Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/84942f-721f-4234-88c1-dbf3969ca75f/1/wLi7SF66OSuAwxZpKbf8uVj0Sbw.mft
File: wLi7SF66OSuAwxZpKbf8uVj0Sbw.mft (raw, json)
Hash identifier: jdpC/sorB4Bhrw7y/DPpWtQn5N8/DblewiIOSuSkXzY=
Subject key identifier: 22:5B:57:D1:48:60:40:24:11:B9:FC:17:73:E3:25:17:2B:82:1C:8F
Authority key identifier: C0:B8:BB:48:5E:BA:39:2B:80:C3:16:69:29:B7:FC:B9:58:F4:49:BC
Certificate issuer: /CN=c0b8bb485eba392b80c3166929b7fcb958f449bc
Certificate serial: 0194BC3CA4C68A85E333E1212DBDB47AA777
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wLi7SF66OSuAwxZpKbf8uVj0Sbw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/84942f-721f-4234-88c1-dbf3969ca75f/1/wLi7SF66OSuAwxZpKbf8uVj0Sbw.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 12:01:18 +0000
Manifest this update: Fri 31 Jan 2025 12:01:18 +0000
Manifest next update: Sat 01 Feb 2025 12:01:18 +0000
Files and hashes: 1: BN13x-ZjA4mHaBlOmgwvor1JO1c.roa (hash: Uuj6BFZWiA+duiDnobx+mZ0HHXgVtqFptRYnRQ3IF9I=)
2: wLi7SF66OSuAwxZpKbf8uVj0Sbw.crl (hash: kbkKti6OOyU5RSQiTDfl4cV9UI+NAMFqedGJyt+b5S8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:a4:c6:8a:85:e3:33:e1:21:2d:bd:b4:7a:a7:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0b8bb485eba392b80c3166929b7fcb958f449bc
Validity
Not Before: Jan 31 12:01:18 2025 GMT
Not After : Feb 1 12:01:18 2025 GMT
Subject: CN=225b57d14860402411b9fc1773e325172b821c8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:9d:4a:72:5e:1d:5e:0a:26:86:86:34:7e:55:
a5:2f:65:b0:f1:0c:03:de:2f:ab:76:df:8a:52:2d:
59:62:e5:96:1b:7b:24:d0:c0:df:f7:36:b7:ef:72:
42:07:90:71:3b:16:77:2b:99:9e:67:88:f1:3e:45:
7a:a1:2c:44:bd:97:f6:91:48:d2:ed:e7:1b:85:34:
d9:88:e7:5f:4b:87:88:80:fe:b1:59:7e:b2:72:6b:
27:9e:73:4f:ff:5a:5b:6f:e0:31:28:73:65:1d:54:
ef:c0:41:6a:bf:56:cb:f9:d9:b6:2c:5a:ff:54:ce:
ac:24:a1:3c:1e:31:d3:08:86:9a:ab:0d:3b:99:78:
e4:ab:00:9a:78:29:85:2e:73:5b:21:b6:eb:98:f6:
3c:66:e5:38:4d:8f:ab:de:15:a4:77:ea:72:ac:e1:
0b:cf:73:9b:a4:3c:5b:50:5e:4e:58:eb:fa:38:2a:
63:84:32:6c:05:ae:cf:d6:dd:9f:c8:f1:01:9c:68:
fd:23:28:ca:5b:74:4b:88:53:04:4b:7e:03:ec:da:
16:1d:f7:56:c6:0e:58:56:d4:ab:6e:d6:9c:98:7b:
a3:1f:a6:c9:b1:a2:56:d1:8c:5a:7d:66:31:c6:0c:
88:2d:83:16:4c:b4:3f:a5:1e:11:83:09:7c:15:ee:
f7:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:5B:57:D1:48:60:40:24:11:B9:FC:17:73:E3:25:17:2B:82:1C:8F
X509v3 Authority Key Identifier:
keyid:C0:B8:BB:48:5E:BA:39:2B:80:C3:16:69:29:B7:FC:B9:58:F4:49:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wLi7SF66OSuAwxZpKbf8uVj0Sbw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/84942f-721f-4234-88c1-dbf3969ca75f/1/wLi7SF66OSuAwxZpKbf8uVj0Sbw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/84942f-721f-4234-88c1-dbf3969ca75f/1/wLi7SF66OSuAwxZpKbf8uVj0Sbw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:82:b9:c0:58:97:c6:f7:fd:16:a0:7e:5e:25:34:d5:7d:9e:
ff:d7:72:02:46:de:31:42:67:66:2b:8f:7d:e6:02:8f:aa:ec:
2a:0a:69:7f:f0:91:f0:36:cc:1e:f8:16:34:e6:88:6c:51:96:
ed:aa:03:6a:bb:b6:b0:bc:b2:36:0c:4e:a2:1d:e7:0f:c4:c9:
61:d6:6c:2e:48:ca:f9:b9:7f:ea:43:98:ac:7b:be:ed:7b:0b:
7a:3c:c0:74:5c:70:fc:6d:24:2a:7e:10:68:66:7a:22:6c:90:
9d:14:72:5a:17:53:ed:02:20:03:3a:7c:8f:b0:45:13:87:aa:
83:ed:96:3d:f7:e6:aa:f4:de:fa:4f:2c:8a:e3:d5:0c:05:ce:
ac:34:89:72:d6:87:c1:49:f5:e7:be:50:09:2c:5a:ae:d3:b0:
f9:37:7a:75:01:ba:a1:2e:00:19:c3:8f:46:96:91:f1:4e:bd:
f2:9a:ff:01:99:17:3b:5b:6f:e4:54:09:b1:d7:03:6c:c4:31:
78:de:da:be:5c:19:8a:6c:f5:07:cc:8f:2a:7f:94:74:45:cf:
ef:41:af:9c:c8:e3:a9:a2:a0:2b:c7:ac:03:ed:eb:d7:2a:91:
df:a8:61:03:a6:d7:b3:43:b4:88:15:8b:a3:b0:c1:ac:92:8f:
06:ce:da:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:47:29 2025 by rpki-client