Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/807954-aa7e-48e9-87fa-5ebf2a54eb6d/1/wnlkqr9ATdo_Xg7MHHBqsyfG-TE.mft
File: wnlkqr9ATdo_Xg7MHHBqsyfG-TE.mft (raw, json)
Hash identifier: ViRqgJW8I/wVOyonPLARcntoKntbomQMUwU2RaMGnGM=
Subject key identifier: 3E:39:C2:C2:FA:80:67:97:35:2B:45:5B:6E:98:93:73:D6:39:8B:51
Authority key identifier: C2:79:64:AA:BF:40:4D:DA:3F:5E:0E:CC:1C:70:6A:B3:27:C6:F9:31
Certificate issuer: /CN=c27964aabf404dda3f5e0ecc1c706ab327c6f931
Certificate serial: 0194BCA9887338486425486BE12DEFA78C12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wnlkqr9ATdo_Xg7MHHBqsyfG-TE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/807954-aa7e-48e9-87fa-5ebf2a54eb6d/1/wnlkqr9ATdo_Xg7MHHBqsyfG-TE.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 14:00:14 +0000
Manifest this update: Fri 31 Jan 2025 14:00:14 +0000
Manifest next update: Sat 01 Feb 2025 14:00:14 +0000
Files and hashes: 1: o0fdFP8L6ZQ9z18ph8qAlZoBEzo.roa (hash: VPAIrOk53hiaGWh79TqFrzeWPMAWo/gbrSaxlcrP+GI=)
2: wnlkqr9ATdo_Xg7MHHBqsyfG-TE.crl (hash: /DVjHgxo6pCBO77pdgtRvZVoBDOpQBM5iAaVPn0fquc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:88:73:38:48:64:25:48:6b:e1:2d:ef:a7:8c:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c27964aabf404dda3f5e0ecc1c706ab327c6f931
Validity
Not Before: Jan 31 14:00:14 2025 GMT
Not After : Feb 1 14:00:14 2025 GMT
Subject: CN=3e39c2c2fa806797352b455b6e989373d6398b51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:97:b6:47:c0:55:0c:ad:92:48:e2:7f:23:79:
7a:75:30:06:1a:70:2b:cf:da:2a:f2:46:5a:a0:77:
3a:33:04:58:7a:43:63:1b:ed:2e:f0:a7:c4:b7:dc:
73:5a:79:98:53:bb:d4:c7:41:fa:1f:cc:0f:56:ba:
b0:4c:5d:5e:e5:7d:48:ee:93:c5:bc:a3:42:5d:8e:
87:10:71:7b:e7:17:e5:f0:6c:4c:ed:70:01:41:ed:
ba:9e:a9:a0:38:3e:b5:4d:b9:74:f3:7b:2b:5e:40:
c8:74:a1:e1:f9:1e:ab:af:34:0b:98:cb:3f:a3:9d:
29:1a:3f:0d:8e:85:92:7e:60:8c:4d:1f:46:65:94:
6a:b8:5e:6a:a2:9c:b6:33:11:60:ef:b8:94:b8:1e:
51:3a:e4:59:23:b6:dd:32:95:a6:80:0b:f7:d8:da:
c0:8c:f9:63:1e:8d:85:a6:51:97:dc:8b:dc:ce:50:
f3:b6:56:db:11:da:71:bc:82:da:c1:38:70:69:49:
ec:c3:98:aa:a1:16:4d:c2:5f:52:ae:b7:0e:06:b2:
fb:4d:6e:5f:58:a6:3a:04:13:3e:77:c2:e2:5c:ef:
c5:29:50:dc:93:94:1f:9d:f6:9f:fb:04:fb:12:46:
52:bb:3b:3a:83:6f:b6:ec:02:8c:92:bc:8f:4f:9b:
3c:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:39:C2:C2:FA:80:67:97:35:2B:45:5B:6E:98:93:73:D6:39:8B:51
X509v3 Authority Key Identifier:
keyid:C2:79:64:AA:BF:40:4D:DA:3F:5E:0E:CC:1C:70:6A:B3:27:C6:F9:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wnlkqr9ATdo_Xg7MHHBqsyfG-TE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/807954-aa7e-48e9-87fa-5ebf2a54eb6d/1/wnlkqr9ATdo_Xg7MHHBqsyfG-TE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/807954-aa7e-48e9-87fa-5ebf2a54eb6d/1/wnlkqr9ATdo_Xg7MHHBqsyfG-TE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:3b:f8:09:33:0a:04:00:3d:88:8b:f4:99:64:92:a9:02:77:
22:f0:71:5a:f0:a9:00:91:ea:9c:67:52:48:57:c9:94:5d:64:
cf:76:3d:c9:23:9e:83:a2:7e:b4:78:68:1f:83:22:34:c8:14:
fd:b3:f0:f0:23:3b:f7:44:5c:12:83:ce:63:1f:0a:af:df:61:
54:3a:8d:b1:8d:10:63:f5:99:23:18:8d:15:b6:dc:c0:bf:3b:
33:c5:7a:e5:4e:d9:24:41:f2:93:74:fa:85:b7:9b:c2:5e:d3:
1f:9a:cc:5f:be:4a:3a:f9:b5:42:27:62:63:1b:a1:6b:18:c8:
fc:01:9d:4c:df:a4:aa:f3:9f:5b:9a:51:e3:81:52:72:bc:3c:
57:4a:02:62:3c:0a:99:e8:3b:6d:f1:29:70:81:54:95:ed:8d:
0f:f2:de:c5:06:b2:7a:04:57:5a:b8:ed:42:3c:e7:14:14:28:
2b:37:0d:aa:9c:3d:cc:51:56:60:b4:4b:a6:47:9b:98:56:21:
35:7c:38:30:a2:04:bb:ba:6f:a1:be:dd:f8:e5:4e:9c:2e:a1:
45:f2:84:3b:51:40:94:17:d9:c6:6a:b0:1d:d9:0f:b6:d0:f5:
0d:a8:6e:bf:7e:df:82:68:1a:c9:a3:46:05:36:af:00:d6:de:
c5:85:f4:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:37:42 2025 by rpki-client