Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/4a61fc-d077-4f4d-b2ea-d90368270e14/1/wo0zhLQSx8zb_6ZB1BTBF90O0FU.mft
File: wo0zhLQSx8zb_6ZB1BTBF90O0FU.mft (raw, json)
Hash identifier: JjwiR8q/Zrsxg5ydBt4ns3oO+hAReiCUnhvuqMBD6zs=
Subject key identifier: 60:94:4D:99:6F:FE:BD:DA:32:F2:BB:1E:07:ED:3D:52:C4:05:68:9E
Authority key identifier: C2:8D:33:84:B4:12:C7:CC:DB:FF:A6:41:D4:14:C1:17:DD:0E:D0:55
Certificate issuer: /CN=c28d3384b412c7ccdbffa641d414c117dd0ed055
Certificate serial: 0194BCE07013402139D1FF0713DB0BB4ECF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wo0zhLQSx8zb_6ZB1BTBF90O0FU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/4a61fc-d077-4f4d-b2ea-d90368270e14/1/wo0zhLQSx8zb_6ZB1BTBF90O0FU.mft
Manifest number: 0162
Signing time: Fri 31 Jan 2025 15:00:12 +0000
Manifest this update: Fri 31 Jan 2025 15:00:12 +0000
Manifest next update: Sat 01 Feb 2025 15:00:12 +0000
Files and hashes: 1: wo0zhLQSx8zb_6ZB1BTBF90O0FU.crl (hash: dY/qqRY6dv4wAr+vlpuwuKFetHoTSaUypAE7b6+MolM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:70:13:40:21:39:d1:ff:07:13:db:0b:b4:ec:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c28d3384b412c7ccdbffa641d414c117dd0ed055
Validity
Not Before: Jan 31 15:00:12 2025 GMT
Not After : Feb 1 15:00:12 2025 GMT
Subject: CN=60944d996ffebdda32f2bb1e07ed3d52c405689e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:58:50:9d:72:f1:a9:b3:75:7c:03:4c:b4:a8:
ef:b7:16:14:de:a0:f1:da:7a:9c:08:7d:10:87:43:
35:f3:10:27:2d:46:0b:a5:a2:3c:66:fc:f1:d9:de:
f3:9d:16:20:b1:59:8c:66:f4:c4:07:25:72:c2:ae:
fd:e6:45:e6:e8:c1:6c:63:26:c3:9f:b5:3d:6b:e5:
8e:6d:ed:7e:30:85:bc:15:29:e0:ee:b4:2d:7c:6c:
7b:bf:c5:bb:5c:f7:e6:b6:dd:9e:ae:79:de:19:d6:
22:5f:c0:a3:c8:5c:f4:a0:c0:42:ea:43:6e:e9:ad:
c6:ea:df:2f:a7:aa:17:4e:c9:7e:00:e5:10:5c:8c:
b4:e0:d1:ed:c2:8f:bd:b2:05:b0:bd:63:d6:16:4f:
42:2c:ce:ee:3c:9c:ee:86:92:0c:e9:09:87:17:05:
3d:d5:1b:dc:3a:8e:52:41:73:24:7a:cf:61:4a:ea:
57:b4:63:66:23:0e:1f:9f:ed:af:ea:12:71:88:49:
3f:57:ee:63:dc:06:83:b1:f9:89:96:25:9c:ef:13:
81:d1:09:b5:38:5d:8a:1e:1e:c7:2a:4d:51:d7:1d:
e4:df:87:9d:dd:9c:77:4b:a3:2d:4a:d1:0a:f6:ad:
fe:3d:6d:df:a6:93:44:64:61:8f:e9:75:f8:f1:4f:
a8:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:94:4D:99:6F:FE:BD:DA:32:F2:BB:1E:07:ED:3D:52:C4:05:68:9E
X509v3 Authority Key Identifier:
keyid:C2:8D:33:84:B4:12:C7:CC:DB:FF:A6:41:D4:14:C1:17:DD:0E:D0:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wo0zhLQSx8zb_6ZB1BTBF90O0FU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/4a61fc-d077-4f4d-b2ea-d90368270e14/1/wo0zhLQSx8zb_6ZB1BTBF90O0FU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/4a61fc-d077-4f4d-b2ea-d90368270e14/1/wo0zhLQSx8zb_6ZB1BTBF90O0FU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:02:60:e9:9d:e4:6c:8f:8e:2b:d5:ca:d0:ad:e3:0a:69:57:
43:74:e4:2e:ac:f8:ef:80:4b:fc:25:e5:e7:56:f4:10:b7:4e:
00:72:cf:fc:0d:f4:84:3c:29:61:08:8e:56:43:1c:2d:6a:86:
f4:40:26:0d:8d:45:ae:5a:0c:56:13:e6:e8:b1:21:b9:6d:80:
dc:b0:f9:73:08:05:32:30:de:2c:48:aa:fb:00:19:25:38:16:
c5:4c:a4:98:b4:91:23:59:07:a8:51:07:37:3c:18:c7:42:4d:
b9:68:e3:71:70:9c:03:cc:fc:84:71:82:2b:67:f1:5f:1e:84:
06:66:06:18:a0:0d:5d:03:be:9b:7e:3d:b7:e1:28:96:d0:ec:
1e:01:68:a3:77:7d:e3:3b:2c:ad:ea:33:83:70:18:71:9b:aa:
a4:5d:85:f2:63:9d:5d:15:34:65:86:e7:ec:9c:00:b7:f2:af:
3c:81:b7:c8:70:bf:c4:3c:d9:43:0b:88:c3:67:34:93:6c:7e:
41:a6:e1:5b:50:dd:fc:d7:e5:76:16:a8:6e:c7:cd:c1:b3:37:
51:17:6d:b4:0c:33:df:89:5b:b4:2d:bb:b4:7a:f7:5b:9b:f6:
d5:63:5d:f3:4f:6e:f2:9d:97:16:10:9a:b9:77:80:4a:a8:92:
22:14:f7:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:41:42 2025 by rpki-client