Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/38e027-5820-4cc9-aa35-a4450b6b4b11/1/l8kmmY4m4oP9AiD1n0sGc3v_NmE.mft
File: l8kmmY4m4oP9AiD1n0sGc3v_NmE.mft (raw, json)
Hash identifier: Hjgw5LszsLsUeH+rsS35SRPtgRzwTSBn9JKB6k3s+aE=
Subject key identifier: 21:24:73:91:FE:4D:95:36:3C:0B:C4:52:F9:D0:5F:72:9E:E5:92:91
Authority key identifier: 97:C9:26:99:8E:26:E2:83:FD:02:20:F5:9F:4B:06:73:7B:FF:36:61
Certificate issuer: /CN=97c926998e26e283fd0220f59f4b06737bff3661
Certificate serial: 018C5853668040A7FF278B0F14A8CE005A9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l8kmmY4m4oP9AiD1n0sGc3v_NmE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/38e027-5820-4cc9-aa35-a4450b6b4b11/1/l8kmmY4m4oP9AiD1n0sGc3v_NmE.mft
Manifest number: 08D0
Signing time: Mon 11 Dec 2023 10:01:49 +0000
Manifest this update: Mon 11 Dec 2023 10:01:49 +0000
Manifest next update: Tue 12 Dec 2023 10:01:49 +0000
Files and hashes: 1: l8kmmY4m4oP9AiD1n0sGc3v_NmE.crl (hash: 9YqeS6XbfEQcKcDi3r/ClmXPZMYZn35vHawvDUQxQ0Q=)
2: pTnGNKUzFuxpXjwVFjRGW3htGMY.roa (hash: 0gziv5ycJtO6Q646TMdIZmen4AshzW59fKHEtFekyYM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:58:53:66:80:40:a7:ff:27:8b:0f:14:a8:ce:00:5a:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97c926998e26e283fd0220f59f4b06737bff3661
Validity
Not Before: Dec 11 10:01:49 2023 GMT
Not After : Dec 12 10:01:49 2023 GMT
Subject: CN=21247391fe4d95363c0bc452f9d05f729ee59291
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:d0:5f:d1:a7:76:ab:c8:bb:a7:06:42:cd:1a:
ff:76:53:51:91:29:e8:d7:98:85:6f:7f:21:af:49:
12:95:27:ec:58:52:03:2e:40:be:2c:ce:72:31:94:
20:b9:c2:83:cc:96:60:af:59:d6:2c:e6:fb:3f:67:
61:be:c5:bb:c8:48:ff:c2:d3:99:3d:d3:52:d4:06:
32:a7:e8:8e:0d:8c:d9:c8:99:7d:40:4c:a5:bf:c1:
cc:68:5b:66:01:a6:c4:07:cf:a9:3d:ab:7a:b9:36:
28:4c:79:3b:ee:e7:30:39:d1:af:94:e9:a4:8b:2c:
62:fa:e2:0d:ba:6d:00:b2:23:8c:3b:d5:57:04:e7:
50:04:4a:5c:4b:91:ff:a4:a4:f6:13:0c:67:5a:4a:
0b:b5:a9:8a:43:2a:2c:16:35:fc:ed:28:46:57:a4:
0b:de:5c:94:dc:ee:37:f0:c4:fa:96:5c:55:7c:dc:
10:7a:5f:c0:0c:b9:f3:01:58:45:e3:ec:e8:14:fa:
c5:a0:b5:7c:15:76:d4:a5:af:d5:51:c2:98:4e:bc:
ad:39:00:e8:c0:91:c6:ef:90:78:c7:16:3b:63:df:
cb:a8:26:d8:5b:19:63:e7:b3:7c:a8:d9:ec:5a:6c:
c3:f7:c6:19:d8:96:1f:4f:91:b8:15:71:d4:ab:2f:
a5:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:24:73:91:FE:4D:95:36:3C:0B:C4:52:F9:D0:5F:72:9E:E5:92:91
X509v3 Authority Key Identifier:
