Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/cc02e1-8b36-42a3-b756-be3485706a7f/1/wvX9MCMFUknyE9FcugAMoCa7b6M.mft
File: wvX9MCMFUknyE9FcugAMoCa7b6M.mft (raw, json)
Hash identifier: /+kWz5WWAF3/d+UUMI38EzSwvdR1Pg4mGjfVvpdUCac=
Subject key identifier: FF:44:F2:35:28:26:08:3D:52:10:5A:82:9F:9E:D5:87:6C:22:C2:2F
Authority key identifier: C2:F5:FD:30:23:05:52:49:F2:13:D1:5C:BA:00:0C:A0:26:BB:6F:A3
Certificate issuer: /CN=c2f5fd3023055249f213d15cba000ca026bb6fa3
Certificate serial: 0194BC05113FF4E88312AEA2B1B94C68B14A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wvX9MCMFUknyE9FcugAMoCa7b6M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/cc02e1-8b36-42a3-b756-be3485706a7f/1/wvX9MCMFUknyE9FcugAMoCa7b6M.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 11:00:36 +0000
Manifest this update: Fri 31 Jan 2025 11:00:36 +0000
Manifest next update: Sat 01 Feb 2025 11:00:36 +0000
Files and hashes: 1: BMHVHu-JbszVmlaPK0QGdQjobqk.roa (hash: G29ynB8gmG1T9KHI25JYWbt3xJ8CodHiSO5tv95eYEk=)
2: wvX9MCMFUknyE9FcugAMoCa7b6M.crl (hash: tV6LjCkLZyv58n+Cr21xNtkWQ2qTeYsmf2p9huTLOyw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:11:3f:f4:e8:83:12:ae:a2:b1:b9:4c:68:b1:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2f5fd3023055249f213d15cba000ca026bb6fa3
Validity
Not Before: Jan 31 11:00:36 2025 GMT
Not After : Feb 1 11:00:36 2025 GMT
Subject: CN=ff44f2352826083d52105a829f9ed5876c22c22f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:a5:c8:f9:9f:17:96:bb:43:b3:ed:65:a1:40:
07:6b:4e:38:9c:63:73:b7:e1:c7:c7:41:c1:c2:5f:
7c:3e:34:92:3b:30:db:31:39:c4:bc:f7:47:0f:eb:
26:e4:5a:f3:cd:b1:fd:e4:f5:9e:41:f4:ea:6e:94:
e5:14:3f:fe:26:38:e5:bc:2d:05:e0:d3:c0:e6:24:
9c:75:ea:c1:05:09:90:b9:48:11:fd:33:36:33:b5:
14:f3:95:84:0b:98:57:87:ef:d1:b5:2b:04:07:65:
f9:b7:50:d0:3c:11:db:7e:e5:f5:23:fe:da:ca:56:
e0:75:d8:d2:eb:f4:2f:3a:60:10:6c:2f:8a:4d:e8:
38:db:69:82:36:dc:c3:9c:80:5e:df:87:f4:c0:33:
6a:ea:7f:0a:ac:87:1e:a5:33:06:0f:ee:15:b3:2c:
61:49:df:69:62:93:91:d9:7f:8d:54:c4:1f:4f:d7:
88:15:63:8c:4f:67:7d:2b:9f:71:19:e3:52:94:2e:
79:f4:ff:22:64:6b:d9:7a:4c:db:a1:8a:30:63:a1:
53:b0:63:96:08:10:db:c8:cc:43:5d:02:72:11:e0:
20:6b:6b:7e:28:50:99:20:87:bc:b8:dd:77:f8:9c:
fd:b5:89:24:8d:f3:68:be:9d:54:13:0d:f9:b8:6a:
3b:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:44:F2:35:28:26:08:3D:52:10:5A:82:9F:9E:D5:87:6C:22:C2:2F
X509v3 Authority Key Identifier:
keyid:C2:F5:FD:30:23:05:52:49:F2:13:D1:5C:BA:00:0C:A0:26:BB:6F:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wvX9MCMFUknyE9FcugAMoCa7b6M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/cc02e1-8b36-42a3-b756-be3485706a7f/1/wvX9MCMFUknyE9FcugAMoCa7b6M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/cc02e1-8b36-42a3-b756-be3485706a7f/1/wvX9MCMFUknyE9FcugAMoCa7b6M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:21:6e:79:6b:12:00:8d:bc:7f:0f:70:d6:a1:cf:f8:62:e8:
ce:8c:18:df:d7:eb:cc:36:d7:6f:50:62:b1:cf:3e:cf:48:6d:
de:ae:42:c1:09:c3:a1:b8:43:31:2b:f9:bc:13:a4:72:f5:03:
4a:c4:93:b4:70:f3:ea:a8:ac:f7:7f:c7:ca:02:75:0a:af:e7:
e0:0b:3f:dc:58:e2:66:d6:67:c7:24:fe:95:37:ca:7c:9f:25:
29:d8:0e:12:26:02:56:0b:d5:82:e6:a7:1f:85:22:22:87:fd:
24:15:f7:23:36:8d:37:28:7b:eb:8f:35:d5:cd:63:d6:bf:5f:
5e:e1:ae:ce:5a:9e:19:b5:c0:09:eb:76:34:41:88:08:f7:b3:
18:97:cc:9a:f2:ea:e4:1f:6b:2c:cc:81:cd:cc:a0:a6:14:9b:
23:1a:34:e9:7d:72:26:9a:c7:6b:36:95:34:98:98:ac:dd:8d:
4e:db:97:8f:1f:be:e9:a4:40:2a:fa:0f:74:b2:9d:e6:44:f3:
ad:b4:17:04:53:3a:20:52:b0:ed:ae:5c:10:c6:4c:00:00:09:
74:1c:a7:50:0c:e7:ed:d3:95:51:a9:2d:b3:5a:57:6f:77:74:
1d:12:6f:90:62:65:51:0d:1b:bf:f4:d6:ba:b7:05:19:d3:df:
e5:78:28:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:54:41 2025 by rpki-client