Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/c36c4a-88ae-4bd2-bf37-9d5e634aaf9f/1/wa45j5qt0GOL_-okwceeuIMveHU.mft
File: wa45j5qt0GOL_-okwceeuIMveHU.mft (raw, json)
Hash identifier: qHyJcwF3J3Ft0zqMzFF7L2LM/I/YptnBbtzt4Y8K5SA=
Subject key identifier: 5D:12:60:CE:5C:9C:4F:39:6F:94:EC:02:E2:2A:EA:C1:07:C2:A9:FC
Authority key identifier: C1:AE:39:8F:9A:AD:D0:63:8B:FF:EA:24:C1:C7:9E:B8:83:2F:78:75
Certificate issuer: /CN=c1ae398f9aadd0638bffea24c1c79eb8832f7875
Certificate serial: 0194BC72B9EA919F592CDBF98D5C530F847A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wa45j5qt0GOL_-okwceeuIMveHU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/c36c4a-88ae-4bd2-bf37-9d5e634aaf9f/1/wa45j5qt0GOL_-okwceeuIMveHU.mft
Manifest number: 117A
Signing time: Fri 31 Jan 2025 13:00:22 +0000
Manifest this update: Fri 31 Jan 2025 13:00:22 +0000
Manifest next update: Sat 01 Feb 2025 13:00:22 +0000
Files and hashes: 1: wa45j5qt0GOL_-okwceeuIMveHU.crl (hash: ejur+wkMUdtKD7Dts/WMMHm8i0gyKb7qesxClslebJg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:b9:ea:91:9f:59:2c:db:f9:8d:5c:53:0f:84:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1ae398f9aadd0638bffea24c1c79eb8832f7875
Validity
Not Before: Jan 31 13:00:22 2025 GMT
Not After : Feb 1 13:00:22 2025 GMT
Subject: CN=5d1260ce5c9c4f396f94ec02e22aeac107c2a9fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:3f:39:c4:3e:1f:7a:d4:0a:6a:0d:94:2f:da:
75:a9:04:a2:6a:67:e3:28:6c:cb:31:08:93:cb:a5:
f8:21:b6:50:75:12:23:6b:ca:02:ca:76:32:a0:ef:
c1:d1:e2:dc:35:07:f9:45:9e:ae:24:aa:34:fc:10:
08:38:50:58:ec:74:80:c3:55:98:bf:1b:df:d8:b1:
42:d4:16:ac:89:c4:13:b4:58:65:6b:a2:20:c6:74:
8a:79:c3:4f:a7:e0:b1:64:de:07:01:46:a0:1f:66:
5a:b6:d4:f7:ef:dd:27:39:83:20:c1:10:82:c5:f8:
de:3a:08:a9:8d:a4:67:e0:2b:c8:e0:20:be:f0:e8:
a3:47:46:03:60:aa:3b:f1:0f:ab:57:29:d9:27:8c:
42:6a:d6:4d:01:77:78:d5:ac:83:ef:ac:87:34:a9:
39:88:f4:6d:b0:48:16:53:fe:0e:35:5a:68:90:ef:
98:a3:2e:ab:f7:72:2e:2c:7f:1d:e2:02:35:cd:31:
6f:68:df:3a:89:3b:87:85:c1:6e:fa:53:5c:75:76:
9e:6e:58:06:6b:37:b9:e6:f3:5c:55:41:bb:fc:b0:
d1:b5:b1:89:92:ea:0a:9f:84:4b:dc:a7:c7:8d:be:
60:78:01:9d:20:0d:f0:9e:a1:fe:10:bd:85:c3:16:
76:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:12:60:CE:5C:9C:4F:39:6F:94:EC:02:E2:2A:EA:C1:07:C2:A9:FC
X509v3 Authority Key Identifier:
keyid:C1:AE:39:8F:9A:AD:D0:63:8B:FF:EA:24:C1:C7:9E:B8:83:2F:78:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wa45j5qt0GOL_-okwceeuIMveHU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/c36c4a-88ae-4bd2-bf37-9d5e634aaf9f/1/wa45j5qt0GOL_-okwceeuIMveHU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/c36c4a-88ae-4bd2-bf37-9d5e634aaf9f/1/wa45j5qt0GOL_-okwceeuIMveHU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:95:44:77:bf:a4:28:aa:d9:dd:c5:6f:3c:0e:8e:13:2c:c7:
ad:7f:1e:27:79:ee:e6:68:13:78:db:fc:9d:2e:49:3b:8e:85:
02:f3:e9:50:ee:7e:c8:4b:5e:da:07:97:46:07:56:87:b5:4d:
e7:ab:5b:84:2d:32:29:99:18:fe:1e:38:50:ee:6b:3b:07:a0:
5a:91:76:cd:1c:db:7f:2f:cd:eb:7c:fa:b8:ed:2b:ab:b5:a1:
1b:8f:dd:57:cf:ae:6c:ef:a0:79:b6:29:93:ff:53:07:75:a2:
81:13:7c:2b:66:34:39:25:ce:c2:98:5b:24:31:4b:f9:4d:3a:
5d:52:bd:e7:4d:e2:54:9c:b3:13:4e:03:91:2a:f1:da:b8:87:
2a:90:b3:6c:1b:93:16:56:cb:14:85:ef:90:93:b2:55:cd:07:
eb:a3:ee:8b:20:1b:c7:90:68:b3:ab:d5:31:d0:16:56:20:18:
bc:07:9a:7b:fc:be:36:7f:8c:5d:74:9f:25:bd:f6:01:0f:5f:
fd:d9:6d:14:14:c1:e7:aa:fa:e7:ad:eb:89:52:ff:d8:10:22:
5d:01:de:de:47:77:c2:1c:9e:8b:6f:c2:1e:47:cf:fc:e9:03:
20:58:91:84:41:59:81:07:22:5b:28:99:ef:13:b0:60:89:1c:
c1:98:a0:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 14:31:05 2025 by rpki-client