Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/33fb90-189b-4e31-b92a-0c18d8597328/1/rwL7VrRZx6IaebaLThGKuHb8lqU.mft
File: rwL7VrRZx6IaebaLThGKuHb8lqU.mft (raw, json)
Hash identifier: gl9d/OmlX1ad7kcv9wu3p7RSAYvY/6AVfgRFZJrR7Ro=
Subject key identifier: B3:CC:38:85:8E:8F:B3:6D:0B:6D:E4:1C:0E:9D:83:45:E4:06:19:FC
Authority key identifier: AF:02:FB:56:B4:59:C7:A2:1A:79:B6:8B:4E:11:8A:B8:76:FC:96:A5
Certificate issuer: /CN=af02fb56b459c7a21a79b68b4e118ab876fc96a5
Certificate serial: 0194BBCE90E6378C471D721D6B6E367E29F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rwL7VrRZx6IaebaLThGKuHb8lqU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/33fb90-189b-4e31-b92a-0c18d8597328/1/rwL7VrRZx6IaebaLThGKuHb8lqU.mft
Manifest number: 0C25
Signing time: Fri 31 Jan 2025 10:01:04 +0000
Manifest this update: Fri 31 Jan 2025 10:01:04 +0000
Manifest next update: Sat 01 Feb 2025 10:01:04 +0000
Files and hashes: 1: KVHIamZJVn2A53v0da8_IQ5hmAc.roa (hash: MHiTghXPbp0Yn7XA7tDf2bHlQcgsEoD122bH+wIZHLg=)
2: rwL7VrRZx6IaebaLThGKuHb8lqU.crl (hash: CXkNuzkxfYurJDc7C3tjuUNauC26LoJ7JCLETv3GsQ4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:90:e6:37:8c:47:1d:72:1d:6b:6e:36:7e:29:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af02fb56b459c7a21a79b68b4e118ab876fc96a5
Validity
Not Before: Jan 31 10:01:04 2025 GMT
Not After : Feb 1 10:01:04 2025 GMT
Subject: CN=b3cc38858e8fb36d0b6de41c0e9d8345e40619fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:f0:ba:6c:41:6a:52:86:16:42:8b:92:17:0e:
36:f8:ab:e4:02:51:cc:e6:8a:8f:b4:b0:e4:35:06:
38:07:b0:15:26:8a:6c:df:da:2b:0e:f8:f4:d0:db:
ee:b9:ce:92:bc:30:ed:0d:3a:24:95:96:3d:e3:ae:
7e:be:77:d5:09:f8:90:4e:ca:9c:83:f7:5d:5e:a7:
7a:bc:c2:ac:71:c6:28:25:b8:82:2d:6c:bd:5b:36:
4c:fa:ab:69:c6:bc:74:05:ba:f5:9f:00:a2:69:ac:
51:cc:09:ad:52:f5:a4:81:3b:d5:a3:e4:1e:0c:21:
95:28:84:b1:3d:99:d6:59:08:f3:70:6c:4d:d1:ab:
2e:5e:52:e2:7d:61:49:d4:8a:d7:b4:f9:39:d6:8a:
75:65:d5:5f:86:1d:1c:7c:8d:40:6f:ae:75:aa:34:
34:c8:4e:cd:00:4b:91:bf:1c:1c:1f:c5:4e:6a:65:
74:61:c9:cc:46:b8:f1:3e:b2:a5:a8:4e:18:c8:e8:
28:cd:aa:ec:0a:63:f2:be:78:5d:f5:81:0b:9b:a0:
03:57:28:b4:33:65:a1:16:17:93:e8:a5:d0:53:8f:
e9:b1:49:52:53:c9:c2:da:ee:a3:f5:a2:41:9c:17:
e4:e0:e3:3d:49:db:e0:a1:8b:ba:d7:10:b1:8a:6c:
49:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:CC:38:85:8E:8F:B3:6D:0B:6D:E4:1C:0E:9D:83:45:E4:06:19:FC
X509v3 Authority Key Identifier:
keyid:AF:02:FB:56:B4:59:C7:A2:1A:79:B6:8B:4E:11:8A:B8:76:FC:96:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rwL7VrRZx6IaebaLThGKuHb8lqU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/33fb90-189b-4e31-b92a-0c18d8597328/1/rwL7VrRZx6IaebaLThGKuHb8lqU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/33fb90-189b-4e31-b92a-0c18d8597328/1/rwL7VrRZx6IaebaLThGKuHb8lqU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:2c:81:91:e0:a3:7f:c2:7d:02:2d:bf:2c:f7:63:42:6f:7b:
c7:c1:d2:cd:a1:c7:2d:98:01:56:a2:44:c0:5a:be:4b:fa:bc:
2b:a6:d8:b1:d9:c5:b1:8d:1f:ce:82:b9:95:28:c3:94:24:14:
11:bc:39:16:e1:cc:0a:7c:30:6b:1c:78:85:60:84:6e:45:c3:
1f:05:8b:81:ab:7a:e0:f4:e6:d0:b0:52:01:2a:7c:03:37:c4:
ed:7c:39:bb:dc:73:d2:2b:5f:0f:c8:e6:46:a1:66:be:03:06:
d2:0c:4a:2d:41:8b:64:a0:0f:e9:66:f5:56:d1:86:30:60:56:
94:d7:15:3c:6f:a6:c7:b3:be:5a:26:0a:09:b5:78:92:b8:f1:
4d:7d:0d:fe:23:4e:ff:0a:3c:4a:77:a4:52:59:6e:3b:82:eb:
6f:fd:9b:b8:79:5a:e9:67:66:70:d3:48:d0:27:0b:58:8d:f8:
77:c0:da:02:c7:5f:d6:e5:61:7f:bb:2d:0c:19:00:ef:e8:03:
4c:b3:1a:af:58:65:77:9c:25:63:93:65:ef:cd:3c:e6:f2:f6:
ac:7c:fc:bd:98:72:ac:79:a4:e4:7b:0b:63:3c:9a:93:81:ea:
64:db:60:e8:ea:99:19:94:95:cc:5f:ef:64:be:e3:6f:75:d9:
d5:53:f1:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:19:08 2025 by rpki-client