Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/ac2978-4903-4a87-9015-bf4a38107e99/1/mtwSkCJrj1smd2T7lWXAvBmDNpc.mft
File: mtwSkCJrj1smd2T7lWXAvBmDNpc.mft (raw, json)
Hash identifier: jpwk7GIxOwlglfPpZooh5G8kD3CgX/7LH6GjrlSBqlE=
Subject key identifier: 55:D3:8E:B4:AE:D7:F1:46:BB:DD:9F:C6:9E:4D:47:19:BE:43:56:8A
Authority key identifier: 9A:DC:12:90:22:6B:8F:5B:26:77:64:FB:95:65:C0:BC:19:83:36:97
Certificate issuer: /CN=9adc1290226b8f5b267764fb9565c0bc19833697
Certificate serial: 019514A41445E272502F27CEA59DCDE1217B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mtwSkCJrj1smd2T7lWXAvBmDNpc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/ac2978-4903-4a87-9015-bf4a38107e99/1/mtwSkCJrj1smd2T7lWXAvBmDNpc.mft
Manifest number: 1457
Signing time: Mon 17 Feb 2025 16:00:52 +0000
Manifest this update: Mon 17 Feb 2025 16:00:52 +0000
Manifest next update: Tue 18 Feb 2025 16:00:52 +0000
Files and hashes: 1: mtwSkCJrj1smd2T7lWXAvBmDNpc.crl (hash: H/9W6PaBszm6GkaE/hxXXJ1mDKDfmxKfowg2mzp2HjQ=)
2: tBzdDQaUYLJT3Lok_fo9sJPXWeA.roa (hash: v05CcdVHIFy5WgWaKj3N9IG2n8glH+Z6XFN+UN+ogBM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:14:a4:14:45:e2:72:50:2f:27:ce:a5:9d:cd:e1:21:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9adc1290226b8f5b267764fb9565c0bc19833697
Validity
Not Before: Feb 17 16:00:52 2025 GMT
Not After : Feb 18 16:00:52 2025 GMT
Subject: CN=55d38eb4aed7f146bbdd9fc69e4d4719be43568a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:1f:63:ff:65:54:10:dc:90:cf:9e:97:1a:23:
04:a4:8c:58:d9:c7:08:74:db:81:94:df:70:ec:db:
5c:b8:41:ab:e1:89:0b:fc:b8:eb:c5:4d:3b:2e:9c:
c8:b6:a7:34:2c:87:41:32:d1:a4:b9:f6:26:44:bb:
93:7a:55:c8:39:22:2a:b6:61:f2:ab:63:ab:8e:58:
f1:6d:54:bc:f1:27:23:49:d8:29:15:0b:09:ad:f6:
dd:81:d4:cb:e8:dc:08:ad:fa:9b:ef:4d:15:a0:f9:
96:c0:05:3d:d4:21:50:3a:a3:a0:b4:54:66:a1:f5:
58:08:76:d6:7e:b0:b0:01:54:e9:30:f5:72:3e:b9:
8d:dd:e0:15:46:20:b7:c4:40:9a:0e:2f:17:ce:2b:
6c:c2:90:d3:46:2e:11:95:cf:68:d3:fd:20:09:8c:
d9:1b:ef:e4:03:53:47:92:69:fc:7e:86:cb:37:bf:
52:12:b5:79:15:e6:09:f2:79:8e:fb:23:12:e2:1b:
81:21:01:c0:48:1c:34:12:5f:c6:a0:97:14:46:7c:
da:60:18:c9:88:3e:4d:4f:0d:e8:7c:1f:ca:7b:69:
c0:ae:8c:87:18:ad:20:3d:5c:88:79:c0:35:1c:54:
3e:d9:11:86:e5:c4:10:77:00:3c:2e:f2:b6:b6:94:
62:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:D3:8E:B4:AE:D7:F1:46:BB:DD:9F:C6:9E:4D:47:19:BE:43:56:8A
X509v3 Authority Key Identifier:
keyid:9A:DC:12:90:22:6B:8F:5B:26:77:64:FB:95:65:C0:BC:19:83:36:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mtwSkCJrj1smd2T7lWXAvBmDNpc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/ac2978-4903-4a87-9015-bf4a38107e99/1/mtwSkCJrj1smd2T7lWXAvBmDNpc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/ac2978-4903-4a87-9015-bf4a38107e99/1/mtwSkCJrj1smd2T7lWXAvBmDNpc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:49:a8:7b:62:0f:4a:0f:64:f8:02:2f:f5:54:e7:b6:34:59:
