Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/82ba9d-3882-47fd-91d5-4b7e5c5a9d4b/1/wTHUZWF0SmgQFsjW-aYbnBfLfw8.mft
File: wTHUZWF0SmgQFsjW-aYbnBfLfw8.mft (raw, json)
Hash identifier: JGUXHCVrmIjp5848TXlvP0YN5T+fStFa0Mh5uu3umns=
Subject key identifier: 1B:03:31:A5:98:A8:DD:AD:2D:1F:06:38:DD:4F:D6:78:91:5B:42:00
Authority key identifier: C1:31:D4:65:61:74:4A:68:10:16:C8:D6:F9:A6:1B:9C:17:CB:7F:0F
Certificate issuer: /CN=c131d46561744a681016c8d6f9a61b9c17cb7f0f
Certificate serial: 0194BCA9C701748F55FAC2328713A10936C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wTHUZWF0SmgQFsjW-aYbnBfLfw8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/82ba9d-3882-47fd-91d5-4b7e5c5a9d4b/1/wTHUZWF0SmgQFsjW-aYbnBfLfw8.mft
Manifest number: 1289
Signing time: Fri 31 Jan 2025 14:00:30 +0000
Manifest this update: Fri 31 Jan 2025 14:00:30 +0000
Manifest next update: Sat 01 Feb 2025 14:00:30 +0000
Files and hashes: 1: ZDdnNxC-Iv1H5A5BkJloJqSNxf8.roa (hash: UCqx4EaKls5iWpImDrWYZpurlTDip+uji9Lqqm7JLEg=)
2: wTHUZWF0SmgQFsjW-aYbnBfLfw8.crl (hash: gWX7aVFFiDw1dkqPPT8FARjmGGCchFPs7H99k4fu6Ec=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:c7:01:74:8f:55:fa:c2:32:87:13:a1:09:36:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c131d46561744a681016c8d6f9a61b9c17cb7f0f
Validity
Not Before: Jan 31 14:00:30 2025 GMT
Not After : Feb 1 14:00:30 2025 GMT
Subject: CN=1b0331a598a8ddad2d1f0638dd4fd678915b4200
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:3c:bc:fd:c9:b3:a7:4f:41:24:96:7d:d1:03:
1b:18:00:1c:74:95:a4:b8:48:9f:7a:c9:0f:ae:34:
f9:a8:77:c4:b1:0d:a0:11:aa:60:3d:62:9e:54:e7:
72:a7:ae:3d:dd:ae:0b:16:05:db:9d:47:9a:2c:e2:
ce:5c:47:c6:e0:42:d5:32:3d:c4:df:6b:10:97:d7:
5b:09:0f:a8:61:d6:b5:eb:3e:f5:3a:d3:ec:7a:a8:
fe:88:78:0b:3f:e0:a2:6a:08:2b:db:d4:ab:c9:18:
99:a8:2d:0c:85:ac:6a:09:1c:3b:a8:3e:90:f2:aa:
a7:53:4a:45:0b:22:ee:5e:62:88:ee:4c:d3:ac:e5:
24:9a:f7:fc:90:96:01:22:50:c6:08:a5:3d:97:50:
75:92:0c:8a:ff:b9:6e:01:56:66:fe:6b:6a:eb:eb:
19:23:3c:2e:54:57:b5:5f:c3:be:75:7f:c4:cb:4b:
cc:64:e3:13:10:fa:8b:b1:99:c3:35:db:eb:6a:a9:
12:64:c7:0b:cc:4d:6f:d5:5d:6e:b3:ce:32:8f:c0:
04:b9:c1:96:0a:41:70:6d:60:92:e5:d3:75:31:74:
e6:2f:2f:ef:51:9e:99:85:af:3c:5c:16:86:99:ec:
71:ae:1f:41:76:f1:51:b4:e1:72:6b:ea:e5:b5:3c:
dc:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:03:31:A5:98:A8:DD:AD:2D:1F:06:38:DD:4F:D6:78:91:5B:42:00
X509v3 Authority Key Identifier:
keyid:C1:31:D4:65:61:74:4A:68:10:16:C8:D6:F9:A6:1B:9C:17:CB:7F:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wTHUZWF0SmgQFsjW-aYbnBfLfw8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/82ba9d-3882-47fd-91d5-4b7e5c5a9d4b/1/wTHUZWF0SmgQFsjW-aYbnBfLfw8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/82ba9d-3882-47fd-91d5-4b7e5c5a9d4b/1/wTHUZWF0SmgQFsjW-aYbnBfLfw8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:30:cd:bd:7c:44:52:92:d2:c4:de:98:15:9b:2e:ce:72:08:
a1:fb:b1:23:36:3c:49:8a:50:40:31:af:5c:13:13:7a:51:84:
cc:9a:f9:86:45:0c:e9:e4:88:85:6f:a1:64:c1:39:67:76:dd:
59:8f:4c:ad:78:7e:64:a6:0d:ec:ae:e0:df:00:7c:1a:f2:fb:
fb:13:01:a5:2a:45:b8:ba:34:1a:51:a3:36:33:b0:4c:af:ff:
0b:32:56:99:0b:ec:a2:46:63:cf:f5:36:d3:4b:a7:49:41:1e:
75:62:63:97:89:dd:11:c0:5d:e8:3d:ad:47:20:ec:42:09:e5:
d7:7d:4f:d5:0f:96:c9:fc:6d:24:7d:ef:c1:55:2b:d5:9c:78:
39:d7:c4:38:bb:c8:43:39:74:49:93:ae:d5:a3:3a:ea:ad:80:
98:11:79:b4:99:df:d9:f4:c5:7c:15:fc:c2:7d:67:ad:b6:65:
32:a0:2e:e7:1f:46:4c:c4:f2:2b:f0:51:89:35:d7:71:93:f8:
d7:29:b5:5b:b0:3c:f6:c7:58:08:42:4f:e2:7f:59:55:0b:53:
47:80:03:61:ef:fb:eb:b1:c9:2c:fe:f1:80:29:40:9e:09:79:
df:84:21:a9:5c:0c:7b:64:0d:8f:a4:81:76:7c:e3:ec:98:7a:
67:20:50:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:37:13 2025 by rpki-client