Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/7a0b3f-8942-4d47-86dc-7c2d409ac89a/1/wAVeMuzXcq4oA6TDVtd2h4fnLiA.mft
File: wAVeMuzXcq4oA6TDVtd2h4fnLiA.mft (raw, json)
Hash identifier: nNji2HgMfM51Ixv2DxGOv/07bxKidhzVq4vUhRgyAh4=
Subject key identifier: DD:9C:16:15:59:CC:DF:60:48:A2:34:33:E7:3A:FE:B1:29:E6:59:BB
Authority key identifier: C0:05:5E:32:EC:D7:72:AE:28:03:A4:C3:56:D7:76:87:87:E7:2E:20
Certificate issuer: /CN=c0055e32ecd772ae2803a4c356d7768787e72e20
Certificate serial: 0194BBCE1800E3F31F688553E540B3A3DC1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wAVeMuzXcq4oA6TDVtd2h4fnLiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/7a0b3f-8942-4d47-86dc-7c2d409ac89a/1/wAVeMuzXcq4oA6TDVtd2h4fnLiA.mft
Manifest number: 0ED3
Signing time: Fri 31 Jan 2025 10:00:33 +0000
Manifest this update: Fri 31 Jan 2025 10:00:33 +0000
Manifest next update: Sat 01 Feb 2025 10:00:33 +0000
Files and hashes: 1: wAVeMuzXcq4oA6TDVtd2h4fnLiA.crl (hash: s/MaDL5qV0CtZpBo2ORd0W4WOkkr2o3HI/o0dZwXasc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:18:00:e3:f3:1f:68:85:53:e5:40:b3:a3:dc:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0055e32ecd772ae2803a4c356d7768787e72e20
Validity
Not Before: Jan 31 10:00:33 2025 GMT
Not After : Feb 1 10:00:33 2025 GMT
Subject: CN=dd9c161559ccdf6048a23433e73afeb129e659bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:86:98:56:3e:06:cc:ec:f0:bf:c9:2b:7d:71:
13:a0:30:d1:2e:8d:d9:42:9d:ea:03:f0:54:4d:7d:
4d:56:a5:af:72:a9:32:f4:ff:cb:c7:64:4f:f2:23:
65:04:66:4a:78:03:1c:0a:d1:c3:0f:2d:16:20:37:
fd:3e:9a:bb:3d:96:f2:8c:6c:69:d3:81:b7:14:a2:
f6:be:4c:7a:a2:4e:1c:d1:d8:59:f9:bd:56:82:55:
14:00:65:42:3f:7e:0a:c0:00:7d:d8:f5:09:f6:03:
71:bc:54:4c:c4:fd:66:0f:a2:2e:b5:f1:04:20:36:
1a:fc:17:29:ad:db:78:d3:d5:24:88:d4:bd:61:d3:
d9:2a:bf:80:1a:e7:77:48:52:be:91:9a:b4:18:04:
6d:bb:c5:4c:5e:fb:52:df:de:3d:77:ec:e0:bc:e0:
2e:24:f2:89:24:1b:39:54:8b:9c:ca:98:b2:6b:9a:
00:4a:2e:4f:0e:6a:ef:d6:1d:0a:72:6b:86:e8:f4:
8f:6a:a9:00:bc:5b:81:6e:10:a7:e3:c0:bd:47:14:
a8:5a:ee:5a:c5:d6:c6:a6:c4:41:8b:a3:18:7b:b4:
08:f8:22:3b:fe:22:87:55:12:41:63:74:c2:2a:04:
a4:ec:42:38:1c:4c:d4:21:9b:9d:2a:5b:df:be:89:
b9:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:9C:16:15:59:CC:DF:60:48:A2:34:33:E7:3A:FE:B1:29:E6:59:BB
X509v3 Authority Key Identifier:
keyid:C0:05:5E:32:EC:D7:72:AE:28:03:A4:C3:56:D7:76:87:87:E7:2E:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wAVeMuzXcq4oA6TDVtd2h4fnLiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/7a0b3f-8942-4d47-86dc-7c2d409ac89a/1/wAVeMuzXcq4oA6TDVtd2h4fnLiA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/7a0b3f-8942-4d47-86dc-7c2d409ac89a/1/wAVeMuzXcq4oA6TDVtd2h4fnLiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:37:dc:14:72:d8:06:8f:65:73:00:da:31:a1:50:e6:a9:a8:
86:bd:6c:1a:2b:75:e2:d9:68:fc:13:db:de:c1:89:b8:47:a6:
3b:cb:a5:06:72:e5:91:41:24:11:44:e9:86:cf:d8:84:fe:aa:
66:70:e6:9e:b3:6f:82:25:ad:7a:7e:48:ba:15:f1:7c:43:df:
83:f3:3a:a8:4a:29:46:ec:72:c3:34:23:52:24:63:03:fe:86:
41:0e:c8:81:9f:a0:4f:f8:fd:6f:dc:10:0e:c3:3a:17:71:0b:
09:69:6c:9b:00:e4:ae:7d:97:dd:48:c8:c0:5a:ef:7d:84:de:
37:c5:0a:ee:e9:8a:a6:d1:6b:14:50:f0:62:03:4c:ab:0b:d0:
ec:6e:95:44:14:6d:b4:17:ac:b1:5e:71:cb:9c:78:03:35:22:
0d:25:4c:15:68:c1:9b:5f:83:bc:20:97:1a:21:64:1f:32:96:
38:53:35:87:7f:72:c4:ef:8f:3e:c2:21:a9:35:34:df:44:d6:
32:87:0d:9a:ac:0b:53:36:d8:a9:ca:fb:31:61:0c:39:55:75:
46:08:9e:bd:0d:48:21:7d:59:9e:a8:57:05:31:a7:c8:f8:63:
20:8e:04:2b:8f:e0:d8:6f:db:aa:f9:ac:30:d1:af:8e:4d:05:
03:e2:56:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:21:52 2025 by rpki-client