Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/1f1ccb-ed10-4fe8-ae0b-61b982ada662/1/wKuS3n6vX7stFKUIqQzvxWm1TtQ.mft
File: wKuS3n6vX7stFKUIqQzvxWm1TtQ.mft (raw, json)
Hash identifier: l0wb110LutdaIu37tXSLtEw07zvgBNyQyjB3LxWwRfg=
Subject key identifier: 99:07:AA:05:FF:69:43:CA:9B:46:64:5C:E0:D6:43:31:7B:49:A6:13
Authority key identifier: C0:AB:92:DE:7E:AF:5F:BB:2D:14:A5:08:A9:0C:EF:C5:69:B5:4E:D4
Certificate issuer: /CN=c0ab92de7eaf5fbb2d14a508a90cefc569b54ed4
Certificate serial: 0194BC3C87B5771031D2F40656B9A4062E75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wKuS3n6vX7stFKUIqQzvxWm1TtQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/1f1ccb-ed10-4fe8-ae0b-61b982ada662/1/wKuS3n6vX7stFKUIqQzvxWm1TtQ.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 12:01:10 +0000
Manifest this update: Fri 31 Jan 2025 12:01:10 +0000
Manifest next update: Sat 01 Feb 2025 12:01:10 +0000
Files and hashes: 1: uOmu1u-0cx95qJdb2F6OqNW0AyI.roa (hash: T1ZCPSydqXCfxYKH+M6++cGYvIdpSTMuo8K8u6PSUYU=)
2: wKuS3n6vX7stFKUIqQzvxWm1TtQ.crl (hash: pjbu+M/Rt3W+7oR1FtmwC0sOLv98Hv4MNOMS4muUixk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:87:b5:77:10:31:d2:f4:06:56:b9:a4:06:2e:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0ab92de7eaf5fbb2d14a508a90cefc569b54ed4
Validity
Not Before: Jan 31 12:01:10 2025 GMT
Not After : Feb 1 12:01:10 2025 GMT
Subject: CN=9907aa05ff6943ca9b46645ce0d643317b49a613
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:26:89:1b:40:da:2d:9b:ca:c3:b8:28:8c:8a:
37:30:9a:5d:42:8b:b0:d2:65:65:e1:ef:a5:93:c1:
b5:d8:28:53:1b:3d:d1:00:2a:a4:90:0e:1e:ca:40:
5d:94:ae:7a:15:20:7a:cd:03:c7:7d:81:5c:d8:76:
2e:76:8a:b1:f4:6b:c4:f3:28:87:5b:31:d0:14:5c:
d0:c2:68:98:9d:3a:03:b8:d1:2e:de:ac:dc:4f:c2:
99:9a:ed:04:2b:7c:b5:c9:c9:3a:cc:c1:ce:6c:0a:
0e:9c:19:62:f7:8a:40:7e:38:9e:4a:82:02:75:eb:
2e:33:f2:dc:6a:3f:9f:1d:87:fa:f9:1a:12:2a:52:
c3:f6:71:ac:45:8d:cb:4b:2d:a0:be:93:a6:f2:57:
97:eb:37:6a:ed:61:3c:65:4d:90:25:82:a3:e7:6d:
bb:07:e6:19:b9:55:62:48:8a:d2:10:b3:f1:b9:ec:
d9:a2:d8:95:dd:ec:1c:af:6d:34:b7:ab:e6:e4:a8:
d1:77:21:cf:32:62:24:7a:e0:84:ef:f9:79:cb:19:
0f:57:21:b4:16:a2:10:dc:5c:e2:cb:5e:42:b8:63:
16:31:42:0d:4b:4c:f0:66:97:18:d1:d7:6f:0b:81:
c3:ff:d8:96:7e:5d:00:e5:0c:43:91:65:e5:0b:69:
65:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:07:AA:05:FF:69:43:CA:9B:46:64:5C:E0:D6:43:31:7B:49:A6:13
X509v3 Authority Key Identifier:
keyid:C0:AB:92:DE:7E:AF:5F:BB:2D:14:A5:08:A9:0C:EF:C5:69:B5:4E:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wKuS3n6vX7stFKUIqQzvxWm1TtQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/1f1ccb-ed10-4fe8-ae0b-61b982ada662/1/wKuS3n6vX7stFKUIqQzvxWm1TtQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/1f1ccb-ed10-4fe8-ae0b-61b982ada662/1/wKuS3n6vX7stFKUIqQzvxWm1TtQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:9f:ba:b0:76:6a:30:2c:8f:f2:68:9b:ba:52:74:9a:94:47:
2c:48:ff:cc:3a:df:2e:e3:45:0d:b4:a3:9a:b5:d4:82:de:4e:
bc:81:14:77:1a:a8:15:b1:e2:02:67:55:a2:0c:ca:7b:9c:d0:
c0:53:26:29:38:91:f6:e2:8a:c2:2e:cf:ea:ea:da:69:68:05:
03:a3:90:93:0a:51:ee:e7:0c:5c:79:9d:42:77:60:1a:e2:35:
8c:d1:ce:51:a7:87:1a:47:da:1e:34:9f:b9:16:6b:ce:67:fa:
3e:37:bf:a6:4b:79:b9:c9:30:0c:f8:5f:eb:42:3a:f6:c6:7d:
ce:b9:11:67:aa:f9:bf:b5:2c:af:3e:31:a3:cd:d8:30:bf:73:
bb:a0:25:f8:8a:00:d2:94:2d:f6:2a:a3:d4:63:c4:e7:48:d6:
0a:bf:df:2b:5e:df:89:ac:ba:4c:0c:7f:ac:42:8c:e3:57:12:
c8:4c:28:d2:98:d0:64:4c:b4:9e:0e:03:ba:01:5f:40:89:d6:
b2:1e:e2:fd:38:ee:b8:5b:ea:b3:3b:8d:24:6a:63:f2:6b:01:
8c:ba:9e:cc:c3:de:ca:41:4a:b3:d7:00:c5:94:42:58:60:8c:
b1:e5:a4:1c:53:f2:a9:19:81:ca:0a:29:9d:96:91:bf:4f:4e:
3e:df:c4:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:49:02 2025 by rpki-client