Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/7c64cd-def0-48ac-ab9e-e8347372ba6c/1/LWQjAltXu5yu7J5WWk9wctEwdAQ.mft
File: LWQjAltXu5yu7J5WWk9wctEwdAQ.mft (raw, json)
Hash identifier: e3w6Ox5uBMMesW3pOAUUaREseHjUDLxCmv4fBxLtBs8=
Subject key identifier: 42:CD:9C:3D:61:F1:13:16:B5:EA:0A:68:36:95:C3:BA:22:C7:96:9F
Authority key identifier: 2D:64:23:02:5B:57:BB:9C:AE:EC:9E:56:5A:4F:70:72:D1:30:74:04
Certificate issuer: /CN=2d6423025b57bb9caeec9e565a4f7072d1307404
Certificate serial: 0182F24DFF840FB4DD9771DC70C6D209B7D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LWQjAltXu5yu7J5WWk9wctEwdAQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/7c64cd-def0-48ac-ab9e-e8347372ba6c/1/LWQjAltXu5yu7J5WWk9wctEwdAQ.mft
Manifest number: 0902
Signing time: Wed 31 Aug 2022 05:09:34 +0000
Manifest this update: Wed 31 Aug 2022 05:09:34 +0000
Manifest next update: Thu 01 Sep 2022 05:09:34 +0000
Files and hashes: 1: FxwY6DkgCYqYs56Lpc87kjzgdPU.roa (hash: 7CHJkwKrF1bq9fb45XF2h1N6t2H114JMM2p4/5nFpL0=)
2: KOEOW0GMuvFw9FaZGAJZN2Hp18o.roa (hash: 7tjh/dCYp2LDMVa/cNKNNLvQ54idmOTAGMO2HhAScjc=)
3: LWQjAltXu5yu7J5WWk9wctEwdAQ.crl (hash: 6SiIeW8IRwO+GbmbQXHjPLfYRU/0gPDA9Pf6jriVdHE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:f2:4d:ff:84:0f:b4:dd:97:71:dc:70:c6:d2:09:b7:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d6423025b57bb9caeec9e565a4f7072d1307404
Validity
Not Before: Aug 31 05:09:34 2022 GMT
Not After : Sep 1 05:09:34 2022 GMT
Subject: CN=42cd9c3d61f11316b5ea0a683695c3ba22c7969f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:23:08:2c:33:5f:39:83:b6:77:1f:6a:c3:1e:
16:b7:d6:ad:0c:b9:84:3b:eb:71:ea:1f:f5:20:5c:
09:03:8d:35:63:23:b0:fd:bd:57:bd:d1:94:08:d3:
2e:97:69:aa:90:46:8b:04:4c:d5:4b:41:37:31:16:
96:a3:fe:76:a7:8c:53:50:e5:db:3d:95:c4:6a:7b:
f2:6a:1d:6e:5c:77:24:1c:6a:f8:61:44:f6:42:8b:
c0:01:a7:cf:23:62:cc:73:71:1d:ca:fd:64:7a:dd:
bf:9f:88:58:00:a7:ac:89:9b:e6:15:73:9c:91:1f:
e4:8a:b7:17:48:c3:46:fc:21:0a:76:a3:60:12:59:
99:86:7c:35:28:b8:b4:68:90:a1:37:c4:42:e7:b2:
b9:f4:6d:3d:65:40:64:4e:3b:ff:e5:33:a9:5a:38:
f2:b5:f6:d5:d6:a2:5a:80:c1:cb:56:12:42:75:4a:
1c:a9:8c:f3:00:1e:32:aa:c9:57:94:cb:63:54:c1:
ee:c4:1d:59:0d:7a:70:4f:35:6d:d8:fb:65:34:09:
71:eb:76:26:08:52:86:45:9d:57:17:80:51:26:5f:
53:88:f8:7b:5d:57:e4:33:37:9a:0a:4d:b1:43:69:
3b:aa:d2:02:a0:d8:91:24:e1:9b:e3:23:e6:58:37:
55:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:CD:9C:3D:61:F1:13:16:B5:EA:0A:68:36:95:C3:BA:22:C7:96:9F
X509v3 Authority Key Identifier:
keyid:2D:64:23:02:5B:57:BB:9C:AE:EC:9E:56:5A:4F:70:72:D1:30:74:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LWQjAltXu5yu7J5WWk9wctEwdAQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/7c64cd-def0-48ac-ab9e-e8347372ba6c/1/LWQjAltXu5yu7J5WWk9wctEwdAQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/7c64cd-def0-48ac-ab9e-e8347372ba6c/1/LWQjAltXu5yu7J5WWk9wctEwdAQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:ef:45:5b:39:be:cd:8c:5b:74:35:7b:1e:17:ea:99:c7:02:
cb:5e:df:51:30:ec:cd:aa:2d:de:55:38:7c:b2:0c:7b:61:c4:
9e:57:c8:8d:a5:23:60:3b:f6:18:1c:7a:c6:ee:19:f6:ce:e4:
56:36:52:c7:bf:47:aa:c1:d3:2e:07:c8:38:8c:4f:87:db:16:
1f:47:40:84:fb:15:17:c5:53:3e:6e:9e:e2:98:5c:9f:fe:bf:
d8:d5:80:0f:6c:18:ba:ef:a3:b7:bc:ee:7b:84:f0:42:dd:cd:
1d:35:8e:7f:2b:e3:fb:f8:c0:98:9c:26:8d:75:a9:90:5c:09:
2f:bb:0a:46:8c:9a:fe:e8:b0:42:78:81:10:50:8c:cd:43:5e:
52:69:b3:5a:64:11:df:d1:3a:bd:ad:a3:c4:f4:5d:f0:0d:ef:
b7:90:a5:c5:ce:d4:41:70:28:9f:63:15:08:93:e1:d0:c0:ba:
70:7c:d8:40:2e:f5:ea:f0:c9:8d:ed:c7:08:e1:9a:89:d4:6d:
d2:b8:11:0b:62:ee:01:df:62:da:c7:b3:c3:59:4f:74:d5:50:
7e:d7:bd:1a:96:c4:18:12:13:6b:55:b9:f8:4c:84:97:c7:46:
af:23:9f:a6:3f:17:b5:4d:ba:02:1d:5c:81:cd:7e:6a:26:24:
3c:c4:36:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 14:10:24 2025 by rpki-client