Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/dc430d-3779-4989-b872-33644059e866/1/Wq93TsnCcwJusRfkjnP-9CiN3sg.mft
File: Wq93TsnCcwJusRfkjnP-9CiN3sg.mft (raw, json)
Hash identifier: fB9Gsmzdxn973lk1Q6vZXQ0p3cGD64TxQeUxubRu1Cs=
Subject key identifier: 1A:DE:D6:31:19:8B:16:C0:0B:F9:4D:C1:53:57:D9:14:00:9B:31:67
Authority key identifier: 5A:AF:77:4E:C9:C2:73:02:6E:B1:17:E4:8E:73:FE:F4:28:8D:DE:C8
Certificate issuer: /CN=5aaf774ec9c273026eb117e48e73fef4288ddec8
Certificate serial: 0194BC3C2368ECA1C6CD64F53F67CD475676
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wq93TsnCcwJusRfkjnP-9CiN3sg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/dc430d-3779-4989-b872-33644059e866/1/Wq93TsnCcwJusRfkjnP-9CiN3sg.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 12:00:45 +0000
Manifest this update: Fri 31 Jan 2025 12:00:45 +0000
Manifest next update: Sat 01 Feb 2025 12:00:45 +0000
Files and hashes: 1: 1-hXj5YRn-WVx35eduoI7efVZjNc.roa (hash: g7NKwujdPr7Nz8jyHPpB050pI0MnKX60Je4aNLZ7Vwc=)
2: Wq93TsnCcwJusRfkjnP-9CiN3sg.crl (hash: W2Bn7uapCLiJ3ahL30KqQIR7ht6bA9ECK2Q54LPgC/8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:23:68:ec:a1:c6:cd:64:f5:3f:67:cd:47:56:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5aaf774ec9c273026eb117e48e73fef4288ddec8
Validity
Not Before: Jan 31 12:00:45 2025 GMT
Not After : Feb 1 12:00:45 2025 GMT
Subject: CN=1aded631198b16c00bf94dc15357d914009b3167
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:c7:d4:d8:a4:41:d9:2f:e0:eb:63:65:08:51:
34:97:d6:46:bc:62:ec:b8:d6:4c:53:1b:b4:3b:47:
05:bd:62:c6:98:da:c4:1f:85:f7:86:4a:e5:fe:86:
98:54:78:77:9d:9b:c6:ad:ac:7d:51:e0:f1:6e:9c:
40:76:8b:2e:6f:a8:34:10:c0:d1:0c:a8:81:46:eb:
91:ba:d8:9e:bf:a9:f5:3a:03:de:2a:4d:f7:c4:f8:
f0:e1:fc:25:fd:10:b0:1c:d2:8b:e0:ba:2f:5b:bb:
a6:66:5f:66:ca:f7:65:a8:1c:47:42:16:89:3f:6f:
c9:02:f4:e8:69:c7:ac:e9:01:51:df:3e:e5:bf:7d:
ad:3b:31:b3:32:1a:2c:9d:28:2f:c1:fa:8a:01:87:
fc:49:1f:43:49:c5:90:1e:c4:6f:b2:80:22:b1:e9:
3d:08:a4:88:ee:a9:35:ad:08:e6:aa:f8:56:74:14:
30:97:3c:e4:f0:91:4d:f6:98:23:7e:6b:fb:a0:d4:
12:d3:b2:4f:b2:42:a2:90:72:70:5c:75:ae:70:41:
29:ae:b2:b1:8c:4c:f1:4a:77:78:ea:77:df:2f:f5:
e5:67:03:00:d8:90:36:94:7a:65:73:b9:81:45:80:
e4:e6:05:6e:80:0b:c6:55:a2:f7:bb:46:37:a8:71:
84:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:DE:D6:31:19:8B:16:C0:0B:F9:4D:C1:53:57:D9:14:00:9B:31:67
X509v3 Authority Key Identifier:
keyid:5A:AF:77:4E:C9:C2:73:02:6E:B1:17:E4:8E:73:FE:F4:28:8D:DE:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wq93TsnCcwJusRfkjnP-9CiN3sg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/dc430d-3779-4989-b872-33644059e866/1/Wq93TsnCcwJusRfkjnP-9CiN3sg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/dc430d-3779-4989-b872-33644059e866/1/Wq93TsnCcwJusRfkjnP-9CiN3sg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:fe:82:c8:c6:7d:f5:75:51:ad:4c:6f:29:42:43:95:e6:22:
dd:bd:28:e7:3f:d0:e1:07:a8:ae:49:48:b0:fa:85:32:b6:33:
ff:d6:07:3b:1f:fb:b8:b2:b2:87:38:a5:58:d1:78:db:31:2f:
c0:9a:be:9c:9c:cf:4e:bf:7a:9f:ae:a5:4e:03:a9:f5:c1:7d:
d1:7b:f1:0d:83:68:0c:45:93:01:9b:c2:38:be:3a:dc:ec:33:
b7:2f:18:4a:78:5d:7d:b7:8e:ac:0f:db:0d:25:69:d3:5e:2e:
a2:0c:3d:9b:30:3f:0d:e1:60:16:1d:98:fe:80:ab:21:db:92:
b7:3b:16:0e:4c:d0:62:48:9d:e8:a7:04:f9:85:db:4d:97:c0:
91:94:02:d7:89:29:ed:be:43:01:50:f0:15:50:23:64:fb:7f:
b7:52:f9:39:ba:e0:a3:0a:f5:4b:ff:c6:7c:40:f2:f7:e7:aa:
e7:76:d1:a0:11:bb:ac:ca:c3:a9:07:24:19:43:3b:69:1e:30:
28:28:6c:4d:1d:ac:3b:8b:a4:0f:55:e3:13:e1:cd:79:81:57:
6d:02:ab:38:d5:f8:b2:ec:82:c6:fa:e5:da:bd:65:8f:62:15:
8a:44:f4:14:95:5e:d0:28:6e:ff:e1:fd:ff:b1:ab:7f:8c:04:
b5:a3:d8:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:44:11 2025 by rpki-client