Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/6cb72d-690a-406f-8add-80e7bbb041b2/1/wwN9LnsJoPvRCBaKRIdPa9Fom2A.mft
File: wwN9LnsJoPvRCBaKRIdPa9Fom2A.mft (raw, json)
Hash identifier: YSl8QDlPYSN96NURzgBio8yj2EtlGdA39NIxUwhzxDk=
Subject key identifier: 2B:3E:1D:C9:E1:6B:03:F5:7E:A6:B0:4D:01:69:AB:EA:7D:75:55:83
Authority key identifier: C3:03:7D:2E:7B:09:A0:FB:D1:08:16:8A:44:87:4F:6B:D1:68:9B:60
Certificate issuer: /CN=c3037d2e7b09a0fbd108168a44874f6bd1689b60
Certificate serial: 0194BD8588FA4A3567B3DE068E376501329A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wwN9LnsJoPvRCBaKRIdPa9Fom2A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/6cb72d-690a-406f-8add-80e7bbb041b2/1/wwN9LnsJoPvRCBaKRIdPa9Fom2A.mft
Manifest number: 1246
Signing time: Fri 31 Jan 2025 18:00:32 +0000
Manifest this update: Fri 31 Jan 2025 18:00:32 +0000
Manifest next update: Sat 01 Feb 2025 18:00:32 +0000
Files and hashes: 1: fS3aIp_dstilOoZpsHs2fT3hEwI.roa (hash: ekL2u08a8PJkCPy3xwuS3H8hi/HVcBEIiMkXY+L534U=)
2: wwN9LnsJoPvRCBaKRIdPa9Fom2A.crl (hash: JC+Wxh2DwbBuzmY1nzAkvZwgNiUbBfdUOUzJ8CTrTHY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:88:fa:4a:35:67:b3:de:06:8e:37:65:01:32:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3037d2e7b09a0fbd108168a44874f6bd1689b60
Validity
Not Before: Jan 31 18:00:32 2025 GMT
Not After : Feb 1 18:00:32 2025 GMT
Subject: CN=2b3e1dc9e16b03f57ea6b04d0169abea7d755583
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:e7:13:6b:a4:46:8c:6b:0f:59:ae:1e:06:92:
39:88:d7:f3:f8:be:d1:15:56:a5:ef:fa:60:21:8e:
1a:35:d6:3e:ad:d8:55:b8:02:81:43:f4:33:78:ef:
e6:1e:8c:4b:29:8d:eb:32:18:0b:d3:df:23:5f:c2:
b2:f0:b5:68:3f:8c:73:4b:38:96:58:60:b6:98:16:
38:0a:e7:b0:cd:84:ca:a0:30:a1:d9:db:5c:c1:c2:
06:66:84:58:1e:c8:ee:06:a6:9d:06:ab:51:ae:87:
15:4b:b9:3a:f4:13:69:fc:64:a5:d6:3b:48:59:c0:
2a:f6:fe:72:e4:24:d8:70:36:0f:5a:c7:d3:16:ee:
a3:2d:71:ea:45:44:b4:31:e9:03:34:9a:61:8e:da:
59:e7:22:aa:b5:bb:a2:07:8f:2d:6f:86:83:65:8f:
6d:ae:5f:68:da:ee:8f:f7:05:9f:98:c7:82:a7:3a:
03:5d:8c:36:3b:74:f4:63:c3:87:d7:35:a3:a4:7e:
37:87:62:ca:0a:c9:ad:29:1c:4e:8f:a0:ff:1d:09:
82:ca:60:88:e8:23:07:e5:84:f5:7a:ac:ba:1c:0c:
dc:44:48:c6:07:46:4f:30:f3:67:aa:50:47:d2:21:
a0:4b:87:16:61:3b:77:2a:43:13:6e:17:b2:44:21:
5b:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:3E:1D:C9:E1:6B:03:F5:7E:A6:B0:4D:01:69:AB:EA:7D:75:55:83
X509v3 Authority Key Identifier:
keyid:C3:03:7D:2E:7B:09:A0:FB:D1:08:16:8A:44:87:4F:6B:D1:68:9B:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wwN9LnsJoPvRCBaKRIdPa9Fom2A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/6cb72d-690a-406f-8add-80e7bbb041b2/1/wwN9LnsJoPvRCBaKRIdPa9Fom2A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/6cb72d-690a-406f-8add-80e7bbb041b2/1/wwN9LnsJoPvRCBaKRIdPa9Fom2A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:16:98:ed:be:1d:46:de:e1:2e:8d:4b:60:d7:29:45:6b:8e:
26:aa:94:c7:78:e7:4b:c9:be:ed:f9:b1:b9:81:c4:82:89:4c:
f7:1d:c6:69:85:e8:0f:ac:36:46:d3:6a:1a:5a:ff:ee:20:0a:
fc:1b:64:db:6d:e0:61:c1:60:5c:41:da:01:e7:81:a8:b1:42:
00:d9:23:3f:5c:83:4a:5b:1d:af:be:49:0e:c2:a1:00:ea:82:
8d:da:2b:5c:67:7b:d0:1b:ff:d1:55:f0:17:4c:32:f0:5d:2c:
10:4d:ac:51:07:7b:0e:65:3a:28:e6:2d:2c:6e:82:e0:bc:52:
ab:32:a4:17:a0:e8:f0:00:a0:92:e7:6e:de:d5:c8:1a:29:6a:
f0:64:14:ea:02:64:87:99:c1:32:eb:d6:56:f6:0f:0b:84:54:
68:1a:e4:7a:b0:7c:a0:4a:92:df:10:ab:69:98:16:87:a9:bd:
f8:c0:55:53:16:9f:d0:b0:e0:d5:86:8f:10:ed:60:35:db:9a:
44:02:91:2b:2c:90:df:ee:bb:48:74:75:4a:46:ed:b7:1f:c8:
72:cc:5d:ad:ec:7c:05:e5:6e:95:41:4c:21:9d:0c:cb:0f:33:
b5:a8:5a:f3:3b:eb:47:1a:14:30:df:6e:bb:a7:90:96:5c:9a:
a4:52:1b:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:33 2025 by rpki-client