Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/86802e-3f43-4bca-9cc2-4fb40485ff7b/1/wN3S1PAw-jY4wEvmNu-T0oknFlI.mft
File: wN3S1PAw-jY4wEvmNu-T0oknFlI.mft (raw, json)
Hash identifier: F1O588+puMOW0flNYp7kruRjOjKnMSeQsx67MUy3dYk=
Subject key identifier: 46:E7:0A:32:9C:16:90:E8:C4:F0:92:2C:B6:19:3F:EB:25:53:2D:C5
Authority key identifier: C0:DD:D2:D4:F0:30:FA:36:38:C0:4B:E6:36:EF:93:D2:89:27:16:52
Certificate issuer: /CN=c0ddd2d4f030fa3638c04be636ef93d289271652
Certificate serial: 0194BBCDC599CC863F63C738452348904FD8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wN3S1PAw-jY4wEvmNu-T0oknFlI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/86802e-3f43-4bca-9cc2-4fb40485ff7b/1/wN3S1PAw-jY4wEvmNu-T0oknFlI.mft
Manifest number: 026B
Signing time: Fri 31 Jan 2025 10:00:12 +0000
Manifest this update: Fri 31 Jan 2025 10:00:12 +0000
Manifest next update: Sat 01 Feb 2025 10:00:12 +0000
Files and hashes: 1: 7XfhLun6Ve5uRxXwPsgdrE6D-fI.roa (hash: b8AATSifx7/LvpsKfDCuwWcrOC9fgkYZg2ZM6+VpEfM=)
2: iuHoct3zHKPAQY0zJWbgQODPfEo.roa (hash: Un9DAj/KSTfz3PzRpucfMK4GqYVgsTE2tiPdLJ964Po=)
3: wN3S1PAw-jY4wEvmNu-T0oknFlI.crl (hash: sKj7dOESaAK0dsdpGXyFH8XXXGz2+WtXcI6niIjPApE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:c5:99:cc:86:3f:63:c7:38:45:23:48:90:4f:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0ddd2d4f030fa3638c04be636ef93d289271652
Validity
Not Before: Jan 31 10:00:12 2025 GMT
Not After : Feb 1 10:00:12 2025 GMT
Subject: CN=46e70a329c1690e8c4f0922cb6193feb25532dc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:00:b1:e8:e1:04:74:37:1f:98:db:c6:93:a7:
4f:db:9a:e1:13:d1:7e:96:95:1a:67:83:4d:89:b7:
9f:1a:0a:10:47:8b:d8:92:4d:00:3d:9f:42:32:af:
99:ad:c6:ee:3b:c5:36:24:cb:7a:c1:1a:d9:bc:dc:
a5:af:e9:cc:9a:1b:6c:2f:58:84:f3:ae:41:77:0c:
49:fa:cf:25:77:aa:57:ea:e9:d9:4d:4b:f9:1c:94:
38:49:30:11:6c:f6:8a:ba:47:2e:bc:2f:0f:75:2d:
85:8f:f3:99:ee:88:64:e2:0b:65:2a:d6:84:42:64:
df:88:e6:d3:20:cb:50:17:88:35:a9:48:a2:be:d5:
59:86:23:ae:bf:30:5b:7c:03:a8:82:15:96:18:ee:
96:11:42:b5:33:11:e3:d6:25:f5:f4:f4:f9:76:e0:
54:ce:fb:4b:a1:c7:95:8c:26:95:d1:4e:81:ec:64:
c1:7b:88:11:e3:06:b1:41:83:5c:1c:0e:5d:83:83:
af:91:74:8a:e0:3b:04:7c:5e:40:66:e9:fe:08:7d:
d0:79:a3:ee:e2:64:ad:19:05:1e:90:09:58:c3:ca:
63:b2:55:39:ac:cb:12:22:13:dd:18:87:78:b1:6c:
93:f5:3b:f9:67:00:ad:70:90:06:28:bc:68:c7:64:
da:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:E7:0A:32:9C:16:90:E8:C4:F0:92:2C:B6:19:3F:EB:25:53:2D:C5
X509v3 Authority Key Identifier:
keyid:C0:DD:D2:D4:F0:30:FA:36:38:C0:4B:E6:36:EF:93:D2:89:27:16:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wN3S1PAw-jY4wEvmNu-T0oknFlI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/86802e-3f43-4bca-9cc2-4fb40485ff7b/1/wN3S1PAw-jY4wEvmNu-T0oknFlI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/86802e-3f43-4bca-9cc2-4fb40485ff7b/1/wN3S1PAw-jY4wEvmNu-T0oknFlI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:80:ac:cc:87:4d:50:6e:58:e4:be:96:09:29:80:87:39:89:
09:86:5e:f9:a6:85:86:c5:3b:55:a8:1e:6e:b3:61:b0:f8:da:
cd:bd:12:0d:55:f5:c9:37:11:8d:fe:32:75:20:88:d1:f7:30:
fb:21:7d:df:50:58:16:16:7c:3b:25:a6:b0:3c:a2:a9:30:73:
74:36:7a:e0:4b:a1:0a:9b:7a:4b:f3:55:6f:1f:65:9c:ec:65:
e0:86:87:49:65:e2:5f:3b:6c:7f:54:5f:7b:01:ba:ed:8d:d8:
2b:e6:ce:0b:34:f9:53:4d:36:c5:e2:82:54:08:a2:5d:82:e8:
ba:a3:05:a5:8f:89:d9:79:42:c9:52:7e:0e:6d:d7:5f:50:b9:
f3:40:05:47:86:81:8a:c1:ce:07:1f:5e:02:df:51:15:d9:35:
18:14:94:8d:fe:3c:80:da:35:d1:7a:9d:bb:3e:ae:f6:4d:0e:
1a:9d:d1:8b:06:c2:38:1d:f6:ba:4b:20:f8:d2:20:b7:d7:d8:
16:94:81:25:e6:88:25:34:38:4c:b7:3a:bb:68:31:70:3f:b3:
3e:a9:62:98:1f:0e:ad:83:51:4f:b7:29:54:25:57:b6:db:c3:
5e:e3:65:2d:96:cc:f8:98:1b:2d:70:df:be:71:34:2f:40:63:
58:6c:a3:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:06:21 2025 by rpki-client