Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/61f3d8-1a24-446f-a2b2-0d07652e4cab/1/we7iyrhrXuQPwncMqMtcUMYrdVs.mft
File: we7iyrhrXuQPwncMqMtcUMYrdVs.mft (raw, json)
Hash identifier: Q+4KjhjS/TxMR7M52c5lGin3EzHC/4LrrQHox99omkM=
Subject key identifier: F2:E0:A7:56:D3:F6:57:D3:07:0F:7E:F3:6A:5F:F7:13:06:F1:03:43
Authority key identifier: C1:EE:E2:CA:B8:6B:5E:E4:0F:C2:77:0C:A8:CB:5C:50:C6:2B:75:5B
Certificate issuer: /CN=c1eee2cab86b5ee40fc2770ca8cb5c50c62b755b
Certificate serial: 0194BC051F5A52EB64BBE270B1DA96D8F56D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/we7iyrhrXuQPwncMqMtcUMYrdVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/61f3d8-1a24-446f-a2b2-0d07652e4cab/1/we7iyrhrXuQPwncMqMtcUMYrdVs.mft
Manifest number: 10A4
Signing time: Fri 31 Jan 2025 11:00:39 +0000
Manifest this update: Fri 31 Jan 2025 11:00:39 +0000
Manifest next update: Sat 01 Feb 2025 11:00:39 +0000
Files and hashes: 1: C82fBmTW8-iwXu5pgvR1VTX1CPI.roa (hash: VxKUMucn3gu4aXap48afqVYi1a/XU7LxwPuTbOudfsE=)
2: we7iyrhrXuQPwncMqMtcUMYrdVs.crl (hash: Em6qLk0v8+OO4IE1t4KYsJN6bJ6x5F5n7BF8rYAoTOE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:1f:5a:52:eb:64:bb:e2:70:b1:da:96:d8:f5:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1eee2cab86b5ee40fc2770ca8cb5c50c62b755b
Validity
Not Before: Jan 31 11:00:39 2025 GMT
Not After : Feb 1 11:00:39 2025 GMT
Subject: CN=f2e0a756d3f657d3070f7ef36a5ff71306f10343
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:c8:81:92:66:c4:0b:9c:1f:11:e1:40:05:4d:
e4:c7:ed:b6:7b:ad:83:92:71:a8:45:f9:29:22:7d:
e0:8d:23:59:17:9a:5b:8b:01:71:18:11:db:98:36:
db:c1:79:5e:2a:31:db:de:0f:31:26:28:63:13:33:
be:56:c1:71:15:8f:b3:5b:e2:8b:51:d9:c6:06:fc:
0f:17:b1:16:52:b0:23:e6:ac:e7:7c:a4:0d:38:a2:
03:b4:34:c4:cf:53:4a:5a:51:e7:ba:2a:db:2d:4b:
08:f4:8b:fd:ab:cf:4a:86:76:7c:5c:4f:5c:fd:bd:
49:50:d7:cd:8c:e4:b7:5b:64:a5:72:6e:02:b3:57:
4b:57:48:de:77:31:db:d6:7f:53:91:8a:d2:d3:c7:
d7:0b:89:29:51:36:cd:8f:37:d8:b5:b0:f4:f3:17:
87:33:79:4a:d2:e0:18:86:ae:37:e0:42:6b:43:34:
84:b4:4f:71:39:bf:22:be:8d:fb:38:96:97:f0:1d:
1f:f3:8d:3e:bc:40:78:d5:f7:22:77:f3:2b:17:0d:
a2:f3:7b:ab:58:e2:b8:a7:f2:29:65:21:e4:dd:39:
57:f0:1a:8c:59:51:24:b4:05:35:71:d7:95:9a:87:
0f:0e:7c:28:06:77:e4:a5:d7:cc:3d:63:7e:7f:07:
76:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:E0:A7:56:D3:F6:57:D3:07:0F:7E:F3:6A:5F:F7:13:06:F1:03:43
X509v3 Authority Key Identifier:
keyid:C1:EE:E2:CA:B8:6B:5E:E4:0F:C2:77:0C:A8:CB:5C:50:C6:2B:75:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/we7iyrhrXuQPwncMqMtcUMYrdVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/61f3d8-1a24-446f-a2b2-0d07652e4cab/1/we7iyrhrXuQPwncMqMtcUMYrdVs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/61f3d8-1a24-446f-a2b2-0d07652e4cab/1/we7iyrhrXuQPwncMqMtcUMYrdVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:96:97:79:a1:ee:3f:9a:e8:de:cf:1d:0c:9f:a0:ef:c8:6b:
12:42:0c:f9:cf:94:85:a5:6c:13:18:8c:dc:30:ff:79:74:ce:
a7:d0:0c:de:a4:15:8d:12:1a:b3:78:31:48:b8:95:f5:ff:de:
dc:b2:72:aa:92:9b:8f:a6:66:e3:ce:e7:57:6a:41:1a:01:d1:
0b:5a:70:08:e1:35:2d:49:88:4f:66:48:b4:20:13:98:44:69:
65:d6:61:e9:12:af:e4:ca:bc:d9:a5:08:32:b7:ac:59:bf:8a:
25:a5:e6:47:a8:f7:19:db:8d:e1:f7:26:53:d3:e5:ad:5e:78:
58:91:69:c7:dd:84:17:01:f8:33:b8:d8:83:fb:d8:15:a5:13:
c8:30:f2:32:89:9c:50:08:0e:bd:68:c2:d2:e7:f7:2c:ad:de:
57:28:9e:69:d5:71:53:dc:9d:41:e6:18:e9:c3:af:36:5f:79:
90:f5:0f:f9:4a:00:66:cc:04:b2:2c:93:64:18:5b:02:f0:1c:
71:13:27:c0:73:74:e6:f6:3f:7b:e2:fa:03:0e:20:66:86:56:
32:8c:52:34:a5:57:ca:60:e7:aa:dc:46:94:60:7e:78:29:29:
f5:a8:28:4f:f6:c4:2a:d8:8c:f9:ac:64:25:04:87:4d:c8:f7:
0e:ea:58:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 03:18:47 2025 by rpki-client