
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/e46168-9818-4b51-94ad-c618dec07462/1/wNBDfN98up85Z-syighobQbkfVY.mft
File: wNBDfN98up85Z-syighobQbkfVY.mft (raw, json)
Hash identifier: s02fDE0tFjJxUol6wg6Qa8K9cUuI9SAkaDUuBAzY8jY=
Subject key identifier: 8B:D8:C4:C0:58:20:3F:9F:51:49:18:EE:5D:D1:27:15:E5:D8:EB:0A
Authority key identifier: C0:D0:43:7C:DF:7C:BA:9F:39:67:EB:32:8A:08:68:6D:06:E4:7D:56
Certificate issuer: /CN=c0d0437cdf7cba9f3967eb328a08686d06e47d56
Certificate serial: 0194BCA9E2E202225B919AE20D42AE2A3BCA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wNBDfN98up85Z-syighobQbkfVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/e46168-9818-4b51-94ad-c618dec07462/1/wNBDfN98up85Z-syighobQbkfVY.mft
Manifest number: 01CD
Signing time: Fri 31 Jan 2025 14:00:37 +0000
Manifest this update: Fri 31 Jan 2025 14:00:37 +0000
Manifest next update: Sat 01 Feb 2025 14:00:37 +0000
Files and hashes: 1: RVpE5x4ewK-16qeOmC4zQhoP4D0.roa (hash: hUGCkNpwy4m/7VpqWBt6q2aDAeStLb3YaDGvbWD+DDQ=)
2: wNBDfN98up85Z-syighobQbkfVY.crl (hash: n12GtDEX64wxwAIh5AQGQMCZl/GOoMo3xV1qUUOpYEc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:e2:e2:02:22:5b:91:9a:e2:0d:42:ae:2a:3b:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0d0437cdf7cba9f3967eb328a08686d06e47d56
Validity
Not Before: Jan 31 14:00:37 2025 GMT
Not After : Feb 1 14:00:37 2025 GMT
Subject: CN=8bd8c4c058203f9f514918ee5dd12715e5d8eb0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:33:9a:88:68:e6:a0:63:7e:b3:97:72:3a:48:
be:c9:69:75:11:00:7d:cd:4a:28:68:26:32:a1:2d:
c2:1d:ce:b9:19:24:98:0f:16:cc:99:51:42:36:55:
36:e9:a7:0a:53:4c:99:a5:ff:ba:0d:6b:2b:3d:ce:
fd:5e:46:f5:65:71:dd:b8:be:ca:4d:c7:ba:6a:58:
81:91:c8:4f:fa:62:c6:d0:ca:57:0f:96:0c:52:bd:
b7:f5:dc:5c:08:11:36:51:26:e2:8f:01:71:06:f1:
32:2d:76:1a:b6:97:b6:47:c3:93:13:75:fe:5d:2c:
2d:6d:6b:74:1e:c6:55:b3:01:7b:b0:a3:b5:3d:fa:
93:73:f0:07:d2:48:68:a1:e7:09:14:d4:90:54:76:
02:b7:dd:3c:78:77:e8:3e:44:31:f7:39:1c:2d:b1:
02:85:68:01:70:e3:83:2e:c3:11:78:3f:41:29:36:
26:14:b8:ed:e6:2e:e0:39:89:ce:2c:a1:46:a2:8f:
7c:0f:a8:da:a2:61:e7:34:52:29:69:ce:dd:44:f2:
02:1b:be:81:f4:84:6e:31:a7:35:23:2e:e8:52:aa:
9b:b1:76:92:97:b0:6e:4b:26:02:e7:db:24:36:69:
2e:bf:97:ad:37:ed:38:ef:dc:22:ac:84:4f:e8:ab:
26:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:D8:C4:C0:58:20:3F:9F:51:49:18:EE:5D:D1:27:15:E5:D8:EB:0A
X509v3 Authority Key Identifier:
keyid:C0:D0:43:7C:DF:7C:BA:9F:39:67:EB:32:8A:08:68:6D:06:E4:7D:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wNBDfN98up85Z-syighobQbkfVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/e46168-9818-4b51-94ad-c618dec07462/1/wNBDfN98up85Z-syighobQbkfVY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/e46168-9818-4b51-94ad-c618dec07462/1/wNBDfN98up85Z-syighobQbkfVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:df:b1:80:83:62:8c:81:a2:73:7b:14:f6:22:5b:6e:da:06:
2d:c7:9a:14:29:38:de:b5:d1:18:5f:0e:6a:99:12:5a:28:22:
b7:d8:6c:3c:0c:f2:10:3f:a5:a1:22:d0:b3:8a:63:1e:9d:b5:
6b:b2:8e:af:3a:d3:27:9a:d3:4b:15:73:97:1e:4b:66:82:96:
9a:00:58:85:91:e1:df:42:83:7d:ac:b7:97:83:08:a0:a7:3b:
c3:dd:71:ba:ee:3e:f7:7b:ea:d9:ce:71:0e:26:4f:7a:33:fe:
42:a0:52:8d:bf:9f:6f:ab:57:04:15:2e:ee:58:ad:46:4c:de:
b0:f3:eb:6a:ed:31:de:a4:2a:dc:98:39:ed:20:f0:81:9e:5d:
52:b6:e1:64:5c:0f:8d:bf:36:74:14:96:b5:25:c6:1c:96:a3:
f3:e9:d3:96:c3:bb:a4:42:58:5a:22:e1:9d:ae:73:15:4b:1e:
07:da:73:d0:99:8d:ff:0c:fe:5c:b5:d6:87:fb:eb:33:c6:a9:
8f:18:9e:c5:7d:ac:2a:2b:52:f4:82:31:f6:e3:5b:d3:24:ce:
a1:c5:2e:30:0a:b8:92:9a:9b:08:0d:af:81:b3:91:6b:d7:b5:
3a:92:fd:42:e5:ea:4c:8e:32:30:7f:0f:41:71:84:a4:b2:40:
c7:e4:43:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:07:05 2025 by rpki-client