Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/769743-4ba1-43ce-af23-4846062f9a73/1/wNKohFzfZXbejrARGAir1l_YvEQ.mft
File: wNKohFzfZXbejrARGAir1l_YvEQ.mft (raw, json)
Hash identifier: wqG2l79kcncFYiB8ELSXQP8KSqgOkcvUlPica7WFjrM=
Subject key identifier: 70:BA:D1:1E:79:5F:36:D7:CF:A1:41:BC:32:B0:34:8B:C4:35:08:E0
Authority key identifier: C0:D2:A8:84:5C:DF:65:76:DE:8E:B0:11:18:08:AB:D6:5F:D8:BC:44
Certificate issuer: /CN=c0d2a8845cdf6576de8eb0111808abd65fd8bc44
Certificate serial: 0194BC04CC6B145B83E77859A1E061E7BE11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wNKohFzfZXbejrARGAir1l_YvEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/769743-4ba1-43ce-af23-4846062f9a73/1/wNKohFzfZXbejrARGAir1l_YvEQ.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 11:00:18 +0000
Manifest this update: Fri 31 Jan 2025 11:00:18 +0000
Manifest next update: Sat 01 Feb 2025 11:00:18 +0000
Files and hashes: 1: OmgVAw8ZHFFpHCyw7LOehrOM8KA.roa (hash: 6CbGQ8M2p8DqUv4lPi9kJg+A49OPSohIvq46VoGyAHM=)
2: iB80sjC3FaeKn3w8-_wDD7I9eLg.roa (hash: J8k5oGXUl2TYImVeWDD/bvu/zaBz6UEfFHiKZd9EJV0=)
3: wNKohFzfZXbejrARGAir1l_YvEQ.crl (hash: WB+oMskvCIwrgQ5HdhimVA6eMSg9VPnOjO7VM6Xq96s=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:cc:6b:14:5b:83:e7:78:59:a1:e0:61:e7:be:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0d2a8845cdf6576de8eb0111808abd65fd8bc44
Validity
Not Before: Jan 31 11:00:18 2025 GMT
Not After : Feb 1 11:00:18 2025 GMT
Subject: CN=70bad11e795f36d7cfa141bc32b0348bc43508e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:a1:56:3b:85:74:6f:a3:5f:03:25:45:63:ff:
0f:9d:46:c0:cc:89:57:68:8f:ae:a0:42:d0:8c:82:
d0:c1:16:46:eb:97:96:fc:5a:3f:44:11:75:ab:9c:
28:e3:5b:80:79:af:6c:e1:49:8c:91:57:d3:35:b2:
81:78:e6:fc:62:fd:90:d0:78:01:b9:da:fc:95:32:
3b:4d:09:77:82:d2:38:f0:fb:49:f5:b9:07:7f:1f:
27:28:da:8c:57:c8:ab:2c:75:87:db:d9:af:5c:75:
18:ec:3d:ed:1f:7e:f7:f0:ea:e4:f5:cc:03:33:b6:
11:56:2d:5b:08:4c:0c:4d:b5:c8:31:32:22:50:c6:
0a:1f:6c:c0:5c:a9:3c:f6:d0:77:df:8d:51:05:4a:
f3:90:82:ef:68:00:7c:a9:66:b5:b5:fe:76:af:9a:
c0:f1:d2:01:ff:2a:93:74:7f:95:84:4c:0c:ee:4c:
69:37:24:32:db:95:0c:39:8d:fb:a5:fe:15:7b:94:
87:2d:1b:ed:41:a7:f9:b4:74:b8:f8:ed:87:78:ba:
b4:00:a5:0e:43:87:b6:0f:cb:6c:bd:57:69:eb:ee:
42:c2:8b:b0:b8:0b:8b:c7:13:c1:0d:fa:44:e3:a4:
f7:f3:8c:d0:c6:f3:c2:1d:03:c4:53:03:e5:93:79:
23:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:BA:D1:1E:79:5F:36:D7:CF:A1:41:BC:32:B0:34:8B:C4:35:08:E0
X509v3 Authority Key Identifier:
keyid:C0:D2:A8:84:5C:DF:65:76:DE:8E:B0:11:18:08:AB:D6:5F:D8:BC:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wNKohFzfZXbejrARGAir1l_YvEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/769743-4ba1-43ce-af23-4846062f9a73/1/wNKohFzfZXbejrARGAir1l_YvEQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/769743-4ba1-43ce-af23-4846062f9a73/1/wNKohFzfZXbejrARGAir1l_YvEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:02:15:23:70:78:e3:41:ee:83:00:b4:65:d0:51:e3:98:a7:
34:cc:ea:0e:aa:1c:da:94:c7:d5:7e:77:1c:43:ec:80:01:f2:
4c:3a:97:21:da:3a:c4:4e:2a:63:b7:47:7e:cf:fd:da:46:7b:
c2:84:fb:66:a8:85:e1:d6:c5:5f:e8:db:40:8d:c7:97:34:62:
5b:45:f0:82:09:8e:56:4a:f9:5f:db:5a:54:37:70:1c:3b:08:
87:ef:19:10:d6:36:be:5d:4c:d4:8e:64:e8:bc:c9:2c:db:d1:
4e:ff:51:f6:19:03:ca:35:38:21:f6:c1:0c:2f:ba:1b:50:c8:
3b:0d:19:1c:22:a0:15:58:b0:d2:3d:23:99:bb:87:e0:d6:02:
d6:d4:71:12:6e:94:0a:e0:79:ae:ba:d4:d5:b9:fa:6b:45:65:
f5:bb:1a:39:ce:2b:02:f6:6f:5e:b9:68:c3:bf:a6:71:53:fa:
b8:24:72:87:b7:bd:57:4a:df:6f:b2:00:5f:01:61:f5:34:8c:
c3:57:cd:e0:2b:ba:11:87:9b:53:b6:c9:48:15:cb:2d:16:f8:
8f:d5:40:f2:07:d8:8b:0f:a5:80:f2:2d:8b:1c:18:2d:1e:01:
64:6e:fe:5a:0f:a2:d6:99:dc:6f:06:da:0e:dc:e6:15:13:b2:
58:92:70:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:22:01 2025 by rpki-client