Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/2a84e9-68b3-4e3f-b615-a0ad61d194a1/1/wzCs3wQbXcx-XsbPj_i9BkjoZww.mft
File: wzCs3wQbXcx-XsbPj_i9BkjoZww.mft (raw, json)
Hash identifier: Hth6VA4leCG+bsVxL4/zMwln6g1nSU13Qk5eZCukWo4=
Subject key identifier: 9D:E4:92:25:DD:D2:8F:E2:49:59:6F:34:0B:4A:A7:25:C2:9A:CA:2C
Authority key identifier: C3:30:AC:DF:04:1B:5D:CC:7E:5E:C6:CF:8F:F8:BD:06:48:E8:67:0C
Certificate issuer: /CN=c330acdf041b5dcc7e5ec6cf8ff8bd0648e8670c
Certificate serial: 0194BCE0721E11BA22FA9BF3A1541694B7E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wzCs3wQbXcx-XsbPj_i9BkjoZww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/2a84e9-68b3-4e3f-b615-a0ad61d194a1/1/wzCs3wQbXcx-XsbPj_i9BkjoZww.mft
Manifest number: 10C3
Signing time: Fri 31 Jan 2025 15:00:13 +0000
Manifest this update: Fri 31 Jan 2025 15:00:13 +0000
Manifest next update: Sat 01 Feb 2025 15:00:13 +0000
Files and hashes: 1: NfY8zpyx6EDpP6DxTuquvNoK9sY.roa (hash: mmbOZfwYelbaWl9riAjIdhT8MqPp3t5vAxerApfLsl0=)
2: wzCs3wQbXcx-XsbPj_i9BkjoZww.crl (hash: Nhl0j5w7K+NfLEtmaO2tdAvhDSV76xQPIKoBVfMwGco=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:72:1e:11:ba:22:fa:9b:f3:a1:54:16:94:b7:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c330acdf041b5dcc7e5ec6cf8ff8bd0648e8670c
Validity
Not Before: Jan 31 15:00:13 2025 GMT
Not After : Feb 1 15:00:13 2025 GMT
Subject: CN=9de49225ddd28fe249596f340b4aa725c29aca2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:03:c2:9e:9e:59:7d:03:3f:ea:bf:c1:cc:04:
0a:9d:7f:e9:bc:7e:47:7e:e4:2f:2b:10:e3:bb:75:
b7:d9:3a:13:80:ad:53:ab:ef:0f:ac:8a:83:5d:47:
5b:a6:74:40:28:1d:3b:4b:ea:28:f3:5a:e2:4d:8d:
1f:e0:d8:f0:7f:1e:97:a6:38:35:69:27:d5:38:6b:
6e:d1:a0:e5:a4:3f:92:27:68:88:4e:12:f7:f0:c8:
d5:81:44:6b:97:d2:db:c7:27:0e:b6:11:91:9d:5e:
7a:56:1b:6b:1d:b0:06:0b:0f:c1:7b:d6:ae:a1:ee:
24:f5:6e:da:d5:79:e5:bc:b5:78:96:2c:8f:47:ae:
fd:97:43:1c:24:3e:57:cb:9d:5a:0c:eb:9a:33:48:
b5:62:d7:7a:0c:c2:14:f9:4b:09:83:f6:4a:30:02:
e0:72:c2:f7:3c:ea:6c:37:05:e2:ad:b7:3b:61:1c:
bb:75:0a:67:73:a1:78:6f:c7:64:fb:7d:24:b0:49:
c5:1b:fc:92:f1:5d:89:cf:22:34:3a:0b:eb:89:07:
ac:b7:2d:d8:91:74:dc:ff:78:56:18:54:53:f9:e1:
bb:a3:e3:06:85:94:aa:49:2f:91:48:2f:bf:5d:90:
cf:7e:c6:59:4b:dc:3c:26:41:ba:5e:d1:dc:b3:4a:
d3:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:E4:92:25:DD:D2:8F:E2:49:59:6F:34:0B:4A:A7:25:C2:9A:CA:2C
X509v3 Authority Key Identifier:
keyid:C3:30:AC:DF:04:1B:5D:CC:7E:5E:C6:CF:8F:F8:BD:06:48:E8:67:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wzCs3wQbXcx-XsbPj_i9BkjoZww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/2a84e9-68b3-4e3f-b615-a0ad61d194a1/1/wzCs3wQbXcx-XsbPj_i9BkjoZww.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/2a84e9-68b3-4e3f-b615-a0ad61d194a1/1/wzCs3wQbXcx-XsbPj_i9BkjoZww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:66:e4:00:79:7c:90:4e:3e:9a:0e:6a:59:da:7a:8f:98:f8:
89:d7:68:5b:b0:15:03:91:20:0d:71:db:2f:10:23:e3:88:84:
fb:69:18:71:68:18:8b:6c:fa:2e:25:3b:e2:d0:3d:37:08:9a:
09:59:21:e1:a8:e1:4c:f8:c7:96:bd:e3:22:4d:3b:34:c4:3d:
60:e4:87:4c:41:66:f8:fc:b5:9e:da:9f:07:3b:79:54:c3:b2:
83:fc:0d:b0:09:6d:19:72:fd:fa:cb:aa:aa:22:93:96:69:aa:
61:f5:11:37:5d:a5:a6:80:d0:08:1d:d6:f8:dc:7a:c4:6e:da:
82:e8:34:ef:f4:cc:f7:51:db:7f:35:5b:69:63:86:80:51:19:
d5:7a:bf:82:e7:a8:b0:b4:78:96:83:e7:0d:c7:72:1a:af:35:
1b:a7:cf:ac:2c:08:10:02:35:a4:14:48:03:bd:ea:4e:e0:77:
3f:08:79:24:c0:1b:95:a2:eb:61:46:99:2b:58:34:a1:75:2d:
ef:ad:37:21:9e:48:f8:c2:91:00:6c:5d:91:b4:7f:90:6a:b6:
55:1f:0b:e8:e3:c2:92:b4:7e:ea:73:40:90:53:d2:eb:f1:6d:
17:03:ff:5e:46:d6:36:c2:fd:b6:68:e3:15:1c:9f:09:7d:76:
30:6b:22:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:05:37 2025 by rpki-client