Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/6c27f0-137d-471b-9d1d-b7578b10ba7e/1/warwQ_4gnANFNiIF-Mx81hlRwn4.mft
File: warwQ_4gnANFNiIF-Mx81hlRwn4.mft (raw, json)
Hash identifier: zHUx/6ccpJgfcjrnSU2DrHDM6qrQjk2J9JhyJEVBWuw=
Subject key identifier: 88:E3:EA:46:74:D1:D7:C8:6B:41:5A:FC:57:D7:44:50:90:A4:C3:DF
Authority key identifier: C1:AA:F0:43:FE:20:9C:03:45:36:22:05:F8:CC:7C:D6:19:51:C2:7E
Certificate issuer: /CN=c1aaf043fe209c0345362205f8cc7cd61951c27e
Certificate serial: 0194BD856865CB5C9772FEC9207892CFBFAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/warwQ_4gnANFNiIF-Mx81hlRwn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/6c27f0-137d-471b-9d1d-b7578b10ba7e/1/warwQ_4gnANFNiIF-Mx81hlRwn4.mft
Manifest number: 0CA2
Signing time: Fri 31 Jan 2025 18:00:24 +0000
Manifest this update: Fri 31 Jan 2025 18:00:24 +0000
Manifest next update: Sat 01 Feb 2025 18:00:24 +0000
Files and hashes: 1: oLyY8vvBAfeOhRsj9eexvuktQm4.roa (hash: scoM8Sq6POvOb7psz/VnzYZYQjNB2n1Y53tdfQTGFcc=)
2: warwQ_4gnANFNiIF-Mx81hlRwn4.crl (hash: 9gDcX/PgqFr9y1x+JW9NrFLPfuQzjGKYZpLAiUEzDEQ=)
3: yuwuNuzvATZfP3JuA06dTGzQ9o8.roa (hash: iaJVdCZsnNb9Cyubf2e2B713adANaUt93mNYt5mCPK4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:68:65:cb:5c:97:72:fe:c9:20:78:92:cf:bf:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1aaf043fe209c0345362205f8cc7cd61951c27e
Validity
Not Before: Jan 31 18:00:24 2025 GMT
Not After : Feb 1 18:00:24 2025 GMT
Subject: CN=88e3ea4674d1d7c86b415afc57d7445090a4c3df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:8d:5d:ec:98:ad:9c:ce:12:dc:45:3b:0f:9e:
ff:62:fe:fa:7c:5e:46:e6:d8:42:8c:88:26:05:66:
b8:42:ec:d5:b0:c5:50:de:38:4c:3c:08:0c:a4:60:
ad:7d:be:21:e4:cb:43:26:00:a2:cd:88:17:d0:71:
60:10:19:15:51:87:98:63:c7:9a:91:c7:6c:db:f7:
d0:b3:bd:7b:3c:d9:be:f9:f1:29:4a:11:dc:e7:68:
76:cc:5a:92:60:35:ab:b6:ed:f8:dd:ce:15:e1:a0:
eb:4d:e4:a6:bc:75:3f:e0:ee:d7:8a:5a:e5:93:9b:
46:16:ff:92:2a:2b:c7:a3:3e:8a:0e:85:4f:83:21:
d9:4c:e9:7c:29:2c:a4:8c:38:c1:75:04:6d:19:1d:
54:9e:17:bf:30:e7:06:d9:36:2f:f9:fa:68:f3:05:
50:50:4a:a6:76:df:ae:1e:bf:25:84:b3:23:1f:5f:
69:d4:06:e0:5c:bd:26:62:8b:c5:0e:4d:ac:0b:ce:
53:3e:dd:f2:6c:40:45:44:a9:71:6a:12:b9:84:9c:
9c:3b:f8:2f:6c:fc:d7:be:7c:5f:11:65:cd:ff:d0:
a3:5f:c8:ff:25:34:9f:72:e4:a3:bb:cb:80:ba:8d:
b3:fd:74:1b:0b:12:27:58:77:14:b5:49:98:f1:06:
27:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:E3:EA:46:74:D1:D7:C8:6B:41:5A:FC:57:D7:44:50:90:A4:C3:DF
X509v3 Authority Key Identifier:
keyid:C1:AA:F0:43:FE:20:9C:03:45:36:22:05:F8:CC:7C:D6:19:51:C2:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/warwQ_4gnANFNiIF-Mx81hlRwn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/6c27f0-137d-471b-9d1d-b7578b10ba7e/1/warwQ_4gnANFNiIF-Mx81hlRwn4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/6c27f0-137d-471b-9d1d-b7578b10ba7e/1/warwQ_4gnANFNiIF-Mx81hlRwn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:31:9d:db:42:57:90:a7:42:bf:97:9f:a6:ee:e5:c2:28:4b:
19:29:2b:fd:66:61:bd:80:1b:de:04:43:49:86:cb:03:64:38:
cf:dc:2c:a5:05:31:0d:eb:bf:fd:1b:62:eb:9f:30:66:b3:92:
d9:91:8f:14:a8:03:ec:7d:b3:c4:34:ee:64:a5:2d:d3:67:4b:
b9:6e:a1:43:95:cc:45:b0:3b:a7:04:89:42:73:2a:da:a9:76:
87:f5:d3:e1:65:d7:83:bf:7e:2f:c3:ea:d3:05:5b:17:99:27:
94:22:fc:47:47:cf:76:16:d6:ef:ab:7c:a9:95:8a:35:4d:6c:
89:f9:7a:01:03:bb:38:36:07:52:aa:53:a6:6b:67:85:a6:a2:
eb:ba:ee:82:c5:7b:87:cd:f4:8a:6a:e1:78:f6:dc:3a:5f:e1:
a0:1c:cb:23:8f:44:3c:85:e1:60:30:a3:a7:51:a1:63:64:df:
02:6f:3a:1d:5f:fe:50:7e:f4:f2:8a:9c:22:fd:b2:fb:bd:18:
3b:ce:87:f6:f5:d5:60:03:05:d1:24:f7:ff:d5:fa:3f:06:ae:
1e:87:13:eb:f7:75:f7:23:74:43:5e:d9:23:78:b4:03:5d:53:
d0:d6:51:6b:68:98:e4:f1:b1:c6:94:a5:aa:26:d4:d9:6f:d5:
35:f5:31:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:37:29 2025 by rpki-client