Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/68b521-c790-4957-9e52-2d26f1b56e20/1/wOtmi3NaGDk3Tkj3nLJDbb9BfKo.mft
File: wOtmi3NaGDk3Tkj3nLJDbb9BfKo.mft (raw, json)
Hash identifier: p9IbopjuuVl3WU1mlLx7Uk3UMVYchFahu2849KN+6HY=
Subject key identifier: E5:07:50:C6:FC:05:DE:DB:E9:E8:C1:EA:47:11:53:EF:CB:CE:AF:04
Authority key identifier: C0:EB:66:8B:73:5A:18:39:37:4E:48:F7:9C:B2:43:6D:BF:41:7C:AA
Certificate issuer: /CN=c0eb668b735a1839374e48f79cb2436dbf417caa
Certificate serial: 0194BC3C9FD8418ED859D1CCDAC2AA3EF511
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wOtmi3NaGDk3Tkj3nLJDbb9BfKo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/68b521-c790-4957-9e52-2d26f1b56e20/1/wOtmi3NaGDk3Tkj3nLJDbb9BfKo.mft
Manifest number: 0E06
Signing time: Fri 31 Jan 2025 12:01:17 +0000
Manifest this update: Fri 31 Jan 2025 12:01:17 +0000
Manifest next update: Sat 01 Feb 2025 12:01:17 +0000
Files and hashes: 1: HwLDpTIt6plI2sCVLbeUjnqOAJc.roa (hash: yvIMoIjc3gOAvuIICfd6lLbgjDWXL7Ecab2rJN91n/I=)
2: wOtmi3NaGDk3Tkj3nLJDbb9BfKo.crl (hash: VDpe5gU70nTBISBOJREA0zp49cdyESWw1iCW5CKw5BM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:9f:d8:41:8e:d8:59:d1:cc:da:c2:aa:3e:f5:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0eb668b735a1839374e48f79cb2436dbf417caa
Validity
Not Before: Jan 31 12:01:17 2025 GMT
Not After : Feb 1 12:01:17 2025 GMT
Subject: CN=e50750c6fc05dedbe9e8c1ea471153efcbceaf04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:7d:6a:e9:f3:b0:70:f0:2d:f7:a7:76:b6:90:
0d:15:ad:df:3e:4a:09:5c:00:1a:2c:a4:fe:9d:fb:
34:fa:d3:4e:05:c1:3e:56:e5:9a:dc:d6:c8:11:c5:
92:b7:f7:e9:b3:5d:cb:6a:89:cb:74:38:15:ee:b7:
56:81:f0:12:34:f4:8e:f6:c5:19:69:1c:0b:23:cb:
01:82:b9:69:2c:0b:d1:12:bb:37:fe:5c:b1:57:04:
86:be:2b:03:89:c2:61:aa:95:82:0b:0d:ec:93:d2:
2f:90:da:45:8f:9c:a5:ba:7c:b6:8b:09:6d:1f:e4:
c0:cc:a0:05:4a:d2:40:e2:a1:52:4b:6f:1d:63:d9:
7c:79:b1:28:e6:ab:71:96:cb:34:1b:7d:c5:cf:2e:
03:81:2e:09:63:5c:fc:31:43:10:c9:55:d3:c4:71:
bc:fa:dd:f1:e3:a2:46:c5:b0:10:98:d7:99:41:97:
73:9b:0e:c7:27:2f:22:a2:5a:fe:aa:6c:59:a0:00:
db:b5:05:13:88:01:de:ae:72:70:dc:e4:ab:24:0a:
01:78:0c:e0:5e:4b:3e:c5:1c:85:67:93:49:ff:c7:
b7:03:5e:c0:4a:c7:8d:7e:18:fd:b1:78:05:2e:02:
a1:4c:0d:45:7c:04:99:ae:41:d1:98:26:d7:7d:19:
91:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:07:50:C6:FC:05:DE:DB:E9:E8:C1:EA:47:11:53:EF:CB:CE:AF:04
X509v3 Authority Key Identifier:
keyid:C0:EB:66:8B:73:5A:18:39:37:4E:48:F7:9C:B2:43:6D:BF:41:7C:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wOtmi3NaGDk3Tkj3nLJDbb9BfKo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/68b521-c790-4957-9e52-2d26f1b56e20/1/wOtmi3NaGDk3Tkj3nLJDbb9BfKo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/68b521-c790-4957-9e52-2d26f1b56e20/1/wOtmi3NaGDk3Tkj3nLJDbb9BfKo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:21:b2:e0:70:4f:a7:62:9f:b0:80:3a:75:ae:e8:e3:07:04:
e8:fe:2a:bf:8a:8c:55:aa:5f:40:72:b4:20:62:5d:01:96:54:
84:e5:76:f3:c8:55:3f:ec:7a:60:b8:ba:25:5b:cd:a8:19:a7:
1a:09:76:1d:28:05:2a:ba:fa:6e:8a:32:84:d3:2e:04:c3:e3:
b5:42:79:35:de:3e:8c:a5:60:62:a1:05:a1:66:60:39:3a:a3:
0c:ee:1d:82:19:1e:4d:15:16:b8:7f:e3:0c:d9:b7:36:e6:40:
39:0e:4d:dc:0b:c6:a9:c4:17:d4:43:3e:7d:fc:81:35:9e:20:
7a:db:a7:2b:a5:17:6b:15:be:ec:f2:a9:5d:e9:f8:ab:94:4d:
0e:41:65:3c:ea:b1:88:8d:ee:8c:e6:b9:c0:85:5a:cf:08:98:
e4:56:8c:96:96:8d:6c:72:7c:29:2f:7b:e7:a6:ee:9c:d9:32:
c9:80:fa:b7:a7:74:a9:b6:63:0e:00:6d:cd:72:d2:6a:a5:87:
24:51:c1:17:55:f0:b6:98:50:3b:b1:33:04:b7:6b:db:1f:cf:
85:d4:6d:8c:d4:7e:ca:c0:d5:ed:c6:11:39:5a:f9:5d:fc:e6:
77:08:88:be:0c:7f:ec:7e:3e:97:57:66:11:cf:40:10:3a:c2:
23:b3:9b:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 09:54:26 2025 by rpki-client