Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/0bdca3-283a-4942-8592-c394541f770e/1/wRxYM3zU10zZIZ2HeN7lsp8IpGE.mft
File: wRxYM3zU10zZIZ2HeN7lsp8IpGE.mft (raw, json)
Hash identifier: SMnlSm00OgBguqvzfFBe2cnngdDfb/xRHn383D/KiFQ=
Subject key identifier: 90:0F:F9:85:45:EF:B0:01:AB:79:E1:57:D8:BB:C5:72:83:16:8A:80
Authority key identifier: C1:1C:58:33:7C:D4:D7:4C:D9:21:9D:87:78:DE:E5:B2:9F:08:A4:61
Certificate issuer: /CN=c11c58337cd4d74cd9219d8778dee5b29f08a461
Certificate serial: 0194BCAA15D0D5E996D8A0C4C077680133BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wRxYM3zU10zZIZ2HeN7lsp8IpGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/0bdca3-283a-4942-8592-c394541f770e/1/wRxYM3zU10zZIZ2HeN7lsp8IpGE.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 14:00:50 +0000
Manifest this update: Fri 31 Jan 2025 14:00:50 +0000
Manifest next update: Sat 01 Feb 2025 14:00:50 +0000
Files and hashes: 1: E0oPYTANwX4SVfmo4G4Bb_Ffflc.roa (hash: POCopGH4Sf5gshG/ai7EpgPCh9X9MivwqlQ7wpM8V2Q=)
2: wRxYM3zU10zZIZ2HeN7lsp8IpGE.crl (hash: BkqZ6TzOSAdH8mtMi4FWF0oiI0vC6XuKYaFr19eIfn0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:15:d0:d5:e9:96:d8:a0:c4:c0:77:68:01:33:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c11c58337cd4d74cd9219d8778dee5b29f08a461
Validity
Not Before: Jan 31 14:00:50 2025 GMT
Not After : Feb 1 14:00:50 2025 GMT
Subject: CN=900ff98545efb001ab79e157d8bbc57283168a80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:0d:31:b9:9f:cb:d7:17:20:f3:a4:d4:1e:e5:
2e:c5:5e:30:58:05:93:fe:80:f5:49:fe:ff:75:39:
5a:31:6a:40:1a:c5:23:5b:33:5e:08:89:0a:ac:7f:
a7:80:d1:26:62:bd:14:04:25:53:45:39:c8:eb:42:
15:63:99:04:58:37:0c:d0:f5:84:2d:06:97:16:a6:
2e:ed:30:ab:12:44:c1:ec:8b:8a:b8:0d:ae:ad:d5:
80:15:bd:8d:e3:5e:bc:cd:28:12:7b:29:e6:ff:45:
6f:6f:ec:93:70:bc:04:02:80:b8:0b:f3:b4:9a:a2:
e9:df:ea:ab:e2:74:dd:c0:e0:63:4f:47:0f:35:e1:
0c:bc:69:0a:da:ba:46:93:90:29:0d:6e:23:e3:c1:
92:fd:0d:a4:56:09:b4:ae:3f:7a:39:85:99:b3:a4:
e3:3b:98:9b:62:43:3a:a4:d9:03:b1:df:17:07:4e:
b5:ae:c8:23:6d:91:c7:3d:7f:85:0f:5a:d8:d3:5f:
be:a4:91:7b:9e:ae:d0:7a:68:11:cf:02:dd:0f:42:
64:86:38:a5:d9:0d:de:84:6f:97:1b:30:10:0e:80:
fd:a6:30:4b:80:bd:60:21:e0:0c:91:58:34:2a:82:
22:54:8d:3f:70:c1:16:12:16:18:03:15:43:35:a3:
93:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:0F:F9:85:45:EF:B0:01:AB:79:E1:57:D8:BB:C5:72:83:16:8A:80
X509v3 Authority Key Identifier:
keyid:C1:1C:58:33:7C:D4:D7:4C:D9:21:9D:87:78:DE:E5:B2:9F:08:A4:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wRxYM3zU10zZIZ2HeN7lsp8IpGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/0bdca3-283a-4942-8592-c394541f770e/1/wRxYM3zU10zZIZ2HeN7lsp8IpGE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/0bdca3-283a-4942-8592-c394541f770e/1/wRxYM3zU10zZIZ2HeN7lsp8IpGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:0c:0b:b8:6b:81:cb:f2:f5:4a:22:4c:69:11:20:f9:f9:41:
ff:15:b6:35:ea:40:5c:1c:47:d5:87:d2:52:2a:57:96:cb:58:
70:49:5d:f7:df:52:fc:cd:f3:16:a5:d2:0d:c4:e4:c1:b5:c0:
e4:90:43:a7:10:ad:05:3d:16:7f:2d:71:07:35:f7:1a:b5:94:
34:4b:7f:9d:6f:0b:ee:23:e7:68:89:b6:1e:9f:c3:89:3b:f7:
4f:1e:eb:99:77:98:4e:03:51:38:e0:de:15:36:7e:df:31:dd:
48:ce:19:e9:d3:25:f4:f8:df:37:17:07:2a:ed:39:76:5e:58:
64:0f:29:0f:54:a7:55:f9:38:36:1b:e7:32:db:95:f3:0f:1c:
5a:47:1e:13:5a:61:8d:c5:f5:70:01:0c:1b:2d:75:a2:0b:7c:
b2:c5:0c:9a:0f:95:5c:48:3d:62:45:ca:99:50:6a:e0:e9:fe:
a2:e5:1d:d4:2f:56:83:21:89:48:85:44:36:e9:60:f2:cf:cb:
bb:b0:5d:bc:b6:26:27:1f:67:d8:a1:4b:41:c6:c8:42:16:66:
e4:11:bd:62:13:72:2d:68:bd:52:23:9f:fb:e2:87:ae:dc:2e:
5b:81:2a:14:d9:e4:59:ff:5a:f2:75:38:ba:6a:c7:c3:11:f3:
e6:af:30:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:37:28 2025 by rpki-client