
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/a733bc-68f8-499f-850f-8e924ffbe584/1/wJ_IoGf6bSR2vc4kr_-tFxMdnoY.mft
File: wJ_IoGf6bSR2vc4kr_-tFxMdnoY.mft (raw, json)
Hash identifier: trH1G9P4Aa4SmyHw52qpsx+DaFa1Eue6ercmqn8UB+U=
Subject key identifier: 0F:9D:AB:42:92:0B:16:2A:22:BA:F6:A5:95:D7:80:A6:DA:08:39:2B
Authority key identifier: C0:9F:C8:A0:67:FA:6D:24:76:BD:CE:24:AF:FF:AD:17:13:1D:9E:86
Certificate issuer: /CN=c09fc8a067fa6d2476bdce24afffad17131d9e86
Certificate serial: 0194BCE0ED03F06E526A1CA9460ACFEABF46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wJ_IoGf6bSR2vc4kr_-tFxMdnoY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/a733bc-68f8-499f-850f-8e924ffbe584/1/wJ_IoGf6bSR2vc4kr_-tFxMdnoY.mft
Manifest number: 0FC1
Signing time: Fri 31 Jan 2025 15:00:44 +0000
Manifest this update: Fri 31 Jan 2025 15:00:44 +0000
Manifest next update: Sat 01 Feb 2025 15:00:44 +0000
Files and hashes: 1: CAuOaF0DyRmCYIaIX9MOqTPSAYc.roa (hash: OgksKEIvnkHiH651enb6l1ninF2syHQEYUUQOdcbbz8=)
2: Ee1jCF-1mClSEqfFjmxX85gyL_Y.roa (hash: YHDEDxsAZ2bBTaAOCwBWd3d+f6kyqV9CwZkNGiqG6mw=)
3: rWkQj7TgOLZZA8E4J5xTwZUZtCA.roa (hash: iVc6rEsxLhBO15L95WXzTOEAvF+Pam9QPl5V09KJqGI=)
4: wJ_IoGf6bSR2vc4kr_-tFxMdnoY.crl (hash: lkDINvQzmHTMe7qXsAjA8TolukfBEXFDTP7e7z13BmI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:ed:03:f0:6e:52:6a:1c:a9:46:0a:cf:ea:bf:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c09fc8a067fa6d2476bdce24afffad17131d9e86
Validity
Not Before: Jan 31 15:00:44 2025 GMT
Not After : Feb 1 15:00:44 2025 GMT
Subject: CN=0f9dab42920b162a22baf6a595d780a6da08392b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:fb:66:3d:91:08:2d:5e:4a:89:f5:d2:ae:1e:
e1:64:fd:fa:5a:e5:f3:5a:cb:f5:17:be:41:da:ab:
8b:1b:04:a7:32:57:f1:f9:c1:ff:1d:ca:0f:3b:24:
73:62:f1:d7:3c:b6:fb:aa:ca:aa:83:e2:94:2b:fd:
e2:fe:fa:50:eb:c8:d8:6f:63:89:cc:10:14:66:44:
9b:58:1d:e1:1c:e8:cb:88:ea:11:46:cd:57:21:64:
4f:e5:d2:52:b3:57:86:1c:64:1e:05:79:74:19:ca:
8b:b2:ce:67:60:5a:66:52:be:5f:64:56:aa:41:48:
6e:b4:0f:93:de:45:6c:d3:2d:10:b5:01:3e:78:9f:
24:e5:e4:17:20:10:f4:d9:0b:fd:cb:d5:b7:e9:a6:
ee:19:e7:dd:5e:cf:e4:43:ef:b1:f6:03:1c:bd:cb:
30:7f:78:67:7b:ac:9f:5d:80:53:7e:9d:a5:49:50:
7c:21:b3:35:88:7a:1d:55:1b:23:f5:fa:7e:c8:d8:
09:2a:7e:b4:6c:89:61:44:6f:29:54:43:a2:70:66:
fb:2c:23:e0:d0:5e:a9:0f:f2:85:47:c2:49:a7:3e:
e9:42:c1:96:be:53:7d:3b:4b:a0:9c:db:f4:65:68:
3d:79:22:6c:ea:f0:2d:37:ba:80:f1:47:25:c6:d8:
49:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:9D:AB:42:92:0B:16:2A:22:BA:F6:A5:95:D7:80:A6:DA:08:39:2B
X509v3 Authority Key Identifier:
keyid:C0:9F:C8:A0:67:FA:6D:24:76:BD:CE:24:AF:FF:AD:17:13:1D:9E:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wJ_IoGf6bSR2vc4kr_-tFxMdnoY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/a733bc-68f8-499f-850f-8e924ffbe584/1/wJ_IoGf6bSR2vc4kr_-tFxMdnoY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/a733bc-68f8-499f-850f-8e924ffbe584/1/wJ_IoGf6bSR2vc4kr_-tFxMdnoY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:ac:98:3a:1a:2c:f6:34:11:7e:f7:8b:1f:db:46:8e:50:2e:
8e:05:60:53:63:84:bd:59:45:bd:08:d4:b8:f5:05:c6:fe:32:
55:b3:47:49:bc:93:8f:13:36:9c:10:6d:b5:8c:65:35:13:cb:
3a:65:91:12:2d:72:b9:6b:68:99:46:cf:40:c1:07:13:df:5e:
88:d8:da:11:18:19:41:02:98:e7:90:b9:11:aa:59:cf:30:60:
89:29:ee:f4:6d:c6:ed:84:f5:d4:e5:0f:d0:94:6c:bd:c0:0c:
9a:04:9f:7e:9e:dc:f4:fb:df:e9:85:3f:ca:ef:80:d5:bd:46:
a9:e7:41:a1:41:0f:ae:ca:88:f5:0f:d0:0a:af:aa:a8:37:2c:
d4:e7:6c:6e:3a:a0:47:71:79:ef:35:36:4d:67:59:4f:56:f4:
66:42:2d:c4:72:49:31:9a:2d:47:c0:cc:89:fb:bb:6d:0c:03:
91:a5:66:9b:ce:3a:1e:49:55:33:f6:43:e9:a7:5c:9c:a7:0e:
5b:86:9d:dd:b1:15:b2:5a:4c:45:fb:6d:95:b5:b7:27:2a:e4:
de:60:51:ac:ae:14:cf:07:49:2e:39:00:65:9d:66:21:09:4b:
eb:65:c6:27:de:fe:db:f2:11:fc:86:6e:f4:70:2e:8f:26:c9:
b5:88:e9:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:05:38 2025 by rpki-client