Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/5cf431-4d57-4503-b28a-90ef7bda1dc3/1/wessYB-m0HUHlzCB-qEyX-GQsnY.mft
File: wessYB-m0HUHlzCB-qEyX-GQsnY.mft (raw, json)
Hash identifier: J+fv1LVjBkG3GdNegzw8F1XdjdNw2SyByVE0VN6ZY8Y=
Subject key identifier: 20:1E:1D:B9:40:EB:50:32:EA:8A:8D:05:60:02:B4:3F:6A:8A:E4:D2
Authority key identifier: C1:EB:2C:60:1F:A6:D0:75:07:97:30:81:FA:A1:32:5F:E1:90:B2:76
Certificate issuer: /CN=c1eb2c601fa6d07507973081faa1325fe190b276
Certificate serial: 0194BCA9F2F6B60BCCF49DA2A444B2F35654
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wessYB-m0HUHlzCB-qEyX-GQsnY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/5cf431-4d57-4503-b28a-90ef7bda1dc3/1/wessYB-m0HUHlzCB-qEyX-GQsnY.mft
Manifest number: 02A7
Signing time: Fri 31 Jan 2025 14:00:41 +0000
Manifest this update: Fri 31 Jan 2025 14:00:41 +0000
Manifest next update: Sat 01 Feb 2025 14:00:41 +0000
Files and hashes: 1: 9VIpFT_uZfwTVVoxe7PNJO0XppE.roa (hash: dBqoAsOTvzrDylULyUsZPwgLS85TPwI2yvXP5iugyTk=)
2: v1vDCS3zEydWpnAi830GA_yQEHw.roa (hash: 3xFB/pduxsTBOKVMWYRZZ5LgXgY+cAqxpBeMHy8oimw=)
3: wessYB-m0HUHlzCB-qEyX-GQsnY.crl (hash: tCHvktjfb+HAKS1QsNkPHNeBUIy1zk9zGOsxw0Ai/WA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:f2:f6:b6:0b:cc:f4:9d:a2:a4:44:b2:f3:56:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1eb2c601fa6d07507973081faa1325fe190b276
Validity
Not Before: Jan 31 14:00:41 2025 GMT
Not After : Feb 1 14:00:41 2025 GMT
Subject: CN=201e1db940eb5032ea8a8d056002b43f6a8ae4d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:22:a0:f0:56:c7:53:1e:9c:4f:7c:9d:5b:21:
a7:0f:2f:5b:70:be:da:0a:58:eb:e8:4b:e9:1b:ca:
c3:3f:62:c9:09:95:11:e5:93:c3:ea:70:93:de:20:
18:ef:1f:8d:a5:89:65:2c:9d:f1:22:b1:f2:1a:b2:
de:67:b4:24:0f:a4:b6:de:d2:77:29:fe:c1:75:be:
af:ec:e8:6a:d8:bb:46:3e:bb:c8:50:7a:25:b7:58:
5b:1e:04:fc:47:39:74:f0:f5:4e:19:04:18:be:a5:
2c:67:33:52:5c:07:54:fb:78:5a:7f:48:89:c9:62:
7c:00:02:66:90:b3:1e:2e:c7:99:2b:6f:88:bd:3d:
1f:19:6c:88:ae:ef:bd:6a:4c:17:7c:5a:11:66:05:
b8:e6:29:24:0d:58:19:5a:52:c7:f0:78:fb:69:92:
7d:41:d6:53:f3:2e:07:bd:d5:04:40:43:15:91:2a:
d3:c8:fb:60:80:e4:41:c7:ec:fa:89:b5:6c:21:1d:
32:24:4f:98:02:41:eb:37:94:cf:90:06:0d:58:67:
74:ca:b4:eb:2d:0c:9a:ae:66:0b:92:23:fd:b9:13:
bd:03:d9:2a:36:86:b9:55:c1:6f:f4:c1:c6:7f:ce:
0a:b2:9e:cb:3c:31:7e:4f:24:44:de:5a:fc:cb:f0:
4d:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:1E:1D:B9:40:EB:50:32:EA:8A:8D:05:60:02:B4:3F:6A:8A:E4:D2
X509v3 Authority Key Identifier:
keyid:C1:EB:2C:60:1F:A6:D0:75:07:97:30:81:FA:A1:32:5F:E1:90:B2:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wessYB-m0HUHlzCB-qEyX-GQsnY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/5cf431-4d57-4503-b28a-90ef7bda1dc3/1/wessYB-m0HUHlzCB-qEyX-GQsnY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/5cf431-4d57-4503-b28a-90ef7bda1dc3/1/wessYB-m0HUHlzCB-qEyX-GQsnY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:2f:64:0b:c9:99:cc:3b:06:d2:86:96:f3:16:04:41:d1:da:
f2:c8:a7:7d:8e:c0:ab:f7:57:dc:82:9e:15:9e:28:54:9c:0f:
b2:ba:e5:e5:cb:ff:0d:df:a0:bc:68:c0:c8:50:cf:ce:04:af:
b8:ec:ab:72:c2:3b:98:5e:42:18:7c:05:c6:c4:01:a4:dc:57:
54:d6:6c:35:75:10:ee:58:f1:8f:d8:d9:ce:da:dc:e5:9d:aa:
3b:ef:d1:5a:c2:ea:c2:0d:74:b6:ea:33:09:8a:31:7e:dd:6f:
44:d8:30:fd:54:4b:d9:8c:f3:af:29:69:ab:b4:44:af:e5:96:
98:d2:a7:0b:44:0a:26:df:2b:49:5e:90:07:f1:1f:2a:39:3f:
42:bb:a4:c0:bc:ea:a9:0c:82:60:82:13:45:cd:6c:fa:f8:0d:
0a:b9:95:51:41:43:b9:60:e7:d9:3b:df:0b:e6:1a:27:30:97:
98:3e:2f:3a:49:e5:64:a4:d4:2c:20:3a:84:6f:60:0e:21:e1:
61:81:a8:31:d6:08:51:d9:db:42:01:d5:6e:4b:0f:a6:71:7d:
71:a9:b7:14:47:1e:78:c6:ed:43:a8:7a:8c:89:e2:34:f4:14:
4e:f5:80:b2:b6:8b:52:47:20:89:41:bd:c4:45:7e:69:cf:71:
79:31:19:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:57:28 2025 by rpki-client