Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/50b205-8f21-46f5-a3f6-bca0a8f2f78c/1/w0CQmuwyCowu4cq84TAsu31OBIY.mft
File: w0CQmuwyCowu4cq84TAsu31OBIY.mft (raw, json)
Hash identifier: P3FY4vWB/n5quFOGMfJl1Ao1lS4jIvnz4ZkSZkPtoDQ=
Subject key identifier: D0:4A:62:06:D9:99:A9:B2:72:1F:33:17:A6:DD:AE:5E:92:17:88:2C
Authority key identifier: C3:40:90:9A:EC:32:0A:8C:2E:E1:CA:BC:E1:30:2C:BB:7D:4E:04:86
Certificate issuer: /CN=c340909aec320a8c2ee1cabce1302cbb7d4e0486
Certificate serial: 0194BD4E95AF59084F0943582C385599813A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w0CQmuwyCowu4cq84TAsu31OBIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/50b205-8f21-46f5-a3f6-bca0a8f2f78c/1/w0CQmuwyCowu4cq84TAsu31OBIY.mft
Manifest number: 10BD
Signing time: Fri 31 Jan 2025 17:00:31 +0000
Manifest this update: Fri 31 Jan 2025 17:00:31 +0000
Manifest next update: Sat 01 Feb 2025 17:00:31 +0000
Files and hashes: 1: 1JRmPjjw2eEyAEj7-d9EaoFd8tQ.roa (hash: qUFNGxht8SatseV7uTcgdf36n0Wje2HhZXA6lIEPzt8=)
2: jb-zD-QZseypOhoYrz7-lEkthR4.roa (hash: NVATDU2rQowVsA5kxCOsDlRv1YWlJaECqpg6RYlVt8g=)
3: w0CQmuwyCowu4cq84TAsu31OBIY.crl (hash: Sqjw/L5z4gG08/2JQxlySa1cU5ifbm8fi1U/tji/Rwc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:95:af:59:08:4f:09:43:58:2c:38:55:99:81:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c340909aec320a8c2ee1cabce1302cbb7d4e0486
Validity
Not Before: Jan 31 17:00:31 2025 GMT
Not After : Feb 1 17:00:31 2025 GMT
Subject: CN=d04a6206d999a9b2721f3317a6ddae5e9217882c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:47:17:15:b2:ea:d0:d6:b3:c7:20:80:17:eb:
56:7b:d0:83:13:ed:1b:3d:b2:50:8b:c1:36:a3:b8:
22:4e:1b:6c:ad:3a:1a:99:e9:4a:12:01:c5:5c:cb:
f0:ce:a9:e7:a4:20:81:f7:12:3f:9e:ac:5d:e9:68:
11:62:0c:88:b7:3e:95:b1:e3:f6:4a:b5:0a:ea:8c:
10:a5:ae:64:eb:b5:66:56:71:eb:bd:d5:ed:d7:a3:
97:2d:0b:c8:cd:a8:75:b0:16:cc:cb:f2:94:f9:55:
6c:dc:98:cc:f9:f5:cb:d0:98:67:4c:5a:5d:93:ca:
53:59:8c:92:21:2f:0a:f3:60:d5:e4:c0:1f:15:51:
99:42:bd:ac:0d:d7:25:0f:ba:9b:e6:0f:b2:72:31:
97:34:a3:7a:ef:1c:ed:b3:37:c8:af:3b:55:ee:7a:
b4:ae:26:16:4b:df:a3:14:f6:ba:97:2f:43:46:d7:
38:b3:22:bb:b2:a4:d3:44:3d:a2:92:6f:5f:de:69:
c5:02:e5:ba:43:0a:0b:0b:6f:67:9e:85:29:af:25:
09:03:c8:fa:a7:a5:84:03:d8:9b:36:6f:ea:84:22:
3e:8d:54:7f:0a:00:17:1f:a9:63:3a:60:11:2d:53:
59:cb:e4:70:26:67:f6:fd:f8:76:e8:e9:f6:e5:41:
a8:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:4A:62:06:D9:99:A9:B2:72:1F:33:17:A6:DD:AE:5E:92:17:88:2C
X509v3 Authority Key Identifier:
keyid:C3:40:90:9A:EC:32:0A:8C:2E:E1:CA:BC:E1:30:2C:BB:7D:4E:04:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w0CQmuwyCowu4cq84TAsu31OBIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/50b205-8f21-46f5-a3f6-bca0a8f2f78c/1/w0CQmuwyCowu4cq84TAsu31OBIY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/50b205-8f21-46f5-a3f6-bca0a8f2f78c/1/w0CQmuwyCowu4cq84TAsu31OBIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
dd:39:8c:6d:74:27:59:80:4d:0e:bc:4d:19:a3:90:40:0a:ea:
b6:a1:d6:9e:03:b4:6a:8c:08:25:ec:5b:97:ca:49:bf:14:a7:
4a:85:94:ee:82:06:de:20:df:50:a8:3d:a5:ac:f2:9d:11:10:
7e:fd:e9:26:32:5a:1a:fa:dc:b2:2b:47:38:a0:66:65:66:a3:
69:28:4e:78:28:66:26:78:e2:91:ca:16:f3:8c:7b:80:d2:b8:
42:5a:d5:c2:e4:a0:49:c7:1e:60:9c:2e:cb:85:cf:39:e5:69:
26:9b:90:46:f8:0a:f6:25:92:8a:38:30:8d:16:28:de:b2:de:
45:6d:58:97:0d:c7:d9:20:10:37:3e:77:ca:5c:29:1f:37:9b:
3a:b5:82:cd:ad:fb:ff:16:7b:28:31:03:c9:18:b7:6d:86:01:
c1:43:39:f0:99:fe:e3:ac:ec:53:fd:d9:47:8a:41:af:b7:c4:
ac:0e:b1:11:93:75:f2:6b:57:12:63:a9:96:ed:fd:0a:39:c8:
1c:5c:27:f8:7c:ab:1d:61:73:e6:e5:c6:c9:fa:da:e1:65:9f:
89:60:1d:a1:9f:67:39:21:fd:17:c1:cf:1c:aa:24:ea:e0:03:
36:99:10:1a:74:52:50:b3:90:69:fe:da:84:51:46:00:e7:f7:
cd:ac:67:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:48:27 2025 by rpki-client