keyid:97:C9:26:99:8E:26:E2:83:FD:02:20:F5:9F:4B:06:73:7B:FF:36:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l8kmmY4m4oP9AiD1n0sGc3v_NmE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/38e027-5820-4cc9-aa35-a4450b6b4b11/1/l8kmmY4m4oP9AiD1n0sGc3v_NmE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/38e027-5820-4cc9-aa35-a4450b6b4b11/1/l8kmmY4m4oP9AiD1n0sGc3v_NmE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:14:31:e6:40:a4:c3:16:8f:d0:b8:ba:ca:7a:79:af:47:34:
62:b2:2e:24:74:c7:72:b7:99:d6:db:db:90:07:a2:cb:53:69:
89:c5:3f:10:fd:44:eb:73:17:a0:b6:01:cc:73:7a:45:6f:77:
04:aa:4c:7d:29:52:f2:8e:5f:b6:22:26:ef:c3:01:b9:2a:b4:
0f:4a:34:0f:2e:9f:60:c9:ba:b5:43:5d:0d:05:42:6c:aa:68:
c0:15:6f:99:00:6a:84:8c:96:94:37:b3:78:27:00:1d:fb:9e:
79:48:b7:a7:9c:d3:c9:cd:24:da:51:e0:1b:cb:02:b5:70:da:
b8:a5:01:11:e3:89:4d:c5:28:8a:a7:ba:41:8f:c6:2d:a0:4c:
13:cf:51:ff:80:05:3d:52:2f:fd:3f:3e:3b:c7:2a:57:4e:2d:
69:df:43:b1:29:17:0d:73:f5:39:26:49:9c:5b:24:8d:bf:c2:
0e:0f:1e:a0:81:4c:b3:00:0c:87:14:77:a9:46:bf:69:3e:5c:
77:18:3d:5c:3e:15:3f:c8:82:17:46:e6:2c:e4:d5:93:60:27:
56:ff:38:5f:11:d9:81:fe:70:22:19:2c:5f:d5:7f:70:ed:22:
c8:5d:dd:00:fa:05:ea:c5:a5:80:cc:f3:6e:05:61:d4:1a:70:
a1:fc:17:48
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYxYU2aAQKf/J4sPFKjOAFqbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3YzkyNjk5OGUyNmUyODNmZDAyMjBmNTlmNGIwNjczN2Jm
ZjM2NjEwHhcNMjMxMjExMTAwMTQ5WhcNMjMxMjEyMTAwMTQ5WjAzMTEwLwYDVQQD
EygyMTI0NzM5MWZlNGQ5NTM2M2MwYmM0NTJmOWQwNWY3MjllZTU5MjkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi9Bf0ad2q8i7pwZCzRr/dlNRkSno
15iFb38hr0kSlSfsWFIDLkC+LM5yMZQgucKDzJZgr1nWLOb7P2dhvsW7yEj/wtOZ
PdNS1AYyp+iODYzZyJl9QEylv8HMaFtmAabEB8+pPat6uTYoTHk77ucwOdGvlOmk
iyxi+uINum0AsiOMO9VXBOdQBEpcS5H/pKT2EwxnWkoLtamKQyosFjX87ShGV6QL
3lyU3O438MT6llxVfNwQel/ADLnzAVhF4+zoFPrFoLV8FXbUpa/VUcKYTrytOQDo
wJHG75B4xxY7Y9/LqCbYWxlj57N8qNnsWmzD98YZ2JYfT5G4FXHUqy+lwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCEkc5H+TZU2PAvEUvnQX3Ke5ZKRMB8GA1UdIwQY
MBaAFJfJJpmOJuKD/QIg9Z9LBnN7/zZhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbDhrbW1ZNG00b1A5QWlEMW4wc0djM3ZfTm1FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC8zOGUwMjctNTgyMC00Y2M5LWFhMzUt
YTQ0NTBiNmI0YjExLzEvbDhrbW1ZNG00b1A5QWlEMW4wc0djM3ZfTm1FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC8zOGUwMjctNTgyMC00Y2M5LWFhMzUtYTQ0NTBiNmI0YjEx
LzEvbDhrbW1ZNG00b1A5QWlEMW4wc0djM3ZfTm1FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqBQx5kCk
wxaP0Li6ynp5r0c0YrIuJHTHcreZ1tvbkAeiy1NpicU/EP1E63MXoLYBzHN6RW93
BKpMfSlS8o5ftiIm78MBuSq0D0o0Dy6fYMm6tUNdDQVCbKpowBVvmQBqhIyWlDez
eCcAHfueeUi3p5zTyc0k2lHgG8sCtXDauKUBEeOJTcUoiqe6QY/GLaBME89R/4AF
PVIv/T8+O8cqV04tad9DsSkXDXP1OSZJnFskjb/CDg8eoIFMswAMhxR3qUa/aT5c
dxg9XD4VP8iCF0bmLOTVk2AnVv84XxHZgf5wIhksX9V/cO0iyF3dAPoF6sWlgMzz
bgVh1BpwofwXSA==
-----END CERTIFICATE-----
Generated at Thu May 8 18:34:41 2025 by rpki-client