Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/aebd42-07a3-4cb5-852e-52afc77ca18f/1/wQKF31sDng8E4t_s4opaj77G6Tg.mft
File: wQKF31sDng8E4t_s4opaj77G6Tg.mft (raw, json)
Hash identifier: UjyHL6UCOAQYy15A9Y0S38KeYLsQuUYni7jUdfOXoIA=
Subject key identifier: 8B:94:05:F0:42:0E:42:5B:77:F1:CA:CE:60:8C:29:EA:1F:2F:63:30
Authority key identifier: C1:02:85:DF:5B:03:9E:0F:04:E2:DF:EC:E2:8A:5A:8F:BE:C6:E9:38
Certificate issuer: /CN=c10285df5b039e0f04e2dfece28a5a8fbec6e938
Certificate serial: 0194BBCE5A3D411580D61DBB89BA5BDC3C0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wQKF31sDng8E4t_s4opaj77G6Tg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/aebd42-07a3-4cb5-852e-52afc77ca18f/1/wQKF31sDng8E4t_s4opaj77G6Tg.mft
Manifest number: 0D63
Signing time: Fri 31 Jan 2025 10:00:50 +0000
Manifest this update: Fri 31 Jan 2025 10:00:50 +0000
Manifest next update: Sat 01 Feb 2025 10:00:50 +0000
Files and hashes: 1: XqKPzfmuCzaXuReNqmun-bylVl0.roa (hash: fIH8TXgcjjHXQ/BvOpbDJ0pldyGYRtZMTKQJxTQ5HkU=)
2: ty37WXzEM_QABRJJkI6c7K_G8EQ.roa (hash: KUqDTpdF99zPoKmTMTv8GshjWBlrKcQSI4Ly51l4brg=)
3: wQKF31sDng8E4t_s4opaj77G6Tg.crl (hash: FV0FIF8udowngYg/Af5CwDGPv6MynKF1y1jiDpmEYec=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:5a:3d:41:15:80:d6:1d:bb:89:ba:5b:dc:3c:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c10285df5b039e0f04e2dfece28a5a8fbec6e938
Validity
Not Before: Jan 31 10:00:50 2025 GMT
Not After : Feb 1 10:00:50 2025 GMT
Subject: CN=8b9405f0420e425b77f1cace608c29ea1f2f6330
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:03:44:86:32:74:db:18:3a:e8:0b:e5:ea:52:
69:aa:12:ca:20:26:46:9a:53:d6:06:e0:dd:7c:a7:
08:95:c0:e5:49:06:d2:23:99:49:7e:01:14:4c:00:
55:45:0f:ba:41:10:9b:ce:2a:db:8c:70:56:92:63:
d4:a3:87:dc:e0:9c:f2:0b:c7:83:a6:9d:3f:0c:af:
71:4b:ec:1b:12:b3:2b:3d:02:d9:83:08:46:b7:38:
3a:3b:fe:a0:ba:2d:65:0e:e9:d9:ec:87:74:30:2d:
0b:23:ca:2d:9e:04:f4:da:ff:90:4a:78:2e:d6:63:
9b:7b:cd:12:54:ff:3e:1e:f9:3d:ce:72:76:d6:03:
13:d6:77:3b:22:d5:8e:7a:4e:61:f5:91:e6:f7:b8:
ad:03:cb:36:d2:61:1b:a8:d5:a2:3e:2f:17:a9:3d:
03:8f:9f:e0:9f:3b:eb:91:a1:4c:dc:0a:90:1e:5d:
18:87:72:bd:ab:e0:f0:01:87:13:0e:b1:67:47:9f:
d6:95:5b:5d:b2:d4:a7:28:0a:da:42:19:ac:d1:f4:
8c:fb:6b:8d:03:26:8f:30:55:1f:27:e1:f9:f4:c4:
77:92:c4:a7:b2:fe:d1:28:5f:96:a9:c0:34:e1:5e:
4a:18:d5:9a:83:95:1f:49:38:ae:ec:9d:b9:dd:ed:
af:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:94:05:F0:42:0E:42:5B:77:F1:CA:CE:60:8C:29:EA:1F:2F:63:30
X509v3 Authority Key Identifier:
keyid:C1:02:85:DF:5B:03:9E:0F:04:E2:DF:EC:E2:8A:5A:8F:BE:C6:E9:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wQKF31sDng8E4t_s4opaj77G6Tg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/aebd42-07a3-4cb5-852e-52afc77ca18f/1/wQKF31sDng8E4t_s4opaj77G6Tg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/aebd42-07a3-4cb5-852e-52afc77ca18f/1/wQKF31sDng8E4t_s4opaj77G6Tg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:5f:05:e6:e8:bf:ee:d8:2d:a6:d1:73:7c:5c:ea:91:6a:f5:
3b:57:94:bc:ec:b8:57:4f:4a:7d:8c:6e:e7:70:ed:b1:44:68:
ab:a0:52:d6:51:f2:9b:fc:23:39:66:0a:e3:95:5f:88:cf:0a:
c2:1c:39:40:d2:b0:ff:ea:d1:a1:6f:08:20:29:44:55:6f:09:
47:44:ff:d0:66:82:59:b1:e0:9d:95:48:31:09:90:39:8a:c9:
c4:78:ed:76:c2:c3:02:6a:ac:98:b4:5d:e6:6a:af:2f:ae:a6:
06:11:33:47:df:55:ba:7a:1e:74:14:a9:6c:f0:52:7c:d6:3d:
1a:61:02:b9:71:97:a3:44:5e:72:57:f6:f8:5f:ee:7e:eb:b5:
8a:c1:52:0f:cf:21:60:94:b1:43:76:d5:98:dc:23:8a:0b:16:
b0:88:ab:c5:e2:fe:f8:1d:f2:11:aa:95:ea:e3:a9:72:ce:70:
e8:c6:9b:76:48:46:2b:f1:49:bb:c6:68:fa:dd:13:9e:57:42:
fe:0e:8c:d0:4b:ad:f3:23:56:92:1a:95:37:e0:f5:21:87:ea:
b1:04:aa:11:5b:e4:d9:0f:39:ee:c2:1c:a4:d2:7a:d1:77:1e:
21:34:ec:aa:db:f2:bb:04:79:0e:1a:88:15:4a:6b:43:a4:99:
d4:a2:68:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:43:00 2025 by rpki-client