Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/c0def6-bc0a-4221-9791-2d8019017849/1/wznRHn1JkvmvswQx42BCqv3eXAo.mft
File: wznRHn1JkvmvswQx42BCqv3eXAo.mft (raw, json)
Hash identifier: J+DkFAvw+gJXwvWa6rKTVt4k9Ix+/b3vTlG5oUg1OeM=
Subject key identifier: C1:29:7D:A1:63:FE:86:A9:06:03:A0:33:8C:6A:38:E2:BD:39:8E:D7
Authority key identifier: C3:39:D1:1E:7D:49:92:F9:AF:B3:04:31:E3:60:42:AA:FD:DE:5C:0A
Certificate issuer: /CN=c339d11e7d4992f9afb30431e36042aafdde5c0a
Certificate serial: 0194BCE0952FB5EACFAA6C96AA6CCA0E5C59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wznRHn1JkvmvswQx42BCqv3eXAo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/c0def6-bc0a-4221-9791-2d8019017849/1/wznRHn1JkvmvswQx42BCqv3eXAo.mft
Manifest number: 03D9
Signing time: Fri 31 Jan 2025 15:00:22 +0000
Manifest this update: Fri 31 Jan 2025 15:00:22 +0000
Manifest next update: Sat 01 Feb 2025 15:00:22 +0000
Files and hashes: 1: Ye0egtqoH6uMAlA-InFGtPoYhOI.roa (hash: zCIyCUBIV+P7SfqRZSH5RkFwyM3/tcMjHBwHN8QTJs8=)
2: wznRHn1JkvmvswQx42BCqv3eXAo.crl (hash: dA06NiznsEk7KfBITzWtw7ArTrx/w7rpiQKaIUqhhSo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:95:2f:b5:ea:cf:aa:6c:96:aa:6c:ca:0e:5c:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c339d11e7d4992f9afb30431e36042aafdde5c0a
Validity
Not Before: Jan 31 15:00:22 2025 GMT
Not After : Feb 1 15:00:22 2025 GMT
Subject: CN=c1297da163fe86a90603a0338c6a38e2bd398ed7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ee:04:41:b5:a6:38:2f:2e:99:44:5f:87:b6:
8d:4f:7d:b3:e2:9d:41:7c:ab:32:ed:b7:11:80:20:
01:6c:02:b1:ac:15:ae:97:5f:25:fc:be:27:64:ae:
7b:ce:c1:2c:98:36:a2:eb:70:cd:c8:17:00:01:a9:
40:d7:62:71:b4:25:18:2f:28:7a:87:84:e3:78:d3:
40:a1:45:57:f7:b0:98:67:03:4d:c2:ef:55:a5:8b:
e7:43:95:f9:64:24:52:5b:6b:f3:6a:00:24:c4:17:
82:bd:be:48:5f:bb:51:22:de:d1:e8:d1:0d:f4:d0:
63:a7:f0:94:4c:1b:89:37:9a:c7:45:32:55:d3:7a:
9a:91:6d:03:99:d3:1c:8f:73:5f:0a:c8:75:ef:e1:
31:a8:5a:05:3c:a8:fd:47:f7:5e:4c:13:bd:5a:91:
f8:9a:f2:16:f6:96:3a:a2:d5:f2:d2:1f:af:7d:c7:
3b:33:ac:d0:77:50:6a:96:3a:78:5c:71:f2:59:43:
2a:f8:84:82:00:41:94:f3:2c:40:00:fa:df:a3:33:
c6:15:16:0b:fd:5a:c9:49:63:4c:f3:4d:9d:66:4c:
e7:7e:dd:74:2a:22:39:ef:24:b6:1c:f0:18:f2:de:
7a:4b:1f:2c:22:20:3b:db:0d:54:6c:0e:85:55:c6:
e4:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:29:7D:A1:63:FE:86:A9:06:03:A0:33:8C:6A:38:E2:BD:39:8E:D7
X509v3 Authority Key Identifier:
keyid:C3:39:D1:1E:7D:49:92:F9:AF:B3:04:31:E3:60:42:AA:FD:DE:5C:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wznRHn1JkvmvswQx42BCqv3eXAo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/c0def6-bc0a-4221-9791-2d8019017849/1/wznRHn1JkvmvswQx42BCqv3eXAo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/c0def6-bc0a-4221-9791-2d8019017849/1/wznRHn1JkvmvswQx42BCqv3eXAo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:09:f3:c8:e0:17:52:88:97:4d:8b:c3:5d:56:fd:8d:48:6c:
2e:c7:de:03:37:b4:44:d6:28:1a:a6:a2:c9:ac:fe:c0:a7:46:
ae:68:1b:df:34:66:fa:15:76:5b:c7:81:5f:91:2d:cf:f7:c2:
d6:14:ae:ec:60:92:1a:0e:b5:f8:73:2f:4c:71:a7:3a:a3:b0:
7d:ea:18:5b:0b:75:14:34:db:8d:1e:80:00:db:54:69:b7:cb:
a4:4d:7b:f1:4d:c5:f2:e9:d2:b0:09:ce:30:46:4d:8f:99:37:
3f:58:91:5e:8c:de:7c:d5:87:ac:b8:ab:c2:d0:c5:41:a6:a1:
73:7c:c4:2e:8e:a9:73:f9:b3:35:09:56:cc:0d:b6:8d:b0:b9:
6b:c5:f7:a2:df:69:17:40:59:ce:97:b5:3e:94:06:58:b8:a1:
b3:e2:25:c1:06:8a:01:53:ff:0d:ad:fe:fe:04:49:7c:4b:78:
4c:d3:a5:68:c8:79:20:ab:e0:ff:b6:ef:38:92:43:b2:6b:5f:
df:42:70:d6:48:cc:d7:2f:51:be:d7:14:e4:7d:55:ed:9a:35:
11:3c:04:9b:9d:5c:7c:14:b0:cd:ae:12:50:4c:d2:5a:01:29:
46:70:aa:14:e3:d0:e3:c1:63:f6:a2:a8:8e:d4:1a:f0:73:85:
91:e3:a2:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:07:44 2025 by rpki-client