Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/3be914-9d1b-4e0b-bfd2-8bfcf906f76a/1/w3oiGyndRjBow6jVysFGsFe1qe0.mft
File: w3oiGyndRjBow6jVysFGsFe1qe0.mft (raw, json)
Hash identifier: G55f4lfhN46P2N1/r/ji/L75vKB6SvdX3IWE572dF28=
Subject key identifier: E8:92:AA:77:76:85:AB:8F:FD:46:8F:25:14:67:FB:91:CB:FB:CB:A7
Authority key identifier: C3:7A:22:1B:29:DD:46:30:68:C3:A8:D5:CA:C1:46:B0:57:B5:A9:ED
Certificate issuer: /CN=c37a221b29dd463068c3a8d5cac146b057b5a9ed
Certificate serial: 0194BCA9DAFA485F69E44CADBD1F53B1CAD5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w3oiGyndRjBow6jVysFGsFe1qe0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/3be914-9d1b-4e0b-bfd2-8bfcf906f76a/1/w3oiGyndRjBow6jVysFGsFe1qe0.mft
Manifest number: 1086
Signing time: Fri 31 Jan 2025 14:00:35 +0000
Manifest this update: Fri 31 Jan 2025 14:00:35 +0000
Manifest next update: Sat 01 Feb 2025 14:00:35 +0000
Files and hashes: 1: I_YmXjobjQiqgaE7GnBooBc13Bo.roa (hash: uhenmFA0jnoDV3gl2RrmVWDxmBkSpRWlCD4TJWA6V5M=)
2: w3oiGyndRjBow6jVysFGsFe1qe0.crl (hash: g/Sqv/S9hPmwWGXxNw2hUjwsTJeY0wrvErX9usDDBNs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:da:fa:48:5f:69:e4:4c:ad:bd:1f:53:b1:ca:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c37a221b29dd463068c3a8d5cac146b057b5a9ed
Validity
Not Before: Jan 31 14:00:35 2025 GMT
Not After : Feb 1 14:00:35 2025 GMT
Subject: CN=e892aa777685ab8ffd468f251467fb91cbfbcba7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:61:3f:f2:ac:38:4a:34:7f:dd:f9:ec:86:75:
3e:3d:6d:5e:b1:2f:ed:a0:f6:2c:82:ed:df:69:d9:
1c:0b:24:7f:d3:f5:ba:25:8d:77:79:e3:f4:89:7f:
ff:18:bd:5b:1a:a4:6c:37:f0:a5:9d:82:ef:cc:7a:
6f:c2:bd:1a:3c:71:6f:69:81:8a:7d:ef:63:f5:b5:
8a:b9:0a:e3:42:a3:e4:ec:97:4a:ac:9f:9e:cb:34:
59:17:06:a0:35:f1:48:ed:e2:39:cb:47:80:67:93:
0a:32:67:fc:d1:96:5c:b1:59:59:f3:05:e2:42:8d:
58:a5:4e:42:42:ac:be:6a:cc:04:aa:37:eb:6e:21:
84:8e:da:d6:27:c8:be:0a:5e:23:56:dc:6e:c9:7b:
94:a6:31:66:d1:01:8c:5d:b6:76:65:31:42:8d:7f:
6a:7e:28:9f:f9:6c:19:f3:31:3e:05:03:65:97:73:
9f:35:2c:c2:de:04:a3:2a:3b:f1:07:cc:ed:d8:3e:
ee:25:24:5a:6c:88:0f:f7:38:26:5d:fd:1d:76:ef:
3c:4f:18:2e:04:27:47:b1:c3:3e:93:c0:bb:b9:31:
24:c7:5b:b4:02:75:3e:6e:e7:e0:27:9e:6b:b4:2c:
71:3a:7b:85:68:0a:c3:17:8b:f6:ca:00:4c:dd:cc:
99:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:92:AA:77:76:85:AB:8F:FD:46:8F:25:14:67:FB:91:CB:FB:CB:A7
X509v3 Authority Key Identifier:
keyid:C3:7A:22:1B:29:DD:46:30:68:C3:A8:D5:CA:C1:46:B0:57:B5:A9:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w3oiGyndRjBow6jVysFGsFe1qe0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/3be914-9d1b-4e0b-bfd2-8bfcf906f76a/1/w3oiGyndRjBow6jVysFGsFe1qe0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/3be914-9d1b-4e0b-bfd2-8bfcf906f76a/1/w3oiGyndRjBow6jVysFGsFe1qe0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:97:6e:32:bb:c6:8a:dc:62:f1:be:75:6f:5a:be:13:71:7a:
ff:b4:b9:b8:28:8d:b5:b1:99:6b:0f:f8:8e:30:b7:44:ad:38:
cc:6f:14:a8:b4:00:91:0a:12:4a:a6:ca:4f:0b:bf:8a:41:c6:
35:36:2c:01:c8:90:ef:e8:24:aa:97:85:49:6c:47:58:cc:fc:
df:2d:ff:3a:0c:f2:1e:78:65:77:25:89:cd:cc:94:b2:e4:c9:
d3:c4:89:c2:6b:f6:26:7f:28:32:5f:6c:31:33:9d:26:d5:a2:
10:d1:70:db:38:ec:4c:5e:69:60:55:94:12:1d:e8:a1:e9:4c:
f0:01:73:ea:e2:c8:72:f6:8a:57:5e:e0:bf:a7:bc:43:e6:65:
04:7f:03:15:79:0f:7b:92:60:df:79:b0:ae:9e:96:12:1a:49:
76:ff:f1:d2:90:1a:58:ec:82:ce:6a:67:f5:bc:78:13:a3:4e:
9a:cf:a0:73:35:d5:51:69:8b:9f:ef:0f:e2:53:9c:16:95:8e:
a2:5e:e2:77:6e:cd:c1:dc:14:2d:20:ab:56:8b:40:97:ca:49:
0c:a7:de:a1:d9:9f:cd:e9:4e:67:a7:92:32:0a:61:8e:44:29:
92:c2:73:a7:aa:10:f5:92:d8:ef:d6:37:f7:e6:eb:2b:98:22:
d3:3a:ca:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:22 2025 by rpki-client