Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/62001a-a313-4e33-bb04-914b4b34f981/1/lw69BGmlxpwQmJccqrNv4DLs4xE.mft
File: lw69BGmlxpwQmJccqrNv4DLs4xE.mft (raw, json)
Hash identifier: dL9Dd1Hd+nk6TkuWDCFvL3pMt+PbKUGaaNWUiPEiTGw=
Subject key identifier: 7A:0D:6D:1E:67:43:9C:2C:31:32:97:C2:4A:7F:64:13:FB:56:0F:98
Authority key identifier: 97:0E:BD:04:69:A5:C6:9C:10:98:97:1C:AA:B3:6F:E0:32:EC:E3:11
Certificate issuer: /CN=970ebd0469a5c69c1098971caab36fe032ece311
Certificate serial: 0194BBCECE0EB41D9E53D1E7CC11E1C65BD1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lw69BGmlxpwQmJccqrNv4DLs4xE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/62001a-a313-4e33-bb04-914b4b34f981/1/lw69BGmlxpwQmJccqrNv4DLs4xE.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 10:01:19 +0000
Manifest this update: Fri 31 Jan 2025 10:01:19 +0000
Manifest next update: Sat 01 Feb 2025 10:01:19 +0000
Files and hashes: 1: aRRMx2LpXrXzb91tfKNbEYwqTy4.roa (hash: u9ed+0pIjkL2kAKw6TtOQkn9W9RbAQ792y7vYcRd71M=)
2: eV3A69o5dbmXhkcbRscNdwCcmUw.roa (hash: 1+RfsWC1iIY4uoQdBg4VWebMYcz8BpqPe7dmv43mNg4=)
3: lw69BGmlxpwQmJccqrNv4DLs4xE.crl (hash: fFvvpspD/mgPIN6j+m9hHjVjB+BgWFG9xKvW53cnan4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:ce:0e:b4:1d:9e:53:d1:e7:cc:11:e1:c6:5b:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=970ebd0469a5c69c1098971caab36fe032ece311
Validity
Not Before: Jan 31 10:01:19 2025 GMT
Not After : Feb 1 10:01:19 2025 GMT
Subject: CN=7a0d6d1e67439c2c313297c24a7f6413fb560f98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:00:7b:b3:39:90:b1:3c:c4:45:83:cc:f3:d3:
3a:c6:74:0d:4a:11:4c:5f:94:3f:91:69:0c:90:ea:
16:b6:02:03:91:86:56:e1:87:fb:5e:1b:36:df:99:
c4:a7:92:c5:e8:e4:ec:dd:83:2d:43:bf:68:8c:22:
e6:e4:89:08:e3:c1:de:33:13:e7:c9:26:00:ca:e3:
1f:5d:fb:09:40:3c:af:6d:be:0d:b3:d5:77:c5:cf:
a7:21:89:18:d5:70:b3:02:9d:06:7e:35:cf:33:04:
08:47:8c:19:85:21:ee:94:1f:e3:68:0e:d5:b3:84:
c9:cf:b6:a6:9e:74:99:35:b9:cb:fb:01:7a:0b:ba:
8a:c3:81:e3:8b:49:f1:e4:73:ad:59:9b:47:c3:23:
7a:08:6e:83:85:07:0e:49:49:a3:15:2d:c4:37:87:
93:30:1e:aa:84:66:e7:04:94:64:6a:7c:16:b8:d2:
c6:37:be:99:21:fa:6f:7f:41:d0:f7:f5:10:20:fd:
3b:1c:16:1b:65:9a:14:9d:6d:89:8e:89:f8:b9:81:
b2:28:d1:3e:b9:b9:db:3d:2e:3d:a8:4c:54:64:17:
0d:03:fa:37:91:2e:41:39:1f:c4:b6:a0:db:3c:80:
67:cf:ed:ce:a0:41:2a:94:7b:96:74:28:37:ef:e2:
a9:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:0D:6D:1E:67:43:9C:2C:31:32:97:C2:4A:7F:64:13:FB:56:0F:98
X509v3 Authority Key Identifier:
keyid:97:0E:BD:04:69:A5:C6:9C:10:98:97:1C:AA:B3:6F:E0:32:EC:E3:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lw69BGmlxpwQmJccqrNv4DLs4xE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/62001a-a313-4e33-bb04-914b4b34f981/1/lw69BGmlxpwQmJccqrNv4DLs4xE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/62001a-a313-4e33-bb04-914b4b34f981/1/lw69BGmlxpwQmJccqrNv4DLs4xE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:0c:da:42:d6:9f:15:4d:a0:d4:2e:4c:6c:1d:3a:c0:a5:24:
92:06:e3:73:ce:94:a8:a1:90:e1:e4:8c:8d:02:a1:ff:e2:13:
c5:11:77:11:fc:8d:7c:57:48:61:a1:07:1d:38:a6:e0:6f:af:
17:6e:c2:13:cd:f2:8b:af:09:4a:6b:00:86:88:fb:30:3e:52:
18:40:41:81:17:64:9d:43:71:cd:5a:03:ea:07:46:b4:2f:59:
e5:cc:e9:f3:6e:e6:e1:ab:89:79:8f:66:5e:20:8f:4b:ed:ce:
cc:80:cb:24:f8:35:a4:b8:b7:79:86:40:83:26:bd:d4:8e:b5:
1e:13:a3:4e:42:5d:ee:6d:6a:da:68:dc:5b:74:a6:ef:a8:1d:
f8:0f:2b:cb:b7:15:f2:a5:f5:87:0b:87:aa:f5:6b:b7:d6:b5:
a5:12:5e:ea:19:ac:b8:96:d2:eb:1e:bb:cc:af:d4:b8:4e:e3:
1b:98:c8:05:fd:7e:9d:4b:fd:c3:5e:65:df:51:fe:73:9c:aa:
33:a8:a9:61:71:af:28:61:e9:c6:e1:d2:f0:59:1c:a4:22:91:
bd:99:32:df:4f:b2:e7:f2:92:6d:c4:7e:56:82:12:cc:b4:ef:
57:38:83:90:aa:c5:63:76:ef:30:12:c7:a1:95:01:e0:b1:ae:
02:1c:f1:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:34:39 2025 by rpki-client