Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/cc8ffe-36b4-4c80-a907-aeaa9df01a9d/1/wCS9ve1uXS_g-1JlALP_h2ZbYA4.mft
File: wCS9ve1uXS_g-1JlALP_h2ZbYA4.mft (raw, json)
Hash identifier: kCJv1Sel7upBSOSF0t0IXMmWHt8FXX50aL2nbnPLm3M=
Subject key identifier: 13:A6:B1:55:4E:D9:A4:C0:CF:F6:34:BA:B2:35:53:C3:9F:D7:1A:36
Authority key identifier: C0:24:BD:BD:ED:6E:5D:2F:E0:FB:52:65:00:B3:FF:87:66:5B:60:0E
Certificate issuer: /CN=c024bdbded6e5d2fe0fb526500b3ff87665b600e
Certificate serial: 0194BC051AC6EEEFA60F3A1D77F46552DFA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wCS9ve1uXS_g-1JlALP_h2ZbYA4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/cc8ffe-36b4-4c80-a907-aeaa9df01a9d/1/wCS9ve1uXS_g-1JlALP_h2ZbYA4.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 11:00:38 +0000
Manifest this update: Fri 31 Jan 2025 11:00:38 +0000
Manifest next update: Sat 01 Feb 2025 11:00:38 +0000
Files and hashes: 1: 6-ydJeMMctB8c_kcu4H6al3x9lI.roa (hash: gkHYAXqWoGGFpT0nUFUwvYsxIUFHF9fDa7NiP95iNN8=)
2: wCS9ve1uXS_g-1JlALP_h2ZbYA4.crl (hash: yz9Msqag4axTg7A3BKDR/rPSpapL3w2BS7j6qKxSh+Y=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:1a:c6:ee:ef:a6:0f:3a:1d:77:f4:65:52:df:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c024bdbded6e5d2fe0fb526500b3ff87665b600e
Validity
Not Before: Jan 31 11:00:38 2025 GMT
Not After : Feb 1 11:00:38 2025 GMT
Subject: CN=13a6b1554ed9a4c0cff634bab23553c39fd71a36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:69:a5:30:6d:da:b3:93:27:5e:25:bb:ae:76:
eb:10:b3:fe:9b:b0:dc:4c:b0:8e:92:83:21:55:bc:
fb:c7:c9:6f:60:53:7b:91:de:8b:67:9e:10:b6:51:
09:ea:0b:32:fe:21:eb:52:2f:a3:4f:bc:e0:25:38:
9b:97:ca:fe:09:63:5e:84:03:78:f0:4f:87:19:31:
e2:a5:6c:44:6f:0d:d5:16:88:f6:50:48:25:0a:f7:
15:41:02:ef:cb:41:08:5c:6a:b0:51:59:87:fa:ba:
b9:ff:ec:c3:49:c6:04:36:0e:3a:9e:53:7a:45:70:
e1:8c:22:c4:23:d1:6a:fa:a6:f0:a5:54:9e:de:a7:
b2:1a:3a:81:85:e8:cf:9b:c7:72:92:c8:56:14:9c:
fa:13:cb:73:89:1b:fe:6e:2f:c4:e8:c8:c2:3c:3f:
23:ac:97:df:57:87:00:eb:51:b8:c6:32:2b:03:50:
fe:42:0d:9c:a8:14:7c:1e:ca:a0:cd:66:48:c0:dc:
b0:c7:5f:bd:ec:59:04:ac:b7:7b:50:69:3d:13:1c:
7c:a9:80:40:a1:d8:39:d8:4e:90:0b:6f:2b:86:65:
ba:4f:33:99:c4:ad:48:3c:4f:07:d9:30:1d:0c:6d:
47:5f:36:b9:58:f0:3d:1c:d3:5d:08:86:ce:37:09:
63:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:A6:B1:55:4E:D9:A4:C0:CF:F6:34:BA:B2:35:53:C3:9F:D7:1A:36
X509v3 Authority Key Identifier:
keyid:C0:24:BD:BD:ED:6E:5D:2F:E0:FB:52:65:00:B3:FF:87:66:5B:60:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wCS9ve1uXS_g-1JlALP_h2ZbYA4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/cc8ffe-36b4-4c80-a907-aeaa9df01a9d/1/wCS9ve1uXS_g-1JlALP_h2ZbYA4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/cc8ffe-36b4-4c80-a907-aeaa9df01a9d/1/wCS9ve1uXS_g-1JlALP_h2ZbYA4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:85:9a:b6:64:0f:85:40:28:68:98:96:c9:bb:a5:0e:44:cd:
57:3d:6a:1d:ab:f6:f8:43:33:8b:f1:e0:56:f1:4a:48:cd:e5:
0d:23:85:04:4d:32:e8:ad:93:48:13:7a:c1:41:2e:30:7d:81:
83:aa:15:dd:ef:e8:a0:3b:2c:27:f3:cc:2b:e9:2a:72:51:3c:
38:72:00:6f:98:b7:a1:99:2a:c8:14:f8:e9:55:ed:17:c5:0d:
b4:b7:cb:8b:ee:e2:55:ed:07:37:78:e2:a2:e0:ae:af:fd:d7:
0f:d5:24:94:aa:38:94:7c:98:7b:0b:25:76:71:51:b5:59:54:
b5:a3:57:95:42:4f:52:9f:c1:65:74:c9:74:1c:3f:6f:3e:85:
e2:5b:42:2a:a9:af:15:4f:a8:20:61:2c:1b:1a:9c:92:48:1b:
84:72:3e:b1:a2:3f:4f:94:17:f7:c7:06:66:fc:25:63:b1:e0:
d7:b6:c9:03:4e:0d:01:82:dd:f3:d7:d6:cc:e1:15:10:da:60:
18:1c:33:83:a2:4c:9e:a3:fa:f8:d6:10:76:93:89:bf:a7:aa:
49:b5:35:7f:57:b9:10:40:2e:8c:97:9c:0e:d7:dc:d0:18:8d:
20:43:82:93:35:e3:70:e2:68:32:e1:2c:24:f9:de:78:f1:bf:
80:af:67:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:43:10 2025 by rpki-client