Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/13754c-8be7-460e-8507-13575ef729f3/1/w-twdDgV_kRclYo8URfvJ1PTD34.mft
File: w-twdDgV_kRclYo8URfvJ1PTD34.mft (raw, json)
Hash identifier: +WItbh4Iw1qdDzPr5fVKezYCtmE3jxvv6xOEImnmInM=
Subject key identifier: 04:CB:25:E7:6C:3B:90:A0:E0:67:3A:9D:5D:C4:D9:C4:FB:DC:3A:B0
Authority key identifier: C3:EB:70:74:38:15:FE:44:5C:95:8A:3C:51:17:EF:27:53:D3:0F:7E
Certificate issuer: /CN=c3eb70743815fe445c958a3c5117ef2753d30f7e
Certificate serial: 0194BC0512D422E7861CF1AA95FD84C0B02F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w-twdDgV_kRclYo8URfvJ1PTD34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/13754c-8be7-460e-8507-13575ef729f3/1/w-twdDgV_kRclYo8URfvJ1PTD34.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 11:00:36 +0000
Manifest this update: Fri 31 Jan 2025 11:00:36 +0000
Manifest next update: Sat 01 Feb 2025 11:00:36 +0000
Files and hashes: 1: GzCIBu4tHiFH76_Ly9Ei_0SMBpg.roa (hash: ucUps3PWBgmn642QIizMtNVpME3QV9nJ//n0R1ijDxA=)
2: w-twdDgV_kRclYo8URfvJ1PTD34.crl (hash: wq38IFHp9cr6zyJnzdHRO4fcnpds90JG6V+NGmmMirg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:12:d4:22:e7:86:1c:f1:aa:95:fd:84:c0:b0:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3eb70743815fe445c958a3c5117ef2753d30f7e
Validity
Not Before: Jan 31 11:00:36 2025 GMT
Not After : Feb 1 11:00:36 2025 GMT
Subject: CN=04cb25e76c3b90a0e0673a9d5dc4d9c4fbdc3ab0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:41:e6:d8:7f:48:ed:db:c7:92:f6:f0:5b:ea:
46:47:60:2d:4c:c0:58:47:fe:e4:0a:3a:e3:09:c0:
22:14:31:90:86:dc:17:6d:a9:63:a9:0c:f2:47:6a:
df:7f:e0:69:67:8a:da:30:21:b1:87:e7:65:d7:ab:
61:5e:1e:49:38:57:2d:f0:bd:d6:fc:04:8d:b3:f2:
82:26:29:34:5b:06:ee:dd:cb:39:22:66:7b:ed:d7:
80:be:6c:fb:63:f9:b7:d6:62:5d:b0:3e:e7:0c:34:
6e:a5:dd:41:ad:7a:a1:b3:d8:51:97:d9:42:ee:2b:
5a:2f:77:f9:a6:6a:dc:a3:b8:b8:b0:82:b6:47:99:
e7:e1:09:5d:0f:c3:9e:ff:f7:5d:ac:7f:1d:35:53:
74:dd:25:b4:46:0d:88:2f:e2:e3:27:51:8a:68:64:
8b:78:22:5d:13:05:78:cc:6f:23:09:11:75:7c:8e:
51:15:85:16:60:85:d8:17:81:f8:dd:61:8b:27:4f:
3f:38:a4:46:c1:e6:16:b5:8f:ea:a9:f7:e8:e0:ea:
9d:cc:e9:96:8d:ba:f6:08:60:38:e7:36:27:60:92:
7d:eb:e6:20:11:ab:45:f5:33:43:48:23:63:fb:97:
c4:75:c5:56:10:13:2b:fd:de:46:cc:ec:b6:47:64:
44:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:CB:25:E7:6C:3B:90:A0:E0:67:3A:9D:5D:C4:D9:C4:FB:DC:3A:B0
X509v3 Authority Key Identifier:
keyid:C3:EB:70:74:38:15:FE:44:5C:95:8A:3C:51:17:EF:27:53:D3:0F:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w-twdDgV_kRclYo8URfvJ1PTD34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/13754c-8be7-460e-8507-13575ef729f3/1/w-twdDgV_kRclYo8URfvJ1PTD34.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/13754c-8be7-460e-8507-13575ef729f3/1/w-twdDgV_kRclYo8URfvJ1PTD34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:32:89:45:ec:4a:3c:60:93:b6:49:95:5c:d5:1a:63:fc:c8:
4c:85:c1:0e:ed:ef:8b:b3:92:1f:f4:75:d4:e2:42:50:8e:94:
f8:ba:50:b1:99:7f:80:1e:b4:8a:f9:82:22:7e:b3:40:05:36:
bd:a2:f6:0c:45:8d:2e:c4:e2:61:e8:d2:19:59:22:2c:90:4c:
89:55:80:9d:58:af:d5:da:90:f3:dc:f9:2a:04:16:44:a6:88:
e6:92:ec:0c:56:31:8d:af:e4:7b:cd:c6:9c:e5:2a:a7:57:7e:
8e:81:9e:1a:0b:d5:ad:3e:8c:e6:c6:ad:39:ba:da:59:f9:7d:
4f:62:a0:d9:96:02:f4:f6:bf:16:6a:8b:1c:fe:7a:31:b9:24:
a4:f8:56:ba:94:1f:f3:1b:7d:91:3c:79:1e:e3:a9:4e:2a:cd:
47:16:ab:c1:c5:8c:ec:1e:d5:4e:4f:ec:ba:8a:46:73:d3:71:
2c:b5:7f:e1:1a:4e:b3:95:2c:79:c0:08:8f:f6:5d:fb:38:3d:
6f:82:3c:b6:3a:dc:0b:4c:1f:10:15:0f:a4:d0:11:09:f6:5e:
e3:f4:7b:4c:1d:6a:52:eb:19:36:4a:02:fb:de:27:3c:1e:4a:
f1:2c:fa:90:28:50:ec:e2:43:e6:36:e8:61:b6:bb:34:9b:e3:
b3:02:7c:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:12:00 2025 by rpki-client