Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/b6aa96-aa8f-4fd4-b9e8-373a0d3c4534/1/wRXxNBqHFAoSLcj5ZQK3JEkFfmA.mft
File: wRXxNBqHFAoSLcj5ZQK3JEkFfmA.mft (raw, json)
Hash identifier: /VTA8dttAP+KNjglk+G1D5KUvvGaSwL8Hv4AEIxes5g=
Subject key identifier: 5A:13:53:5F:00:88:99:AB:A0:F9:F3:F6:D3:E8:B3:98:8B:35:E2:AF
Authority key identifier: C1:15:F1:34:1A:87:14:0A:12:2D:C8:F9:65:02:B7:24:49:05:7E:60
Certificate issuer: /CN=c115f1341a87140a122dc8f96502b72449057e60
Certificate serial: 0194BCA9C3EAE6C1DE12D8A118C850CB92FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wRXxNBqHFAoSLcj5ZQK3JEkFfmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/b6aa96-aa8f-4fd4-b9e8-373a0d3c4534/1/wRXxNBqHFAoSLcj5ZQK3JEkFfmA.mft
Manifest number: 1248
Signing time: Fri 31 Jan 2025 14:00:29 +0000
Manifest this update: Fri 31 Jan 2025 14:00:29 +0000
Manifest next update: Sat 01 Feb 2025 14:00:29 +0000
Files and hashes: 1: OZdY9tsN8gFkESVtIbXza917_a0.roa (hash: izbPKaAtrUogn7SQSKm/hKiliCifOlraqF2HZIB4lps=)
2: wRXxNBqHFAoSLcj5ZQK3JEkFfmA.crl (hash: KLsw00EgCWFt4MayRDg/JaYXStAAee/TaN/t1239+hE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:c3:ea:e6:c1:de:12:d8:a1:18:c8:50:cb:92:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c115f1341a87140a122dc8f96502b72449057e60
Validity
Not Before: Jan 31 14:00:29 2025 GMT
Not After : Feb 1 14:00:29 2025 GMT
Subject: CN=5a13535f008899aba0f9f3f6d3e8b3988b35e2af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:87:95:62:ee:fe:b0:4f:fc:70:7d:e8:5f:aa:
4e:b1:78:4c:18:76:c3:6d:87:73:c8:19:f8:e1:0d:
bc:97:38:28:76:0f:82:05:3f:c7:a1:fa:9d:94:80:
9f:06:d3:94:a7:91:4f:2e:7a:4a:0e:5e:80:42:0e:
2b:0a:5a:c4:bb:61:a1:5c:fd:5e:1c:ab:49:80:8f:
58:b1:d2:a4:2e:a3:86:b7:33:db:73:ac:5d:37:51:
64:e8:3e:5d:6d:b8:8b:a2:f5:24:af:47:0f:6c:cf:
5d:ed:a3:55:cf:44:ce:4b:ea:cd:57:4c:2c:c5:2c:
d0:36:ca:ae:25:d1:db:dc:52:68:7d:2e:ea:7a:6d:
9d:d6:df:46:f5:dd:89:c8:26:d8:f3:33:b9:cd:af:
13:4e:62:bc:75:4f:41:df:e2:90:40:95:3d:79:1c:
00:12:5c:b5:2e:c4:68:35:bc:b5:56:e7:38:b9:31:
d6:fc:6a:fb:ec:02:ac:b9:78:80:7a:53:96:d8:4f:
42:08:d6:de:21:a6:1e:b4:9b:b1:d0:38:79:07:5e:
8c:62:d8:ae:7e:22:f0:b5:da:88:aa:7c:a1:59:b2:
4d:16:ee:c5:43:12:42:00:dd:67:a6:03:c9:30:1e:
ed:a6:e3:45:7c:ff:43:61:e3:1c:d7:9f:15:08:79:
31:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:13:53:5F:00:88:99:AB:A0:F9:F3:F6:D3:E8:B3:98:8B:35:E2:AF
X509v3 Authority Key Identifier:
keyid:C1:15:F1:34:1A:87:14:0A:12:2D:C8:F9:65:02:B7:24:49:05:7E:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wRXxNBqHFAoSLcj5ZQK3JEkFfmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/b6aa96-aa8f-4fd4-b9e8-373a0d3c4534/1/wRXxNBqHFAoSLcj5ZQK3JEkFfmA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/b6aa96-aa8f-4fd4-b9e8-373a0d3c4534/1/wRXxNBqHFAoSLcj5ZQK3JEkFfmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:2c:1f:08:05:d9:0c:f0:7b:9b:36:8b:55:6a:f3:9c:67:6c:
d9:8e:05:28:1a:0c:0f:ad:df:ff:7b:c4:f3:2e:c3:ac:61:d7:
65:fd:e3:b8:27:ce:4c:b9:34:25:61:fe:20:d0:eb:41:7e:b5:
0c:82:81:e8:95:39:1f:61:58:0e:7b:9b:17:68:82:25:0a:70:
02:38:0d:c5:59:de:ca:99:5d:01:db:61:be:3a:98:ff:82:46:
42:ee:86:3f:50:a2:a6:20:58:ce:40:f0:f4:eb:b4:f8:2f:99:
45:22:9e:c8:21:87:e3:39:d8:28:24:c7:5f:54:38:72:62:35:
91:63:49:a5:51:09:da:f6:9e:58:45:0d:27:35:93:ab:73:14:
51:9a:e9:83:25:32:94:42:8e:8f:1b:bb:ce:cd:98:56:47:46:
17:6a:bf:99:53:b5:aa:e4:66:1b:6d:6b:44:f3:df:4d:e9:ac:
50:80:3a:62:b9:c4:19:c4:ee:59:fb:76:e4:35:c0:99:3b:72:
42:4a:4c:f8:f2:31:a1:e0:6e:70:97:3c:3f:d0:9f:b4:3c:91:
36:37:f3:80:f4:02:4c:e4:6d:57:e8:25:17:14:b1:06:fb:34:
39:37:de:b0:68:7c:80:6e:b8:00:52:75:f2:ad:6b:49:91:67:
8f:db:9d:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:43:33 2025 by rpki-client