Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/58b20a-452b-4f2b-aab5-7d13c072d96b/1/wC9Z7KZCk9LJFuersJ4FLiyxy2M.mft
File: wC9Z7KZCk9LJFuersJ4FLiyxy2M.mft (raw, json)
Hash identifier: Xm4/wIzrT2y6BT9nsImoS61TZkbbS4uZ4mQgC+axiio=
Subject key identifier: 8C:E8:B8:43:07:83:E9:6E:E5:0A:21:69:D7:20:13:81:54:B1:FF:B5
Authority key identifier: C0:2F:59:EC:A6:42:93:D2:C9:16:E7:AB:B0:9E:05:2E:2C:B1:CB:63
Certificate issuer: /CN=c02f59eca64293d2c916e7abb09e052e2cb1cb63
Certificate serial: 0194BC04C31D060264375D57706EA55B5322
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wC9Z7KZCk9LJFuersJ4FLiyxy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/58b20a-452b-4f2b-aab5-7d13c072d96b/1/wC9Z7KZCk9LJFuersJ4FLiyxy2M.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 11:00:16 +0000
Manifest this update: Fri 31 Jan 2025 11:00:16 +0000
Manifest next update: Sat 01 Feb 2025 11:00:16 +0000
Files and hashes: 1: I0H7qSqQ0AzLSSpiXqiH1EQi7-Q.roa (hash: Jow46MXmNk+mUHCbkELVJdKY8Y06A4U2s/PAO/haQb0=)
2: wC9Z7KZCk9LJFuersJ4FLiyxy2M.crl (hash: qy+QKvsrplLnVuwhJBIpLp4dDi9zla9XzKwK8FDsflU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:c3:1d:06:02:64:37:5d:57:70:6e:a5:5b:53:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c02f59eca64293d2c916e7abb09e052e2cb1cb63
Validity
Not Before: Jan 31 11:00:16 2025 GMT
Not After : Feb 1 11:00:16 2025 GMT
Subject: CN=8ce8b8430783e96ee50a2169d720138154b1ffb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:b4:77:d6:81:7a:fa:df:3f:f3:62:58:ae:7a:
f1:ea:2d:00:ed:69:8d:78:8a:fc:30:42:39:9c:5a:
0f:78:32:a9:1b:e0:66:5d:4d:0e:ff:87:44:43:6d:
83:a6:be:23:59:21:62:a8:e9:5f:c8:45:7e:59:49:
ca:c2:19:05:85:d3:eb:d3:6d:80:d2:11:03:b9:b9:
0c:d9:01:69:ff:3c:86:9a:3b:1d:ca:d8:53:52:16:
56:a3:e4:1a:ca:ac:ee:0f:80:b1:dd:46:17:8b:a2:
44:91:41:ed:75:dc:fd:0c:0e:dc:59:23:87:f5:91:
2e:50:81:e3:b3:ad:75:cf:76:a6:a4:51:a0:b2:21:
bf:0e:07:3f:76:1a:bc:67:76:61:fa:2c:ef:08:e1:
f5:47:9e:f4:17:c0:f6:82:8e:d6:9c:5b:46:f5:aa:
ea:6f:3e:8a:5d:b6:d6:a6:0a:90:1b:5b:2f:88:45:
44:e9:0b:d8:da:e1:ce:a6:87:b9:a4:8f:fc:4e:89:
2c:9a:c6:e8:91:20:0d:dc:15:74:1d:0d:3c:14:07:
ca:1e:7f:0c:bd:ce:1f:09:04:7b:3f:94:31:5d:57:
39:f6:f5:65:bc:09:ab:96:b5:59:7b:9a:1e:bd:df:
17:04:48:9a:46:31:30:1b:10:19:99:d1:6d:3d:30:
33:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:E8:B8:43:07:83:E9:6E:E5:0A:21:69:D7:20:13:81:54:B1:FF:B5
X509v3 Authority Key Identifier:
keyid:C0:2F:59:EC:A6:42:93:D2:C9:16:E7:AB:B0:9E:05:2E:2C:B1:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wC9Z7KZCk9LJFuersJ4FLiyxy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/58b20a-452b-4f2b-aab5-7d13c072d96b/1/wC9Z7KZCk9LJFuersJ4FLiyxy2M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/58b20a-452b-4f2b-aab5-7d13c072d96b/1/wC9Z7KZCk9LJFuersJ4FLiyxy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:a2:5a:35:57:88:34:81:34:2c:bc:7b:c7:f9:8f:31:ca:d2:
71:93:bb:02:eb:aa:25:1b:69:18:74:37:d7:9b:64:ca:36:e3:
a9:a4:f8:aa:13:04:23:a1:d8:56:a8:0b:4c:b8:91:5d:1a:cb:
0b:11:01:eb:99:a3:cb:7d:0c:51:41:d9:37:f8:cf:20:c5:a0:
15:a0:19:cb:16:af:16:96:cb:e3:f5:7e:da:9b:cc:be:2d:4b:
b9:71:56:b7:db:b7:63:0b:66:26:83:6d:30:7d:6d:11:19:9b:
49:56:20:b5:55:dd:d5:fb:c9:bf:ea:11:b6:a1:2b:ad:39:11:
8b:c0:39:5c:52:53:84:81:a0:0a:68:8d:de:f4:63:45:03:ef:
e8:02:2e:85:37:d0:28:c0:af:37:79:b7:59:31:a2:77:fb:df:
fe:39:19:84:06:e8:ed:41:1b:32:e5:59:bc:d2:a8:f1:f6:46:
3c:e2:b3:42:fb:43:08:47:3b:50:d6:de:31:bc:4d:b1:e7:c4:
0d:6e:da:da:a0:08:8f:ea:c0:01:75:18:45:59:b6:d1:9e:0f:
ec:9e:c9:56:f5:53:9a:67:f1:bf:f2:4f:5a:49:6c:96:f2:e9:
43:20:fb:64:91:37:7e:da:7c:92:fd:8a:0f:a8:19:a0:af:4e:
0e:94:54:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:44:58 2025 by rpki-client