Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/20ff0f-618f-4cb6-bc7f-6541977f65f9/1/CWLcaUB2C3-8LqQ2fMU7wjCmT5s.mft
File: CWLcaUB2C3-8LqQ2fMU7wjCmT5s.mft (raw, json)
Hash identifier: zrGURCumM67nQyxGHLAeHdsieqPKvFXT6RkWbT0wGwg=
Subject key identifier: 55:39:AC:08:87:82:96:88:B3:6B:75:2E:23:C8:AE:E2:A9:23:7F:85
Authority key identifier: 09:62:DC:69:40:76:0B:7F:BC:2E:A4:36:7C:C5:3B:C2:30:A6:4F:9B
Certificate issuer: /CN=0962dc6940760b7fbc2ea4367cc53bc230a64f9b
Certificate serial: 0194BCAA3C41351522C6127E575B68B0FB3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CWLcaUB2C3-8LqQ2fMU7wjCmT5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/20ff0f-618f-4cb6-bc7f-6541977f65f9/1/CWLcaUB2C3-8LqQ2fMU7wjCmT5s.mft
Manifest number: 142F
Signing time: Fri 31 Jan 2025 14:01:00 +0000
Manifest this update: Fri 31 Jan 2025 14:01:00 +0000
Manifest next update: Sat 01 Feb 2025 14:01:00 +0000
Files and hashes: 1: CWLcaUB2C3-8LqQ2fMU7wjCmT5s.crl (hash: nTNZ05Zap50qNx+1VnKsY+8OsTyMnXQ4Me8D6haRzjM=)
2: TLTpN5eS9gcGPO0FDBabvL87rOQ.roa (hash: lfIQcKWthmjdMAC+S1Elhfw52nhiyH4qJyzumU9FWQA=)
3: pHrLP72axtMcDirAyoLsYQo7xD4.roa (hash: tv70i+rhPotsGc3/cdKPMwcsbs/FtawdDRkaToM5QuU=)
4: sfT7clOLTOBjvRJVAIsFquR50k4.roa (hash: fsHX7nutSHEoXkKUmU7Ra/Zz8fpeMiXl/xpdD6d1Hng=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:3c:41:35:15:22:c6:12:7e:57:5b:68:b0:fb:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0962dc6940760b7fbc2ea4367cc53bc230a64f9b
Validity
Not Before: Jan 31 14:01:00 2025 GMT
Not After : Feb 1 14:01:00 2025 GMT
Subject: CN=5539ac0887829688b36b752e23c8aee2a9237f85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:be:18:57:3e:07:6b:b2:18:6e:62:bb:ce:34:
dc:39:3d:02:eb:a1:20:55:98:4e:65:dd:08:8f:9f:
2b:a6:e3:73:bb:ac:53:cc:26:64:d7:c3:17:30:6c:
af:bd:d7:ac:31:05:cd:fb:8e:ac:03:59:5d:0f:84:
d8:a7:16:41:9b:d1:b3:5f:00:3a:1b:5f:1d:22:4d:
92:53:68:4c:b8:ca:06:fc:ca:1c:e1:f0:0e:c4:01:
32:57:88:42:d1:22:1b:5b:91:63:a5:57:88:0c:17:
da:87:0c:fa:cc:8c:3a:99:88:a4:97:35:52:85:10:
63:72:75:3f:3f:31:be:03:44:b6:de:11:00:13:b5:
85:5a:29:15:23:48:8a:b7:ba:ab:df:40:21:75:b8:
4e:ff:3d:23:aa:b6:d2:06:1b:cf:11:46:96:39:d8:
d4:2f:b7:a7:7b:30:7a:a6:34:a3:ac:28:b4:d3:6c:
36:7f:84:4a:28:08:36:c9:dc:9f:0c:bc:e2:42:f1:
08:81:0e:db:04:52:0b:1c:c9:79:d7:27:1d:03:17:
3b:15:fa:5a:11:e0:b7:44:c7:fe:06:7c:b3:3d:dd:
94:e2:47:08:24:42:3a:88:be:bf:db:e7:db:7d:4e:
89:a7:f9:70:1f:99:b7:15:27:08:1a:2f:02:63:f9:
6c:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:39:AC:08:87:82:96:88:B3:6B:75:2E:23:C8:AE:E2:A9:23:7F:85
X509v3 Authority Key Identifier:
keyid:09:62:DC:69:40:76:0B:7F:BC:2E:A4:36:7C:C5:3B:C2:30:A6:4F:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CWLcaUB2C3-8LqQ2fMU7wjCmT5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/20ff0f-618f-4cb6-bc7f-6541977f65f9/1/CWLcaUB2C3-8LqQ2fMU7wjCmT5s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/20ff0f-618f-4cb6-bc7f-6541977f65f9/1/CWLcaUB2C3-8LqQ2fMU7wjCmT5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:a0:a8:ef:f8:6c:b2:a7:e0:e2:a9:ee:3a:4d:8c:96:b8:13:
95:9c:51:59:6c:34:a3:1f:da:92:03:00:14:08:70:76:8f:d4:
05:fd:75:93:b5:bf:a9:60:40:fa:59:eb:24:1e:89:f5:43:be:
df:48:83:ee:58:ea:c8:7d:52:9f:ce:e2:3d:9d:2b:55:d3:3a:
a3:92:24:4c:91:eb:bd:bd:ce:86:32:00:92:14:fb:64:c6:37:
09:d6:8a:5d:be:87:3a:9f:79:2c:c6:dd:ba:85:87:63:65:b7:
18:f9:e6:96:32:1d:99:94:e1:a8:cb:f9:e2:1f:5b:09:ff:fe:
19:16:cf:e0:45:0a:d6:67:c2:09:c5:ea:b4:a7:60:73:30:03:
97:01:bf:f8:dc:01:d7:28:64:97:b5:b0:2d:ac:4f:55:0b:5a:
ed:d1:dc:85:90:96:bd:d4:a5:ba:d8:52:c0:4a:fd:cb:a0:09:
96:3d:52:7d:6b:36:f2:9c:b0:f6:02:86:6a:1b:5a:f9:57:3a:
d7:43:69:72:b1:69:4b:22:43:a9:ad:34:d6:a9:41:4b:cc:0a:
24:6d:a5:13:d0:0c:24:c4:aa:30:b0:be:f2:1d:43:1b:37:fc:
55:0d:a5:ef:25:65:05:1c:44:92:62:d5:29:f9:51:66:36:5f:
69:8d:aa:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:42:57 2025 by rpki-client