Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/b7f1da-467a-4362-8b2e-1970de84a1f0/1/wBQuXVz6pFIWa8e1WmVVj1JNZ1E.mft
File: wBQuXVz6pFIWa8e1WmVVj1JNZ1E.mft (raw, json)
Hash identifier: tGpIBDJzQtV4iCGh2YGyAyK+sJayZbmeigpBr6jdD4Y=
Subject key identifier: 14:E3:10:B0:C3:F4:11:BA:7A:01:23:1B:5A:C0:51:F6:2B:A0:69:D5
Authority key identifier: C0:14:2E:5D:5C:FA:A4:52:16:6B:C7:B5:5A:65:55:8F:52:4D:67:51
Certificate issuer: /CN=c0142e5d5cfaa452166bc7b55a65558f524d6751
Certificate serial: 0194BBCE8CE1C9C618774AF514AE033C90F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wBQuXVz6pFIWa8e1WmVVj1JNZ1E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/b7f1da-467a-4362-8b2e-1970de84a1f0/1/wBQuXVz6pFIWa8e1WmVVj1JNZ1E.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 10:01:03 +0000
Manifest this update: Fri 31 Jan 2025 10:01:03 +0000
Manifest next update: Sat 01 Feb 2025 10:01:03 +0000
Files and hashes: 1: sNmSuLPwop12596I--vLe1Fw_L8.roa (hash: rnnFcpfS8qT33aKuf/kRcr+W7tCgIM7nW6QVvMfILWQ=)
2: wBQuXVz6pFIWa8e1WmVVj1JNZ1E.crl (hash: kz6K9q1x1mfEaapgvJ/wKu88SwvtaBhdeHsALRdDbKY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:8c:e1:c9:c6:18:77:4a:f5:14:ae:03:3c:90:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0142e5d5cfaa452166bc7b55a65558f524d6751
Validity
Not Before: Jan 31 10:01:03 2025 GMT
Not After : Feb 1 10:01:03 2025 GMT
Subject: CN=14e310b0c3f411ba7a01231b5ac051f62ba069d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:2d:fa:5f:4e:b4:fb:df:c4:42:ae:f8:89:f2:
35:d0:a1:67:5d:04:69:7a:a6:c4:5f:47:70:65:84:
10:47:b8:d6:79:fe:20:ed:7e:d1:9f:5e:a9:cf:a3:
23:e3:6e:30:dd:b7:49:22:84:91:a8:dd:21:9b:fd:
78:ff:61:4f:42:ff:77:72:fe:0b:61:99:93:8f:4b:
9f:2d:71:0c:bf:69:f7:78:a4:4a:42:0b:42:32:db:
4e:05:33:63:33:19:74:86:e0:16:8e:25:a3:5f:2d:
87:ce:22:47:c8:3a:34:0b:3d:7f:db:f9:ab:19:30:
83:91:97:30:1c:bd:8d:05:0b:75:96:fe:87:29:b8:
69:35:39:c8:cf:b7:4c:91:ed:52:61:e1:44:65:ef:
b6:ba:ca:f3:a2:86:8d:d1:94:f2:8d:89:6c:ec:7c:
94:44:39:31:37:cf:c7:8c:1e:39:94:b9:d6:e4:e0:
33:6a:4a:e6:3f:f0:6e:8c:b5:a3:d2:c0:09:4b:fb:
e2:14:ae:6e:b6:9c:af:2e:f9:3d:d3:33:41:19:aa:
b9:67:fe:db:ef:0a:3e:f4:b7:1f:62:c1:d1:f4:81:
c3:72:29:fc:7c:83:64:e9:06:bb:41:66:6e:63:7e:
02:ab:47:52:b1:80:8b:44:81:b2:ca:76:39:da:e4:
a1:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:E3:10:B0:C3:F4:11:BA:7A:01:23:1B:5A:C0:51:F6:2B:A0:69:D5
X509v3 Authority Key Identifier:
keyid:C0:14:2E:5D:5C:FA:A4:52:16:6B:C7:B5:5A:65:55:8F:52:4D:67:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wBQuXVz6pFIWa8e1WmVVj1JNZ1E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/b7f1da-467a-4362-8b2e-1970de84a1f0/1/wBQuXVz6pFIWa8e1WmVVj1JNZ1E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/b7f1da-467a-4362-8b2e-1970de84a1f0/1/wBQuXVz6pFIWa8e1WmVVj1JNZ1E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:ba:64:c3:b0:22:4e:1a:56:8f:6c:05:0c:22:7e:d0:35:6d:
92:ae:ca:4b:d4:60:99:b2:87:52:6e:ee:38:a1:05:19:5a:04:
0a:1b:24:00:34:7d:0e:ac:37:24:b1:2d:52:cd:16:45:20:d1:
e3:a5:f4:1e:8b:f6:56:ba:1f:98:71:25:ce:e1:f2:2b:bf:ed:
ac:a7:1b:9a:46:59:26:fb:14:3d:cf:c9:8c:3d:de:cb:63:5f:
8a:63:19:72:58:5a:67:bc:99:00:56:13:e4:10:c4:92:f8:14:
2c:96:be:18:20:61:1b:fe:a8:f1:49:f3:9a:f0:dd:b8:82:6a:
b6:d2:06:1a:7a:d1:ad:71:a8:71:6e:ee:e0:ce:58:83:7f:4a:
7b:e8:54:91:25:1a:ca:07:7c:ac:ca:e9:e8:3c:df:20:96:15:
0b:82:0a:c8:a2:31:69:b4:15:f0:e8:c3:ed:24:94:c3:36:c2:
d2:ef:86:45:d1:1e:ff:a0:06:3c:59:97:7e:81:ca:93:0c:6a:
76:36:c3:bb:04:b2:55:58:bc:99:42:f1:3d:2e:63:8f:11:c0:
56:fe:1d:b4:00:ac:96:e1:27:e5:d0:5f:09:f0:b9:16:b1:07:
08:82:97:c4:f4:b3:d6:a2:24:7d:6a:75:05:09:3b:6d:a2:0c:
1d:27:bc:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:01:47 2025 by rpki-client