Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/4b908d-f43a-4882-a66f-b216844ac1e4/1/wa5jZUn1bYSFj_lsixYw6MuKSK8.mft
File: wa5jZUn1bYSFj_lsixYw6MuKSK8.mft (raw, json)
Hash identifier: NnXlYIIF6R07VEWORMIXzwHApMrMlK9oWGSduse7CK0=
Subject key identifier: 96:12:B0:59:CB:82:95:B2:0E:10:B2:A3:6A:58:B2:CC:54:98:FD:B5
Authority key identifier: C1:AE:63:65:49:F5:6D:84:85:8F:F9:6C:8B:16:30:E8:CB:8A:48:AF
Certificate issuer: /CN=c1ae636549f56d84858ff96c8b1630e8cb8a48af
Certificate serial: 0194BC73002DF95EBD6DDF7FA5547A13B57C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wa5jZUn1bYSFj_lsixYw6MuKSK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/4b908d-f43a-4882-a66f-b216844ac1e4/1/wa5jZUn1bYSFj_lsixYw6MuKSK8.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 13:00:40 +0000
Manifest this update: Fri 31 Jan 2025 13:00:40 +0000
Manifest next update: Sat 01 Feb 2025 13:00:40 +0000
Files and hashes: 1: hC6THvKHe5uSDROMW6kLELYwxL0.roa (hash: WD5tslYZuls5xxVxHqrkg7m1jUZOFnnaeXM0AUBhaiI=)
2: wa5jZUn1bYSFj_lsixYw6MuKSK8.crl (hash: 10X7BqwFQLA6ui9dSESHTTx14exa6Tm+T5W4oZI6meo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:00:2d:f9:5e:bd:6d:df:7f:a5:54:7a:13:b5:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1ae636549f56d84858ff96c8b1630e8cb8a48af
Validity
Not Before: Jan 31 13:00:40 2025 GMT
Not After : Feb 1 13:00:40 2025 GMT
Subject: CN=9612b059cb8295b20e10b2a36a58b2cc5498fdb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:d4:a1:e5:9e:2f:22:03:3e:66:ec:f5:57:11:
af:b8:3d:90:e6:22:ed:a7:3c:37:cb:f5:1c:23:40:
f0:8f:fe:ec:1e:8a:29:ca:be:f4:23:d3:73:2d:14:
2a:49:34:7b:3d:82:97:ba:d5:df:0e:2f:7b:63:b6:
ae:72:73:60:77:43:07:79:62:b5:0e:9b:81:93:52:
db:8a:27:71:73:34:7e:78:f9:7a:a3:09:0b:83:9e:
17:48:77:49:5f:33:3e:77:84:6f:df:80:fb:a9:1b:
b1:c6:3a:c0:d0:d0:db:b2:e8:0e:2a:a8:84:3d:a4:
2e:c1:66:1c:a5:0c:fa:77:85:47:ad:65:53:d8:bb:
6c:86:92:66:18:41:76:8e:44:9e:c4:20:c6:33:78:
c0:65:58:32:0d:02:a6:0c:b8:05:6d:d0:e2:0b:c0:
b8:0a:8e:f5:6b:21:75:61:57:6b:34:6d:db:98:96:
92:ec:41:16:2a:54:30:9a:7b:81:22:b4:6a:29:7a:
96:1b:67:d5:79:ba:f7:5d:b6:28:d4:b4:59:bc:62:
0f:80:b9:8f:69:37:e2:28:62:d9:08:8e:fe:61:37:
91:78:3b:43:b4:91:c9:5a:d0:d3:e9:9a:45:c9:e4:
46:6e:6b:5e:6a:b5:86:53:8a:f5:ab:f6:29:1a:bc:
6a:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:12:B0:59:CB:82:95:B2:0E:10:B2:A3:6A:58:B2:CC:54:98:FD:B5
X509v3 Authority Key Identifier:
keyid:C1:AE:63:65:49:F5:6D:84:85:8F:F9:6C:8B:16:30:E8:CB:8A:48:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wa5jZUn1bYSFj_lsixYw6MuKSK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/4b908d-f43a-4882-a66f-b216844ac1e4/1/wa5jZUn1bYSFj_lsixYw6MuKSK8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/4b908d-f43a-4882-a66f-b216844ac1e4/1/wa5jZUn1bYSFj_lsixYw6MuKSK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:cd:27:e1:24:74:6b:c2:74:bb:4c:ec:ef:13:08:2f:70:84:
01:50:30:09:9b:41:20:2a:a8:ba:89:fa:f4:fa:1e:ac:c8:ea:
4d:75:9a:70:a5:7d:ed:e7:30:69:b8:f7:bd:3c:27:1b:52:80:
3f:5a:5f:3e:a9:21:35:ae:0b:bb:b5:0b:d7:61:85:37:c0:90:
21:a1:08:d5:02:75:d7:84:ef:cd:7f:66:f1:0f:a4:23:b1:c4:
2c:af:f9:3d:40:aa:2b:56:6f:a8:3e:97:32:da:3d:28:80:d8:
cd:21:aa:70:d0:2d:73:42:f0:c9:31:0d:fe:c0:27:a2:a8:d4:
c6:26:48:43:17:a0:e3:15:08:ed:23:60:46:04:49:9b:75:c6:
1e:bb:d1:c5:fa:41:fe:7b:40:22:ec:34:98:9a:b8:b4:34:e4:
01:3d:d9:69:1c:68:34:3c:30:f5:d5:a8:27:54:a7:a7:e2:a0:
16:bd:19:42:8a:23:fb:33:a9:62:ad:b4:50:d6:6e:e5:b6:4a:
8f:28:92:fc:ee:a3:6a:fb:a9:ab:55:1d:1b:b5:4a:6e:39:dc:
a6:d3:ed:e5:16:26:47:f7:b1:4a:55:77:77:a6:1f:d7:b4:05:
1d:e0:89:5e:39:2e:c0:50:84:3b:db:59:a7:62:b4:c8:72:76:
e0:cf:7c:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:07:32 2025 by rpki-client