Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/153d53-6e69-4301-abd3-f311bac2a37f/1/wb80sZClHOUwAleRGvMEBPSVH7Y.mft
File: wb80sZClHOUwAleRGvMEBPSVH7Y.mft (raw, json)
Hash identifier: lfnTc3mHZhOFvGX6TFGutcuasGA+rVSjz9fFDY01uak=
Subject key identifier: 9D:A5:82:3D:F5:5C:28:B7:C8:4B:09:4B:76:4B:D9:86:C8:75:F9:4B
Authority key identifier: C1:BF:34:B1:90:A5:1C:E5:30:02:57:91:1A:F3:04:04:F4:95:1F:B6
Certificate issuer: /CN=c1bf34b190a51ce5300257911af30404f4951fb6
Certificate serial: 0194BBCE9B17F7AA7287B70410880E2D473B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wb80sZClHOUwAleRGvMEBPSVH7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/153d53-6e69-4301-abd3-f311bac2a37f/1/wb80sZClHOUwAleRGvMEBPSVH7Y.mft
Manifest number: 1428
Signing time: Fri 31 Jan 2025 10:01:06 +0000
Manifest this update: Fri 31 Jan 2025 10:01:06 +0000
Manifest next update: Sat 01 Feb 2025 10:01:06 +0000
Files and hashes: 1: 0tyV27ZaRKIuc5h8kTDsBiv4BZI.roa (hash: 1dyOdZnQpGVWWsvnKswgEprRwbXy0vsePve+ulQremU=)
2: wb80sZClHOUwAleRGvMEBPSVH7Y.crl (hash: 5HGvcYHU0hZBJhG37ygmZgbDxoQ4hBuKazdSF2zHUVg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:9b:17:f7:aa:72:87:b7:04:10:88:0e:2d:47:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1bf34b190a51ce5300257911af30404f4951fb6
Validity
Not Before: Jan 31 10:01:06 2025 GMT
Not After : Feb 1 10:01:06 2025 GMT
Subject: CN=9da5823df55c28b7c84b094b764bd986c875f94b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:84:65:f0:dc:cf:14:d6:01:f4:62:51:d3:8a:
31:08:8d:b7:f9:20:44:66:46:3a:0b:d0:96:4b:6f:
b3:79:3e:16:59:3c:7b:5c:8b:e4:82:2a:4f:77:59:
83:ac:0a:ab:e0:fc:95:28:e4:fa:00:4e:f2:73:78:
4f:88:70:25:e8:de:25:4e:8e:c2:36:ab:e7:b4:d1:
f7:50:86:51:38:9a:ff:d9:f5:3e:e5:32:3a:f2:c5:
5e:ee:86:de:b8:89:83:6a:40:6b:d0:cc:e5:f4:e3:
b3:06:c7:87:23:8e:a8:eb:b2:4d:07:06:2b:c9:68:
a2:93:4f:f5:5d:11:b9:f8:2d:be:a7:c8:62:34:b1:
ca:80:d8:50:1b:67:87:62:41:7a:63:f1:55:b4:3a:
a0:82:cb:da:c3:a3:7a:c3:1e:da:01:7e:a0:15:f4:
65:ca:84:90:d7:4a:1e:99:12:44:e7:ab:1f:75:4b:
d2:76:5d:ca:ec:32:83:90:d6:70:82:20:a3:99:65:
8b:66:f7:8d:3b:9a:e6:18:ea:2e:4d:9a:f3:90:87:
46:87:8c:0b:f7:e8:23:71:89:cd:3b:02:6f:a1:ff:
8e:35:17:0b:b2:31:b7:61:39:a0:4f:87:62:3c:eb:
ed:80:9f:29:4a:b1:6b:c0:4d:6c:ef:e8:67:56:6c:
e9:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:A5:82:3D:F5:5C:28:B7:C8:4B:09:4B:76:4B:D9:86:C8:75:F9:4B
X509v3 Authority Key Identifier:
keyid:C1:BF:34:B1:90:A5:1C:E5:30:02:57:91:1A:F3:04:04:F4:95:1F:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wb80sZClHOUwAleRGvMEBPSVH7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/153d53-6e69-4301-abd3-f311bac2a37f/1/wb80sZClHOUwAleRGvMEBPSVH7Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/153d53-6e69-4301-abd3-f311bac2a37f/1/wb80sZClHOUwAleRGvMEBPSVH7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:f8:61:b6:7c:8c:81:4a:d8:8c:ba:15:2a:d6:fe:65:61:24:
3e:32:90:43:c9:57:c6:6d:68:e3:84:1c:e5:fd:8a:af:c6:01:
b8:34:8a:55:de:f5:f2:65:78:84:0a:17:fc:37:41:99:13:d0:
32:75:b1:81:85:67:2e:52:bc:6a:78:53:e9:75:be:8e:04:12:
4d:f3:ef:81:af:94:ae:4a:55:c8:0b:3b:67:e4:22:f5:2d:e7:
a1:f0:d1:4f:bf:d6:5d:2a:59:2c:bf:84:74:a9:18:1f:2d:2b:
9b:94:f6:9c:3a:84:6d:e8:f7:81:ec:3e:92:37:7d:b7:a6:c9:
ea:0a:44:7b:c9:fe:6b:12:7d:3f:b5:44:d7:d8:0d:10:fc:db:
f1:91:2a:5b:e0:1b:39:66:5b:4f:7b:be:05:11:2a:13:20:1d:
54:af:05:bd:d6:4f:91:e0:65:56:a4:cd:3c:cb:aa:0a:77:49:
f6:7b:5a:26:88:e7:9a:2a:ae:fa:0d:16:b8:63:96:b0:85:f3:
ed:75:ea:c7:2d:1e:68:c4:b0:2e:1e:c9:29:4b:d5:78:88:33:
a0:33:5a:22:ad:db:fd:47:b9:ee:4d:36:a3:c3:70:3c:8b:2a:
8a:be:6e:1f:60:1a:45:04:f3:d1:67:89:2e:de:f9:a8:a5:07:
70:c1:b6:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 11:24:35 2025 by rpki-client