Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/dbc0e6-2555-4bf3-9ab1-9915990bcb59/1/r00WwzVAe_DQpRzvm5wcUxAoD0g.mft
File: r00WwzVAe_DQpRzvm5wcUxAoD0g.mft (raw, json)
Hash identifier: Ab5X6pEfMHV4Q0DEj0H4pDhLDcDKK7RIfXmVke9t/0k=
Subject key identifier: 95:90:C2:D1:83:B2:F7:AA:CF:ED:93:97:DF:D7:69:35:EC:1D:78:2C
Authority key identifier: AF:4D:16:C3:35:40:7B:F0:D0:A5:1C:EF:9B:9C:1C:53:10:28:0F:48
Certificate issuer: /CN=af4d16c335407bf0d0a51cef9b9c1c5310280f48
Certificate serial: 0194BD17DE7BAA4266C526651926EE22507E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r00WwzVAe_DQpRzvm5wcUxAoD0g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/dbc0e6-2555-4bf3-9ab1-9915990bcb59/1/r00WwzVAe_DQpRzvm5wcUxAoD0g.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 16:00:45 +0000
Manifest this update: Fri 31 Jan 2025 16:00:45 +0000
Manifest next update: Sat 01 Feb 2025 16:00:45 +0000
Files and hashes: 1: VI7MbqfUntVnN_kMd5I5Qw5bl-4.roa (hash: yObUZYg1Kq2iUCPpFKIeS8ZVs5ZMohWqBvzb45a6JFM=)
2: r00WwzVAe_DQpRzvm5wcUxAoD0g.crl (hash: 2nXvCJtfPRXEbmSWZ8K94vE6ooyl+EtvkIFLDCTlQeQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:de:7b:aa:42:66:c5:26:65:19:26:ee:22:50:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af4d16c335407bf0d0a51cef9b9c1c5310280f48
Validity
Not Before: Jan 31 16:00:45 2025 GMT
Not After : Feb 1 16:00:45 2025 GMT
Subject: CN=9590c2d183b2f7aacfed9397dfd76935ec1d782c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ea:35:df:fa:0a:0a:8b:0b:74:9e:78:2e:7a:
8f:c3:c4:aa:7c:a4:96:f6:b3:1b:3a:cb:b2:86:c5:
85:3f:a9:b6:18:29:73:84:4d:61:93:41:76:fa:96:
eb:02:ef:e7:91:a7:81:73:0f:9f:13:ec:42:24:0c:
99:3f:37:67:e9:23:1b:24:c3:88:8a:80:59:a6:07:
63:8a:cf:30:c3:46:da:4f:1b:39:69:52:32:44:2c:
2f:c1:69:0c:ed:f7:f7:3b:4d:7a:44:24:8c:57:af:
80:5a:9e:fd:94:53:ee:0b:d0:f6:08:c8:f0:c5:d8:
d9:4b:98:fe:f7:0f:13:bf:db:35:2d:21:00:cc:f5:
f6:ef:b3:3e:42:25:8d:d7:d2:30:a8:88:6a:87:ca:
02:00:f9:82:13:91:bf:fe:ac:2b:19:db:fa:6b:73:
8a:9a:6a:3d:8b:8f:f6:f1:e2:8a:97:19:a9:8b:f1:
56:c8:a8:68:03:a5:8b:ef:7a:cb:da:25:47:d1:de:
70:1b:7d:37:3e:9d:ca:8e:42:db:36:ee:68:3b:53:
99:0c:c4:e5:52:fa:14:61:ad:3f:88:fd:4d:6f:c9:
fa:a4:30:04:a0:91:dd:ff:c0:86:0f:db:78:14:7a:
08:01:b5:e6:5f:64:83:e8:c3:7d:4f:70:4f:21:f8:
1a:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:90:C2:D1:83:B2:F7:AA:CF:ED:93:97:DF:D7:69:35:EC:1D:78:2C
X509v3 Authority Key Identifier:
keyid:AF:4D:16:C3:35:40:7B:F0:D0:A5:1C:EF:9B:9C:1C:53:10:28:0F:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r00WwzVAe_DQpRzvm5wcUxAoD0g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/dbc0e6-2555-4bf3-9ab1-9915990bcb59/1/r00WwzVAe_DQpRzvm5wcUxAoD0g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/dbc0e6-2555-4bf3-9ab1-9915990bcb59/1/r00WwzVAe_DQpRzvm5wcUxAoD0g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:b1:d9:55:1b:7d:46:38:ac:8e:66:82:fc:7e:af:90:13:97:
fd:ab:e8:fd:bb:7d:eb:35:b6:7c:e7:e1:5d:f9:b1:71:cd:d3:
fb:d2:ba:be:c4:25:3d:d7:b7:f0:41:c7:ae:b9:ef:c1:97:71:
55:a1:4c:4c:44:3f:64:c7:ab:b6:12:34:69:d8:d7:27:1b:ca:
91:06:15:90:df:c9:47:ad:be:20:b9:ea:a0:af:bd:43:61:9a:
23:aa:52:04:3d:04:f5:a1:47:56:ba:f4:fe:70:72:2b:ed:c6:
57:44:d5:30:5d:6c:e8:d5:fe:df:50:c1:96:aa:45:25:e7:d0:
ce:fa:e2:27:4d:7d:70:f9:b9:2f:76:e9:40:c2:9a:f9:b2:c2:
32:2c:cc:ad:e3:fd:46:96:18:4a:81:1d:ff:8a:28:db:12:92:
01:7e:d3:d9:13:1f:f2:0f:a1:63:57:f5:9d:e0:69:77:7d:75:
66:4c:be:ff:e7:3f:8a:91:f9:97:ad:38:5c:2c:e7:28:55:a8:
5a:6f:12:81:2e:07:2d:ef:5c:41:3c:ac:82:bd:f0:c3:d2:ad:
f2:19:bc:b4:02:5e:ae:33:73:43:e6:0b:bf:f9:83:56:bd:fe:
c6:16:ac:13:d9:3b:c1:d3:f4:da:1a:4b:48:ce:4e:19:9e:99:
d5:71:13:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:46:39 2025 by rpki-client