Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/ac2978-4903-4a87-9015-bf4a38107e99/1/mtwSkCJrj1smd2T7lWXAvBmDNpc.mft
File: mtwSkCJrj1smd2T7lWXAvBmDNpc.mft (raw, json)
Hash identifier: 5W7lzqsz2fPiC6CJ3rV32+YtluY22NTkU099LXDgqzQ=
Subject key identifier: 5E:03:D3:1C:64:1C:31:C8:F6:E8:5D:9E:97:A4:DB:A6:25:05:A7:B4
Authority key identifier: 9A:DC:12:90:22:6B:8F:5B:26:77:64:FB:95:65:C0:BC:19:83:36:97
Certificate issuer: /CN=9adc1290226b8f5b267764fb9565c0bc19833697
Certificate serial: 01952228F2E39E1563708C67FB07DC6066D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mtwSkCJrj1smd2T7lWXAvBmDNpc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/ac2978-4903-4a87-9015-bf4a38107e99/1/mtwSkCJrj1smd2T7lWXAvBmDNpc.mft
Manifest number: 145E
Signing time: Thu 20 Feb 2025 07:01:03 +0000
Manifest this update: Thu 20 Feb 2025 07:01:03 +0000
Manifest next update: Fri 21 Feb 2025 07:01:03 +0000
Files and hashes: 1: mtwSkCJrj1smd2T7lWXAvBmDNpc.crl (hash: LMv86X6b94LZPPt8JvRJ1LVh0u/38ukGwQXV702s6jg=)
2: tBzdDQaUYLJT3Lok_fo9sJPXWeA.roa (hash: v05CcdVHIFy5WgWaKj3N9IG2n8glH+Z6XFN+UN+ogBM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:22:28:f2:e3:9e:15:63:70:8c:67:fb:07:dc:60:66:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9adc1290226b8f5b267764fb9565c0bc19833697
Validity
Not Before: Feb 20 07:01:03 2025 GMT
Not After : Feb 21 07:01:03 2025 GMT
Subject: CN=5e03d31c641c31c8f6e85d9e97a4dba62505a7b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:7b:35:de:9e:25:07:4c:be:fd:a2:75:71:c0:
6f:a7:82:24:78:42:fa:7e:dd:d7:f9:8f:65:14:82:
7c:59:3e:4f:ef:34:03:42:f3:3a:c9:b0:a3:a9:55:
ef:dd:eb:49:48:6c:c1:a3:a3:65:68:75:04:0b:61:
36:ff:ad:72:09:59:fb:be:37:f8:71:1c:9f:1a:db:
30:4e:04:e6:76:af:bf:b4:27:43:68:50:e6:f6:85:
b3:b5:08:dd:02:69:1d:e2:51:94:e0:fd:36:06:9a:
23:ae:97:bc:77:ed:aa:35:de:d0:d5:aa:a9:1d:b8:
2d:4c:07:0d:90:71:53:4d:9a:9d:0a:d6:74:59:ee:
9a:dd:c7:f7:05:2a:a1:b7:53:bc:49:7f:73:13:45:
a1:d6:e2:62:42:80:af:9a:a0:4f:6a:d3:66:a0:bc:
f8:fb:e7:e1:e6:4f:37:5b:1c:29:37:80:6b:71:fe:
68:0c:48:97:19:e5:58:d2:31:0f:23:17:2f:59:b7:
1f:4d:c0:de:be:c2:7b:81:a7:d7:c6:90:82:83:15:
01:58:e3:ef:d7:a4:77:52:d1:b4:f7:27:b4:de:77:
31:39:02:05:d4:20:15:40:73:91:5a:ee:ce:58:52:
1a:75:86:d4:61:1f:0f:13:b8:f2:2d:1b:85:84:a4:
e4:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:03:D3:1C:64:1C:31:C8:F6:E8:5D:9E:97:A4:DB:A6:25:05:A7:B4
X509v3 Authority Key Identifier:
keyid:9A:DC:12:90:22:6B:8F:5B:26:77:64:FB:95:65:C0:BC:19:83:36:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mtwSkCJrj1smd2T7lWXAvBmDNpc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/ac2978-4903-4a87-9015-bf4a38107e99/1/mtwSkCJrj1smd2T7lWXAvBmDNpc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/ac2978-4903-4a87-9015-bf4a38107e99/1/mtwSkCJrj1smd2T7lWXAvBmDNpc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:57:c1:a1:48:af:02:69:8c:d7:e2:b2:3c:c9:5f:3e:ee:7a:
9b:ed:94:59:b8:b8:8a:e9:b0:86:4d:ce:0e:ab:de:36:d1:be:
ee:5b:33:76:9b:72:a5:c5:3a:13:46:29:ad:78:55:4a:06:a9:
19:e3:69:26:fb:d6:52:c5:28:a3:dd:3c:9d:a6:ac:73:d1:88:
3c:1c:f7:fe:73:5a:c6:aa:e7:3a:a5:9e:9a:68:42:2d:bc:0a:
eb:48:0c:20:c6:59:01:63:40:f2:9c:4a:ce:a1:35:d2:1c:60:
be:96:13:c2:de:9e:bf:d2:75:27:d9:4e:cb:d3:0a:22:7b:f3:
fd:08:ab:ff:a9:5f:6b:2b:bc:4f:f5:86:4a:45:f1:66:8d:23:
94:4f:7a:cb:86:54:06:dc:96:19:54:7a:f5:ef:e0:82:d2:cd:
24:82:61:b7:13:42:e0:f9:55:ea:fc:31:43:28:ac:06:fe:07:
12:b1:b1:b5:97:bf:6b:4a:c4:05:88:fb:4f:45:ee:16:4c:72:
e5:a8:63:13:89:e3:7a:21:f2:29:9a:77:2d:f2:38:a4:09:0d:
3c:c4:bd:8b:c1:b8:8c:67:ce:a3:0b:51:12:89:2b:32:05:31:
d8:96:90:77:de:1c:e3:19:db:f3:19:34:28:75:8a:d8:34:9c:
85:b4:b6:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:35:14 2025 by rpki-client