Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/8b1bc2-5926-4ace-b16f-197fe8365643/1/wtKsHXyezPVli4jxb2E9ez6OjHI.mft
File: wtKsHXyezPVli4jxb2E9ez6OjHI.mft (raw, json)
Hash identifier: Rm02G9WAft0alWWoPFhoJzQzB+LUjdSHjlKmf/gF/ok=
Subject key identifier: 6D:B7:74:8D:30:20:B2:51:8C:A4:ED:F6:60:4A:39:82:51:B7:13:21
Authority key identifier: C2:D2:AC:1D:7C:9E:CC:F5:65:8B:88:F1:6F:61:3D:7B:3E:8E:8C:72
Certificate issuer: /CN=c2d2ac1d7c9eccf5658b88f16f613d7b3e8e8c72
Certificate serial: 0194BD17BCDBFFB6954FC82D1421D7C7A4E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wtKsHXyezPVli4jxb2E9ez6OjHI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/8b1bc2-5926-4ace-b16f-197fe8365643/1/wtKsHXyezPVli4jxb2E9ez6OjHI.mft
Manifest number: 0AFF
Signing time: Fri 31 Jan 2025 16:00:36 +0000
Manifest this update: Fri 31 Jan 2025 16:00:36 +0000
Manifest next update: Sat 01 Feb 2025 16:00:36 +0000
Files and hashes: 1: DkCgqG244-xdfGSiZiRL_6jjMU4.roa (hash: LYv1Ix1K/vm79oDEZ0SXpTqFtZHiYhhxeZ+EeZAbK6I=)
2: wtKsHXyezPVli4jxb2E9ez6OjHI.crl (hash: 6S04UR0ZbVLoeuJxf4+Lrf6jP0/ueoy1ENzS5XnI4YA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:bc:db:ff:b6:95:4f:c8:2d:14:21:d7:c7:a4:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2d2ac1d7c9eccf5658b88f16f613d7b3e8e8c72
Validity
Not Before: Jan 31 16:00:36 2025 GMT
Not After : Feb 1 16:00:36 2025 GMT
Subject: CN=6db7748d3020b2518ca4edf6604a398251b71321
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:95:4a:1a:b0:39:46:c1:5e:0b:ad:df:9e:34:
57:04:25:c4:9f:78:36:ea:92:79:f6:f7:ae:d7:39:
a0:d6:49:df:03:b5:4b:2b:79:e7:c6:7e:af:79:4d:
8e:68:d7:0a:29:f8:f9:42:d5:3f:eb:63:bf:9b:50:
87:f1:52:40:11:b5:a2:1d:f2:12:32:85:99:a2:c2:
b1:cc:0e:3d:bf:eb:dc:80:f4:82:46:96:4d:7d:23:
ca:11:e8:99:a5:c1:33:85:2f:77:cc:ea:9e:e6:1d:
16:e1:e2:cb:72:83:24:f0:01:a3:61:2b:8b:8d:87:
81:26:3f:0e:9e:1f:2a:58:1c:a4:f7:47:ad:83:a3:
35:5e:6c:57:fa:47:be:9d:b1:12:04:37:8c:97:d5:
5d:30:d9:d7:f0:6a:89:09:c2:b0:32:91:63:30:da:
de:3a:df:10:66:00:b7:32:ae:37:c4:32:a0:63:f3:
3c:ca:d5:b0:07:96:2b:c1:44:91:0c:16:05:d5:66:
d8:00:72:a5:71:13:7a:08:d6:9e:1c:d6:c9:ab:2f:
fc:70:f7:81:ee:d3:54:07:f0:60:d2:d8:51:41:2b:
68:4d:b3:d5:cb:72:ec:ba:0f:a4:da:3a:46:86:3d:
a4:03:fc:95:c0:d6:07:bd:3c:fa:4b:52:76:8f:47:
1e:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:B7:74:8D:30:20:B2:51:8C:A4:ED:F6:60:4A:39:82:51:B7:13:21
X509v3 Authority Key Identifier:
keyid:C2:D2:AC:1D:7C:9E:CC:F5:65:8B:88:F1:6F:61:3D:7B:3E:8E:8C:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wtKsHXyezPVli4jxb2E9ez6OjHI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/8b1bc2-5926-4ace-b16f-197fe8365643/1/wtKsHXyezPVli4jxb2E9ez6OjHI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/8b1bc2-5926-4ace-b16f-197fe8365643/1/wtKsHXyezPVli4jxb2E9ez6OjHI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:b2:73:d1:ff:38:81:99:b8:6b:26:7c:e1:54:58:c8:77:34:
91:1e:7c:b9:d6:48:8c:14:c7:87:cd:38:03:c7:1f:eb:8e:7b:
a2:52:5c:eb:ee:d3:36:c4:b0:6c:c9:6b:c9:e1:73:9e:f4:0e:
e1:ce:f3:db:0c:79:4c:70:03:9f:55:05:0f:26:27:af:7e:6b:
65:3a:75:cd:c5:95:87:35:5d:df:ce:50:82:d5:0a:72:0e:c5:
c3:e2:f2:66:7d:81:c8:71:98:a4:43:89:b7:71:39:f2:59:ce:
df:6a:85:96:10:ae:cb:b9:a1:f4:ad:e8:b3:6b:db:a7:a3:0d:
85:72:9f:de:87:c0:9c:42:97:01:96:40:73:d7:15:22:40:76:
d0:1d:f8:2b:41:6e:33:14:3e:22:b3:5f:2d:29:19:67:c5:13:
8e:99:4b:f8:3e:fc:75:5f:51:ae:5e:bd:28:5a:da:d8:fa:72:
b9:eb:da:bb:43:41:f9:be:24:21:82:f4:04:b1:24:ba:c2:6d:
0b:f1:85:82:b1:5e:42:8b:3e:99:0a:33:cc:a2:db:f3:76:39:
6e:48:f4:2f:e6:1d:51:7a:96:1f:7a:58:24:92:ae:24:f8:47:
06:2e:4a:fc:b9:83:83:88:fe:fa:0d:3d:82:4e:e4:c5:90:f6:
9c:3b:21:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:31:53 2025 by rpki-client