Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/9a29bd-11c4-4838-bb3a-411f8f7be744/1/lhbvJyeDCdIis-yXM05Kg61Ilxs.mft
File: lhbvJyeDCdIis-yXM05Kg61Ilxs.mft (raw, json)
Hash identifier: n8EFVzCLDR86YZ+L9BfcoxZQ03tRSJ10O0awQENLr+I=
Subject key identifier: 13:9D:DD:08:54:4C:8D:D7:E1:94:DD:6A:D1:F1:C6:26:8B:39:35:66
Authority key identifier: 96:16:EF:27:27:83:09:D2:22:B3:EC:97:33:4E:4A:83:AD:48:97:1B
Certificate issuer: /CN=9616ef27278309d222b3ec97334e4a83ad48971b
Certificate serial: 018C5BF7AD3A9115A9D8F76062661C3DA237
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lhbvJyeDCdIis-yXM05Kg61Ilxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/9a29bd-11c4-4838-bb3a-411f8f7be744/1/lhbvJyeDCdIis-yXM05Kg61Ilxs.mft
Manifest number: 085A
Signing time: Tue 12 Dec 2023 03:00:07 +0000
Manifest this update: Tue 12 Dec 2023 03:00:07 +0000
Manifest next update: Wed 13 Dec 2023 03:00:07 +0000
Files and hashes: 1: lhbvJyeDCdIis-yXM05Kg61Ilxs.crl (hash: zocdkwjsDCk8C9nGYdmJrj5BDPzJ/+WZNpTeQJZ2RU0=)
2: ukq8TKCtTUR1jOsQxWQdBiUvXSA.roa (hash: d6i471C6Z0zWvM/5CdjRB0m3yCyef1FGO04UxzgRB68=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:5b:f7:ad:3a:91:15:a9:d8:f7:60:62:66:1c:3d:a2:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9616ef27278309d222b3ec97334e4a83ad48971b
Validity
Not Before: Dec 12 03:00:07 2023 GMT
Not After : Dec 13 03:00:07 2023 GMT
Subject: CN=139ddd08544c8dd7e194dd6ad1f1c6268b393566
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:de:6b:5e:4f:aa:76:16:c0:7e:74:ec:3d:64:
1b:27:e4:ac:04:6f:16:3a:a1:f1:b3:3b:52:a6:37:
fb:a1:16:76:d2:70:ef:35:bf:68:07:49:bb:6f:fe:
60:60:a7:8e:18:52:86:4d:c9:0e:90:af:cf:e7:e1:
c2:ae:85:29:79:cc:45:89:89:94:32:db:17:a5:98:
83:08:24:be:b2:ee:9f:08:4f:cd:80:f8:40:49:17:
c1:4d:c5:d0:9b:88:56:ce:47:bf:7a:28:0c:43:d8:
99:38:8c:5b:3a:72:1d:63:2b:35:53:43:aa:97:8b:
2f:4c:c4:6b:5f:ce:6a:e5:98:67:ac:13:b7:b1:6f:
d7:f5:78:0a:15:85:b7:47:9a:aa:b2:24:88:e1:3e:
32:7c:f6:92:73:3c:7c:69:15:a1:14:00:6f:74:f7:
82:88:1d:07:cb:5d:2f:73:78:01:ee:3f:7d:49:7b:
cb:98:cf:d8:74:b4:d5:17:b8:1a:4a:3c:c2:e0:5a:
43:6e:06:9e:c2:b2:52:00:59:a4:55:a9:79:14:ea:
12:39:09:d9:14:15:cf:55:95:ac:0b:bb:32:f4:38:
c1:11:4d:1f:d5:83:23:38:14:f4:df:8e:06:f2:2a:
88:8d:f2:3d:2d:b5:2a:97:d6:9e:d2:09:fa:f8:40:
72:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:9D:DD:08:54:4C:8D:D7:E1:94:DD:6A:D1:F1:C6:26:8B:39:35:66
X509v3 Authority Key Identifier:
keyid:96:16:EF:27:27:83:09:D2:22:B3:EC:97:33:4E:4A:83:AD:48:97:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lhbvJyeDCdIis-yXM05Kg61Ilxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/9a29bd-11c4-4838-bb3a-411f8f7be744/1/lhbvJyeDCdIis-yXM05Kg61Ilxs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/9a29bd-11c4-4838-bb3a-411f8f7be744/1/lhbvJyeDCdIis-yXM05Kg61Ilxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:30:0a:6c:02:a9:81:90:df:ef:83:14:f7:51:6c:0c:37:f9:
60:bd:6b:9c:4a:72:81:7d:70:80:e4:b2:fe:4d:20:37:a8:06:
b8:eb:f2:de:c6:9e:1d:06:61:8a:2e:5d:52:3d:04:1b:4d:a7:
69:d2:57:e1:c7:ae:f9:9e:2b:e7:4c:18:b7:16:82:99:05:5c:
8b:44:9d:d5:68:58:f9:ca:40:e0:0b:10:1e:e7:c4:d1:74:58:
7e:06:33:77:cf:cf:a0:8f:4c:95:0f:75:98:e6:50:89:1b:1e:
bf:90:00:77:e5:62:bd:4b:b8:99:04:0f:c3:ac:58:48:6b:07:
d3:3d:5d:a9:e9:8f:f0:99:35:17:f9:fe:3d:fc:98:dc:6e:f7:
aa:ed:23:cf:75:d1:64:fe:47:2a:41:91:fd:4f:a4:10:6f:2f:
a4:89:73:df:85:24:fb:9e:18:a1:76:d1:39:81:36:4e:ba:47:
6b:86:9d:0f:1b:78:22:98:28:4e:31:97:27:26:1d:4d:1e:b3:
96:12:7a:a4:b1:31:16:ce:2b:a5:5c:6d:23:b1:37:c0:7a:71:
09:ae:0d:f6:16:e5:51:89:3d:2b:a8:72:7f:45:d5:8c:b0:84:
55:99:93:51:53:26:45:15:75:60:c5:f9:79:90:92:14:34:cf:
70:9b:ee:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 08:44:12 2025 by rpki-client