Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/be9311-66d8-4c19-8267-3c529bf62e54/1/wHdQuDER1Bcbv1XKAjIsGg3ArDI.mft
File: wHdQuDER1Bcbv1XKAjIsGg3ArDI.mft (raw, json)
Hash identifier: D9kNvkFdR8wQLRvInmJqmVpmnZlbX8C7Hc/OEja8y/k=
Subject key identifier: FB:69:B8:67:66:E4:C1:22:7B:36:56:60:83:1C:11:E7:1F:B6:46:C4
Authority key identifier: C0:77:50:B8:31:11:D4:17:1B:BF:55:CA:02:32:2C:1A:0D:C0:AC:32
Certificate issuer: /CN=c07750b83111d4171bbf55ca02322c1a0dc0ac32
Certificate serial: 0194BCA97854BC61D3F7F780CED0C31AD42D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wHdQuDER1Bcbv1XKAjIsGg3ArDI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/be9311-66d8-4c19-8267-3c529bf62e54/1/wHdQuDER1Bcbv1XKAjIsGg3ArDI.mft
Manifest number: 0CFE
Signing time: Fri 31 Jan 2025 14:00:10 +0000
Manifest this update: Fri 31 Jan 2025 14:00:10 +0000
Manifest next update: Sat 01 Feb 2025 14:00:10 +0000
Files and hashes: 1: T_9TOa_stF5E9eIWRjxCGlAnn6k.roa (hash: 4V/y6Lec10YacV5wmtQBGvh+cufcrshrFw6PyKn/laI=)
2: wHdQuDER1Bcbv1XKAjIsGg3ArDI.crl (hash: C3ia+AVS9cgcpjcGdysdQl8V9j/iCXBuTITcQtiWG0o=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:78:54:bc:61:d3:f7:f7:80:ce:d0:c3:1a:d4:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c07750b83111d4171bbf55ca02322c1a0dc0ac32
Validity
Not Before: Jan 31 14:00:10 2025 GMT
Not After : Feb 1 14:00:10 2025 GMT
Subject: CN=fb69b86766e4c1227b365660831c11e71fb646c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:fb:e3:26:f0:99:9b:2c:52:b8:67:7d:22:11:
8c:5a:50:42:ca:cd:79:00:eb:fe:85:20:ad:be:62:
22:4a:91:cc:40:9b:23:ad:a8:c3:29:66:51:fb:8d:
f0:b0:3c:d7:b7:ff:8b:c5:7b:f5:4f:77:83:ed:5e:
2f:9b:97:a1:58:00:66:7a:ee:f9:88:1f:18:9c:d3:
61:e2:0b:1a:16:8f:c6:1b:9e:da:42:36:e3:7a:f0:
00:dd:a6:1a:16:15:2b:15:ef:71:3c:d5:f9:d7:ea:
f2:b5:06:57:85:b7:76:6e:8e:69:05:e3:48:7e:b3:
0d:23:34:ca:30:5f:d9:c9:ff:21:21:32:39:d2:29:
e1:1e:ed:50:a7:60:2e:0e:3b:b9:ad:51:00:7e:3a:
ec:44:53:44:c1:90:38:a2:2d:33:6d:c0:c5:f3:d3:
b4:cb:3c:39:de:bc:76:9f:59:d6:d8:fe:c1:9b:48:
20:e3:69:3f:7e:53:c7:e0:e9:f0:a7:e1:b4:5c:c6:
82:5f:62:68:b1:af:83:86:79:61:63:d7:72:a8:8a:
98:34:9d:98:50:5a:16:5a:14:70:46:0b:02:b0:fb:
91:64:65:d9:62:da:4d:1a:30:09:18:d5:79:b0:89:
48:1b:82:e7:67:ac:28:e6:38:79:1f:50:1e:4d:e5:
cb:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:69:B8:67:66:E4:C1:22:7B:36:56:60:83:1C:11:E7:1F:B6:46:C4
X509v3 Authority Key Identifier:
keyid:C0:77:50:B8:31:11:D4:17:1B:BF:55:CA:02:32:2C:1A:0D:C0:AC:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wHdQuDER1Bcbv1XKAjIsGg3ArDI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/be9311-66d8-4c19-8267-3c529bf62e54/1/wHdQuDER1Bcbv1XKAjIsGg3ArDI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/be9311-66d8-4c19-8267-3c529bf62e54/1/wHdQuDER1Bcbv1XKAjIsGg3ArDI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:3c:96:b3:f8:2f:26:ce:2c:4e:f1:91:9f:bd:c8:3c:b7:e5:
97:88:11:0e:24:8c:cc:36:28:66:6e:3e:68:ce:b3:23:99:09:
18:bc:eb:fb:08:a1:00:37:58:97:8d:49:0c:a3:d8:0c:a2:19:
a7:6e:04:ef:c1:b3:03:53:d6:a5:41:0e:96:f3:9c:f3:02:d7:
99:56:82:07:6e:42:66:72:f7:99:37:49:16:3b:4a:07:03:0b:
a7:57:71:7b:67:46:aa:9c:0f:60:6f:d5:a9:59:36:39:34:69:
6a:40:e2:61:f2:de:80:84:3a:a1:de:0c:5d:a6:6c:6b:eb:b3:
3b:dd:37:2b:e8:57:e4:c4:53:3a:cd:fb:9f:6c:51:b2:29:73:
44:f1:50:60:3a:07:06:36:60:6b:30:b0:bc:f1:4a:1f:0f:89:
03:be:34:45:74:92:15:6d:ce:4b:57:f7:98:f2:cd:51:0f:93:
09:e7:26:87:07:e8:f1:a3:6f:08:b2:77:77:f1:08:53:bc:12:
d8:89:38:55:90:7f:6c:d2:f1:3e:47:e4:ee:db:b3:a6:1f:62:
f3:d8:59:03:47:75:7d:af:29:a5:18:2d:f4:32:e6:84:33:0d:
86:a3:7c:31:d9:8a:26:6b:64:e1:46:bc:e8:0d:76:8d:ce:c6:
cd:02:ef:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:37:31 2025 by rpki-client