Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/34b48f-70c0-4004-ba0f-de3c8d953ec5/1/wAqI1-WlZepxnPxA2Ltj7hZxhWo.mft
File: wAqI1-WlZepxnPxA2Ltj7hZxhWo.mft (raw, json)
Hash identifier: CK/PoE9FPkNK79JHz+WGTBDPjOyeEredcXbXU4MjN9E=
Subject key identifier: CF:F2:1C:D9:4B:55:C2:70:19:10:BA:98:83:C2:55:F6:8A:B6:5A:F6
Authority key identifier: C0:0A:88:D7:E5:A5:65:EA:71:9C:FC:40:D8:BB:63:EE:16:71:85:6A
Certificate issuer: /CN=c00a88d7e5a565ea719cfc40d8bb63ee1671856a
Certificate serial: 0194BC053590A7F579426DCE377B015258A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wAqI1-WlZepxnPxA2Ltj7hZxhWo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/34b48f-70c0-4004-ba0f-de3c8d953ec5/1/wAqI1-WlZepxnPxA2Ltj7hZxhWo.mft
Manifest number: 032D
Signing time: Fri 31 Jan 2025 11:00:45 +0000
Manifest this update: Fri 31 Jan 2025 11:00:45 +0000
Manifest next update: Sat 01 Feb 2025 11:00:45 +0000
Files and hashes: 1: KG9HkmRGaF_sHhDWjx3vp73PeIA.roa (hash: xtQ/Bf0q+zKX28vYl4yuK/JzcH8nDzNW75ipUDIj1iY=)
2: wAqI1-WlZepxnPxA2Ltj7hZxhWo.crl (hash: Ee/r/blVGJzmuna3vY5kX1fF+MKQihG3ditKROmO84w=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:35:90:a7:f5:79:42:6d:ce:37:7b:01:52:58:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c00a88d7e5a565ea719cfc40d8bb63ee1671856a
Validity
Not Before: Jan 31 11:00:45 2025 GMT
Not After : Feb 1 11:00:45 2025 GMT
Subject: CN=cff21cd94b55c2701910ba9883c255f68ab65af6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:56:cb:fc:55:8e:ff:41:0c:b7:f5:c4:cd:b2:
bf:0d:88:a3:9f:25:87:64:cb:f3:9b:d2:88:c8:26:
74:7f:b3:5e:0b:5d:69:64:dd:4e:71:a1:1e:63:13:
a3:d0:c7:c4:04:26:be:ac:fa:54:48:50:c3:bb:8d:
37:06:c2:e6:4e:b5:b5:08:87:40:93:00:3a:0c:dd:
a1:8a:2d:f3:94:b6:e8:b0:d6:76:28:6e:06:ca:99:
89:d5:f4:b5:86:f1:6f:67:2b:b7:f4:29:ee:a7:99:
61:e9:00:17:31:8d:ec:3a:90:d6:6f:30:f8:b3:3a:
b5:6d:07:b2:2d:be:13:1a:3c:45:e8:ce:d0:f5:2b:
32:6a:d9:0d:5f:a7:82:36:e1:3a:90:81:b2:5b:de:
01:4d:4d:6d:76:0e:72:b5:7a:7e:aa:04:79:a3:40:
1f:6b:47:fa:ee:8c:de:30:ff:15:d6:60:c0:b3:ae:
36:ff:8e:37:34:a3:4d:63:f1:d6:6c:5f:f0:91:fd:
d5:b1:0d:b0:06:50:d4:2e:b0:b8:27:19:0f:30:41:
5a:df:65:45:0d:77:fd:e8:fe:c1:ad:eb:93:44:23:
b9:47:6a:76:1a:f3:3d:66:b7:6f:bd:e0:ef:dd:f0:
5c:2e:b7:de:35:64:e7:3b:bc:a7:fd:9c:b4:91:3a:
b4:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:F2:1C:D9:4B:55:C2:70:19:10:BA:98:83:C2:55:F6:8A:B6:5A:F6
X509v3 Authority Key Identifier:
keyid:C0:0A:88:D7:E5:A5:65:EA:71:9C:FC:40:D8:BB:63:EE:16:71:85:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wAqI1-WlZepxnPxA2Ltj7hZxhWo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/34b48f-70c0-4004-ba0f-de3c8d953ec5/1/wAqI1-WlZepxnPxA2Ltj7hZxhWo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/34b48f-70c0-4004-ba0f-de3c8d953ec5/1/wAqI1-WlZepxnPxA2Ltj7hZxhWo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:c1:74:dc:c7:8a:b5:40:ef:61:86:ce:23:ef:65:5f:c6:d8:
0f:1b:47:7e:4d:5a:cd:e9:c2:e8:68:e3:20:e0:dc:98:d0:0b:
78:8d:e0:dd:49:c3:1b:0a:18:ef:6c:d6:9d:b7:39:fe:2e:3d:
e2:e5:9e:fa:10:af:2e:79:4c:5f:4d:b6:84:68:26:73:d6:30:
11:bb:02:57:93:31:4d:68:53:c8:02:19:76:05:07:8c:2a:36:
61:f8:fa:1b:0b:9a:36:ac:d3:44:18:02:c5:16:14:dd:17:d0:
5d:1c:1f:be:99:82:3b:cf:46:75:39:92:c7:46:8e:7e:04:6a:
5c:24:8a:6a:d3:0b:f5:60:ca:93:ed:8b:5a:c4:19:16:cd:ed:
d7:73:b8:4f:3c:2a:10:c6:02:fa:c7:83:81:6f:74:65:01:8a:
50:70:a5:72:ea:a3:06:5a:0c:9a:3f:fc:3b:71:51:eb:cd:b7:
d4:c7:5c:d8:fb:3c:2f:e9:bf:98:29:20:42:d5:9f:7b:ce:fe:
dc:90:ab:17:79:cf:54:e1:38:d9:e1:7c:b8:c7:7f:2e:cd:ad:
de:30:72:e4:53:03:df:d6:56:ee:67:ab:88:89:37:5d:3b:42:
55:aa:e4:19:04:65:94:ee:2b:a2:d4:04:31:b3:34:7f:61:3a:
0a:ce:f8:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:05:34 2025 by rpki-client