Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/ac2978-4903-4a87-9015-bf4a38107e99/1/mtwSkCJrj1smd2T7lWXAvBmDNpc.mft
File: mtwSkCJrj1smd2T7lWXAvBmDNpc.mft (raw, json)
Hash identifier: A5F+S2G0E8yIWE/8Ci4kTLAOKePVRheRVKvBOSn9qvA=
Subject key identifier: 1A:1E:0A:F0:00:B2:CD:2B:92:21:C3:2D:72:17:B0:36:60:E3:B9:C4
Authority key identifier: 9A:DC:12:90:22:6B:8F:5B:26:77:64:FB:95:65:C0:BC:19:83:36:97
Certificate issuer: /CN=9adc1290226b8f5b267764fb9565c0bc19833697
Certificate serial: 0194BBCE600482D064ED6533B9AB4D45FD2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mtwSkCJrj1smd2T7lWXAvBmDNpc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/ac2978-4903-4a87-9015-bf4a38107e99/1/mtwSkCJrj1smd2T7lWXAvBmDNpc.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 10:00:51 +0000
Manifest this update: Fri 31 Jan 2025 10:00:51 +0000
Manifest next update: Sat 01 Feb 2025 10:00:51 +0000
Files and hashes: 1: mtwSkCJrj1smd2T7lWXAvBmDNpc.crl (hash: pnZ9uoMb3KhL3+9IL7gyQWdHZMUGsvhIyXMxJYiVnNg=)
2: tBzdDQaUYLJT3Lok_fo9sJPXWeA.roa (hash: v05CcdVHIFy5WgWaKj3N9IG2n8glH+Z6XFN+UN+ogBM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:60:04:82:d0:64:ed:65:33:b9:ab:4d:45:fd:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9adc1290226b8f5b267764fb9565c0bc19833697
Validity
Not Before: Jan 31 10:00:51 2025 GMT
Not After : Feb 1 10:00:51 2025 GMT
Subject: CN=1a1e0af000b2cd2b9221c32d7217b03660e3b9c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:b4:2b:0a:26:87:8e:90:e6:19:ad:6d:f6:98:
18:0e:85:21:4d:64:27:c7:88:eb:2b:d2:7a:5f:83:
61:30:7f:54:b2:25:79:14:cc:11:a2:6f:be:6b:f4:
a6:ce:71:5d:c6:81:0e:66:9c:04:b0:19:9f:31:a7:
58:e8:11:e5:d0:88:ee:e1:f7:04:e4:49:8a:89:25:
37:37:53:bf:3c:37:a6:1e:81:1c:05:f2:c6:f9:09:
31:d3:8e:7b:d8:bd:04:e8:d2:c2:0a:3a:fb:4c:95:
93:1b:e1:c0:78:24:e3:5b:59:bc:2a:44:94:75:73:
5c:7b:c3:fb:b4:58:f5:d9:f4:01:0a:c2:95:fb:b0:
48:74:c5:f2:5b:45:25:94:ce:04:11:42:73:cb:11:
a4:5a:9b:84:43:e4:2c:87:7d:b0:39:aa:15:ed:92:
80:e2:38:6f:ed:53:cc:7a:0b:43:ce:39:ee:67:ba:
96:66:4f:f4:ff:94:9d:8c:da:8b:85:47:d7:d3:68:
0a:2d:9a:e9:ee:eb:70:6a:11:a5:65:e3:da:14:15:
db:76:5d:3e:78:b0:9e:45:10:84:7e:d2:3b:b8:fa:
fa:90:96:fc:39:bc:f9:68:57:2b:3e:13:62:38:60:
6a:1c:dc:bf:5c:b9:61:8c:84:9e:12:cf:f3:1a:30:
cf:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:1E:0A:F0:00:B2:CD:2B:92:21:C3:2D:72:17:B0:36:60:E3:B9:C4
X509v3 Authority Key Identifier:
keyid:9A:DC:12:90:22:6B:8F:5B:26:77:64:FB:95:65:C0:BC:19:83:36:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mtwSkCJrj1smd2T7lWXAvBmDNpc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/ac2978-4903-4a87-9015-bf4a38107e99/1/mtwSkCJrj1smd2T7lWXAvBmDNpc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/ac2978-4903-4a87-9015-bf4a38107e99/1/mtwSkCJrj1smd2T7lWXAvBmDNpc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:38:57:93:c5:79:4c:ab:47:4b:c2:dd:67:79:50:1c:7a:ec:
55:73:bd:70:07:f8:7e:f4:65:4f:a4:cd:ac:95:ba:03:30:a4:
0b:70:43:3c:a9:67:10:86:cd:ca:fc:58:3f:43:c4:c8:75:c4:
cf:a6:c7:83:24:2c:1a:24:4f:cc:dd:38:82:dd:98:81:5a:f7:
99:08:26:14:01:13:71:6f:32:a6:52:7c:45:e4:87:ab:d5:9f:
72:0d:d7:c1:94:f5:0d:ee:5a:a8:eb:c9:42:64:e8:69:d7:34:
2b:99:34:c4:6b:34:24:f0:a3:51:e1:8b:75:25:12:2f:d1:04:
92:50:96:21:e6:53:56:b5:5b:d4:b9:48:0e:05:ea:01:0a:24:
48:32:0d:05:3d:39:4f:42:80:6e:22:07:f5:7f:dc:55:04:2b:
79:75:9c:f4:3e:61:23:03:fd:ed:d3:f0:85:37:f4:d1:af:59:
ab:30:8e:b6:e2:30:29:13:8e:30:04:2c:8e:21:01:9a:9d:a5:
f5:94:70:0b:91:65:df:9d:f7:d5:04:3e:e8:fa:d8:98:cb:81:
49:1c:3a:99:7c:f3:92:dc:92:c3:69:5a:16:12:d0:40:00:46:
31:a1:ef:bd:1f:40:31:cf:16:d0:9f:50:5a:97:88:99:bc:fc:
19:3e:a0:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:42:06 2025 by rpki-client