Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/04e8dd-de3c-47fa-a024-f33797e39bb2/1/w6SfZaPWgMQo_ZTWfmWicJ8Cks8.mft
File: w6SfZaPWgMQo_ZTWfmWicJ8Cks8.mft (raw, json)
Hash identifier: H0y4rP1fhphF+82mkWh8irEQoA2kHIgqb7TKMSfRtjY=
Subject key identifier: 2B:2F:A2:6D:5B:58:D3:DD:75:52:35:41:AF:F3:A1:B1:CA:56:ED:D7
Authority key identifier: C3:A4:9F:65:A3:D6:80:C4:28:FD:94:D6:7E:65:A2:70:9F:02:92:CF
Certificate issuer: /CN=c3a49f65a3d680c428fd94d67e65a2709f0292cf
Certificate serial: 0194BD8553E36B965FCE643D8400EDFA02C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w6SfZaPWgMQo_ZTWfmWicJ8Cks8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/04e8dd-de3c-47fa-a024-f33797e39bb2/1/w6SfZaPWgMQo_ZTWfmWicJ8Cks8.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 18:00:19 +0000
Manifest this update: Fri 31 Jan 2025 18:00:19 +0000
Manifest next update: Sat 01 Feb 2025 18:00:19 +0000
Files and hashes: 1: C8on01Bgko2Wx9jKjMpn7FCShCI.roa (hash: NvYVpYNTacJm9Dvti1H+p4nGJK6g8JeQhPdSMYmd5BQ=)
2: lBLUc28nwdLkSsrePQSmyxKstGI.roa (hash: vrIWIUHlJDuCxB1hzJyqC5GbG7oElAvbtOgjYcaloKs=)
3: w6SfZaPWgMQo_ZTWfmWicJ8Cks8.crl (hash: S9avQg7u/a+YeUcd6KtLg+v2EcAZG5Vrnp5vOopm9V4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:53:e3:6b:96:5f:ce:64:3d:84:00:ed:fa:02:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3a49f65a3d680c428fd94d67e65a2709f0292cf
Validity
Not Before: Jan 31 18:00:19 2025 GMT
Not After : Feb 1 18:00:19 2025 GMT
Subject: CN=2b2fa26d5b58d3dd75523541aff3a1b1ca56edd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:4f:03:2f:99:dc:d8:9f:e8:d3:86:78:2d:8f:
d6:dd:eb:62:65:7f:c9:c8:c0:da:12:2a:bd:95:8d:
9b:19:ed:56:3a:14:5c:47:0b:b3:bb:92:5c:ce:0d:
03:4b:d0:0d:ff:34:7e:28:eb:4a:95:aa:fd:43:b4:
2e:de:06:e4:b2:71:55:df:43:23:ed:ae:52:46:6a:
22:c4:b1:6b:f4:13:c0:29:1b:ad:53:fe:e9:a4:0e:
db:1f:52:71:b8:92:c7:07:6c:09:44:47:f3:23:f2:
99:44:e8:07:f4:0b:7b:57:65:d8:02:4e:4d:b4:85:
a7:19:24:29:4f:6e:8b:6b:a9:2f:70:90:0d:a6:e9:
3e:9c:69:73:6a:66:67:52:5f:2e:d5:38:b7:6c:d8:
fc:32:b9:60:75:18:36:45:b5:c9:ab:48:e0:56:f1:
c7:28:8b:68:b2:b3:7e:83:8a:42:5b:59:5e:64:fb:
46:13:96:e7:7d:0b:a0:ed:ec:4c:da:1b:01:4f:24:
a5:fb:ad:6c:71:d8:2d:67:c8:a4:6a:0a:7a:ac:70:
5a:f2:00:8e:85:b9:83:3e:bc:75:58:59:36:b7:ab:
6c:91:3c:3b:75:bc:d6:34:90:44:8f:42:ea:4c:24:
8f:4c:33:06:66:8d:ce:29:e0:d3:f8:64:61:d2:0a:
c8:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:2F:A2:6D:5B:58:D3:DD:75:52:35:41:AF:F3:A1:B1:CA:56:ED:D7
X509v3 Authority Key Identifier:
keyid:C3:A4:9F:65:A3:D6:80:C4:28:FD:94:D6:7E:65:A2:70:9F:02:92:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w6SfZaPWgMQo_ZTWfmWicJ8Cks8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/04e8dd-de3c-47fa-a024-f33797e39bb2/1/w6SfZaPWgMQo_ZTWfmWicJ8Cks8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/04e8dd-de3c-47fa-a024-f33797e39bb2/1/w6SfZaPWgMQo_ZTWfmWicJ8Cks8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:00:1b:0e:28:29:6b:17:bb:84:ad:1f:f9:b9:20:99:bf:0b:
30:d7:0b:ae:0d:3f:ac:f6:b7:09:af:27:c3:76:aa:ae:c2:0d:
f1:dc:54:47:e7:92:ef:94:8b:ae:d7:ce:eb:8f:d8:f5:76:2c:
ab:a5:60:59:01:ba:de:03:40:36:26:0b:4e:70:04:d3:67:03:
15:09:db:a8:62:0b:f6:5d:22:93:43:79:78:53:6a:05:eb:81:
c9:3d:d2:03:3d:8a:61:50:83:df:a6:cc:68:05:d5:3f:ca:fb:
dc:e6:6a:21:34:5f:28:11:fd:5c:88:0c:a3:c4:23:db:cd:2b:
cb:bb:ea:8d:71:b4:f9:c3:3a:47:74:fd:59:a0:aa:d7:10:58:
8f:15:d5:00:d0:30:13:64:e5:ee:b1:7a:b6:32:bf:87:73:bb:
39:0f:7a:6d:f1:07:37:84:2a:b4:9c:08:16:d9:87:b0:c7:3a:
e3:61:6b:56:0c:9c:eb:dd:f4:1e:0e:18:05:c7:39:18:7d:ff:
48:44:63:89:06:2f:48:3c:ff:c0:df:cf:1e:ad:0b:73:02:91:
5e:23:f0:b2:63:7e:19:f3:35:3e:00:82:4e:33:7b:35:cd:fe:
d8:d4:c0:1a:37:0e:5b:f4:ea:01:95:1d:8f:55:07:ac:9a:83:
2d:d0:e5:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:46:58 2025 by rpki-client