Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/2901ce-67e7-44f5-99ea-2373a1ba6d0b/1/wGLmqllGb-VhqTq81NzfPepNwmc.mft
File: wGLmqllGb-VhqTq81NzfPepNwmc.mft (raw, json)
Hash identifier: gIz9hKhy6TEe1Xr9waY8F8PwD4OZsi0JpAEZYnkiN34=
Subject key identifier: 02:90:51:30:0A:81:F7:BE:F8:76:F2:21:44:F4:FE:CC:E2:34:D4:7F
Authority key identifier: C0:62:E6:AA:59:46:6F:E5:61:A9:3A:BC:D4:DC:DF:3D:EA:4D:C2:67
Certificate issuer: /CN=c062e6aa59466fe561a93abcd4dcdf3dea4dc267
Certificate serial: 0194BCA9F5CEED57A474E609D2CC4CF74BAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wGLmqllGb-VhqTq81NzfPepNwmc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/2901ce-67e7-44f5-99ea-2373a1ba6d0b/1/wGLmqllGb-VhqTq81NzfPepNwmc.mft
Manifest number: 030A
Signing time: Fri 31 Jan 2025 14:00:42 +0000
Manifest this update: Fri 31 Jan 2025 14:00:42 +0000
Manifest next update: Sat 01 Feb 2025 14:00:42 +0000
Files and hashes: 1: wGLmqllGb-VhqTq81NzfPepNwmc.crl (hash: jEPviwalPGEZtcOiAhpJjTEnTknpB+iOxU8hVuUGGjg=)
2: yDU1rEJ62ylcENkxxq9-gc-Am2g.roa (hash: 7IZ7rxbnUahaLcCnP9skdbmiM7UlbVpGLatma5hP9yw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:f5:ce:ed:57:a4:74:e6:09:d2:cc:4c:f7:4b:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c062e6aa59466fe561a93abcd4dcdf3dea4dc267
Validity
Not Before: Jan 31 14:00:42 2025 GMT
Not After : Feb 1 14:00:42 2025 GMT
Subject: CN=029051300a81f7bef876f22144f4fecce234d47f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:24:71:3b:58:24:73:3a:f1:4f:4d:c5:25:ca:
f6:a3:95:04:72:cb:9c:b9:f8:03:bb:6d:74:cd:05:
8a:78:0d:fb:bb:24:8e:c7:7c:ea:06:fc:1b:72:04:
80:e8:dc:9a:d1:04:42:77:7f:08:28:62:5b:9a:9c:
c9:a4:f3:f8:99:c2:6c:aa:f9:6b:58:b7:f2:23:4e:
bc:47:27:6c:2e:2a:05:eb:42:53:7f:d0:58:6f:7f:
3c:1e:2e:a0:f5:ed:b9:f5:79:ea:a1:65:30:16:5c:
57:f1:2f:7d:bc:c3:50:bf:16:04:3c:55:ea:6e:6c:
e3:0f:d9:bd:7f:ef:c7:57:2b:6a:a9:0b:ae:5a:0c:
67:28:0b:47:36:96:32:26:c5:ce:3a:04:58:67:ab:
14:b6:e0:45:5f:f1:f9:dd:4a:2e:5e:24:b8:13:15:
7d:78:ce:6b:aa:8e:98:15:76:38:1a:9a:cc:81:03:
0e:20:74:82:cd:98:cd:22:ca:b2:bc:1f:f3:18:f1:
8d:f6:b9:ae:0f:62:e0:41:67:ad:1e:b7:aa:88:3e:
27:11:d4:7e:b9:dc:f6:d0:3a:49:53:a9:c2:4d:b6:
cf:e9:20:56:5d:b8:2e:fd:8d:c3:c6:4e:7c:d2:18:
d5:4a:a5:dd:27:2b:b2:95:af:7e:c0:2f:1a:20:d7:
7b:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:90:51:30:0A:81:F7:BE:F8:76:F2:21:44:F4:FE:CC:E2:34:D4:7F
X509v3 Authority Key Identifier:
keyid:C0:62:E6:AA:59:46:6F:E5:61:A9:3A:BC:D4:DC:DF:3D:EA:4D:C2:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wGLmqllGb-VhqTq81NzfPepNwmc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2901ce-67e7-44f5-99ea-2373a1ba6d0b/1/wGLmqllGb-VhqTq81NzfPepNwmc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2901ce-67e7-44f5-99ea-2373a1ba6d0b/1/wGLmqllGb-VhqTq81NzfPepNwmc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:d2:87:54:06:64:82:9f:45:52:ed:cf:3b:8c:97:af:e5:85:
9b:e4:da:27:2b:0a:4d:f7:c6:38:ca:99:d0:4f:de:3a:e7:39:
dc:d4:1a:35:df:47:0e:e7:5d:fa:30:9e:62:4e:35:8e:51:e1:
19:e1:5d:fc:67:fb:33:66:45:a3:81:fc:7f:55:c7:b3:4c:86:
de:ea:32:c0:d6:ab:d2:c9:ce:38:3b:0f:52:58:ca:f3:10:04:
5c:c2:2a:28:34:68:b7:84:a0:aa:5b:44:8f:06:cb:a4:dd:d2:
79:3f:31:37:3a:57:2d:c5:a9:e7:44:ea:34:e7:28:20:d0:9c:
b4:27:19:82:4d:d1:bf:b3:ef:ef:ea:b2:0a:1a:d8:8e:50:ae:
70:50:c2:5e:8a:37:60:9b:61:55:29:d3:20:69:ce:64:cb:ac:
f7:c4:25:1d:80:e6:6a:b6:de:fa:35:05:ad:ed:6d:fe:b4:9b:
8d:a9:09:4a:fc:87:5d:de:93:8a:33:4f:73:4c:49:47:d6:8e:
b5:53:10:4d:ab:16:4f:ae:e3:58:75:49:4d:b8:23:fa:f2:d2:
55:1c:30:07:07:ae:c3:3f:21:bf:0e:ac:ce:df:9d:35:38:45:
44:8f:11:b5:f6:77:65:86:03:9f:51:d1:9f:ed:09:20:6f:54:
19:91:fd:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:28:38 2025 by rpki-client