Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/62001a-a313-4e33-bb04-914b4b34f981/1/lw69BGmlxpwQmJccqrNv4DLs4xE.mft
File: lw69BGmlxpwQmJccqrNv4DLs4xE.mft (raw, json)
Hash identifier: YPedY42SrSw1eHioYRXKQNBpuQ0CN0L8H7csCiXtkAk=
Subject key identifier: 87:C7:DB:3D:65:A7:5D:96:84:35:71:81:0B:47:DA:11:6B:1B:B3:C8
Authority key identifier: 97:0E:BD:04:69:A5:C6:9C:10:98:97:1C:AA:B3:6F:E0:32:EC:E3:11
Certificate issuer: /CN=970ebd0469a5c69c1098971caab36fe032ece311
Certificate serial: 0195E1596B45E414B46722DBC610F0BE83D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lw69BGmlxpwQmJccqrNv4DLs4xE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/62001a-a313-4e33-bb04-914b4b34f981/1/lw69BGmlxpwQmJccqrNv4DLs4xE.mft
Manifest number: 14C5
Signing time: Sat 29 Mar 2025 10:01:28 +0000
Manifest this update: Sat 29 Mar 2025 10:01:28 +0000
Manifest next update: Sun 30 Mar 2025 10:01:28 +0000
Files and hashes: 1: aRRMx2LpXrXzb91tfKNbEYwqTy4.roa (hash: u9ed+0pIjkL2kAKw6TtOQkn9W9RbAQ792y7vYcRd71M=)
2: eV3A69o5dbmXhkcbRscNdwCcmUw.roa (hash: 1+RfsWC1iIY4uoQdBg4VWebMYcz8BpqPe7dmv43mNg4=)
3: lw69BGmlxpwQmJccqrNv4DLs4xE.crl (hash: 9rnRXYR/3/t+8YskGxbMGkLPjfYhm99qttxSdMV8r4A=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e1:59:6b:45:e4:14:b4:67:22:db:c6:10:f0:be:83:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=970ebd0469a5c69c1098971caab36fe032ece311
Validity
Not Before: Mar 29 10:01:28 2025 GMT
Not After : Mar 30 10:01:28 2025 GMT
Subject: CN=87c7db3d65a75d96843571810b47da116b1bb3c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:41:1d:bd:bc:e3:5b:8f:21:4f:5f:50:ee:0e:
c5:d5:67:1d:84:bc:08:27:07:6f:dd:a0:72:a1:dc:
3a:7b:83:02:ef:a8:2b:23:5b:88:db:49:07:2b:f1:
6b:8e:89:53:6a:60:68:7c:33:3a:0d:f8:f8:58:95:
26:fe:fa:b9:7e:41:1b:2a:5c:7c:e5:6f:e9:7c:8b:
35:a8:7b:95:36:99:d1:67:1b:3f:8b:5c:37:a9:04:
9e:41:52:10:bb:2a:57:f5:0c:8b:bf:f3:1b:a8:1a:
51:df:41:ec:e2:27:95:4b:1d:69:7f:3d:0f:91:c1:
39:f0:42:54:14:fe:04:c1:2c:67:26:4a:20:b9:f8:
41:1c:a2:f4:6c:5e:05:0a:86:70:c8:63:1c:c1:85:
eb:ad:ca:40:68:55:09:71:75:9b:71:73:fd:f6:95:
f0:f3:bf:76:ff:7f:c6:10:02:f2:a7:09:a0:8f:b2:
f2:0e:fa:2a:be:dc:0d:af:a9:21:92:10:50:64:69:
e3:92:25:3c:77:c1:c1:4f:40:fd:3d:f3:38:d2:14:
64:89:c9:ad:64:ad:9b:67:c9:48:25:52:5b:6c:92:
1d:92:7d:99:6a:f2:ae:e4:68:b3:59:92:6d:53:ea:
b7:7a:bc:e0:c8:41:92:cf:21:3f:f7:f7:da:91:d3:
55:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:C7:DB:3D:65:A7:5D:96:84:35:71:81:0B:47:DA:11:6B:1B:B3:C8
X509v3 Authority Key Identifier:
