Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/a71d06-b140-4695-891c-adec07d22f46/1/wTyftZyZzftKbYQpzYNwWQYBKxE.mft
File: wTyftZyZzftKbYQpzYNwWQYBKxE.mft (raw, json)
Hash identifier: F2mqPCb5hfT2+9yASMhGqHSyuqU4et8vtLbBzEddJuk=
Subject key identifier: 2A:E3:AB:0D:B5:11:4D:C9:A3:65:7C:A0:0D:3A:0A:C8:E3:04:D5:91
Authority key identifier: C1:3C:9F:B5:9C:99:CD:FB:4A:6D:84:29:CD:83:70:59:06:01:2B:11
Certificate issuer: /CN=c13c9fb59c99cdfb4a6d8429cd83705906012b11
Certificate serial: 0194BC3C9A56434E9DA491735F8E3C8394E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wTyftZyZzftKbYQpzYNwWQYBKxE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/a71d06-b140-4695-891c-adec07d22f46/1/wTyftZyZzftKbYQpzYNwWQYBKxE.mft
Manifest number: 119F
Signing time: Fri 31 Jan 2025 12:01:15 +0000
Manifest this update: Fri 31 Jan 2025 12:01:15 +0000
Manifest next update: Sat 01 Feb 2025 12:01:15 +0000
Files and hashes: 1: wTyftZyZzftKbYQpzYNwWQYBKxE.crl (hash: rbCZr32eO0g6XTBhrkv+yBhwWaYauDgtJZx7kd4Bnsk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:9a:56:43:4e:9d:a4:91:73:5f:8e:3c:83:94:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c13c9fb59c99cdfb4a6d8429cd83705906012b11
Validity
Not Before: Jan 31 12:01:15 2025 GMT
Not After : Feb 1 12:01:15 2025 GMT
Subject: CN=2ae3ab0db5114dc9a3657ca00d3a0ac8e304d591
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:45:7c:74:1e:1a:cf:9e:b1:e7:8b:5c:b0:1e:
75:89:3f:67:31:c8:fd:79:fb:26:78:bf:78:2c:45:
d4:16:c2:d7:3c:37:42:5f:87:c1:4d:f4:34:46:45:
95:54:b2:ce:dd:06:0c:55:de:1e:48:d8:00:27:cc:
a0:2f:d5:63:5e:6a:ce:13:c4:51:bb:d7:16:c7:36:
85:a9:d8:48:df:97:ef:0f:92:48:de:73:d8:db:3d:
82:0b:72:48:63:22:ad:d0:dc:1a:83:c4:19:48:90:
75:cc:65:94:19:42:4d:84:1a:08:8a:15:89:7c:df:
3b:fa:28:cb:98:ec:4a:7e:77:0e:06:f9:13:f6:1b:
ed:2f:4b:e3:83:a9:0a:a2:65:82:1d:72:49:68:86:
9a:22:cf:75:77:e0:17:04:d0:15:b3:3f:09:ec:d9:
b4:dc:41:77:e9:41:1b:69:84:ac:f3:32:2f:fd:8c:
38:6f:f9:a2:c7:5e:b2:3b:a8:42:48:83:06:6f:67:
ce:68:37:e7:f0:13:39:23:00:2a:71:4a:a3:dc:d4:
d1:f1:c3:55:6c:cc:40:d8:94:82:89:7a:b9:82:c9:
29:92:1c:69:8d:23:6b:78:d4:d2:b9:68:1c:01:e9:
88:20:7d:65:80:18:f9:be:7c:b9:c2:09:0b:42:e3:
6b:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:E3:AB:0D:B5:11:4D:C9:A3:65:7C:A0:0D:3A:0A:C8:E3:04:D5:91
X509v3 Authority Key Identifier:
keyid:C1:3C:9F:B5:9C:99:CD:FB:4A:6D:84:29:CD:83:70:59:06:01:2B:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wTyftZyZzftKbYQpzYNwWQYBKxE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/a71d06-b140-4695-891c-adec07d22f46/1/wTyftZyZzftKbYQpzYNwWQYBKxE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/a71d06-b140-4695-891c-adec07d22f46/1/wTyftZyZzftKbYQpzYNwWQYBKxE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:98:cb:7e:05:c4:6d:d5:cd:74:9e:8d:92:fd:16:7f:15:71:
a7:4a:0d:9f:07:ea:70:e3:52:d2:bb:10:50:b6:51:92:1e:d7:
3c:70:36:fc:3e:94:a9:d8:1e:c9:f9:7c:f2:04:89:dd:36:16:
ee:cb:41:83:a7:04:d2:28:07:3d:fd:a7:3c:32:da:32:05:14:
6b:3d:b6:15:9f:51:aa:9a:78:ac:9e:06:85:41:6e:a8:eb:70:
67:5a:b4:52:a2:2d:a0:e1:06:69:ac:d5:d0:ca:80:5b:44:43:
b8:2e:8f:37:b2:1c:4a:6f:e3:f2:15:a7:ac:7c:d5:3b:2b:cd:
e8:d3:7d:87:4c:61:57:2b:4e:40:76:dd:2f:08:7a:59:b7:a9:
d5:93:5f:41:9e:e3:5e:3f:7c:96:d0:e7:38:a0:dd:56:7d:07:
20:17:b4:7f:ac:eb:31:c1:9c:6d:ce:05:55:3c:e9:26:ca:9d:
80:2b:bc:18:bd:d9:33:b6:07:6f:07:b5:ff:7e:6c:c4:22:44:
c1:ba:07:db:2f:46:56:43:a6:95:fa:34:51:8e:c4:a8:07:1c:
42:9c:e1:49:01:3d:40:ac:b3:46:02:e9:6e:84:3f:3f:97:b2:
53:6d:74:b6:91:cc:de:f0:14:b4:37:01:73:bf:60:3b:9b:b3:
44:f0:2c:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:48:10 2025 by rpki-client