
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/a40066-05ea-403e-b8e7-07cf0b33a849/1/wGy1ZC6H1OTgMJCEIo4p5pme0Lc.mft
File: wGy1ZC6H1OTgMJCEIo4p5pme0Lc.mft (raw, json)
Hash identifier: ZX7I9ojTGXIvrCvpnoieHwjoGQbBotnoLndp6iMRtFU=
Subject key identifier: 88:02:31:CB:C7:AF:EB:CE:5C:E1:BB:89:7A:07:25:96:70:BE:EC:F3
Authority key identifier: C0:6C:B5:64:2E:87:D4:E4:E0:30:90:84:22:8E:29:E6:99:9E:D0:B7
Certificate issuer: /CN=c06cb5642e87d4e4e0309084228e29e6999ed0b7
Certificate serial: 0194BCA9BA1FF06B48EC2EC7C006D0BF4B53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wGy1ZC6H1OTgMJCEIo4p5pme0Lc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/a40066-05ea-403e-b8e7-07cf0b33a849/1/wGy1ZC6H1OTgMJCEIo4p5pme0Lc.mft
Manifest number: 06A3
Signing time: Fri 31 Jan 2025 14:00:27 +0000
Manifest this update: Fri 31 Jan 2025 14:00:27 +0000
Manifest next update: Sat 01 Feb 2025 14:00:27 +0000
Files and hashes: 1: U3hg_F1n66wHfUJa1B5AwM1jPe0.roa (hash: P69ebvhq55UOViQWYuaYwNEg2G9WcwEDt0JaOwktWKA=)
2: wGy1ZC6H1OTgMJCEIo4p5pme0Lc.crl (hash: xT7e2K2q0nxvhlHleYOml+3sGip1yjL8+qf1ZCi8yWg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:ba:1f:f0:6b:48:ec:2e:c7:c0:06:d0:bf:4b:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c06cb5642e87d4e4e0309084228e29e6999ed0b7
Validity
Not Before: Jan 31 14:00:27 2025 GMT
Not After : Feb 1 14:00:27 2025 GMT
Subject: CN=880231cbc7afebce5ce1bb897a07259670beecf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:a7:f5:7d:dd:56:d5:a0:85:26:cb:78:5e:b1:
46:a5:5c:bd:b7:f3:04:69:f2:45:6c:0b:cf:34:67:
99:5d:36:62:f2:56:3d:1d:1c:df:7b:d9:bc:d4:b1:
43:11:54:73:bb:51:21:a1:bc:29:00:63:c1:8b:27:
ea:e8:f4:e4:3d:15:44:cb:c3:a7:da:da:75:48:e9:
dc:a0:d5:33:9e:c1:72:35:47:5b:00:ea:32:3e:07:
8b:1d:5c:93:9b:2c:40:e2:5c:95:0e:6c:90:26:97:
90:ef:0b:27:30:fa:72:49:59:c6:61:60:8a:13:9e:
68:15:1f:a6:d8:fe:30:71:10:1c:d9:cd:2c:24:24:
80:e4:fc:eb:f9:f6:59:f8:46:09:5d:3a:65:bb:9d:
41:7a:b3:e5:35:0e:9c:21:67:0f:93:ea:0e:4c:a1:
06:e2:36:19:cf:16:c4:c9:8d:bb:28:60:df:f8:f6:
bf:0c:38:30:aa:4b:12:fd:d5:3f:78:3a:57:a3:22:
37:bc:af:9d:95:1e:9c:46:1f:74:07:84:36:35:a7:
30:4d:2b:72:b8:7b:53:a2:78:dc:49:8d:85:70:69:
1f:91:f6:41:4c:0b:8b:79:89:ed:02:3c:ab:af:43:
1c:12:90:41:cb:a0:2b:9b:df:ab:5b:61:4d:8c:0a:
87:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:02:31:CB:C7:AF:EB:CE:5C:E1:BB:89:7A:07:25:96:70:BE:EC:F3
X509v3 Authority Key Identifier:
keyid:C0:6C:B5:64:2E:87:D4:E4:E0:30:90:84:22:8E:29:E6:99:9E:D0:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wGy1ZC6H1OTgMJCEIo4p5pme0Lc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/a40066-05ea-403e-b8e7-07cf0b33a849/1/wGy1ZC6H1OTgMJCEIo4p5pme0Lc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/a40066-05ea-403e-b8e7-07cf0b33a849/1/wGy1ZC6H1OTgMJCEIo4p5pme0Lc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:b0:49:ef:fa:56:40:45:77:49:67:09:72:5b:00:51:6a:53:
82:6f:dd:5c:23:a3:23:44:31:94:50:a0:24:78:08:bd:b3:f8:
ac:c3:4e:85:81:7e:98:31:2f:69:3d:7f:45:5b:78:10:fb:4d:
49:3b:74:64:69:cf:ff:8a:d0:25:10:b1:0a:70:9f:d3:76:c1:
42:8f:7b:2f:78:aa:b4:d6:bf:f0:20:ef:55:0a:2b:66:1a:eb:
38:32:52:f9:66:ee:e9:b0:4a:6c:d5:da:66:94:36:5a:26:22:
bb:81:67:70:01:06:63:2a:34:c1:ca:77:3d:2c:b0:09:73:b7:
70:e8:62:42:cc:fd:30:f4:0f:52:27:d3:3a:f5:a7:2e:c2:d2:
f6:8c:b4:1c:e5:05:b4:88:5e:92:4e:64:b8:ec:78:d3:dd:ab:
9e:7d:cc:e8:61:47:00:b9:da:cf:c1:39:1a:90:30:77:9c:c0:
69:f6:65:48:19:ac:db:40:d4:02:9b:da:ee:af:dd:e7:12:b5:
ee:cf:3f:1f:88:71:a2:a5:47:87:43:85:c8:71:ce:bb:1f:3f:
88:a4:95:98:2a:47:32:19:33:71:d9:d9:06:0a:5d:4f:aa:81:
a4:e0:0b:76:d5:7e:6c:2a:4e:9f:53:c4:04:2a:f7:26:01:d7:
e0:46:29:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:38:12 2025 by rpki-client