Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/d1ee4b-e88a-4e41-a616-4b248da6c96c/1/wtKiNOIkv4eZby8N9Vnq2IL55lE.mft
File: wtKiNOIkv4eZby8N9Vnq2IL55lE.mft (raw, json)
Hash identifier: C8xkky5uYgnvipVQAQVOjgvIUuJ8GX2CpNN9Pi1+qno=
Subject key identifier: 3A:71:91:F6:25:11:9D:70:9B:72:CE:E2:6E:AB:AB:C4:91:71:13:BD
Authority key identifier: C2:D2:A2:34:E2:24:BF:87:99:6F:2F:0D:F5:59:EA:D8:82:F9:E6:51
Certificate issuer: /CN=c2d2a234e224bf87996f2f0df559ead882f9e651
Certificate serial: 0194BBCE01397AEACEC1650754490D4568A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wtKiNOIkv4eZby8N9Vnq2IL55lE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/d1ee4b-e88a-4e41-a616-4b248da6c96c/1/wtKiNOIkv4eZby8N9Vnq2IL55lE.mft
Manifest number: 1439
Signing time: Fri 31 Jan 2025 10:00:27 +0000
Manifest this update: Fri 31 Jan 2025 10:00:27 +0000
Manifest next update: Sat 01 Feb 2025 10:00:27 +0000
Files and hashes: 1: 2oAVyU2seJGTQFfvnoLEW0LxBMw.roa (hash: ZURqts9j5VKp8XJN1Pz3dvi3R29PhjPq43deEFPHUGM=)
2: AT0dJX8We-n1OQnzvfJggA9FrB4.roa (hash: 9UAeHkptLtx/0ySMZUXtLEVDmGoLUOk5U9+no/9RFDk=)
3: wtKiNOIkv4eZby8N9Vnq2IL55lE.crl (hash: MeHByKymqR0fwo2kuJJqdviNEp2eiM7zhh+6CKptMWo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:01:39:7a:ea:ce:c1:65:07:54:49:0d:45:68:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2d2a234e224bf87996f2f0df559ead882f9e651
Validity
Not Before: Jan 31 10:00:27 2025 GMT
Not After : Feb 1 10:00:27 2025 GMT
Subject: CN=3a7191f625119d709b72cee26eababc4917113bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b9:76:72:75:e7:a2:4b:50:4f:f4:d4:90:04:
d3:e6:d1:5f:52:28:74:f0:34:7f:0f:11:11:f0:e1:
de:8a:95:6a:67:2f:24:5d:e3:ed:08:9e:7d:36:57:
7b:1b:b8:70:90:10:b7:90:d2:5b:fa:34:d0:91:59:
ba:dd:92:2e:26:f6:90:e0:3d:d1:35:3f:e2:c8:d5:
b1:f1:f1:05:09:c6:a4:3e:fa:e9:5a:10:e3:27:2f:
e3:00:b1:12:06:be:f4:35:f8:39:8f:0d:af:ee:f7:
92:fa:32:01:34:5f:88:78:4a:98:bd:c0:ba:39:4e:
34:a4:8b:77:38:0e:84:01:5a:47:86:6a:16:3d:bd:
e5:d1:ed:67:10:b6:80:cb:1d:1f:90:f8:41:71:aa:
c0:f8:1f:67:87:33:98:7c:6b:f3:7e:f2:69:df:e9:
31:cc:09:a7:e0:0a:ea:6e:35:fa:48:80:f4:4a:c1:
25:d7:cf:99:81:be:48:b0:94:b5:30:a9:d4:9a:00:
3b:30:ec:c3:4e:44:a4:58:b4:03:f1:0a:7b:49:80:
42:73:55:6f:01:fe:2d:df:25:21:4f:33:c9:dd:e6:
d7:b4:63:49:07:01:18:ba:95:b9:5e:c2:2b:10:54:
fc:db:5e:82:61:b7:2a:69:18:46:9e:4e:7a:c2:43:
a3:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:71:91:F6:25:11:9D:70:9B:72:CE:E2:6E:AB:AB:C4:91:71:13:BD
X509v3 Authority Key Identifier:
keyid:C2:D2:A2:34:E2:24:BF:87:99:6F:2F:0D:F5:59:EA:D8:82:F9:E6:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wtKiNOIkv4eZby8N9Vnq2IL55lE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/d1ee4b-e88a-4e41-a616-4b248da6c96c/1/wtKiNOIkv4eZby8N9Vnq2IL55lE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/d1ee4b-e88a-4e41-a616-4b248da6c96c/1/wtKiNOIkv4eZby8N9Vnq2IL55lE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:49:26:1e:49:e0:a9:eb:07:b0:a2:64:8e:82:28:eb:5c:33:
70:23:8c:e5:8f:74:26:7c:60:9a:5a:d6:71:cf:7a:3e:55:ad:
e8:ff:84:2c:f7:59:c7:40:96:ee:0f:a6:71:d1:34:56:81:f3:
e3:d8:c8:16:6f:c9:c3:e1:95:71:d5:0b:91:a0:66:9a:87:b9:
14:1f:ef:6b:bb:48:d5:71:17:18:f6:9b:c4:07:67:dc:09:2c:
26:62:4c:80:f2:97:db:99:fa:34:d0:ab:be:fb:ad:2d:f0:0c:
74:2b:b7:65:1e:71:b2:99:32:1f:d5:b8:de:65:c2:15:42:46:
40:f5:77:ad:f1:4b:2a:c1:48:79:88:d2:ba:14:8c:98:0d:9a:
61:50:e6:78:1e:89:2b:6e:ec:db:78:cd:ca:77:da:db:e5:ec:
67:9d:53:94:f0:92:7c:dc:e5:3d:78:17:07:87:8d:02:db:e0:
57:b9:c3:86:dc:65:ea:6a:ee:5f:b4:cc:8e:49:b5:2c:98:82:
55:3b:07:4d:47:a8:9e:af:8e:e6:97:c6:a8:db:14:f3:ba:09:
69:a9:8b:74:23:e7:28:32:a7:c7:74:dc:0b:79:eb:3d:f3:d2:
71:da:84:2c:57:d3:ce:d3:f7:cc:2e:bf:9b:b4:21:d2:95:4d:
73:f0:2c:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:57:46 2025 by rpki-client