Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/4e1bc8-f810-4182-a6e3-721bb4fc8c16/1/CWbgXRUnUN-q3l-veRutOR3G0tQ.mft
File: CWbgXRUnUN-q3l-veRutOR3G0tQ.mft (raw, json)
Hash identifier: DeULEBud4xFCmn9KU7rxeYuFrF6YNLm47l9QfukrSnw=
Subject key identifier: 19:02:37:E1:08:C5:CC:BF:64:06:7B:67:E5:35:0B:24:DD:A2:36:82
Authority key identifier: 09:66:E0:5D:15:27:50:DF:AA:DE:5F:AF:79:1B:AD:39:1D:C6:D2:D4
Certificate issuer: /CN=0966e05d152750dfaade5faf791bad391dc6d2d4
Certificate serial: 0194BCA9A9A52D903D1A0CC9CFB11155EB54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CWbgXRUnUN-q3l-veRutOR3G0tQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/4e1bc8-f810-4182-a6e3-721bb4fc8c16/1/CWbgXRUnUN-q3l-veRutOR3G0tQ.mft
Manifest number: 0C6C
Signing time: Fri 31 Jan 2025 14:00:23 +0000
Manifest this update: Fri 31 Jan 2025 14:00:23 +0000
Manifest next update: Sat 01 Feb 2025 14:00:23 +0000
Files and hashes: 1: 5bzk29WC2HSF9C0WZb2ngqPQ56o.roa (hash: fHgyyYyWXqEUztNgt56ZVo1FPxKD7CyfYBjgqkUt9TI=)
2: CWbgXRUnUN-q3l-veRutOR3G0tQ.crl (hash: bWwzD2Vw+4NHsgzh7GDE0zayyn3uqxHJn0NoJwvqAlE=)
3: VYOb-2PB3WKsCUYPT2j-nf80wMs.roa (hash: YpnMPKkA2P+LHKT+FLRfK5zKYPPPwWgoJKnxE9kTcx8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:a9:a5:2d:90:3d:1a:0c:c9:cf:b1:11:55:eb:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0966e05d152750dfaade5faf791bad391dc6d2d4
Validity
Not Before: Jan 31 14:00:23 2025 GMT
Not After : Feb 1 14:00:23 2025 GMT
Subject: CN=190237e108c5ccbf64067b67e5350b24dda23682
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ae:63:f3:35:e1:2b:4a:dd:6b:19:ad:96:bd:
e6:fd:9d:5b:ea:f5:03:f1:6b:5e:05:a1:2b:53:dd:
77:6c:86:82:3b:0b:7c:8b:c3:e1:04:14:f1:cf:ab:
d9:2a:80:ae:c0:ea:36:1e:36:fc:a1:f4:14:83:1f:
90:03:c5:db:8c:c0:9e:1a:1e:d0:f5:2f:f3:64:0d:
66:cd:aa:64:84:7a:e2:a2:be:48:26:3f:e3:ff:0c:
fb:e3:8c:e7:80:25:44:bf:e6:c0:ad:ea:32:89:cc:
28:57:16:1c:d8:a1:0c:cc:5d:df:9f:0a:16:50:8c:
23:4e:76:3c:63:55:7a:3e:4c:a5:2d:8c:e9:5c:5f:
74:b9:55:76:7a:54:75:ed:da:2b:ed:ee:bc:34:55:
40:18:15:40:da:77:66:d6:17:10:fe:29:6d:ae:8a:
68:53:41:94:a3:8a:a8:b0:7f:1b:8f:ef:9d:d3:ee:
0b:ff:9e:ad:03:58:ea:61:6f:7a:be:3d:32:94:b8:
c4:e9:03:25:0e:10:ba:e7:d5:e2:0b:c2:96:81:0c:
f7:8b:e1:c5:5d:05:0e:09:88:e2:98:82:d8:db:cf:
05:bd:4f:55:53:d0:c1:36:fd:b2:aa:5d:a6:a8:a6:
0d:2f:18:d7:02:9f:8f:e5:e1:6e:5e:7c:56:c8:dc:
f9:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:02:37:E1:08:C5:CC:BF:64:06:7B:67:E5:35:0B:24:DD:A2:36:82
X509v3 Authority Key Identifier:
keyid:09:66:E0:5D:15:27:50:DF:AA:DE:5F:AF:79:1B:AD:39:1D:C6:D2:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CWbgXRUnUN-q3l-veRutOR3G0tQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/4e1bc8-f810-4182-a6e3-721bb4fc8c16/1/CWbgXRUnUN-q3l-veRutOR3G0tQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/4e1bc8-f810-4182-a6e3-721bb4fc8c16/1/CWbgXRUnUN-q3l-veRutOR3G0tQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:c3:f8:f0:8b:35:36:71:06:67:2f:73:9b:21:e1:23:e7:a8:
37:0f:7b:f4:08:0d:4f:27:e3:93:b0:eb:84:83:5f:35:0b:87:
04:a6:07:67:d1:42:86:7f:c2:42:d9:bb:df:4f:bc:21:c0:e6:
b0:ac:2d:5a:8c:50:03:f1:5e:23:ad:cf:86:a3:46:cc:07:56:
96:62:23:a6:20:c8:7d:87:d0:f0:f1:05:d5:de:cb:c5:66:bb:
49:1d:e4:aa:54:db:37:57:f4:96:9a:7f:5a:40:ab:84:13:41:
30:f0:20:19:4f:23:74:e2:1b:2c:82:64:eb:b0:aa:2d:02:84:
46:1c:63:0b:b3:ff:76:d4:77:3f:3a:32:5c:89:df:9d:ad:ee:
70:1c:fa:d5:12:98:95:96:07:36:c7:a8:34:a3:b2:8d:c1:df:
71:84:52:f1:e7:e0:f3:60:12:4b:c8:3c:dd:ff:81:16:5c:ae:
be:07:1f:45:7a:73:9b:c2:c5:d2:d6:11:31:8e:ac:7a:49:65:
2f:2a:36:a2:98:0e:a8:4b:c5:f8:a9:10:89:86:5f:21:8f:4d:
00:e3:fa:42:aa:70:9a:61:1c:f2:96:30:35:02:0f:e3:57:f0:
37:ca:2d:9d:9c:97:dc:a2:08:de:eb:ac:d1:18:cf:e0:0b:9a:
8c:1b:b1:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:49:33 2025 by rpki-client