Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/99ba20-9bb7-4171-af56-dfe566411016/1/wuP6h-sxaafS3XRFMoMCGicDx2k.mft
File: wuP6h-sxaafS3XRFMoMCGicDx2k.mft (raw, json)
Hash identifier: nejDs/7D8EJdwLZTxEO/FdNpfNVeGQs3rfsNqBrDo3E=
Subject key identifier: 6D:5F:B1:44:D2:62:02:81:8F:47:9C:13:4B:27:5C:E6:89:3C:52:DC
Authority key identifier: C2:E3:FA:87:EB:31:69:A7:D2:DD:74:45:32:83:02:1A:27:03:C7:69
Certificate issuer: /CN=c2e3fa87eb3169a7d2dd74453283021a2703c769
Certificate serial: 0194BD4E9EE0347083C847A5B2BBC4A48491
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wuP6h-sxaafS3XRFMoMCGicDx2k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/99ba20-9bb7-4171-af56-dfe566411016/1/wuP6h-sxaafS3XRFMoMCGicDx2k.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 17:00:33 +0000
Manifest this update: Fri 31 Jan 2025 17:00:33 +0000
Manifest next update: Sat 01 Feb 2025 17:00:33 +0000
Files and hashes: 1: UQeJyG9BAYXx7MdsdkPbT5nATwI.roa (hash: hKLTaUlMIPTXFfDFectFLlcV0ReJ/iVzU3RYDLItnvI=)
2: wuP6h-sxaafS3XRFMoMCGicDx2k.crl (hash: StKrlN/Ha2dwBu5hY9ZPBE4YGrovbjAOikvNRb1XwIA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:9e:e0:34:70:83:c8:47:a5:b2:bb:c4:a4:84:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2e3fa87eb3169a7d2dd74453283021a2703c769
Validity
Not Before: Jan 31 17:00:33 2025 GMT
Not After : Feb 1 17:00:33 2025 GMT
Subject: CN=6d5fb144d26202818f479c134b275ce6893c52dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:cb:a0:de:ce:f6:3b:86:4f:cf:fa:41:99:5d:
86:c4:e1:1a:a3:e9:fb:33:34:48:d3:d4:30:b0:59:
3c:45:19:22:c1:43:ed:75:bc:60:7d:20:6f:8e:c4:
6a:ea:93:1e:b1:e4:50:bd:7f:14:c2:b7:0f:a9:2a:
fe:88:59:95:33:a1:09:36:12:fc:1e:f8:f0:c4:38:
73:cb:fa:71:d9:56:53:11:a2:e4:bf:f4:b8:43:30:
ad:09:74:18:e7:8b:d7:c3:fd:c4:1a:7e:f7:ac:46:
4e:b0:5e:8a:96:9e:ce:2a:cf:b9:2c:59:c8:5c:a4:
1c:85:18:0b:06:d7:39:2b:79:91:32:2c:cf:d7:c1:
6e:b9:44:51:e6:b5:28:12:75:2f:e9:0c:cf:1d:88:
96:c6:ea:3a:9d:56:b8:23:90:5c:fd:a0:34:49:be:
1a:59:07:af:f1:f9:ed:08:ac:fe:be:4a:20:04:ef:
a3:8d:71:cf:ad:1f:f3:b6:be:76:a3:f2:fb:93:f6:
a0:87:09:f3:19:63:98:92:eb:49:49:15:8d:da:6f:
74:c2:01:1e:db:98:88:74:f5:39:42:b3:0c:52:51:
64:3f:9b:65:eb:e1:67:04:c3:54:07:e6:ad:6c:75:
7e:a9:78:ac:0b:dd:96:c5:bd:52:39:7b:dd:31:9e:
ff:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:5F:B1:44:D2:62:02:81:8F:47:9C:13:4B:27:5C:E6:89:3C:52:DC
X509v3 Authority Key Identifier:
keyid:C2:E3:FA:87:EB:31:69:A7:D2:DD:74:45:32:83:02:1A:27:03:C7:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wuP6h-sxaafS3XRFMoMCGicDx2k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/99ba20-9bb7-4171-af56-dfe566411016/1/wuP6h-sxaafS3XRFMoMCGicDx2k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/99ba20-9bb7-4171-af56-dfe566411016/1/wuP6h-sxaafS3XRFMoMCGicDx2k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:a9:99:da:d4:e5:ae:26:43:a8:7b:ad:8e:ee:65:94:1f:c3:
a7:ad:39:9d:e1:88:57:f9:44:e1:e9:30:fd:ed:70:8a:48:05:
4d:f6:73:6a:77:3c:dd:c5:6d:fa:a1:1b:25:01:b1:15:6c:cc:
77:04:86:f3:05:23:37:9f:96:a7:89:94:b8:7f:f5:b1:f0:e7:
82:65:e7:2f:49:33:85:b7:14:66:b1:ed:51:af:ae:bd:ee:20:
e6:b8:91:c5:9e:bc:0d:83:15:b7:dd:01:b8:e7:a0:cf:3e:e4:
a0:44:10:01:b8:cc:64:3b:34:04:1d:da:6c:cf:ba:3e:36:e5:
72:b1:7e:65:ba:b8:6a:a7:e5:78:bf:06:dd:47:a5:c3:ae:c2:
20:ba:da:97:45:85:11:2e:2d:38:43:6f:c7:06:49:3d:ac:a8:
fd:44:c8:b0:75:62:e4:3d:60:ad:46:1c:69:f4:64:d6:8a:5f:
96:c4:11:2c:44:ee:3c:ae:f0:df:07:58:11:66:3c:7c:8c:57:
57:71:df:b0:03:42:42:5f:04:08:7c:d6:83:66:67:dc:c6:b7:
7e:5e:7f:93:54:e9:df:ed:9e:b9:e3:79:02:1f:fd:6c:21:a8:
81:d3:9e:67:71:03:cb:61:34:81:ec:dd:a9:ba:84:fa:c7:49:
b4:6c:20:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 13:12:26 2025 by rpki-client