Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/613b2a-8cae-47db-8df0-607cd7f22469/1/LW8f1O9FRHbRJBD99h1N-MPHwhs.mft
File: LW8f1O9FRHbRJBD99h1N-MPHwhs.mft (raw, json)
Hash identifier: rPoz9LSpk4ZUBRIqx8AtQnH73Ndhv6RU9xBEB1vTSIM=
Subject key identifier: E0:D8:06:93:ED:14:D6:EE:E2:ED:0C:0F:BC:59:FC:99:F9:64:3D:28
Authority key identifier: 2D:6F:1F:D4:EF:45:44:76:D1:24:10:FD:F6:1D:4D:F8:C3:C7:C2:1B
Certificate issuer: /CN=2d6f1fd4ef454476d12410fdf61d4df8c3c7c21b
Certificate serial: 019293EA4A37A349B59467FF2EA9AD89B6E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LW8f1O9FRHbRJBD99h1N-MPHwhs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/613b2a-8cae-47db-8df0-607cd7f22469/1/LW8f1O9FRHbRJBD99h1N-MPHwhs.mft
Manifest number: 0AFE
Signing time: Wed 16 Oct 2024 06:00:58 +0000
Manifest this update: Wed 16 Oct 2024 06:00:58 +0000
Manifest next update: Thu 17 Oct 2024 06:00:58 +0000
Files and hashes: 1: 1-1HHsrOeuzuCnaFMj_7_dtRyc60.roa (hash: ypcrwR6GPMPZeB1P3u9TYuxfw2nY9xlfxnebd5qCNNQ=)
2: LW8f1O9FRHbRJBD99h1N-MPHwhs.crl (hash: nZUXQUdvb1S/DAjciWTsDbNvW/5ZrX1Ds8FWqjKwSEg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:93:ea:4a:37:a3:49:b5:94:67:ff:2e:a9:ad:89:b6:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d6f1fd4ef454476d12410fdf61d4df8c3c7c21b
Validity
Not Before: Oct 16 06:00:58 2024 GMT
Not After : Oct 17 06:00:58 2024 GMT
Subject: CN=e0d80693ed14d6eee2ed0c0fbc59fc99f9643d28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:77:cd:5f:94:fc:a4:1c:44:8e:f0:2c:17:6a:
8d:58:10:a9:bb:ec:dd:74:a5:b0:10:f2:10:61:f6:
b2:68:44:1e:3e:a6:bc:fe:1a:c5:64:a9:96:72:0a:
d7:38:8a:be:05:37:5a:7c:aa:39:ac:9b:e6:76:50:
24:9d:32:11:1a:3f:db:7f:1a:c5:26:15:62:3f:15:
a1:5e:a0:3f:bb:5d:90:12:f2:90:ae:35:45:b7:3e:
8c:4c:03:82:4b:70:aa:45:21:61:2d:3c:e3:5a:56:
66:3b:71:c2:81:02:8a:c8:17:d7:fc:eb:9f:6e:b8:
01:41:4d:e3:c4:17:23:fd:a5:ce:e7:0a:08:71:65:
43:8e:2a:87:29:ea:b5:5e:3c:d4:63:de:9a:e8:ff:
b8:24:4f:4a:05:20:bf:18:27:f2:54:de:a9:d3:32:
73:c8:1c:a4:dc:28:d0:3a:6a:3d:f2:d8:12:21:39:
02:b5:17:30:24:cc:7e:bb:e8:f2:08:77:36:87:46:
e0:8e:78:a1:58:55:f5:c7:6d:cd:e6:6f:1e:fb:26:
c3:69:e1:2f:ba:85:83:e9:ce:09:e9:3b:8e:78:97:
ca:93:cd:55:15:b5:4b:30:56:db:db:04:2a:0b:96:
7d:48:90:46:c3:d4:77:6c:80:fc:6e:fe:d0:a7:12:
af:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:D8:06:93:ED:14:D6:EE:E2:ED:0C:0F:BC:59:FC:99:F9:64:3D:28
X509v3 Authority Key Identifier:
keyid:2D:6F:1F:D4:EF:45:44:76:D1:24:10:FD:F6:1D:4D:F8:C3:C7:C2:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LW8f1O9FRHbRJBD99h1N-MPHwhs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/613b2a-8cae-47db-8df0-607cd7f22469/1/LW8f1O9FRHbRJBD99h1N-MPHwhs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/613b2a-8cae-47db-8df0-607cd7f22469/1/LW8f1O9FRHbRJBD99h1N-MPHwhs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:a4:27:b4:82:8e:52:04:14:44:cc:f2:1c:f2:63:39:ce:75:
54:9a:1d:21:76:63:e6:f7:51:10:a0:9f:a7:10:9b:ff:91:95:
7f:88:de:9a:c7:e4:13:82:a1:a0:55:ce:6b:06:8a:e6:ce:a6:
4c:79:db:3a:4c:72:06:fc:89:75:e4:b0:21:21:f5:13:48:11:
11:fc:ef:0a:72:3d:8d:c9:8e:12:ef:3a:6a:d6:64:7d:27:96:
d9:17:25:b5:bf:eb:d8:d5:01:2a:83:69:b7:62:75:7b:4f:ee:
a0:8f:13:20:10:78:d9:3b:08:d6:b8:57:62:18:54:cc:3b:2e:
b3:1e:e9:32:8c:92:65:53:af:b1:a2:90:33:a7:04:32:18:52:
b9:dd:f9:e5:06:9e:8c:57:1e:ad:f3:21:83:10:17:78:81:21:
5f:74:6f:4d:f2:a9:fe:45:b0:02:7c:16:dc:5e:02:03:36:01:
ce:05:26:be:4d:43:91:d5:79:79:7d:80:69:f1:05:68:85:54:
81:15:37:f0:9a:a8:5b:e2:ef:6d:49:51:13:e2:cb:0d:28:0b:
1a:5d:93:4a:5a:88:1c:72:b2:a7:c2:73:2a:ea:e0:fa:76:10:
0b:70:e9:3e:a7:81:a4:0d:d5:b2:2a:f5:c9:a4:de:61:61:b3:
c2:92:2d:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 13:50:11 2025 by rpki-client