Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/33051d-c2a0-4ac7-b7f3-90adec85dd85/1/wBekqCFysgav7hwT0pbuJgOFtXE.mft
File: wBekqCFysgav7hwT0pbuJgOFtXE.mft (raw, json)
Hash identifier: p/GFxQSCJeNm45sbtAFXaPhPcq+pZvJ2gyTbgdHq6nY=
Subject key identifier: 7C:6B:82:09:BF:C1:BF:7D:AD:BB:02:DD:42:7E:BC:D8:59:82:3F:0D
Authority key identifier: C0:17:A4:A8:21:72:B2:06:AF:EE:1C:13:D2:96:EE:26:03:85:B5:71
Certificate issuer: /CN=c017a4a82172b206afee1c13d296ee260385b571
Certificate serial: 0194BC3C0E5A036B70308CD3CE44FF6A0190
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wBekqCFysgav7hwT0pbuJgOFtXE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/33051d-c2a0-4ac7-b7f3-90adec85dd85/1/wBekqCFysgav7hwT0pbuJgOFtXE.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 12:00:39 +0000
Manifest this update: Fri 31 Jan 2025 12:00:39 +0000
Manifest next update: Sat 01 Feb 2025 12:00:39 +0000
Files and hashes: 1: dCiNIBkWF2RsTfBzLCoJZdfeZWw.roa (hash: YbTpFGUkZZd0ope4WSof9klg7VlGCuc2kGLkcWvVqI4=)
2: wBekqCFysgav7hwT0pbuJgOFtXE.crl (hash: bFhbgSIckgaqxbd0aXbL1ZSJDird8UImS8qDQ8qSoTg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:0e:5a:03:6b:70:30:8c:d3:ce:44:ff:6a:01:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c017a4a82172b206afee1c13d296ee260385b571
Validity
Not Before: Jan 31 12:00:39 2025 GMT
Not After : Feb 1 12:00:39 2025 GMT
Subject: CN=7c6b8209bfc1bf7dadbb02dd427ebcd859823f0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f4:62:0c:c4:6e:ac:be:ae:44:46:6d:2b:be:
36:1a:4a:33:c9:f8:a2:26:79:53:1d:2f:1e:c2:4d:
02:d7:c7:61:75:0b:61:da:19:a7:91:35:03:82:66:
d2:fb:e2:86:e9:07:39:b2:cf:23:76:49:42:32:92:
19:bf:b9:86:ec:9e:5c:03:c5:66:a8:5e:7b:dc:82:
84:6e:70:80:d2:9a:fd:1f:e9:7b:03:68:cb:43:4d:
eb:ac:4b:1b:fc:76:1a:ed:a8:42:40:7c:33:7d:b0:
49:5c:cc:50:d9:2b:f3:8d:cb:1c:dd:33:6c:ca:ad:
a6:b3:3c:49:67:20:c1:6b:dc:64:5e:98:8b:fd:6c:
33:f2:24:61:0a:98:1d:54:51:4e:62:98:5f:90:93:
97:cd:fc:3f:9a:95:b1:c0:7e:19:8f:2d:08:fb:63:
1b:8e:03:b6:76:01:c9:55:54:39:2a:4a:7b:9c:e2:
d6:62:c4:7b:4c:f5:42:70:96:dd:43:3c:73:a2:da:
d0:04:b6:44:1a:00:85:7b:71:6d:86:8f:84:7f:bf:
5a:fe:bd:16:28:31:f9:f0:71:c4:a9:70:ec:6f:85:
b3:68:0a:53:93:4f:97:60:60:84:06:46:b0:bc:bf:
6b:ba:98:3e:f5:95:d4:ef:23:64:46:bb:eb:a2:f3:
16:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:6B:82:09:BF:C1:BF:7D:AD:BB:02:DD:42:7E:BC:D8:59:82:3F:0D
X509v3 Authority Key Identifier:
keyid:C0:17:A4:A8:21:72:B2:06:AF:EE:1C:13:D2:96:EE:26:03:85:B5:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wBekqCFysgav7hwT0pbuJgOFtXE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/33051d-c2a0-4ac7-b7f3-90adec85dd85/1/wBekqCFysgav7hwT0pbuJgOFtXE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/33051d-c2a0-4ac7-b7f3-90adec85dd85/1/wBekqCFysgav7hwT0pbuJgOFtXE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:15:d3:fd:dd:cd:0f:d9:73:d2:27:c4:df:e2:dc:e8:72:0e:
bc:bf:09:7e:2c:2a:52:52:84:8e:37:7b:87:3f:ea:b4:a6:61:
15:3c:f6:29:88:ea:e7:19:a5:21:02:0e:93:ab:5b:44:69:e7:
87:f5:06:91:23:b6:bb:d1:ce:31:db:2a:5f:1f:33:4e:64:37:
b8:16:37:1c:df:22:9a:fb:8e:4f:91:73:c1:05:a7:3b:e5:d1:
6e:8d:c7:6c:f6:50:60:18:cc:29:2d:3b:e7:b7:12:b7:71:1a:
c2:f8:7c:6f:7b:e3:d6:78:6c:96:c2:cd:42:22:b9:2d:2a:84:
90:a0:2e:06:1e:fe:8e:5d:d0:83:d7:8c:a7:53:63:0f:5f:2b:
ec:6a:92:4b:02:21:80:c2:1b:d6:c8:de:d4:41:58:56:46:88:
96:a1:a4:31:3f:19:bc:ed:df:96:d7:94:ee:5b:bf:83:f8:20:
58:bf:67:f2:90:4d:c7:d1:60:6f:b2:ff:95:44:60:72:0f:61:
69:74:85:17:b9:3b:d3:cc:c3:b7:23:22:32:76:67:4a:ee:17:
ad:84:80:46:e3:b9:39:54:54:e4:5a:0b:d1:de:a2:70:f7:7f:
dd:e6:43:bc:d6:fb:78:c0:d2:ad:8d:2d:ac:4a:c0:50:ae:71:
91:b0:fc:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:14:24 2025 by rpki-client