Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/ede4c7-6150-4ed0-9d30-10de67121197/1/wnLUdhJANZrLqKM306w6k5eSWnI.mft
File: wnLUdhJANZrLqKM306w6k5eSWnI.mft (raw, json)
Hash identifier: JAqmSj9Cof+jYuC7VOyqylZhbB9lk5EbY0WFCLWnsek=
Subject key identifier: 00:18:26:85:FC:40:18:5B:66:78:4F:70:6E:1E:36:8C:6A:30:1A:52
Authority key identifier: C2:72:D4:76:12:40:35:9A:CB:A8:A3:37:D3:AC:3A:93:97:92:5A:72
Certificate issuer: /CN=c272d4761240359acba8a337d3ac3a9397925a72
Certificate serial: 0194BC0529A9DE85E547D0BD43CA625BFF9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wnLUdhJANZrLqKM306w6k5eSWnI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/ede4c7-6150-4ed0-9d30-10de67121197/1/wnLUdhJANZrLqKM306w6k5eSWnI.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 11:00:42 +0000
Manifest this update: Fri 31 Jan 2025 11:00:42 +0000
Manifest next update: Sat 01 Feb 2025 11:00:42 +0000
Files and hashes: 1: 70HJo7jmffKHG2PpOcP0KSY9roI.roa (hash: DYvGlsMyhOdp02WTRHANgmcPEVdr2t5PTlBu3xJcVlU=)
2: wnLUdhJANZrLqKM306w6k5eSWnI.crl (hash: sUkikiRJjve6TJCUwJBzovgvfip+e0TPzvlNfr+Q8wc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:29:a9:de:85:e5:47:d0:bd:43:ca:62:5b:ff:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c272d4761240359acba8a337d3ac3a9397925a72
Validity
Not Before: Jan 31 11:00:42 2025 GMT
Not After : Feb 1 11:00:42 2025 GMT
Subject: CN=00182685fc40185b66784f706e1e368c6a301a52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:dd:53:1c:dc:70:48:22:b0:b2:e2:ae:7b:ef:
ea:9d:e7:3e:dd:16:a2:23:51:b1:62:50:08:ac:e1:
20:67:1b:8e:33:75:98:41:1f:69:0a:78:3d:d6:85:
44:ba:51:42:72:ef:e1:3e:da:c6:63:30:a8:ac:6e:
10:b3:57:04:b7:d6:3c:d6:13:21:da:5b:12:c6:ae:
12:28:03:cd:5d:e9:3b:50:ae:06:96:ee:6e:3c:09:
3c:06:5d:d8:29:bd:7e:81:fa:fa:f0:ef:09:36:b0:
42:f9:11:79:81:09:b4:39:d5:00:ad:1f:f7:d3:fc:
1c:26:86:5a:e7:cd:f5:49:1a:0b:1c:1d:f3:98:00:
2e:b6:a5:6e:ec:f9:d5:57:e6:bf:95:23:6e:73:37:
76:e2:21:63:ce:cd:19:80:dc:01:1c:e2:c2:c8:b9:
1e:64:01:8a:d2:74:eb:fb:c5:f2:70:b7:07:e3:5a:
c1:87:df:b0:44:f5:8c:0c:a4:e1:9d:c2:ea:d5:fd:
3d:02:0c:65:a4:17:11:f4:24:f0:c2:48:ef:e4:50:
50:33:90:36:f7:f7:26:01:c9:d1:4d:ea:ed:db:30:
48:3d:6a:49:c5:02:f5:bd:b2:95:dc:d9:6f:57:62:
f6:bf:6f:b5:d0:0f:4d:63:e0:e9:63:0a:cf:b1:d8:
14:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:18:26:85:FC:40:18:5B:66:78:4F:70:6E:1E:36:8C:6A:30:1A:52
X509v3 Authority Key Identifier:
keyid:C2:72:D4:76:12:40:35:9A:CB:A8:A3:37:D3:AC:3A:93:97:92:5A:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wnLUdhJANZrLqKM306w6k5eSWnI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/ede4c7-6150-4ed0-9d30-10de67121197/1/wnLUdhJANZrLqKM306w6k5eSWnI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/ede4c7-6150-4ed0-9d30-10de67121197/1/wnLUdhJANZrLqKM306w6k5eSWnI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:e9:d8:17:cb:59:ef:f4:fa:59:a0:65:d4:04:ab:ae:e4:01:
60:9a:04:78:9b:38:ed:b4:18:7b:70:d4:90:7f:11:f0:d5:06:
ca:0a:9b:19:55:06:96:33:dd:97:a3:e3:b2:95:6a:94:d5:e7:
1e:5b:1d:5a:ac:28:11:f1:74:86:3a:0b:68:e1:53:71:0f:a8:
8e:51:b2:51:44:a0:47:ae:6d:3e:ea:67:4a:02:92:e7:82:21:
74:0d:71:28:2a:92:9d:3d:4d:5b:58:41:93:c2:9d:5e:18:fe:
f6:83:17:cc:2e:ec:8a:3f:88:fa:cd:42:d9:bd:75:6d:9b:21:
5a:69:79:6d:2b:bb:fd:8e:da:5f:b4:58:bc:88:06:5f:12:e3:
49:ca:30:08:6d:26:bc:ec:e2:70:40:1d:56:2a:ed:c4:be:4f:
2b:2d:09:23:1e:bf:14:8a:ae:86:89:14:cd:df:82:f1:d8:4a:
ec:72:ed:41:5e:c3:a8:01:4e:b0:97:39:ca:a1:28:6c:8c:12:
15:8e:72:e6:fc:c9:18:65:c4:80:a8:76:9f:5a:7f:01:a0:af:
74:a4:95:6c:d7:88:94:26:ac:6e:84:4c:9c:ed:f5:ca:66:2d:
7e:d1:ec:54:cf:95:ec:71:33:bf:d7:14:b2:ea:19:08:a3:23:
b7:a5:78:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:10:24 2025 by rpki-client