Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/d2362e-3256-4244-858a-ee56f1afc366/1/wRq5FoIcWjFIzhJSungByqKrSRQ.mft
File: wRq5FoIcWjFIzhJSungByqKrSRQ.mft (raw, json)
Hash identifier: /Pjf1RZpbtD/w/KA4+XiT9QFfq/KrvC1wVecQ+69i9g=
Subject key identifier: 5B:60:01:E2:4F:94:DC:C8:93:F4:54:89:7A:12:2C:9B:78:FC:61:10
Authority key identifier: C1:1A:B9:16:82:1C:5A:31:48:CE:12:52:BA:78:01:CA:A2:AB:49:14
Certificate issuer: /CN=c11ab916821c5a3148ce1252ba7801caa2ab4914
Certificate serial: 0194BCA998DA16FD5B8A4E6EE271A910B99E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wRq5FoIcWjFIzhJSungByqKrSRQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/d2362e-3256-4244-858a-ee56f1afc366/1/wRq5FoIcWjFIzhJSungByqKrSRQ.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 14:00:18 +0000
Manifest this update: Fri 31 Jan 2025 14:00:18 +0000
Manifest next update: Sat 01 Feb 2025 14:00:18 +0000
Files and hashes: 1: jmxXPs-eFsLMyQfsEqQE-gTcJzg.roa (hash: JMdb9ncK/VZi/Drly8ri6tbObrJ2pnr+vB9E79datFA=)
2: wRq5FoIcWjFIzhJSungByqKrSRQ.crl (hash: VWSBhU8Fv5qxXI6AGehoQo79ISvw5r5Qu1guIbM2ZYc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:98:da:16:fd:5b:8a:4e:6e:e2:71:a9:10:b9:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c11ab916821c5a3148ce1252ba7801caa2ab4914
Validity
Not Before: Jan 31 14:00:18 2025 GMT
Not After : Feb 1 14:00:18 2025 GMT
Subject: CN=5b6001e24f94dcc893f454897a122c9b78fc6110
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:36:00:b0:8d:35:85:c3:e5:bf:c9:62:7b:e3:
2a:84:80:b0:14:a1:21:09:34:d7:dc:42:c6:be:c8:
29:62:5b:9b:5f:3a:8b:22:1e:ed:38:a0:9d:68:10:
12:2e:05:7d:d5:ce:d5:8d:23:1e:8b:09:b5:6e:00:
8f:63:9e:92:45:53:14:f9:f5:fe:13:c9:ee:45:6f:
55:fc:d5:44:15:11:a8:25:83:40:a9:73:81:64:04:
38:a1:5e:ca:59:4e:f1:e9:cf:2f:2e:f8:ef:bd:ad:
0a:eb:9d:15:39:3b:8b:b6:1f:23:d2:8c:ca:95:fe:
ec:d2:cd:9d:32:dd:45:fa:15:e8:71:5c:49:17:e3:
98:6d:71:3a:8d:2b:ef:ba:76:aa:c7:a8:71:e0:5d:
13:0b:77:69:d8:10:ed:30:7e:39:af:bc:9d:0a:31:
5e:08:00:35:e3:38:27:3d:04:89:96:a5:eb:f8:1f:
3a:21:32:e1:59:81:66:22:f3:86:7b:8f:31:aa:df:
ac:b2:6b:54:6c:15:d6:d7:b8:84:6d:d8:ee:0c:61:
de:18:2c:52:6d:e2:11:b8:0c:24:86:ac:5c:8a:73:
84:66:31:be:d7:83:2a:7f:42:6e:82:14:77:16:e5:
b3:01:5a:b4:74:40:c9:ee:3e:54:b4:d1:77:a6:89:
80:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:60:01:E2:4F:94:DC:C8:93:F4:54:89:7A:12:2C:9B:78:FC:61:10
X509v3 Authority Key Identifier:
keyid:C1:1A:B9:16:82:1C:5A:31:48:CE:12:52:BA:78:01:CA:A2:AB:49:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wRq5FoIcWjFIzhJSungByqKrSRQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/d2362e-3256-4244-858a-ee56f1afc366/1/wRq5FoIcWjFIzhJSungByqKrSRQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/d2362e-3256-4244-858a-ee56f1afc366/1/wRq5FoIcWjFIzhJSungByqKrSRQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:ad:fc:38:a6:ce:bf:0b:76:61:28:e0:03:2a:a8:d9:4b:16:
03:8e:ff:76:22:52:ea:c1:76:5d:32:82:ac:d1:41:29:b6:7c:
cb:4c:f7:2b:2e:af:f7:43:82:13:39:e8:a7:47:c3:5f:0c:bc:
ab:42:34:be:c1:1e:38:4e:63:89:ff:47:78:2c:e7:70:b4:db:
3e:42:1b:9f:8f:fd:eb:27:d7:0c:f5:44:f2:2b:86:7a:b3:c6:
f6:73:56:f0:17:3c:0f:67:c9:a0:e2:95:ab:6f:ee:0e:2a:2b:
18:14:4c:17:ff:c5:39:ec:88:72:58:0e:cb:4f:b8:f9:f1:8d:
97:37:de:11:c8:e8:20:25:17:13:42:1a:e0:92:ed:e9:34:51:
bb:5d:39:9b:e0:af:7b:7a:84:7c:fa:fd:34:ea:ef:1c:da:37:
ae:6a:c8:95:0a:de:e9:f6:92:ef:c2:99:33:b0:70:46:86:b1:
b2:27:e0:99:9c:c1:e7:dc:60:86:af:59:63:3c:4a:cc:be:19:
43:46:b5:54:ac:63:39:f7:75:47:54:8f:fe:5c:3e:ec:06:cc:
af:bd:1e:c0:8f:4d:47:bc:98:82:1c:b7:2d:67:a5:33:0e:a3:
9a:10:f7:8d:4f:89:89:40:b6:9b:01:cc:44:55:34:d0:ca:60:
8c:6e:21:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:57:29 2025 by rpki-client