Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/c6535d-721f-4301-9d89-fcdad2b5656b/1/wqkR1pxPZFehCd53scdSSdxTDhc.mft
File: wqkR1pxPZFehCd53scdSSdxTDhc.mft (raw, json)
Hash identifier: zjmJK0V6M48O5x6ZOECTazrpkyixCIZDNXHyx73PEhA=
Subject key identifier: 00:8E:51:F0:74:47:73:B2:15:FC:C7:AB:B2:CB:20:89:BD:34:F1:0F
Authority key identifier: C2:A9:11:D6:9C:4F:64:57:A1:09:DE:77:B1:C7:52:49:DC:53:0E:17
Certificate issuer: /CN=c2a911d69c4f6457a109de77b1c75249dc530e17
Certificate serial: 0194BCE0D31351765F69CBAA8028E3FB9F2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wqkR1pxPZFehCd53scdSSdxTDhc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/c6535d-721f-4301-9d89-fcdad2b5656b/1/wqkR1pxPZFehCd53scdSSdxTDhc.mft
Manifest number: 069D
Signing time: Fri 31 Jan 2025 15:00:38 +0000
Manifest this update: Fri 31 Jan 2025 15:00:38 +0000
Manifest next update: Sat 01 Feb 2025 15:00:38 +0000
Files and hashes: 1: JlMTszQ0SriAWERqlr9FMnp6WvU.roa (hash: M6WDGwhPPqHvkOqSI6cVPu36gkAbrulfoDxAqaGV7po=)
2: wqkR1pxPZFehCd53scdSSdxTDhc.crl (hash: HS6TA7kGeZRli64xJ/2aGqskiwcP0ezFE76cAdwIxx8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:d3:13:51:76:5f:69:cb:aa:80:28:e3:fb:9f:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2a911d69c4f6457a109de77b1c75249dc530e17
Validity
Not Before: Jan 31 15:00:38 2025 GMT
Not After : Feb 1 15:00:38 2025 GMT
Subject: CN=008e51f0744773b215fcc7abb2cb2089bd34f10f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:9a:4e:b2:a5:c1:96:64:1b:ee:c0:64:ed:13:
f7:80:78:eb:75:70:ad:d4:5f:ad:74:58:f8:11:2a:
fd:7e:69:78:72:9e:49:1c:88:83:da:5d:9c:b3:ce:
e3:ec:6f:22:93:ad:1b:b3:47:19:7a:e3:a6:79:e2:
d5:4c:6c:28:61:92:95:48:ce:e2:9f:fb:9f:82:48:
dc:be:d1:8e:84:29:25:01:61:93:b1:88:f7:4c:c4:
cc:0b:d7:36:f3:f7:d8:92:8b:f1:64:55:2f:a1:38:
ba:59:2a:9f:14:0b:bf:37:69:1f:9b:68:d2:90:4e:
d3:73:d6:e3:5a:c6:bd:8a:a9:46:dc:0b:df:a5:68:
7a:d5:71:52:cf:f3:ef:90:be:9d:28:26:d6:d5:bc:
d5:30:e8:5e:9b:98:14:a4:44:0a:2b:4e:84:59:3f:
73:03:39:a8:c8:5d:5b:90:1e:ba:fb:ab:34:86:ba:
d8:a2:ba:c0:38:97:02:ae:9f:cc:fe:6d:25:82:ba:
92:d7:63:fd:93:b1:35:e5:51:71:38:7e:3a:23:6f:
ae:fc:44:4c:2b:07:0b:33:5a:9d:05:03:7b:16:c6:
af:fa:e6:97:60:53:8f:57:d6:c6:ad:17:a7:52:64:
22:8f:a7:90:8d:10:ef:11:58:a2:80:50:2c:1b:cb:
68:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:8E:51:F0:74:47:73:B2:15:FC:C7:AB:B2:CB:20:89:BD:34:F1:0F
X509v3 Authority Key Identifier:
keyid:C2:A9:11:D6:9C:4F:64:57:A1:09:DE:77:B1:C7:52:49:DC:53:0E:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wqkR1pxPZFehCd53scdSSdxTDhc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/c6535d-721f-4301-9d89-fcdad2b5656b/1/wqkR1pxPZFehCd53scdSSdxTDhc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/c6535d-721f-4301-9d89-fcdad2b5656b/1/wqkR1pxPZFehCd53scdSSdxTDhc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:47:52:53:31:06:16:1f:32:a5:b8:68:76:2d:a8:2f:9e:78:
9a:66:75:d5:ef:46:c3:82:86:36:fb:c9:14:8f:28:1a:6b:59:
e4:47:ae:9a:f6:33:e0:ae:15:7e:a0:50:72:e3:09:3f:8a:09:
8d:de:58:71:39:88:2f:05:31:dd:69:54:8e:de:e9:f1:42:e2:
e6:2e:9a:48:51:24:28:be:be:1f:15:d4:98:99:dd:57:3c:ec:
83:64:fe:4d:58:83:e6:7d:7b:90:23:73:8d:8a:37:57:3b:82:
0a:ee:9d:1c:34:e9:b0:91:2f:e9:22:04:1f:38:d7:b2:94:d9:
41:c0:24:d8:3a:14:b0:b4:75:4e:59:a5:ad:88:89:90:b0:6d:
01:5f:34:2d:68:2a:a7:8e:5b:7a:a4:33:cc:3f:e0:6e:18:5f:
ae:d9:60:cc:bf:6c:35:f2:14:87:35:a3:c8:1d:22:94:bd:47:
8d:fd:be:56:b9:fb:07:9b:31:09:56:eb:e6:75:fa:2f:2d:76:
b8:83:a7:12:12:5d:cf:46:1d:23:48:47:24:c0:59:b6:e9:f2:
e4:92:f1:d1:b7:0c:c4:9c:ed:58:c7:33:47:98:d9:b7:86:6c:
b1:08:12:9e:58:66:a1:fd:b4:cf:b2:3c:8b:de:d1:a2:19:07:
23:4b:77:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:41:51 2025 by rpki-client