Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/db3303-7879-4b69-8848-115f15b20de7/1/wdcQ2Kwxsfba9wRsRTdK6OQF8Y4.mft
File: wdcQ2Kwxsfba9wRsRTdK6OQF8Y4.mft (raw, json)
Hash identifier: s75H0SU7VslZZV4uthy3Xja86+qQZZj0M+B9sPInQbg=
Subject key identifier: 7B:37:15:0F:AE:AF:0A:5E:D4:33:6F:04:81:36:04:DE:E0:C5:02:55
Authority key identifier: C1:D7:10:D8:AC:31:B1:F6:DA:F7:04:6C:45:37:4A:E8:E4:05:F1:8E
Certificate issuer: /CN=c1d710d8ac31b1f6daf7046c45374ae8e405f18e
Certificate serial: 0194BD17635DC7B743F4A9D488F851583F57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wdcQ2Kwxsfba9wRsRTdK6OQF8Y4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/db3303-7879-4b69-8848-115f15b20de7/1/wdcQ2Kwxsfba9wRsRTdK6OQF8Y4.mft
Manifest number: 1237
Signing time: Fri 31 Jan 2025 16:00:14 +0000
Manifest this update: Fri 31 Jan 2025 16:00:14 +0000
Manifest next update: Sat 01 Feb 2025 16:00:14 +0000
Files and hashes: 1: 3vk_cNMUWC-JUrbyIXBN2gny1YM.roa (hash: 5UI1dk/WNT1Jzxh8ssSrm2cZ8VMJvaL80lHMAJV1sdM=)
2: hm311e8NJq4CeLUwG2WwDwuRkEo.roa (hash: q59x20MyNrLs1Zhrc2YWC53c5eh99JxfPMp5OIsclNU=)
3: wdcQ2Kwxsfba9wRsRTdK6OQF8Y4.crl (hash: 1cHmYj0EpHnIypJDcrDDALjWDXkgDSF6vKmN5H8OQYQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:63:5d:c7:b7:43:f4:a9:d4:88:f8:51:58:3f:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1d710d8ac31b1f6daf7046c45374ae8e405f18e
Validity
Not Before: Jan 31 16:00:14 2025 GMT
Not After : Feb 1 16:00:14 2025 GMT
Subject: CN=7b37150faeaf0a5ed4336f04813604dee0c50255
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:54:0d:56:b6:80:20:d9:54:69:87:08:61:01:
92:88:ca:58:d8:a7:89:b5:54:74:b3:e5:0e:a3:ea:
61:e6:34:8b:c3:79:12:02:7a:73:8a:89:a1:06:78:
2f:7a:bb:e6:00:35:6d:ce:01:a3:40:b5:82:fd:b3:
b9:2f:68:fd:a2:7b:17:73:6f:fd:01:f6:58:e6:15:
61:df:93:fa:9e:87:c9:79:39:74:0d:2b:2c:af:71:
c3:14:36:74:0f:87:b8:6e:79:d0:19:4c:e5:8d:78:
ed:ec:6b:84:70:09:9d:70:08:b9:65:f2:42:71:4f:
ef:e8:df:a7:ce:5a:a9:19:a0:89:50:db:4b:d7:88:
71:e8:c4:32:0a:70:50:c9:f7:54:c8:31:f5:95:a6:
34:d5:2d:d7:14:4d:dd:cb:7d:5d:d4:87:94:2e:bd:
43:ee:9a:fc:dd:0b:c5:4d:74:eb:11:c7:a9:00:4e:
bc:a4:09:c2:03:65:c9:b2:0c:35:c5:9b:6e:16:14:
26:47:1c:42:0e:48:c7:49:e3:28:95:4b:bb:b1:8b:
f5:42:bd:a5:d9:aa:ba:5d:94:29:2f:ca:99:6e:88:
d2:c2:0c:14:5d:75:88:7f:76:af:b7:f3:f4:e4:3c:
0f:b8:22:02:d3:56:75:40:17:20:c4:09:fa:ca:f9:
8f:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:37:15:0F:AE:AF:0A:5E:D4:33:6F:04:81:36:04:DE:E0:C5:02:55
X509v3 Authority Key Identifier:
keyid:C1:D7:10:D8:AC:31:B1:F6:DA:F7:04:6C:45:37:4A:E8:E4:05:F1:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wdcQ2Kwxsfba9wRsRTdK6OQF8Y4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/db3303-7879-4b69-8848-115f15b20de7/1/wdcQ2Kwxsfba9wRsRTdK6OQF8Y4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/db3303-7879-4b69-8848-115f15b20de7/1/wdcQ2Kwxsfba9wRsRTdK6OQF8Y4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:ec:a0:60:8b:3d:d8:cb:30:37:47:b2:0e:26:40:a0:a1:d1:
70:4a:66:5e:7e:20:ed:87:e4:83:94:dc:4c:4d:8a:59:d9:03:
3c:1b:d5:c9:d3:2d:05:69:99:a6:d7:be:ee:92:a5:57:f2:c9:
5f:74:fa:33:a8:85:50:85:bb:b5:1a:89:78:ea:93:3f:f6:5a:
3e:d8:41:55:0b:9c:ff:c8:fc:55:5a:fb:e0:7d:96:f1:dc:6b:
b3:11:44:19:74:48:62:30:91:70:24:a4:ca:71:95:98:e7:11:
fa:a7:38:99:a1:dd:72:a4:88:04:40:63:c5:42:f2:20:46:7c:
c1:ea:b8:51:1d:48:a0:3e:e5:56:92:7a:43:10:76:50:7c:82:
45:8f:f7:bb:99:dd:74:cb:54:c6:5a:8b:42:70:5d:42:22:d5:
19:b6:a9:fe:e7:19:15:1c:57:6a:78:93:4c:2b:a9:b5:49:bc:
64:44:0f:67:7e:9a:4a:77:c5:51:bb:ba:ae:e0:d2:1f:ba:7c:
84:4d:41:72:06:b3:9f:e0:98:91:0c:a2:5b:71:12:4d:8e:a0:
f4:4d:19:78:29:88:01:79:20:bb:e8:88:34:b7:21:b8:d3:f5:
68:b2:23:12:37:32:e0:5c:ea:cb:bc:ae:be:40:dc:f6:b7:21:
10:42:9f:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:04:22 2025 by rpki-client