Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/e81d26-80f4-40f2-bdbd-02cf6b0db63b/1/wArEVewO3ikw6lgQV-4f9Z9b9sc.mft
File: wArEVewO3ikw6lgQV-4f9Z9b9sc.mft (raw, json)
Hash identifier: 4CXFFz58OvD6sHtrfCVux86TvU5fhXcspLoiYlbVSv4=
Subject key identifier: 23:9E:DC:9C:2C:52:BF:85:D9:0D:BF:B6:43:A0:25:6D:3B:36:F4:BB
Authority key identifier: C0:0A:C4:55:EC:0E:DE:29:30:EA:58:10:57:EE:1F:F5:9F:5B:F6:C7
Certificate issuer: /CN=c00ac455ec0ede2930ea581057ee1ff59f5bf6c7
Certificate serial: 0194BD1760B5FFD749BC56E0B090F1AEDB3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wArEVewO3ikw6lgQV-4f9Z9b9sc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/e81d26-80f4-40f2-bdbd-02cf6b0db63b/1/wArEVewO3ikw6lgQV-4f9Z9b9sc.mft
Manifest number: 0EB3
Signing time: Fri 31 Jan 2025 16:00:13 +0000
Manifest this update: Fri 31 Jan 2025 16:00:13 +0000
Manifest next update: Sat 01 Feb 2025 16:00:13 +0000
Files and hashes: 1: IaifUimRjLV0wimYFwuBxS5X-tQ.roa (hash: cmI9raT4lPlOUQCttfe+nau/yhN6VEMOtjQDtEZ8tbk=)
2: wArEVewO3ikw6lgQV-4f9Z9b9sc.crl (hash: gF/tzNginewTIEOia0WSgHASHedMRZDFG5oUQQNYbYo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:60:b5:ff:d7:49:bc:56:e0:b0:90:f1:ae:db:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c00ac455ec0ede2930ea581057ee1ff59f5bf6c7
Validity
Not Before: Jan 31 16:00:13 2025 GMT
Not After : Feb 1 16:00:13 2025 GMT
Subject: CN=239edc9c2c52bf85d90dbfb643a0256d3b36f4bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:bc:9a:ce:16:67:99:68:16:c2:25:1b:58:d9:
d4:4e:ad:d2:2b:d5:08:14:fa:25:f4:4f:2b:54:d8:
0c:d9:5a:59:21:a4:13:22:c6:0f:51:48:3e:98:0a:
a0:1f:63:08:91:4d:f2:b6:00:75:97:7c:d5:2b:89:
d2:6b:8d:6e:40:f2:69:cf:2f:68:84:ef:d9:bc:39:
66:06:c7:99:40:51:e5:b0:d5:ce:fc:e3:a7:f3:05:
8e:d0:03:d6:99:d3:b8:b3:6b:c7:db:9d:b6:6c:ab:
1d:7c:bf:e6:c5:2b:cf:75:89:7c:0b:16:95:21:12:
af:fc:66:1f:ad:c9:b2:a9:c4:68:e9:ec:97:bc:29:
ba:a8:b1:7f:c3:42:82:99:29:2b:e1:a2:38:69:75:
85:14:fc:c0:ff:ee:38:48:79:10:ec:b9:28:ff:91:
7b:d0:58:57:ee:93:ae:34:48:bf:26:12:8f:9f:cb:
88:fa:e8:ae:37:38:e5:35:4c:e7:9b:33:c5:5e:7f:
6e:2e:2f:bc:74:91:f4:04:36:16:44:1b:c8:b7:12:
bf:ea:43:98:3c:65:9b:c7:df:6d:fd:89:76:27:50:
11:54:02:33:57:d4:bf:ef:42:76:7f:d3:12:fc:5a:
c9:da:a2:10:0f:78:4e:68:a7:39:8d:84:9d:44:d0:
ac:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:9E:DC:9C:2C:52:BF:85:D9:0D:BF:B6:43:A0:25:6D:3B:36:F4:BB
X509v3 Authority Key Identifier:
keyid:C0:0A:C4:55:EC:0E:DE:29:30:EA:58:10:57:EE:1F:F5:9F:5B:F6:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wArEVewO3ikw6lgQV-4f9Z9b9sc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/e81d26-80f4-40f2-bdbd-02cf6b0db63b/1/wArEVewO3ikw6lgQV-4f9Z9b9sc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/e81d26-80f4-40f2-bdbd-02cf6b0db63b/1/wArEVewO3ikw6lgQV-4f9Z9b9sc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:7a:10:0f:cd:02:04:da:11:ff:ec:65:3f:d8:98:bf:73:e2:
b5:70:71:69:a6:d1:17:03:37:11:ed:c1:1e:cf:56:2e:f0:47:
bf:cf:66:79:5e:39:d2:5d:e4:42:f5:4b:14:bc:0b:71:fb:78:
42:c8:4f:c0:d9:c4:a3:0e:74:40:95:12:8f:b9:ef:2e:22:53:
41:59:5d:23:f1:a8:1c:d5:a4:02:dd:07:2b:74:88:22:2f:e8:
b3:17:d4:a2:48:ea:e7:14:8b:a5:c7:6e:cb:33:f8:1d:28:34:
46:33:44:d9:2b:cf:5c:84:d9:2d:d4:57:24:f2:e5:ec:8b:19:
4f:63:35:1a:1d:c0:d7:cf:85:80:1e:83:e3:b3:05:58:aa:d1:
3d:d7:7a:fc:e5:1a:bd:e1:ba:e5:ed:34:d3:7e:ff:fc:eb:25:
2d:8c:0a:74:f8:55:6e:f6:ba:bb:45:54:07:99:6d:58:44:e4:
37:38:3c:3b:be:c2:96:db:3f:8a:f9:d4:ba:55:cc:80:bf:b7:
e1:99:39:a3:69:22:f4:f6:2b:0b:73:5a:be:70:03:b0:18:de:
1d:45:5b:1d:cd:99:69:3a:5d:46:fc:9b:05:2a:cf:a8:31:38:
08:78:f4:a2:96:2e:58:02:56:dd:1e:4f:b9:37:ea:ca:cb:15:
b1:8e:76:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:38:24 2025 by rpki-client