96:28:d3:d4:e4:ef:fe:9a:73:87:5d:c7:13:e9:b2:01:a6:76:
46:62:dc:8a:3b:7f:96:51:80:70:91:ae:13:83:33:c6:39:9c:
83:8f:18:18:74:53:9b:ab:22:68:25:a7:d3:0e:45:98:35:f0:
e7:9a:71:d7:c6:da:da:1d:7e:0a:99:2e:d5:a5:94:85:b2:54:
97:c7:93:75:83:e0:51:a7:70:70:e5:83:d6:57:a1:e6:9f:4e:
3c:92:88:3d:64:06:d5:74:db:dd:60:36:2c:ad:7f:4f:f2:3a:
e2:27:86:37:d6:82:20:77:25:e2:89:67:60:e3:f2:61:5b:85:
26:fc:ee:d1:91:c0:d6:19:12:b7:57:44:67:7d:d7:38:6a:aa:
95:d3:9f:64:50:99:91:3d:e4:6b:7d:a3:26:ca:e9:02:d6:4b:
79:28:c8:c7:ce:b7:a7:87:75:db:9f:68:28:65:f9:ba:f5:4d:
06:d1:80:0c:2f:e1:44:f9:56:f7:7a:9f:ff:48:bd:ec:c0:c2:
99:43:d7:ce:51:2f:3b:2f:56:94:4c:2b:f6:88:ad:4c:92:73:
cf:a6:0b:15:54:e7:48:15:1c:27:d1:58:c4:ce:c9:9e:4d:a8:
20:86:d2:49
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZUUpBRF4nJQLyfOpZ3N4SF7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhZGMxMjkwMjI2YjhmNWIyNjc3NjRmYjk1NjVjMGJjMTk4
MzM2OTcwHhcNMjUwMjE3MTYwMDUyWhcNMjUwMjE4MTYwMDUyWjAzMTEwLwYDVQQD
Eyg1NWQzOGViNGFlZDdmMTQ2YmJkZDlmYzY5ZTRkNDcxOWJlNDM1NjhhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1B9j/2VUENyQz56XGiMEpIxY2ccI
dNuBlN9w7NtcuEGr4YkL/LjrxU07LpzItqc0LIdBMtGkufYmRLuTelXIOSIqtmHy
q2OrjljxbVS88ScjSdgpFQsJrfbdgdTL6NwIrfqb700VoPmWwAU91CFQOqOgtFRm
ofVYCHbWfrCwAVTpMPVyPrmN3eAVRiC3xECaDi8XzitswpDTRi4Rlc9o0/0gCYzZ
G+/kA1NHkmn8fobLN79SErV5FeYJ8nmO+yMS4huBIQHASBw0El/GoJcURnzaYBjJ
iD5NTw3ofB/Ke2nAroyHGK0gPVyIecA1HFQ+2RGG5cQQdwA8LvK2tpRiJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFXTjrSu1/FGu92fxp5NRxm+Q1aKMB8GA1UdIwQY
MBaAFJrcEpAia49bJndk+5VlwLwZgzaXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbXR3U2tDSnJqMXNtZDJUN2xXWEF2Qm1ETnBjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS9hYzI5NzgtNDkwMy00YTg3LTkwMTUt
YmY0YTM4MTA3ZTk5LzEvbXR3U2tDSnJqMXNtZDJUN2xXWEF2Qm1ETnBjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZS9hYzI5NzgtNDkwMy00YTg3LTkwMTUtYmY0YTM4MTA3ZTk5
LzEvbXR3U2tDSnJqMXNtZDJUN2xXWEF2Qm1ETnBjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf0moe2IP
Sg9k+AIv9VTntjRZlijT1OTv/ppzh13HE+myAaZ2RmLcijt/llGAcJGuE4Mzxjmc
g48YGHRTm6siaCWn0w5FmDXw55px18ba2h1+Cpku1aWUhbJUl8eTdYPgUadwcOWD
1leh5p9OPJKIPWQG1XTb3WA2LK1/T/I64ieGN9aCIHcl4olnYOPyYVuFJvzu0ZHA
1hkSt1dEZ33XOGqqldOfZFCZkT3ka32jJsrpAtZLeSjIx863p4d1259oKGX5uvVN
BtGADC/hRPlW93qf/0i97MDCmUPXzlEvOy9WlEwr9oitTJJzz6YLFVTnSBUcJ9FY
xM7Jnk2oIIbSSQ==
-----END CERTIFICATE-----
Generated at Fri Apr 18 05:30:00 2025 by rpki-client