Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/db5d51-0950-4e4e-a003-2456f0ab8e72/1/wn0dON377r2u5sDEJkvWihqyNaw.mft
File: wn0dON377r2u5sDEJkvWihqyNaw.mft (raw, json)
Hash identifier: 6DmBsFW4Az2nKYzi6+nVHsEfUzKUnY4sovnarEbI9bI=
Subject key identifier: BD:2B:19:DC:F6:8F:41:14:A0:C9:13:76:5C:1A:17:68:A4:BB:30:90
Authority key identifier: C2:7D:1D:38:DD:FB:EE:BD:AE:E6:C0:C4:26:4B:D6:8A:1A:B2:35:AC
Certificate issuer: /CN=c27d1d38ddfbeebdaee6c0c4264bd68a1ab235ac
Certificate serial: 0194BBCDC2DC2261D345A5B5491FA15307B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wn0dON377r2u5sDEJkvWihqyNaw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/db5d51-0950-4e4e-a003-2456f0ab8e72/1/wn0dON377r2u5sDEJkvWihqyNaw.mft
Manifest number: 0B1F
Signing time: Fri 31 Jan 2025 10:00:11 +0000
Manifest this update: Fri 31 Jan 2025 10:00:11 +0000
Manifest next update: Sat 01 Feb 2025 10:00:11 +0000
Files and hashes: 1: wn0dON377r2u5sDEJkvWihqyNaw.crl (hash: exQQFb7n3kv82XvE5H7UigUscpyeQAKvn30tbLIZloI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:c2:dc:22:61:d3:45:a5:b5:49:1f:a1:53:07:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c27d1d38ddfbeebdaee6c0c4264bd68a1ab235ac
Validity
Not Before: Jan 31 10:00:11 2025 GMT
Not After : Feb 1 10:00:11 2025 GMT
Subject: CN=bd2b19dcf68f4114a0c913765c1a1768a4bb3090
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:f2:06:c6:91:e6:24:da:68:3b:49:a1:90:57:
ab:b3:7d:34:f4:97:8e:45:e7:cb:c9:81:37:3d:d4:
b2:45:21:75:5e:57:19:f6:ee:cd:8b:e7:9e:88:73:
ee:29:68:b7:5b:0c:ea:5b:4c:1d:37:b9:d5:dc:a0:
fd:1b:75:e7:29:a8:13:ae:2a:2b:67:51:e6:f0:bc:
48:85:76:ba:24:76:3e:dd:54:23:eb:52:af:79:31:
05:03:ee:68:40:99:8d:5d:54:5d:f4:b9:f2:23:ba:
ab:90:ce:49:46:c0:e2:04:f7:3a:4c:a4:9e:81:95:
b5:72:91:cc:bc:85:e6:40:88:93:84:ae:85:ed:a0:
f5:2c:be:4a:64:27:56:c3:3b:1c:4c:f7:c8:f3:cf:
e7:70:f6:bd:b9:7d:29:c6:1d:e6:cb:b0:be:d6:34:
da:31:cc:83:ab:a1:02:8f:dc:4d:4f:49:a3:47:c3:
b0:5d:b6:6f:78:98:7e:5b:47:a3:3b:4e:72:28:a5:
11:dc:2b:1d:5a:90:ac:dd:49:58:9f:45:ce:6c:e7:
01:e3:be:7c:dd:f4:e1:2c:0d:12:f2:73:c9:9e:e8:
71:02:58:be:a1:f1:e6:18:9c:cb:06:53:b4:18:5c:
5c:84:19:5c:85:30:d5:76:19:92:b8:1b:0b:0d:01:
db:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:2B:19:DC:F6:8F:41:14:A0:C9:13:76:5C:1A:17:68:A4:BB:30:90
X509v3 Authority Key Identifier:
keyid:C2:7D:1D:38:DD:FB:EE:BD:AE:E6:C0:C4:26:4B:D6:8A:1A:B2:35:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wn0dON377r2u5sDEJkvWihqyNaw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/db5d51-0950-4e4e-a003-2456f0ab8e72/1/wn0dON377r2u5sDEJkvWihqyNaw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/db5d51-0950-4e4e-a003-2456f0ab8e72/1/wn0dON377r2u5sDEJkvWihqyNaw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:93:65:59:ca:5a:bd:f1:30:4e:c1:9e:0b:5f:ee:60:62:5b:
98:d0:98:c3:bd:8f:81:44:18:ee:ac:b1:a3:77:91:9a:ec:43:
64:58:08:61:18:99:42:04:20:08:38:51:b7:62:d9:2b:b7:96:
86:eb:d9:f9:0c:38:8b:d4:d0:75:fc:b3:f0:00:33:d1:5f:3f:
5b:b5:f6:63:45:9b:6e:55:ee:f3:94:98:15:72:7f:44:90:c3:
e1:e7:44:7d:72:c3:28:d5:88:0e:0d:a6:ea:93:44:90:01:7b:
95:de:87:b2:3b:b3:c5:11:b9:b4:70:4d:2b:ae:94:17:b4:ce:
b1:63:ef:0c:6c:8b:36:7b:a3:1a:ce:d6:75:89:c7:1d:87:6d:
17:9d:fc:2a:a7:52:a5:7d:a9:e0:4d:b0:71:60:dc:fe:58:f4:
c7:51:ce:1f:86:18:e4:04:5d:6d:ae:ac:7d:59:cb:1a:e3:f4:
1d:09:59:4b:b3:80:16:01:de:0f:bc:fe:4c:56:4c:f5:f7:dd:
7b:ea:a8:85:3c:e7:8c:95:79:28:5e:2e:e9:0a:c3:03:a4:92:
6f:e3:2e:76:d0:a1:19:59:fe:36:49:ee:f0:77:42:4e:d9:ce:
d6:ec:67:e5:c7:ed:31:1f:a3:d2:5c:cf:95:33:a0:9f:70:fb:
89:74:8c:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:49:14 2025 by rpki-client