Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/1cf3f0-a036-4c76-8b09-5c535b746353/1/lwaqkFRlWGQk84f9vYNki3LZRt4.mft
File: lwaqkFRlWGQk84f9vYNki3LZRt4.mft (raw, json)
Hash identifier: OqsoLsmh5Zl/N8kjDeDRsOGZz5Qf7ZA6p3naYpdV+gU=
Subject key identifier: AF:D5:06:2A:D7:84:C8:7D:49:26:BF:3F:74:12:09:F7:3F:D2:5C:A8
Authority key identifier: 97:06:AA:90:54:65:58:64:24:F3:87:FD:BD:83:64:8B:72:D9:46:DE
Certificate issuer: /CN=9706aa905465586424f387fdbd83648b72d946de
Certificate serial: 0194BCA988F08384F749BD515F13D537F9C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lwaqkFRlWGQk84f9vYNki3LZRt4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/1cf3f0-a036-4c76-8b09-5c535b746353/1/lwaqkFRlWGQk84f9vYNki3LZRt4.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 14:00:14 +0000
Manifest this update: Fri 31 Jan 2025 14:00:14 +0000
Manifest next update: Sat 01 Feb 2025 14:00:14 +0000
Files and hashes: 1: c2mbKi5UZ3GiOkTKMMsYLmmHWNU.roa (hash: UtxHj7i+M428S4MKPB9E9Q2PRXSjTUZ5FcXtjJA5bUs=)
2: lwaqkFRlWGQk84f9vYNki3LZRt4.crl (hash: serOnCDKAP1Shs7TWXgVVLOrgpZTqG7BkUyhwASX6UI=)
3: oRfW2FP4FbeYSI3kehqgncp9gcc.roa (hash: XwGX8naDPDNcbpgigNakMaNKC6NSSrDBYhs82eP32R4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:88:f0:83:84:f7:49:bd:51:5f:13:d5:37:f9:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9706aa905465586424f387fdbd83648b72d946de
Validity
Not Before: Jan 31 14:00:14 2025 GMT
Not After : Feb 1 14:00:14 2025 GMT
Subject: CN=afd5062ad784c87d4926bf3f741209f73fd25ca8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:3c:47:af:f1:7e:1d:78:25:b5:e1:3e:41:17:
43:b0:12:14:f3:88:27:df:59:f7:a9:cf:d3:ca:15:
e9:d1:74:67:59:43:24:d1:ec:fa:fd:c0:8a:b1:5a:
4d:e3:eb:09:91:9d:12:bf:b7:5b:41:6c:ce:02:e4:
e4:69:02:d2:a2:b0:ac:ea:7a:f4:ff:a9:49:7c:a2:
fb:cb:f3:73:e6:94:8d:58:dd:8e:04:df:22:da:a1:
2f:f0:08:8b:80:87:99:93:4d:82:61:a4:43:03:6e:
3a:02:bc:02:45:23:d3:e3:5f:fb:57:bf:08:f4:c6:
d4:fa:cf:65:62:37:e2:03:e6:05:aa:58:a5:79:81:
d5:3e:c6:87:17:5b:10:78:01:ce:10:55:d2:fa:78:
8e:11:cd:3c:ac:e0:dc:cd:75:bd:de:61:62:7f:6a:
b6:78:5c:d6:eb:bf:2a:26:02:71:a8:ac:ee:8a:46:
c2:43:81:0d:50:88:64:4f:7b:e4:2e:8c:d0:0f:10:
75:57:6e:93:d2:2d:ec:77:b5:9f:85:17:d2:0d:26:
32:84:52:b0:ad:3e:a1:03:34:0d:da:ee:97:3e:33:
d3:e3:3b:68:bf:f9:74:c9:11:b0:89:d1:93:7d:18:
38:da:50:2f:3d:1c:7e:27:f7:a3:c8:f6:a7:4b:93:
1e:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:D5:06:2A:D7:84:C8:7D:49:26:BF:3F:74:12:09:F7:3F:D2:5C:A8
X509v3 Authority Key Identifier:
keyid:97:06:AA:90:54:65:58:64:24:F3:87:FD:BD:83:64:8B:72:D9:46:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lwaqkFRlWGQk84f9vYNki3LZRt4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/1cf3f0-a036-4c76-8b09-5c535b746353/1/lwaqkFRlWGQk84f9vYNki3LZRt4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/1cf3f0-a036-4c76-8b09-5c535b746353/1/lwaqkFRlWGQk84f9vYNki3LZRt4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:a1:ab:25:22:57:d0:f2:39:b7:34:23:de:a2:17:7f:9a:3c:
cc:a5:02:6e:c2:54:eb:24:75:6f:a7:e4:0c:29:77:52:ab:df:
97:c6:92:19:ce:57:10:7b:09:b8:c3:bb:57:37:98:f1:1b:db:
28:51:39:28:81:c7:4d:8a:97:36:0b:8a:89:13:8b:37:c3:5f:
2a:5c:62:57:00:74:d8:e4:71:33:76:0b:5e:fe:fb:dd:8d:4d:
7e:bb:36:25:c8:f6:b1:66:47:da:ba:43:1b:5a:9e:5f:78:4a:
6d:1f:8e:05:ef:d3:9c:38:46:e1:7c:7e:43:10:86:89:d6:2e:
48:2d:03:91:77:0e:ed:80:b1:23:29:d5:25:1c:ff:28:39:fb:
95:41:b8:4e:37:de:d4:b8:a1:45:09:94:4a:38:e1:32:63:47:
e7:be:41:46:2e:bb:e6:f9:ea:16:80:c1:4c:c2:fc:03:c2:56:
e7:3d:02:8a:31:53:2d:03:4e:5a:f1:29:78:c2:2e:79:e9:13:
2a:5a:1c:b3:e6:27:32:c0:15:bc:6f:60:c9:77:21:ad:9e:93:
c8:45:53:0e:b8:0e:01:2c:fe:7b:8c:9b:d9:98:62:c7:ee:a2:
29:c2:08:df:62:c1:38:bd:1b:81:eb:4c:12:d9:c0:73:a8:ff:
dc:53:b8:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 12:48:39 2025 by rpki-client