Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/1de213-f352-43a4-b88b-53eacd8963a1/1/wLjiV5ep3EPC5GOUsMixsQirQ7k.mft
File: wLjiV5ep3EPC5GOUsMixsQirQ7k.mft (raw, json)
Hash identifier: nUrtqqJNTNScWCfRVpFm51KN24x0A8qTCfile+yRd1U=
Subject key identifier: 25:FD:81:47:FF:B2:C6:FF:6F:F1:F4:AC:2D:FB:3A:0A:AA:D0:1B:CD
Authority key identifier: C0:B8:E2:57:97:A9:DC:43:C2:E4:63:94:B0:C8:B1:B1:08:AB:43:B9
Certificate issuer: /CN=c0b8e25797a9dc43c2e46394b0c8b1b108ab43b9
Certificate serial: 0194BC052B486A64AC5B3906A44BBA8D4AAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wLjiV5ep3EPC5GOUsMixsQirQ7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/1de213-f352-43a4-b88b-53eacd8963a1/1/wLjiV5ep3EPC5GOUsMixsQirQ7k.mft
Manifest number: 02BA
Signing time: Fri 31 Jan 2025 11:00:42 +0000
Manifest this update: Fri 31 Jan 2025 11:00:42 +0000
Manifest next update: Sat 01 Feb 2025 11:00:42 +0000
Files and hashes: 1: 3oLf6nYLu-Xr7qpLQICeS2w7Tus.roa (hash: XtsupCW4EVcqvMqJHKb5yPLyEGcRcTQPpgXjTIHJ3Z4=)
2: wLjiV5ep3EPC5GOUsMixsQirQ7k.crl (hash: vCtR4Zq2yIpGALNjpKDe4ks0RM4vW6aarilW0MX4Tag=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:2b:48:6a:64:ac:5b:39:06:a4:4b:ba:8d:4a:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0b8e25797a9dc43c2e46394b0c8b1b108ab43b9
Validity
Not Before: Jan 31 11:00:42 2025 GMT
Not After : Feb 1 11:00:42 2025 GMT
Subject: CN=25fd8147ffb2c6ff6ff1f4ac2dfb3a0aaad01bcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:6a:e6:b0:d4:6b:69:d6:ea:52:f9:cd:af:5b:
2d:62:b2:27:f0:66:d3:cb:6e:34:0d:b4:37:a2:79:
e9:43:28:6b:23:ca:be:2c:36:bd:67:52:ff:04:47:
f9:4f:1e:67:e6:2c:3e:c7:9d:a7:9a:71:1d:f7:98:
cb:0e:ba:8d:d6:4b:35:c0:b2:4d:e5:ec:be:36:77:
ca:d0:ef:26:0e:0a:f9:32:d3:f6:19:8d:1a:10:ea:
0c:dc:94:dc:97:7e:69:8a:d5:1f:c3:2a:32:31:f7:
09:c6:fa:54:ff:c6:8e:85:ec:f5:bc:ff:43:c5:b5:
db:92:cc:26:c5:e4:95:60:84:75:36:b5:0b:3b:d4:
31:8e:c4:d4:d8:74:00:15:b6:94:67:05:68:da:90:
f3:8c:f5:00:c7:7c:9c:8d:ef:d1:85:a5:d7:14:d7:
22:c8:c9:fa:02:54:38:27:9b:d2:e5:b4:cb:f5:33:
dc:cc:0d:eb:32:7d:5e:10:ba:ed:2f:e4:af:a0:6f:
56:24:55:29:1f:82:32:24:a5:b6:d5:82:69:2e:26:
b0:02:f0:80:74:c4:e8:cd:70:89:46:8c:b1:39:1e:
e9:55:20:ca:44:07:d1:78:90:c8:bc:99:33:64:2f:
c3:43:e1:de:f7:74:41:93:c8:3e:22:e8:ef:44:81:
84:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:FD:81:47:FF:B2:C6:FF:6F:F1:F4:AC:2D:FB:3A:0A:AA:D0:1B:CD
X509v3 Authority Key Identifier:
keyid:C0:B8:E2:57:97:A9:DC:43:C2:E4:63:94:B0:C8:B1:B1:08:AB:43:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wLjiV5ep3EPC5GOUsMixsQirQ7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/1de213-f352-43a4-b88b-53eacd8963a1/1/wLjiV5ep3EPC5GOUsMixsQirQ7k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/1de213-f352-43a4-b88b-53eacd8963a1/1/wLjiV5ep3EPC5GOUsMixsQirQ7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:1e:6b:71:f6:3f:ad:ac:74:a7:ca:57:ad:41:06:f6:13:04:
6b:af:0c:df:9d:21:ce:7f:21:30:fa:2f:55:dc:f5:99:f5:00:
ef:9c:b4:86:1b:1e:79:80:a2:fe:04:fc:72:eb:ff:e3:94:2b:
73:4c:a7:5f:7d:d1:3b:e8:1d:f8:70:e5:e4:39:0a:be:94:85:
5a:9e:3b:ae:bd:d2:6e:c7:05:93:a3:cb:17:9a:83:aa:66:cb:
28:6f:a0:ea:1c:34:d9:7a:30:58:55:d8:be:c0:40:26:54:4f:
a8:d6:b9:a2:40:91:bf:b7:d2:39:76:cd:e5:af:69:0f:e9:7a:
ac:77:98:22:fc:2f:12:7f:24:c2:8a:20:ae:a8:03:dd:38:85:
9e:2c:a7:ee:55:fd:9e:76:b7:24:63:4d:b9:a8:30:11:88:fe:
78:6b:7f:38:18:67:2d:1c:07:70:25:01:4a:8a:0c:a0:29:ab:
d8:9c:1d:e1:38:6a:d1:71:ea:5f:27:4e:33:53:cc:15:74:c4:
2b:03:73:52:0d:e5:29:45:4a:33:76:fe:aa:4b:d2:1f:9c:fe:
46:d4:41:9f:de:31:47:24:49:55:4b:6d:fc:17:23:d0:52:4e:
c2:2b:dc:de:fd:a4:09:ae:91:24:39:ea:d0:c1:d0:7e:33:9c:
60:a9:83:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:04:55 2025 by rpki-client