Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/b7cd45-1f03-4158-8297-a3f61e30b514/1/wz-t0SfmXNkN4-lWjly8-0jJsko.mft
File: wz-t0SfmXNkN4-lWjly8-0jJsko.mft (raw, json)
Hash identifier: t2pBsKy/KPdmZHHd4Sb50gTxXYaKbf+NoeY9f85Svzg=
Subject key identifier: F6:CE:90:42:4E:8B:93:83:57:9C:93:D5:3B:22:2E:78:2A:82:24:22
Authority key identifier: C3:3F:AD:D1:27:E6:5C:D9:0D:E3:E9:56:8E:5C:BC:FB:48:C9:B2:4A
Certificate issuer: /CN=c33fadd127e65cd90de3e9568e5cbcfb48c9b24a
Certificate serial: 0194BCAA4B97DBC085120551F128011BD0A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wz-t0SfmXNkN4-lWjly8-0jJsko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/b7cd45-1f03-4158-8297-a3f61e30b514/1/wz-t0SfmXNkN4-lWjly8-0jJsko.mft
Manifest number: 042B
Signing time: Fri 31 Jan 2025 14:01:04 +0000
Manifest this update: Fri 31 Jan 2025 14:01:04 +0000
Manifest next update: Sat 01 Feb 2025 14:01:04 +0000
Files and hashes: 1: mRIJhbiYi4_Fn9rbvJxpcE5BqwE.roa (hash: QFNaK1Gy0ycMOCo2B8J3U81MNF8ZnZJf7GULAc5HdJY=)
2: wz-t0SfmXNkN4-lWjly8-0jJsko.crl (hash: fDQGzQ0V3Qr2/eFziZFJzfCfjc9YUqY6b3u7G/oqwwA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:4b:97:db:c0:85:12:05:51:f1:28:01:1b:d0:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c33fadd127e65cd90de3e9568e5cbcfb48c9b24a
Validity
Not Before: Jan 31 14:01:04 2025 GMT
Not After : Feb 1 14:01:04 2025 GMT
Subject: CN=f6ce90424e8b9383579c93d53b222e782a822422
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:18:5d:2d:85:12:98:b8:f5:a8:58:96:65:0f:
87:7b:f4:f4:f0:09:7f:a7:9f:8c:6f:8f:ab:d5:a9:
c5:8e:97:63:83:1b:72:35:af:73:78:df:32:56:86:
29:c4:d1:f0:cd:3b:ce:b6:d8:41:11:07:9f:e6:a5:
6e:d1:09:0d:23:60:c9:0e:2c:1d:13:9d:c5:9d:83:
df:27:38:a9:7b:bd:ed:a0:17:59:51:22:fe:c2:2c:
c0:9e:14:2a:a2:60:c6:00:17:3b:3c:41:00:12:9d:
34:f2:6c:29:44:e9:83:d6:51:ff:6f:34:46:47:8f:
81:78:79:5b:12:46:ef:99:16:6d:e6:51:a2:2b:fb:
6c:99:9e:6f:4f:6e:8e:6f:02:a0:44:4a:84:7d:17:
4a:2a:85:6b:10:62:07:92:ad:ef:98:c7:b9:f3:81:
b7:22:40:aa:74:f4:df:f2:47:a2:ad:70:46:8f:55:
e3:b9:a2:20:38:50:01:ae:e6:07:42:24:76:cd:d8:
5b:47:b9:03:b0:be:6f:b6:d0:04:eb:62:88:44:61:
bf:9a:39:79:9c:32:f7:77:a5:4e:84:b1:25:86:f5:
c6:e0:bd:38:f0:25:fa:0f:bb:3c:bd:6c:bb:2a:76:
51:cb:e9:5b:f3:3b:85:d0:c6:34:15:00:54:07:dd:
42:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:CE:90:42:4E:8B:93:83:57:9C:93:D5:3B:22:2E:78:2A:82:24:22
X509v3 Authority Key Identifier:
keyid:C3:3F:AD:D1:27:E6:5C:D9:0D:E3:E9:56:8E:5C:BC:FB:48:C9:B2:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wz-t0SfmXNkN4-lWjly8-0jJsko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/b7cd45-1f03-4158-8297-a3f61e30b514/1/wz-t0SfmXNkN4-lWjly8-0jJsko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/b7cd45-1f03-4158-8297-a3f61e30b514/1/wz-t0SfmXNkN4-lWjly8-0jJsko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:f9:32:fb:4f:b8:35:4c:28:ab:77:d2:30:74:e8:c4:da:62:
55:3a:38:d3:18:58:c2:ba:c4:1b:08:b3:f0:12:f6:a1:b5:93:
64:03:ec:1b:e5:36:b3:6b:1b:81:25:95:8d:0c:0a:e9:76:37:
b7:68:42:cc:f1:02:a8:3b:db:16:60:45:a2:8a:95:8f:99:96:
fb:02:ce:67:37:5d:cb:1d:8e:73:f6:aa:34:fa:93:da:ea:10:
a3:00:f0:da:e6:54:42:68:d2:e8:56:55:51:d3:ad:98:cc:1f:
57:72:71:65:0e:07:1b:e0:22:bc:d0:2a:22:f8:fc:59:9a:4a:
f1:7c:36:1a:a2:b7:9e:1e:a9:f2:91:14:65:b3:33:e5:bb:f1:
1f:82:d9:e0:cf:7b:50:6e:ed:39:3d:a7:fe:38:fd:b5:4c:98:
ca:09:a0:1f:6d:f0:cc:ca:ba:84:ce:80:f1:75:b6:33:d7:84:
f0:23:73:29:0d:a8:62:a0:27:67:78:b6:c6:75:93:19:32:ad:
45:d3:f3:5a:a4:92:b5:df:e1:27:a1:9d:14:4b:d7:b0:71:56:
3d:11:b3:66:39:32:4d:3b:16:08:28:bd:90:b4:87:4e:09:13:
16:80:2b:6c:ee:2c:aa:39:ce:dc:9a:b0:38:b1:2e:da:ca:a1:
f6:c0:14:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:18:48 2025 by rpki-client