Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/02966a-a7ae-4054-ab34-f7e73ddef4e2/1/wDleyIIdj4GJQTOSvYdte9eVwWw.mft
File: wDleyIIdj4GJQTOSvYdte9eVwWw.mft (raw, json)
Hash identifier: KPkmNIKr7lPjCDfDySRHgt+MLuLW5WPCNsp66aOl1mE=
Subject key identifier: BB:47:87:2B:1B:14:DD:6B:E2:1D:6F:22:F3:67:5B:BE:8D:2B:9A:74
Authority key identifier: C0:39:5E:C8:82:1D:8F:81:89:41:33:92:BD:87:6D:7B:D7:95:C1:6C
Certificate issuer: /CN=c0395ec8821d8f8189413392bd876d7bd795c16c
Certificate serial: 0194BCE066C651B98E4F8A04E16E56C75223
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wDleyIIdj4GJQTOSvYdte9eVwWw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/02966a-a7ae-4054-ab34-f7e73ddef4e2/1/wDleyIIdj4GJQTOSvYdte9eVwWw.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 15:00:10 +0000
Manifest this update: Fri 31 Jan 2025 15:00:10 +0000
Manifest next update: Sat 01 Feb 2025 15:00:10 +0000
Files and hashes: 1: P3YoBo67vazrugYfMD3lybaWtAo.roa (hash: /AdjcQW3/wvGSZ4+BEuR5TlveAfDafAH3hNdQ89CSF4=)
2: wDleyIIdj4GJQTOSvYdte9eVwWw.crl (hash: 8tSBKW4nWSnEaderKAzAT89ZVmVIu9bdwOTa6Tpq5FA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:66:c6:51:b9:8e:4f:8a:04:e1:6e:56:c7:52:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0395ec8821d8f8189413392bd876d7bd795c16c
Validity
Not Before: Jan 31 15:00:10 2025 GMT
Not After : Feb 1 15:00:10 2025 GMT
Subject: CN=bb47872b1b14dd6be21d6f22f3675bbe8d2b9a74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:c3:b1:9d:48:64:2a:ae:f3:b5:c1:d1:76:12:
3b:a9:e3:c8:61:4d:fd:4e:73:59:94:0d:b3:50:d1:
08:45:79:79:8d:66:de:3b:e8:9f:67:8b:17:45:a7:
7b:1a:b3:e0:8a:1a:db:58:35:1a:db:6b:9a:0d:d0:
8f:6d:18:13:06:03:b0:81:ab:ff:07:bb:f4:8e:9a:
48:56:89:07:75:41:e5:75:26:59:12:7c:2a:da:ad:
b4:ef:85:d8:db:cc:84:bc:4a:9b:f8:62:d8:d8:8b:
08:eb:ad:8c:f8:1a:a6:1f:05:b1:c7:f9:53:b4:67:
0a:8a:c2:24:07:5c:9c:21:6c:81:7b:28:61:e0:f2:
11:a9:37:ae:fe:f8:de:81:a6:24:7e:42:45:e7:d5:
41:3c:db:a4:a9:8f:4f:23:3f:b5:da:22:26:a5:30:
f7:27:dc:d6:dd:db:26:88:08:09:54:f3:57:ac:83:
04:3b:56:ff:f4:83:8d:f1:ac:f1:59:cf:88:0c:55:
66:cf:74:88:db:8a:54:c1:ca:5b:17:f7:8f:74:3b:
2a:e5:5c:5b:fb:54:69:77:6f:44:02:be:d2:82:d5:
89:8a:26:d7:3f:6e:a0:0a:05:4e:84:e2:89:dd:b2:
8f:dc:26:f3:77:7e:17:03:1a:6c:87:08:c9:0b:c9:
d8:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:47:87:2B:1B:14:DD:6B:E2:1D:6F:22:F3:67:5B:BE:8D:2B:9A:74
X509v3 Authority Key Identifier:
keyid:C0:39:5E:C8:82:1D:8F:81:89:41:33:92:BD:87:6D:7B:D7:95:C1:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wDleyIIdj4GJQTOSvYdte9eVwWw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/02966a-a7ae-4054-ab34-f7e73ddef4e2/1/wDleyIIdj4GJQTOSvYdte9eVwWw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/02966a-a7ae-4054-ab34-f7e73ddef4e2/1/wDleyIIdj4GJQTOSvYdte9eVwWw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:c9:f3:1b:96:0f:4e:3c:c4:32:47:eb:8f:b9:ec:90:1b:2a:
b9:8b:b8:45:50:24:c7:1a:74:8f:16:53:a9:26:5c:7d:1f:c4:
7c:39:87:78:24:3b:30:f6:25:d6:e2:61:7e:a5:e9:86:0b:55:
f2:70:d7:3c:d5:c4:96:80:42:e3:0f:38:91:d8:15:36:bb:a1:
e8:39:90:9e:ff:fe:94:66:df:4f:b0:08:a7:cc:3b:a1:5a:4b:
c8:f6:de:5a:a5:7f:0f:bc:e9:29:2d:c8:ec:36:62:a5:c1:9a:
66:e0:dc:9f:f9:2d:5b:e9:e7:1d:96:bc:d1:9d:64:b3:75:61:
72:12:60:c6:cd:d4:c9:66:83:ac:12:dd:24:77:5f:18:c3:32:
e8:af:af:e1:59:61:6e:77:24:ac:07:12:42:4f:52:ff:0b:13:
7a:b5:04:9f:90:01:13:85:7d:13:01:ce:84:42:68:58:a2:b7:
a1:73:8e:76:e2:dc:13:7f:e8:8d:26:e9:7f:cb:e3:8f:5f:21:
21:48:57:c4:fc:01:11:00:40:2f:4d:e7:27:8d:da:bf:9a:80:
5a:df:f4:3b:56:f4:bb:37:13:c2:77:73:29:7d:ab:d6:98:b3:
b8:fe:69:f4:5c:a9:46:60:a7:16:a6:f7:fb:4a:48:96:17:ca:
ed:4c:35:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:53 2025 by rpki-client