Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/24b5ba-bf06-4b51-95bc-a45218c58418/1/wMlBPwdqeCEQwUSQ2JDxs-mOB4U.mft
File: wMlBPwdqeCEQwUSQ2JDxs-mOB4U.mft (raw, json)
Hash identifier: 1N35BFc9khYvOhx7laen5aYujEabhB3JNpqwrGP6bFA=
Subject key identifier: 06:BB:9A:6D:6B:B0:07:AC:5B:16:C5:21:A8:44:67:56:BF:38:91:69
Authority key identifier: C0:C9:41:3F:07:6A:78:21:10:C1:44:90:D8:90:F1:B3:E9:8E:07:85
Certificate issuer: /CN=c0c9413f076a782110c14490d890f1b3e98e0785
Certificate serial: 0194BBCEE23FB3E3D4C0614BD4F1E867219F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wMlBPwdqeCEQwUSQ2JDxs-mOB4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/24b5ba-bf06-4b51-95bc-a45218c58418/1/wMlBPwdqeCEQwUSQ2JDxs-mOB4U.mft
Manifest number: 09D8
Signing time: Fri 31 Jan 2025 10:01:25 +0000
Manifest this update: Fri 31 Jan 2025 10:01:25 +0000
Manifest next update: Sat 01 Feb 2025 10:01:25 +0000
Files and hashes: 1: XvSqa1PF0nx9rdnf-qHYXXmj-t4.roa (hash: 6D9O10hjXxh7sEXhihEUoyls7053T5SpuEJHdN4TtnE=)
2: wMlBPwdqeCEQwUSQ2JDxs-mOB4U.crl (hash: 3ej6qYYO+qvMrV0OBM0FtRLBEoE0i1/AsY98cf/lL0g=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:e2:3f:b3:e3:d4:c0:61:4b:d4:f1:e8:67:21:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0c9413f076a782110c14490d890f1b3e98e0785
Validity
Not Before: Jan 31 10:01:25 2025 GMT
Not After : Feb 1 10:01:25 2025 GMT
Subject: CN=06bb9a6d6bb007ac5b16c521a8446756bf389169
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ad:c7:cc:4d:74:82:1b:71:1d:62:dd:b9:db:
82:fe:42:8f:1b:15:92:a1:35:68:6f:18:f2:38:46:
fe:31:89:0a:35:57:be:b4:11:50:b2:7e:d0:e6:5d:
ab:ad:3b:fa:8b:99:7b:90:32:70:e0:0b:bc:74:6b:
36:d4:9d:e8:d4:b2:c8:69:8b:15:4a:e6:e0:fe:0b:
49:7a:32:7b:c5:67:ae:d4:a3:c0:d7:40:1f:3e:10:
e5:c3:31:b6:60:42:01:9e:5d:75:09:dd:02:a4:94:
79:d4:e0:f8:4e:82:4a:59:dd:e9:e8:99:ac:c4:8c:
32:4a:c3:b8:b5:91:25:8f:bd:75:d9:44:1c:25:33:
b2:d6:91:1a:38:28:90:94:38:f0:a1:34:d2:f7:c0:
33:73:4a:63:9a:ab:75:9a:f4:05:2f:c4:bb:ee:a1:
06:02:3b:1d:a4:48:5f:78:b1:af:54:b7:93:16:18:
e1:32:3b:47:12:c1:19:91:78:96:2d:bf:c6:18:bf:
6e:ba:4a:13:36:00:97:a9:0c:90:ef:da:16:b7:01:
de:65:19:9e:e8:57:57:52:17:6e:ec:f2:d1:b5:c4:
c3:51:0e:9f:15:3f:87:8c:88:23:67:bd:b3:f6:55:
7b:bb:5b:b3:86:a5:0f:f3:55:9d:56:6b:19:d8:d8:
60:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:BB:9A:6D:6B:B0:07:AC:5B:16:C5:21:A8:44:67:56:BF:38:91:69
X509v3 Authority Key Identifier:
keyid:C0:C9:41:3F:07:6A:78:21:10:C1:44:90:D8:90:F1:B3:E9:8E:07:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wMlBPwdqeCEQwUSQ2JDxs-mOB4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/24b5ba-bf06-4b51-95bc-a45218c58418/1/wMlBPwdqeCEQwUSQ2JDxs-mOB4U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/24b5ba-bf06-4b51-95bc-a45218c58418/1/wMlBPwdqeCEQwUSQ2JDxs-mOB4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:e9:2e:77:67:30:0a:0c:11:ac:36:71:77:a7:83:d8:46:dd:
f3:35:ef:52:86:00:77:14:af:19:89:24:95:53:f7:4d:b6:c4:
08:c5:4d:5c:ed:4d:99:cc:8f:57:77:81:6e:c4:e7:34:28:96:
d6:9c:34:ed:bc:87:11:28:a5:71:7f:19:9f:bd:df:c7:b9:c8:
45:cf:87:57:58:2c:93:45:ab:59:ab:b0:2f:44:34:45:79:c3:
9d:3f:8d:87:b8:28:fa:dc:75:1d:a9:29:73:40:38:5b:3d:8a:
9e:60:a6:fc:90:17:09:c9:45:ed:79:1b:c1:65:cf:ab:e6:b4:
08:f8:8a:e6:18:08:36:d1:b4:16:62:f7:fe:09:f6:ed:ba:65:
d6:59:4b:7a:b8:d1:fe:85:b4:fb:6c:18:41:a8:30:e4:e1:43:
e4:0f:13:cf:63:a4:0b:ca:94:4a:8b:34:c0:4b:af:ee:63:aa:
71:1c:dd:2e:53:67:e7:14:15:ae:7b:fa:4d:8d:38:fd:6d:69:
c5:18:97:6d:4a:85:ae:e9:36:04:68:d6:71:8a:ae:49:2d:34:
c9:84:f1:a1:59:92:9d:17:e2:69:d8:ce:36:af:26:c0:06:85:
16:18:4a:52:19:de:6d:f0:bc:3a:b8:c5:6e:84:36:e9:e3:57:
e6:14:8f:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:48:18 2025 by rpki-client