9b:c8:3e:c3:4e:a5:16:c3:98:
fd:82:17:dc:15:b9:7c:d0:34:d3:dc:28:bb:49:9c:d6:e1:c4:
16:67:01:d8:ea:f4:2a:3c:0c:6b:eb:43:da:39:4b:69:35:07:
d6:ef:71:e7:e0:eb:1d:a2:23:30:21:6f:e7:57:b7:9d:16:d4:
ab:85:6f:51:4c:e7:30:1b:c8:22:43:f9:e2:e9:3a:d8:4e:00:
2b:96:11:63:ca:7a:59:16:1e:b7:a9:be:5d:b7:3d:45:c9:80:
90:f3:c5:8b:d9:b0:c0:6e:72:17:05:6d:84:4f:81:c5:0c:70:
25:a6:f4:c7:75:49:0b:07:ec:5a:a1:26:c4:52:5d:6f:d1:b7:
c9:9a:11:55:17:d6:4f:8b:e6:17:6a:bc:96:3e:fb:de:93:82:
f4:07:c0:ed:68:b1:8f:ec:0f:64:20:ca:f9:7d:d8:57:d2:43:
06:35:57:b4:18:2e:d3:ee:53:98:b8:a3:b3:1e:7f:db:98:48:
a8:2e:a8:9e:1f:16:f9:61:43:1c:61:6f:68:05:93:08:c3:5c:
d3:49:b9:40:8e:90:cc:05:5f:68:ee:25:77:c7:14:9e:8a:f6:
d4:e2:8a:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:51:43 2024 by rpki-client on console-ams.rpki-client.org