Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/00314c-9660-4558-908b-399c10b3aac5/1/wADaNsWELOEw_QaJEuv8DGnnZgY.mft
File: wADaNsWELOEw_QaJEuv8DGnnZgY.mft (raw, json)
Hash identifier: pBFvMX95xsSPL6hT2wBeftBZlRwL8+mMcn9qJISS5bI=
Subject key identifier: 51:58:0E:28:FC:1A:2D:49:01:4F:5E:9D:C8:B4:E0:86:98:CE:3C:69
Authority key identifier: C0:00:DA:36:C5:84:2C:E1:30:FD:06:89:12:EB:FC:0C:69:E7:66:06
Certificate issuer: /CN=c000da36c5842ce130fd068912ebfc0c69e76606
Certificate serial: 0194BC72A7358F46404D502D0679555516F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wADaNsWELOEw_QaJEuv8DGnnZgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/00314c-9660-4558-908b-399c10b3aac5/1/wADaNsWELOEw_QaJEuv8DGnnZgY.mft
Manifest number: 02B5
Signing time: Fri 31 Jan 2025 13:00:17 +0000
Manifest this update: Fri 31 Jan 2025 13:00:17 +0000
Manifest next update: Sat 01 Feb 2025 13:00:17 +0000
Files and hashes: 1: YwPa7fIjOxU3w2nMuyLflIyituY.roa (hash: bzaGLCEsglB24IqcrTEilteAr5hqEsn8c1gGVkcmknA=)
2: wADaNsWELOEw_QaJEuv8DGnnZgY.crl (hash: HzVZsfgm3e9gDhrLJqqanYs+Xb/CupIrgDZAB3YhrO0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:a7:35:8f:46:40:4d:50:2d:06:79:55:55:16:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c000da36c5842ce130fd068912ebfc0c69e76606
Validity
Not Before: Jan 31 13:00:17 2025 GMT
Not After : Feb 1 13:00:17 2025 GMT
Subject: CN=51580e28fc1a2d49014f5e9dc8b4e08698ce3c69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:fa:2e:68:5f:ef:b6:60:ec:be:30:06:c8:71:
8b:c1:5d:4b:01:de:e0:04:82:7d:e7:0a:7f:49:ea:
28:97:21:f8:93:cd:e7:d3:7d:9a:cd:65:72:02:98:
68:2e:e5:12:08:af:af:33:05:9a:9f:d3:4b:c8:fc:
c8:5c:52:d2:21:4b:19:2e:d0:27:05:aa:51:3d:5e:
0b:84:a3:ec:f7:51:9b:83:98:5b:f5:ee:36:6a:c7:
1f:99:37:fe:b1:29:91:93:91:d7:fb:96:25:97:10:
f5:78:00:b7:39:30:ea:4a:81:60:9e:d2:b0:ef:03:
35:df:c2:2e:f4:00:c3:49:bd:e4:0b:91:43:fa:b1:
18:f4:9a:53:d8:ba:21:de:92:ed:1b:75:9a:7d:21:
f2:66:04:f2:ef:86:21:8d:3b:ee:aa:95:fb:bb:e9:
12:bf:35:9f:d5:66:61:aa:dc:b9:20:3e:85:be:35:
d7:ce:1b:00:7b:7a:87:5b:69:71:e0:7e:66:ae:8b:
16:87:63:25:af:46:22:82:6b:ba:56:94:f1:6c:ec:
7e:70:f9:e6:81:8e:d2:fc:bc:9b:a5:aa:65:8c:1f:
10:0d:f4:a4:90:0a:27:fe:f1:6d:da:dc:ff:e8:c7:
34:cc:45:63:b4:c7:1d:60:26:7d:30:60:03:7d:c3:
f0:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:58:0E:28:FC:1A:2D:49:01:4F:5E:9D:C8:B4:E0:86:98:CE:3C:69
X509v3 Authority Key Identifier:
keyid:C0:00:DA:36:C5:84:2C:E1:30:FD:06:89:12:EB:FC:0C:69:E7:66:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wADaNsWELOEw_QaJEuv8DGnnZgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/00314c-9660-4558-908b-399c10b3aac5/1/wADaNsWELOEw_QaJEuv8DGnnZgY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/00314c-9660-4558-908b-399c10b3aac5/1/wADaNsWELOEw_QaJEuv8DGnnZgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:48:30:a2:1c:88:79:ca:68:c1:fa:38:87:d3:dd:f8:2a:95:
88:03:96:23:78:d3:b9:21:eb:b9:73:25:8f:6a:77:67:42:68:
a7:29:38:a4:92:cf:d0:11:52:b5:2f:82:dd:a5:9d:bb:59:b5:
df:9e:e6:a0:be:9c:13:fc:1e:a9:db:c9:ef:1f:a3:1e:76:a2:
5d:b5:fb:12:42:65:2b:4e:a7:70:9d:bd:c4:08:2a:2f:08:23:
79:ef:4c:bf:24:80:67:d2:dd:e2:5d:08:32:9d:75:85:77:3a:
1e:ee:e7:e1:08:e4:ff:ce:80:58:d9:f1:d4:28:9b:88:37:77:
1e:bd:46:e2:9e:fe:91:85:a5:37:c1:8f:34:79:b6:f7:e5:26:
46:ec:3c:a8:4a:c1:2b:ce:bc:2e:f6:50:de:1e:88:7e:fc:ec:
4f:3f:dc:0d:28:7e:7c:82:b8:0b:46:90:54:c3:20:a5:d1:1e:
67:51:22:c3:9a:8c:a5:86:c8:6a:d4:e1:16:a4:f2:04:14:e8:
73:be:d5:ad:13:83:ea:76:13:18:05:0c:a8:cd:40:90:4f:85:
a6:d2:c1:de:ed:70:35:f8:06:bb:4e:48:77:d6:84:4b:be:70:
2c:3a:f0:94:4b:b6:53:aa:62:ea:12:01:14:c0:fa:5d:e6:ac:
b3:68:79:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 20:16:30 2025 by rpki-client