Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/f8b1bb-c747-4158-8792-8641415ebc82/1/wPCr5oh1RRC8lsfxsVlJJGn9pqc.mft
File: wPCr5oh1RRC8lsfxsVlJJGn9pqc.mft (raw, json)
Hash identifier: f0c4VaWB3QPuWYrdTvWPv6jriUsZGGbKoF5mO57GIlM=
Subject key identifier: B2:C5:B2:51:1E:6E:47:11:1E:12:24:E0:C4:2A:D3:A5:CC:94:C4:1E
Authority key identifier: C0:F0:AB:E6:88:75:45:10:BC:96:C7:F1:B1:59:49:24:69:FD:A6:A7
Certificate issuer: /CN=c0f0abe688754510bc96c7f1b159492469fda6a7
Certificate serial: 0194BD4EB2B2FD70D259339DCE3820513775
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wPCr5oh1RRC8lsfxsVlJJGn9pqc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/f8b1bb-c747-4158-8792-8641415ebc82/1/wPCr5oh1RRC8lsfxsVlJJGn9pqc.mft
Manifest number: 03A0
Signing time: Fri 31 Jan 2025 17:00:38 +0000
Manifest this update: Fri 31 Jan 2025 17:00:38 +0000
Manifest next update: Sat 01 Feb 2025 17:00:38 +0000
Files and hashes: 1: MNSRA94GnwCWIcU0ZUPSgfJJzYA.roa (hash: vFvm6d7yLwrA+IkFyq24dAxJUZKY/00AaFr5EwDXEoE=)
2: wPCr5oh1RRC8lsfxsVlJJGn9pqc.crl (hash: kQUQ+xL0f3W0TjsiBGgFQI/q+G5PBHTfncAjUIbcrak=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:b2:b2:fd:70:d2:59:33:9d:ce:38:20:51:37:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0f0abe688754510bc96c7f1b159492469fda6a7
Validity
Not Before: Jan 31 17:00:38 2025 GMT
Not After : Feb 1 17:00:38 2025 GMT
Subject: CN=b2c5b2511e6e47111e1224e0c42ad3a5cc94c41e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:5a:d4:93:6e:07:38:cb:1b:1f:65:05:92:9a:
91:f5:7b:7a:fd:59:f8:bb:f2:3d:fd:5b:d3:22:ca:
36:ee:a5:56:6c:3e:84:58:b9:d7:1b:c7:65:67:63:
08:d0:7f:b5:15:6a:c6:58:1f:1f:55:30:4c:6a:51:
89:55:d6:97:5d:31:19:8c:8d:c6:a6:ae:69:a1:f5:
db:72:a4:ff:f0:12:fb:20:d1:12:98:0b:87:61:69:
53:98:95:a9:b5:ef:71:59:91:35:c0:78:84:b0:2e:
11:be:0c:3f:e2:f2:e1:94:63:35:86:97:e1:8c:0b:
dd:75:32:d7:67:e3:63:bb:e8:a9:f0:dc:d8:9e:7f:
2e:68:4a:6d:95:27:48:3d:24:44:bf:29:36:76:ca:
77:65:55:6c:b1:c2:e4:ae:b1:5c:5f:93:33:68:ae:
80:fa:ec:92:1e:a9:56:30:cf:27:a3:8a:bd:b3:44:
bb:73:2d:26:fa:6d:7a:5b:5e:c5:93:c6:2d:7e:37:
f1:9c:75:91:42:13:10:3e:f4:bc:04:a8:50:e2:da:
2a:d8:87:7f:4a:01:57:ed:f8:73:bd:0b:81:64:ef:
1c:1e:7b:d5:e9:5e:5c:c8:61:c3:57:09:31:a6:34:
a1:59:07:6a:33:ac:0a:d2:32:87:57:3e:e1:09:31:
a6:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:C5:B2:51:1E:6E:47:11:1E:12:24:E0:C4:2A:D3:A5:CC:94:C4:1E
X509v3 Authority Key Identifier:
keyid:C0:F0:AB:E6:88:75:45:10:BC:96:C7:F1:B1:59:49:24:69:FD:A6:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wPCr5oh1RRC8lsfxsVlJJGn9pqc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f8b1bb-c747-4158-8792-8641415ebc82/1/wPCr5oh1RRC8lsfxsVlJJGn9pqc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f8b1bb-c747-4158-8792-8641415ebc82/1/wPCr5oh1RRC8lsfxsVlJJGn9pqc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:d2:fe:3f:f2:10:9a:62:31:58:7c:bc:2c:f5:1b:06:46:05:
89:94:7d:c3:02:e1:3e:64:8f:5c:70:52:c7:42:9f:da:ef:20:
17:98:de:30:12:0c:8c:05:34:e8:03:ca:4e:25:a2:c9:54:28:
57:40:9f:89:e5:4b:f7:4d:3a:fc:0a:d1:39:43:9d:5e:2f:c8:
c1:73:b8:38:86:87:1c:fa:c9:4d:d4:7c:a6:dc:15:70:30:a7:
89:43:0d:12:e0:e5:d6:c0:20:22:c0:b1:24:4c:f5:d3:81:0c:
57:61:9b:cf:26:e0:bd:32:b1:bf:76:97:cf:8f:94:66:49:64:
91:78:b2:36:1e:d0:3b:48:1d:0c:b6:85:80:ab:3f:4c:b6:4c:
1f:29:f4:1f:8c:07:8e:b8:88:63:9c:e5:4e:5d:07:16:3e:c0:
23:8f:31:35:83:00:3e:e4:1f:99:f7:1f:36:17:9f:f7:0f:a3:
76:6a:ad:16:76:7a:63:d5:aa:1c:43:9c:70:5a:11:a2:b6:79:
c7:7d:5d:a5:ad:b1:a3:b5:4d:5f:ff:76:35:e8:97:4b:29:32:
48:62:c7:f3:9e:5d:49:c5:6f:ce:2d:4f:36:98:41:fc:d3:46:
1a:f7:d0:44:fe:29:22:62:7e:50:0e:56:f3:f1:69:d6:c4:31:
6c:36:73:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:41:37 2025 by rpki-client