
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/31b8c4-dee7-4eee-a0e0-984e82d4b806/1/wE9_yIPJ1eAjGlhbCuE554ZUO7Y.mft
File: wE9_yIPJ1eAjGlhbCuE554ZUO7Y.mft (raw, json)
Hash identifier: wHR3tIe3o4cC3OE1qV6cAhPnCWW5rDfGhBPf8uxaMdE=
Subject key identifier: 44:B7:D9:E9:3B:D6:EC:6A:28:AD:9A:E3:A8:2D:B7:E7:AD:F7:65:5F
Authority key identifier: C0:4F:7F:C8:83:C9:D5:E0:23:1A:58:5B:0A:E1:39:E7:86:54:3B:B6
Certificate issuer: /CN=c04f7fc883c9d5e0231a585b0ae139e786543bb6
Certificate serial: 0194BC05042C788936D976DB97EE516AE27E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wE9_yIPJ1eAjGlhbCuE554ZUO7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/31b8c4-dee7-4eee-a0e0-984e82d4b806/1/wE9_yIPJ1eAjGlhbCuE554ZUO7Y.mft
Manifest number: 064F
Signing time: Fri 31 Jan 2025 11:00:32 +0000
Manifest this update: Fri 31 Jan 2025 11:00:32 +0000
Manifest next update: Sat 01 Feb 2025 11:00:32 +0000
Files and hashes: 1: 0iMFk8Lfng7XvalPLjNNFDCKCXk.roa (hash: RGgyt63YX02pCUWXH4nSFvIeyVgvG587fQXMrvVwyd0=)
2: wE9_yIPJ1eAjGlhbCuE554ZUO7Y.crl (hash: ZGTjPHMUdLyckYHbtWrkQYEfkBb2AeC0qU0tNIWHtfg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:04:2c:78:89:36:d9:76:db:97:ee:51:6a:e2:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c04f7fc883c9d5e0231a585b0ae139e786543bb6
Validity
Not Before: Jan 31 11:00:32 2025 GMT
Not After : Feb 1 11:00:32 2025 GMT
Subject: CN=44b7d9e93bd6ec6a28ad9ae3a82db7e7adf7655f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:bf:e5:96:b0:dd:e9:c6:b2:ff:fd:15:e2:27:
37:29:75:ee:a5:d1:bb:a5:b8:57:92:8d:ca:e0:09:
40:9f:c9:f1:65:de:ed:a3:b5:f8:cc:0c:a4:61:8f:
4d:43:94:cb:bd:b7:49:5b:dc:bf:76:c0:54:be:0e:
dd:d2:7b:71:9e:25:da:02:66:1f:b1:7e:e3:a9:51:
b4:a6:aa:62:6d:a9:f3:6c:09:dd:32:72:6a:24:b8:
ec:b2:9a:21:83:2c:a0:9f:8c:f6:f6:51:93:2f:c6:
da:af:a6:a8:a9:05:5c:fa:4d:48:19:41:71:d8:dc:
fa:16:ca:09:d1:ca:89:10:b2:09:b6:9d:f3:9d:6a:
46:ed:52:6f:e2:a6:83:54:6f:7f:f1:46:e5:b9:3a:
2c:90:85:a5:f0:0d:83:ae:59:27:64:02:07:dc:6d:
e5:84:b0:92:82:da:1e:34:f0:92:29:ff:3a:09:59:
17:67:17:84:cc:17:99:a9:8f:9d:4a:57:09:ed:8e:
96:7b:10:24:88:2a:d8:2b:44:cc:1c:31:23:c4:5f:
86:3b:d9:f4:79:e4:a5:5c:57:4a:69:32:0f:c3:66:
7f:e5:44:43:42:a6:cd:4d:73:04:1c:e2:94:91:46:
4a:c9:88:ca:25:90:d5:cd:7d:80:aa:ce:86:89:07:
e7:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:B7:D9:E9:3B:D6:EC:6A:28:AD:9A:E3:A8:2D:B7:E7:AD:F7:65:5F
X509v3 Authority Key Identifier:
keyid:C0:4F:7F:C8:83:C9:D5:E0:23:1A:58:5B:0A:E1:39:E7:86:54:3B:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wE9_yIPJ1eAjGlhbCuE554ZUO7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/31b8c4-dee7-4eee-a0e0-984e82d4b806/1/wE9_yIPJ1eAjGlhbCuE554ZUO7Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/31b8c4-dee7-4eee-a0e0-984e82d4b806/1/wE9_yIPJ1eAjGlhbCuE554ZUO7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:53:09:71:67:02:2b:ab:3e:3e:6f:0a:dc:13:67:45:cf:84:
9d:a1:93:5e:54:fa:eb:30:a0:af:5c:f3:c5:08:30:4f:da:78:
6f:5d:60:6e:86:00:16:23:0d:af:5a:71:bb:73:fa:7a:f6:4d:
6e:bf:f2:48:43:11:17:5a:af:7f:92:f5:e2:ef:15:9f:06:e0:
b9:5d:b8:18:28:52:d6:68:4f:e5:9b:b2:69:4d:e7:9e:ec:05:
8b:eb:49:1e:ef:ab:12:46:65:55:ab:da:56:bc:8a:52:8f:5d:
1d:8c:12:92:ff:1b:e7:e2:aa:f5:83:6b:6c:00:fe:d1:6e:b7:
a6:33:e4:1d:be:fe:4e:10:e4:79:09:31:35:fe:db:ff:dc:20:
95:85:41:e6:26:98:c6:c2:fb:c6:34:ef:2f:1e:34:91:e0:a6:
55:3d:b7:10:59:35:69:b7:dc:15:59:67:6e:b5:57:67:f1:88:
06:ac:df:ae:21:7c:41:8b:98:13:fa:0a:f2:54:fb:7b:49:a8:
46:99:68:cf:a4:d5:63:90:8f:d8:13:ea:e3:24:ca:b9:09:3a:
81:24:db:31:40:25:2a:b5:da:a0:03:84:81:7f:a3:2c:72:ce:
5c:de:0f:11:40:3a:ba:a1:ce:96:1a:ad:ad:22:8e:62:36:18:
3e:fb:ff:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:02:09 2025 by rpki-client