keyid:97:0E:BD:04:69:A5:C6:9C:10:98:97:1C:AA:B3:6F:E0:32:EC:E3:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lw69BGmlxpwQmJccqrNv4DLs4xE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/62001a-a313-4e33-bb04-914b4b34f981/1/lw69BGmlxpwQmJccqrNv4DLs4xE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/62001a-a313-4e33-bb04-914b4b34f981/1/lw69BGmlxpwQmJccqrNv4DLs4xE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:ec:74:70:c1:05:8d:95:b6:f9:6e:30:8b:67:65:54:3c:8c:
18:a4:66:c9:24:91:a4:46:ad:98:2d:65:4a:b1:3a:31:1f:f3:
ec:ac:4f:23:af:e7:75:91:a0:5d:ee:ec:83:2a:e1:91:9b:8a:
a5:55:9a:29:17:25:6b:b0:66:0a:8e:c6:08:a6:84:90:2d:85:
14:ef:bc:e0:97:ae:65:5d:23:84:c2:dd:73:cf:ed:0b:eb:b0:
22:56:b0:45:be:70:08:0b:6f:0f:be:73:52:5a:af:5a:d5:d9:
84:c1:90:8d:5a:91:cc:c5:c8:1b:d4:0c:27:8a:11:5d:d8:ff:
07:11:1c:f2:65:40:68:84:13:3b:01:f5:34:12:9c:5f:f3:43:
7b:41:28:36:b9:22:c2:37:31:69:05:70:9e:1c:bf:59:5f:60:
e8:8a:1f:45:ab:73:77:1f:39:ad:07:89:a6:f7:e9:f1:a5:ab:
ca:ba:d2:3c:cd:cb:20:e3:ba:bd:29:64:d1:77:b0:5c:61:b9:
8e:18:69:a8:3f:eb:d8:c0:06:49:33:92:fd:37:3d:df:f9:0b:
33:68:1f:f9:72:0f:a4:35:e4:79:c4:86:c5:e3:22:e4:06:14:
d4:04:f7:65:c0:a6:37:d2:fd:f4:4c:90:d3:77:54:13:2a:fe:
b0:64:97:bc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZXhWWtF5BS0ZyLbxhDwvoPVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3MGViZDA0NjlhNWM2OWMxMDk4OTcxY2FhYjM2ZmUwMzJl
Y2UzMTEwHhcNMjUwMzI5MTAwMTI4WhcNMjUwMzMwMTAwMTI4WjAzMTEwLwYDVQQD
Eyg4N2M3ZGIzZDY1YTc1ZDk2ODQzNTcxODEwYjQ3ZGExMTZiMWJiM2M4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtUEdvbzjW48hT19Q7g7F1WcdhLwI
Jwdv3aByodw6e4MC76grI1uI20kHK/FrjolTamBofDM6Dfj4WJUm/vq5fkEbKlx8
5W/pfIs1qHuVNpnRZxs/i1w3qQSeQVIQuypX9QyLv/MbqBpR30Hs4ieVSx1pfz0P
kcE58EJUFP4EwSxnJkogufhBHKL0bF4FCoZwyGMcwYXrrcpAaFUJcXWbcXP99pXw
8792/3/GEALypwmgj7LyDvoqvtwNr6khkhBQZGnjkiU8d8HBT0D9PfM40hRkicmt
ZK2bZ8lIJVJbbJIdkn2ZavKu5GizWZJtU+q3erzgyEGSzyE/9/fakdNVCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIfH2z1lp12WhDVxgQtH2hFrG7PIMB8GA1UdIwQY
MBaAFJcOvQRppcacEJiXHKqzb+Ay7OMRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbHc2OUJHbWx4cHdRbUpjY3FyTnY0RExzNHhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS82MjAwMWEtYTMxMy00ZTMzLWJiMDQt
OTE0YjRiMzRmOTgxLzEvbHc2OUJHbWx4cHdRbUpjY3FyTnY0RExzNHhFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS82MjAwMWEtYTMxMy00ZTMzLWJiMDQtOTE0YjRiMzRmOTgx
LzEvbHc2OUJHbWx4cHdRbUpjY3FyTnY0RExzNHhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATux0cMEF
jZW2+W4wi2dlVDyMGKRmySSRpEatmC1lSrE6MR/z7KxPI6/ndZGgXe7sgyrhkZuK
pVWaKRcla7BmCo7GCKaEkC2FFO+84JeuZV0jhMLdc8/tC+uwIlawRb5wCAtvD75z
UlqvWtXZhMGQjVqRzMXIG9QMJ4oRXdj/BxEc8mVAaIQTOwH1NBKcX/NDe0EoNrki
wjcxaQVwnhy/WV9g6IofRatzdx85rQeJpvfp8aWryrrSPM3LIOO6vSlk0XewXGG5
jhhpqD/r2MAGSTOS/Tc93/kLM2gf+XIPpDXkecSGxeMi5AYU1AT3ZcCmN9L99EyQ
03dUEyr+sGSXvA==
-----END CERTIFICATE-----
Generated at Sun Apr 6 17:46:48 2025 by rpki-client