Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/35ead2-4aa4-4ff0-b5cb-7efaa4a74f97/1/wg5lyt2-zUjS-HeHmTEThCvfzl0.mft
File: wg5lyt2-zUjS-HeHmTEThCvfzl0.mft (raw, json)
Hash identifier: NZK6PkOl3Oys7WzsfnV+3fJyoPJ8J37VMBLRwFhYtgY=
Subject key identifier: DD:D4:0D:4B:24:A5:F5:40:0D:D1:F4:99:7F:D0:CE:DE:65:7A:30:0C
Authority key identifier: C2:0E:65:CA:DD:BE:CD:48:D2:F8:77:87:99:31:13:84:2B:DF:CE:5D
Certificate issuer: /CN=c20e65caddbecd48d2f87787993113842bdfce5d
Certificate serial: 0194BC3BEA7F891922073C0CF6DF77A469F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wg5lyt2-zUjS-HeHmTEThCvfzl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/35ead2-4aa4-4ff0-b5cb-7efaa4a74f97/1/wg5lyt2-zUjS-HeHmTEThCvfzl0.mft
Manifest number: 0EB2
Signing time: Fri 31 Jan 2025 12:00:30 +0000
Manifest this update: Fri 31 Jan 2025 12:00:30 +0000
Manifest next update: Sat 01 Feb 2025 12:00:30 +0000
Files and hashes: 1: 7kdmagU4QbQazPFAKJN_jh3ESjI.roa (hash: UKie7fx67vGuUXCr+OJM9sf2md8+FYbcDpZ0gOMQ3f0=)
2: oMWup55nUaojGXh2IYtrkxVaIxk.roa (hash: IgvfZQFj2syunyqqYTcXoGNSKYWlXxrN3iDEjFeptJ0=)
3: wg5lyt2-zUjS-HeHmTEThCvfzl0.crl (hash: bLzJ/edxldFeybPzy/H2TYOf00AYOjCB5v7SqzhKiVs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:ea:7f:89:19:22:07:3c:0c:f6:df:77:a4:69:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c20e65caddbecd48d2f87787993113842bdfce5d
Validity
Not Before: Jan 31 12:00:30 2025 GMT
Not After : Feb 1 12:00:30 2025 GMT
Subject: CN=ddd40d4b24a5f5400dd1f4997fd0cede657a300c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:1b:53:a8:3a:39:c7:f0:99:5a:86:2c:2d:6e:
6e:7e:df:56:b3:f3:b2:15:d3:3a:28:17:1f:c2:52:
31:29:f5:ea:4e:f8:d3:90:dc:56:64:f7:43:93:f7:
bc:ba:5a:df:99:d5:e7:7f:84:25:10:53:21:3e:13:
d9:1e:d8:d4:3c:2b:0a:a2:6a:fd:96:e1:8f:38:93:
ec:99:64:5a:33:09:04:a4:3d:c5:b1:eb:8f:2c:3f:
d5:c1:e7:65:3a:28:17:d9:23:10:6f:9f:4c:4a:5a:
03:63:19:10:e2:30:8b:ca:a9:7b:5d:bb:66:48:fe:
cc:4a:65:63:ae:95:e6:e6:49:5f:6a:97:60:ca:f8:
e7:0e:95:d0:78:5f:99:7f:88:c6:1c:7f:53:f1:8a:
ab:8e:51:fd:40:b4:6b:45:d0:70:77:20:6f:29:b0:
48:60:72:39:9b:d2:5a:3e:7a:a8:18:f4:54:2e:8b:
b3:dc:2a:2c:15:fc:13:83:48:ba:e7:2c:0a:f5:fc:
b4:a8:92:d6:86:bd:b5:63:83:00:bb:cf:ed:e2:86:
20:e3:63:90:94:b1:70:2f:44:cd:eb:44:e0:19:03:
e9:02:0e:f0:62:d8:dc:d2:8a:6d:c8:66:b2:fc:a9:
80:e1:aa:a6:91:c1:d6:1f:ec:73:36:d2:25:30:6b:
53:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:D4:0D:4B:24:A5:F5:40:0D:D1:F4:99:7F:D0:CE:DE:65:7A:30:0C
X509v3 Authority Key Identifier:
keyid:C2:0E:65:CA:DD:BE:CD:48:D2:F8:77:87:99:31:13:84:2B:DF:CE:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wg5lyt2-zUjS-HeHmTEThCvfzl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/35ead2-4aa4-4ff0-b5cb-7efaa4a74f97/1/wg5lyt2-zUjS-HeHmTEThCvfzl0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/35ead2-4aa4-4ff0-b5cb-7efaa4a74f97/1/wg5lyt2-zUjS-HeHmTEThCvfzl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:85:c2:57:26:e2:cc:3c:0f:3e:26:79:0c:29:02:6b:f6:62:
88:9f:8e:da:c8:a7:bc:39:59:90:cb:cc:e9:aa:4f:c8:aa:42:
20:07:e0:ca:c9:0a:9b:42:8a:fd:39:c2:b3:25:de:2e:80:c7:
da:22:e0:46:8c:f0:8f:1d:8f:5e:42:e0:5f:b7:0f:54:73:5e:
e6:15:7d:96:c3:13:14:c4:a4:8e:47:f9:d3:0a:47:6c:bc:c7:
7d:49:77:36:b3:b4:20:d9:44:5c:a7:b0:64:96:3e:58:85:59:
ab:d1:93:ee:3d:bc:55:2f:b8:fb:07:de:60:d1:32:33:20:73:
1a:80:0f:32:5c:72:8f:8a:74:bc:87:f8:71:7e:cc:90:14:33:
5f:5a:e7:93:cf:75:b3:d2:7d:65:34:1e:4d:4d:3e:de:ed:44:
b3:6a:1a:48:58:5e:94:8a:59:8b:99:c1:07:a2:aa:bd:8e:ee:
8d:9e:8d:eb:d6:68:59:98:c4:60:38:25:28:63:22:73:be:02:
9f:56:91:5a:10:c4:fa:8e:1d:c2:d3:13:fe:6c:b5:ec:4d:58:
5e:ba:53:ef:15:ae:8d:30:83:65:98:5d:77:b1:dc:34:25:f0:
93:b9:d9:2a:3b:dc:a4:e1:cf:f5:04:6f:9f:9c:09:61:b9:b2:
13:0e:7b:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:23:29 2025 by rpki-client