Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/894bdc-28a6-4c36-ba42-1653188d8126/1/wpGTNK0q1TYWw0_s6WzikjD4Y0k.mft
File: wpGTNK0q1TYWw0_s6WzikjD4Y0k.mft (raw, json)
Hash identifier: 4YnXnqEC8MranMafl8f3UsiW6JbHQ6fAxngzTnuObVg=
Subject key identifier: 7A:DE:DE:9D:21:2E:57:E7:26:13:8B:FA:70:ED:E9:EA:19:B9:D4:F7
Authority key identifier: C2:91:93:34:AD:2A:D5:36:16:C3:4F:EC:E9:6C:E2:92:30:F8:63:49
Certificate issuer: /CN=c2919334ad2ad53616c34fece96ce29230f86349
Certificate serial: 0194BBCEF7C84608231434CA5CFD52A323BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wpGTNK0q1TYWw0_s6WzikjD4Y0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/894bdc-28a6-4c36-ba42-1653188d8126/1/wpGTNK0q1TYWw0_s6WzikjD4Y0k.mft
Manifest number: 03F8
Signing time: Fri 31 Jan 2025 10:01:30 +0000
Manifest this update: Fri 31 Jan 2025 10:01:30 +0000
Manifest next update: Sat 01 Feb 2025 10:01:30 +0000
Files and hashes: 1: Muf3zUEmjvAcicWWTWwj5ZYLuHo.roa (hash: dWeZmARYi8VXUfy+ROJsrFzhlyTYVpZ288pLW1NjhJk=)
2: b800M8UQE_ndSkfHQhV3cPUcjPM.roa (hash: MbkUQn3Ix8UmF2oKyZjDZOrZVxkNdqgLjfIY0GRvAPU=)
3: wpGTNK0q1TYWw0_s6WzikjD4Y0k.crl (hash: SVQv/a2bV9gLqOAZ1e/wkecLWu92JH5U5qXFLldx/8k=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:f7:c8:46:08:23:14:34:ca:5c:fd:52:a3:23:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2919334ad2ad53616c34fece96ce29230f86349
Validity
Not Before: Jan 31 10:01:30 2025 GMT
Not After : Feb 1 10:01:30 2025 GMT
Subject: CN=7adede9d212e57e726138bfa70ede9ea19b9d4f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c8:25:3d:ed:3d:49:c3:11:4b:1f:46:93:75:
49:e7:b2:e2:2c:b1:7a:e7:5a:56:50:89:e3:14:c9:
9d:c0:69:9e:70:2b:30:1c:9d:86:63:d8:7f:bc:3a:
ee:92:fc:ad:9b:3c:93:87:96:ba:e1:f4:0e:46:84:
00:e3:56:6c:83:c2:fb:f7:1e:45:7d:4f:8e:e5:e6:
6d:85:66:aa:02:8c:cd:72:42:99:4b:01:a7:cd:25:
bf:7a:58:2a:82:42:d7:89:50:79:cc:67:f3:0e:5f:
d3:09:c3:02:fb:45:d3:d1:39:ff:b1:de:71:b4:53:
38:ac:6d:b2:91:06:4b:5b:f0:f1:92:8d:50:4a:6e:
a3:6b:66:0f:f8:63:84:40:e7:0a:11:50:15:65:b9:
6d:55:8c:b4:72:85:24:e3:45:44:67:00:30:7f:48:
f3:2c:a9:83:b3:0d:52:5a:36:08:fd:3c:38:da:f0:
f5:a4:45:d9:d2:3a:3e:34:ac:e8:43:a0:ef:a9:aa:
45:85:59:f4:7a:2d:48:86:67:77:45:ca:81:ba:27:
43:14:6b:1e:79:64:ff:55:a1:06:78:9e:0d:bd:aa:
61:0a:2e:09:12:c6:74:04:24:69:f2:62:f6:a3:b7:
4b:54:fe:8d:1e:30:a9:9f:ca:80:94:b3:26:09:43:
b7:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:DE:DE:9D:21:2E:57:E7:26:13:8B:FA:70:ED:E9:EA:19:B9:D4:F7
X509v3 Authority Key Identifier:
keyid:C2:91:93:34:AD:2A:D5:36:16:C3:4F:EC:E9:6C:E2:92:30:F8:63:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wpGTNK0q1TYWw0_s6WzikjD4Y0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/894bdc-28a6-4c36-ba42-1653188d8126/1/wpGTNK0q1TYWw0_s6WzikjD4Y0k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/894bdc-28a6-4c36-ba42-1653188d8126/1/wpGTNK0q1TYWw0_s6WzikjD4Y0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:1f:7c:fb:e5:fe:2e:fd:0a:21:c7:2c:0e:13:ad:29:c3:e7:
1a:53:56:8a:77:f6:56:46:03:99:23:ef:e3:9c:6d:03:dd:68:
f4:6a:c8:b8:7a:36:47:fb:65:20:dd:a2:24:19:e6:af:f4:30:
b0:1e:7a:07:e2:00:ce:21:0f:46:a6:16:47:94:87:75:7b:bf:
fd:05:64:af:0b:e2:a0:ad:f3:8e:6c:51:fe:30:d9:5e:87:2a:
eb:8e:7a:35:04:a2:ee:1b:b8:b0:b1:09:c5:35:1b:2f:e2:dc:
52:88:0c:57:f4:12:72:b1:e5:d4:5f:35:45:7e:33:6b:1b:66:
13:48:79:7b:80:15:4e:dd:1e:08:b9:98:f8:1f:62:47:cf:25:
a5:a3:97:91:fb:fb:38:0e:e9:4d:28:db:cf:ae:76:4a:f7:85:
c8:00:39:d5:e4:92:dc:02:f6:6b:15:dd:b3:d7:e9:62:02:61:
b2:f9:e6:ad:e0:42:58:1d:9e:d8:a9:6f:77:0a:af:91:fe:04:
cf:66:12:88:e2:a0:b7:f0:27:67:c8:d0:3b:6f:a6:a8:3b:b1:
03:00:43:f0:83:d7:0c:64:5a:03:8d:d5:fb:71:d3:b7:33:57:
0a:ae:ac:73:8c:b1:b3:32:ea:76:c2:63:38:a7:27:fe:16:04:
c2:8f:5a:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 10:45:49 2025 by rpki-client