
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/3f056a-124e-4f12-b3db-fca31f645bf5/1/wwvzI77VsMENPzevDrNjrafKxKs.mft
File: wwvzI77VsMENPzevDrNjrafKxKs.mft (raw, json)
Hash identifier: PfE4AU6xmR7rAYCrCRGlgSSWC3ilyvWLNx5NEGByxeA=
Subject key identifier: 0F:78:FE:53:AE:C8:1D:B2:80:3A:22:5C:99:A8:B7:E0:AF:18:5B:2A
Authority key identifier: C3:0B:F3:23:BE:D5:B0:C1:0D:3F:37:AF:0E:B3:63:AD:A7:CA:C4:AB
Certificate issuer: /CN=c30bf323bed5b0c10d3f37af0eb363ada7cac4ab
Certificate serial: 0194BBCDB19166F8FDF4AA9910164A34D533
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wwvzI77VsMENPzevDrNjrafKxKs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/3f056a-124e-4f12-b3db-fca31f645bf5/1/wwvzI77VsMENPzevDrNjrafKxKs.mft
Manifest number: 076B
Signing time: Fri 31 Jan 2025 10:00:07 +0000
Manifest this update: Fri 31 Jan 2025 10:00:07 +0000
Manifest next update: Sat 01 Feb 2025 10:00:07 +0000
Files and hashes: 1: wwvzI77VsMENPzevDrNjrafKxKs.crl (hash: iyuCV8s+vTMIGWvKB0niTmF2TqoxFnqPs24onVq+bT0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:b1:91:66:f8:fd:f4:aa:99:10:16:4a:34:d5:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c30bf323bed5b0c10d3f37af0eb363ada7cac4ab
Validity
Not Before: Jan 31 10:00:07 2025 GMT
Not After : Feb 1 10:00:07 2025 GMT
Subject: CN=0f78fe53aec81db2803a225c99a8b7e0af185b2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:56:f1:37:1f:b9:be:14:56:44:41:51:81:51:
2f:e6:24:ea:bf:e2:2d:62:49:f4:e9:ed:1f:63:53:
0e:4c:ca:61:03:bc:58:14:5b:4a:67:fe:0c:18:90:
81:91:08:8f:a3:66:22:00:4d:67:95:f8:38:64:1d:
0d:6f:a0:77:10:c0:04:06:ea:4f:65:93:50:75:83:
11:6d:8f:f1:31:a5:56:93:65:b5:c0:a8:ae:93:6f:
7a:56:a7:a6:4a:4f:56:69:d0:fc:60:f8:19:48:f7:
17:2c:16:5c:8c:df:85:66:7a:bb:4e:83:77:a4:5c:
9e:74:2d:d6:de:90:e7:81:18:c2:40:68:57:d9:47:
73:49:40:f7:95:06:90:c8:d4:33:a7:56:ee:fe:0b:
5f:54:e1:0b:e2:f7:20:82:a4:f4:ab:88:25:2a:44:
88:9b:4d:bb:47:0f:64:62:8f:00:c9:30:ba:d2:28:
41:12:c8:cd:4f:52:19:1f:5e:30:2e:4e:16:5b:72:
e0:2a:33:c9:58:54:8d:3e:01:44:7f:4f:6b:b5:7c:
e1:f1:75:d7:1c:0c:eb:21:fc:e8:41:0c:d6:79:6a:
36:39:09:1a:41:03:e2:a5:7a:e5:26:45:96:f5:86:
56:68:d5:16:0c:ab:2d:75:66:75:65:48:1c:fd:d0:
30:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:78:FE:53:AE:C8:1D:B2:80:3A:22:5C:99:A8:B7:E0:AF:18:5B:2A
X509v3 Authority Key Identifier:
keyid:C3:0B:F3:23:BE:D5:B0:C1:0D:3F:37:AF:0E:B3:63:AD:A7:CA:C4:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wwvzI77VsMENPzevDrNjrafKxKs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/3f056a-124e-4f12-b3db-fca31f645bf5/1/wwvzI77VsMENPzevDrNjrafKxKs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/3f056a-124e-4f12-b3db-fca31f645bf5/1/wwvzI77VsMENPzevDrNjrafKxKs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d4:11:20:1d:11:2f:48:c8:08:03:76:38:47:87:fb:42:02:d7:
3a:ce:48:73:54:a3:56:33:ae:6e:b8:06:86:4f:cf:36:99:9b:
67:ab:0f:d3:f0:56:f1:dd:0b:c8:72:24:13:7b:8b:62:3a:71:
cc:06:d3:58:39:73:21:a4:f1:c2:30:d6:cb:fa:0f:6e:f9:e5:
e2:3f:3f:cb:48:68:82:d3:2b:fc:e0:fe:06:01:95:30:6e:d2:
ce:90:81:0e:03:7d:fb:72:e5:ad:f1:65:93:bc:1b:a7:35:33:
b5:80:03:b4:ca:4e:66:c6:67:8d:a9:3b:b2:29:12:4a:ba:c3:
d6:02:e0:1d:c2:a8:ab:49:0f:0d:dc:e0:2e:f6:54:53:51:41:
5e:e0:a7:61:53:0d:1b:1d:44:13:fa:ea:72:dc:cd:a6:f4:0d:
d4:99:cd:4d:dc:0b:99:03:26:88:7c:ae:42:aa:72:25:b0:9e:
65:18:b2:64:2e:22:3e:2c:2c:8a:34:b1:fe:8b:c5:f6:9e:69:
aa:7f:d7:a7:2b:1e:3f:16:c0:96:01:09:91:50:54:ca:9e:06:
83:bb:59:be:fa:fb:1b:ad:95:5d:f5:ac:6d:73:e4:56:20:20:
6c:56:5c:5e:4a:ec:8c:01:0d:21:97:02:02:01:84:1b:06:9a:
34:91:33:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:25:47 2025 by rpki-client