Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/3ee969-98d1-481a-a487-9a895467da85/1/wlEKilJdybHsCxVg0JCmQmjULsQ.mft
File: wlEKilJdybHsCxVg0JCmQmjULsQ.mft (raw, json)
Hash identifier: CY39by+0FGNpx7EOTDTYX6bMMFtkm0jomUrrOy1zC0s=
Subject key identifier: 52:9D:47:73:46:90:0D:5C:2A:D0:78:71:31:24:C5:AA:7C:6C:35:69
Authority key identifier: C2:51:0A:8A:52:5D:C9:B1:EC:0B:15:60:D0:90:A6:42:68:D4:2E:C4
Certificate issuer: /CN=c2510a8a525dc9b1ec0b1560d090a64268d42ec4
Certificate serial: 0194BD1761334AC73B4831C4FDE4006D45A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wlEKilJdybHsCxVg0JCmQmjULsQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/3ee969-98d1-481a-a487-9a895467da85/1/wlEKilJdybHsCxVg0JCmQmjULsQ.mft
Manifest number: 13D5
Signing time: Fri 31 Jan 2025 16:00:13 +0000
Manifest this update: Fri 31 Jan 2025 16:00:13 +0000
Manifest next update: Sat 01 Feb 2025 16:00:13 +0000
Files and hashes: 1: FaPK4dABXX1JUG-DgodpiiYFyXk.roa (hash: 8EnGZIA4ScfpCaGufhHcnmIDRY1lMTTgXZqEJ9E7v2g=)
2: bYeYVYEdCXCzK3hGWezO0ZNHveg.roa (hash: UaiyZMeOYv/TRvUCkbZ9PcMP5ygVyQhx0p+DkQtZkYA=)
3: wlEKilJdybHsCxVg0JCmQmjULsQ.crl (hash: uV+oza37KEfRgMkMoAta8Mhp9FCijH8GHXRkWbw4tIk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:61:33:4a:c7:3b:48:31:c4:fd:e4:00:6d:45:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2510a8a525dc9b1ec0b1560d090a64268d42ec4
Validity
Not Before: Jan 31 16:00:13 2025 GMT
Not After : Feb 1 16:00:13 2025 GMT
Subject: CN=529d477346900d5c2ad078713124c5aa7c6c3569
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:96:10:42:9e:58:2b:fe:7a:46:f8:fa:69:04:
3f:db:e4:f4:85:9e:e2:5b:a2:52:4d:a7:40:64:89:
1b:76:8a:d5:6d:09:de:04:fc:8d:e0:b0:32:28:60:
e2:13:1e:7b:a6:7e:8b:a8:62:44:68:8e:4b:04:9f:
76:d2:0e:fe:0f:a3:92:1c:f8:49:55:32:78:22:3f:
73:8a:30:08:39:de:96:4c:84:8f:6e:f8:49:68:39:
a1:f1:a7:0f:92:43:f5:3e:6b:ee:b2:f1:8f:84:93:
b4:ea:1a:8a:98:85:01:5b:2e:85:bc:5d:07:65:15:
01:1b:51:93:3d:89:94:73:ae:d3:fd:2b:13:fd:1a:
8b:3a:09:77:a6:3e:b4:84:f1:d6:a0:f4:a3:f9:ac:
90:a9:d4:de:b2:ea:75:df:8e:c8:2c:89:02:c2:8e:
93:5b:33:dd:b3:82:14:80:b1:33:9b:a1:23:d7:51:
22:c5:72:fe:82:53:c2:07:7d:aa:95:a7:b3:e6:1d:
41:9b:12:29:e6:5c:a9:d8:43:56:b1:14:02:01:3b:
66:1d:81:75:22:85:f2:3e:64:aa:01:ce:b5:8f:d1:
db:5c:1b:5f:e5:cf:f9:c7:8b:38:15:06:a3:ba:13:
c1:e6:f3:91:3c:3b:d1:1d:b4:96:b2:d6:47:60:ab:
08:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:9D:47:73:46:90:0D:5C:2A:D0:78:71:31:24:C5:AA:7C:6C:35:69
X509v3 Authority Key Identifier:
keyid:C2:51:0A:8A:52:5D:C9:B1:EC:0B:15:60:D0:90:A6:42:68:D4:2E:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wlEKilJdybHsCxVg0JCmQmjULsQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/3ee969-98d1-481a-a487-9a895467da85/1/wlEKilJdybHsCxVg0JCmQmjULsQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/3ee969-98d1-481a-a487-9a895467da85/1/wlEKilJdybHsCxVg0JCmQmjULsQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:bc:fc:d5:7d:19:14:d4:4e:4b:03:77:84:69:a7:bb:c2:a1:
ac:3c:96:5d:ca:4d:a5:1f:08:f5:cf:2b:b8:de:e0:61:28:af:
f8:3b:96:5b:5b:6b:c8:8b:41:6e:41:57:43:66:4f:70:ab:68:
14:13:76:89:7b:e3:45:6f:de:19:39:46:65:1b:c5:7c:75:20:
2d:93:a6:49:17:8a:01:cb:b4:d4:48:44:7d:6b:a0:f1:87:45:
f9:86:b7:a7:24:cb:98:4b:bc:99:2b:4a:03:6d:06:82:58:09:
18:0a:e1:b5:cc:96:32:19:7e:b2:1e:23:13:0e:a0:bd:4c:53:
8f:75:13:76:2e:ed:0f:d0:7c:ff:49:a0:7f:41:b5:df:8e:73:
19:52:5d:27:b6:1b:49:9f:57:88:81:24:b5:ed:75:4b:47:b2:
aa:97:98:92:fd:2f:cf:14:84:0a:88:98:ac:34:cf:7d:c3:77:
f2:1a:ef:30:f0:b6:da:48:6e:ce:a3:5d:80:99:96:d5:e8:20:
24:31:cf:a1:35:5b:cc:92:e1:c5:3b:21:0e:12:27:17:38:27:
67:ba:19:3a:3c:da:ca:c4:f6:c8:80:a8:c8:35:9c:7d:0c:ba:
48:f7:53:c5:37:b1:84:6e:aa:dc:04:16:2a:35:7d:08:db:da:
c9:68:4d:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:41:43 2025 by rpki-client