Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/d662a6-0af5-459f-a77b-6ad533df0d24/1/wckIj1tEOKQ0jIBe68v0qA4H_1Q.mft
File: wckIj1tEOKQ0jIBe68v0qA4H_1Q.mft (raw, json)
Hash identifier: vCHlWez0+5HuR0MsfFMpN1mFw+cxg/hVWB6RdJc+5Hk=
Subject key identifier: BD:90:B5:A6:D9:AD:6A:F8:53:82:32:91:D4:C7:9A:CF:B9:94:F6:32
Authority key identifier: C1:C9:08:8F:5B:44:38:A4:34:8C:80:5E:EB:CB:F4:A8:0E:07:FF:54
Certificate issuer: /CN=c1c9088f5b4438a4348c805eebcbf4a80e07ff54
Certificate serial: 0194BBCEC7E9ABAB558D508491C8C8002D00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wckIj1tEOKQ0jIBe68v0qA4H_1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/d662a6-0af5-459f-a77b-6ad533df0d24/1/wckIj1tEOKQ0jIBe68v0qA4H_1Q.mft
Manifest number: 06A3
Signing time: Fri 31 Jan 2025 10:01:18 +0000
Manifest this update: Fri 31 Jan 2025 10:01:18 +0000
Manifest next update: Sat 01 Feb 2025 10:01:18 +0000
Files and hashes: 1: wckIj1tEOKQ0jIBe68v0qA4H_1Q.crl (hash: xmKn0/sfqyLZqOgjMfNjUQErZHTETSeXbhzHij2ej1U=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:c7:e9:ab:ab:55:8d:50:84:91:c8:c8:00:2d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c9088f5b4438a4348c805eebcbf4a80e07ff54
Validity
Not Before: Jan 31 10:01:18 2025 GMT
Not After : Feb 1 10:01:18 2025 GMT
Subject: CN=bd90b5a6d9ad6af853823291d4c79acfb994f632
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:9c:af:4a:ae:f8:4f:0a:9e:78:ff:b8:d1:e8:
23:19:99:08:be:68:89:50:50:98:d4:a0:50:f8:7a:
c0:dd:e4:dd:e5:be:4e:93:60:54:d4:7d:6f:c9:53:
27:10:ce:66:6b:cb:8a:60:d1:e4:f6:f4:ad:44:0c:
4c:f8:38:34:c1:a6:65:1e:f1:b8:cc:3f:38:bc:aa:
38:48:60:46:f0:3e:78:0e:62:a4:5d:28:b5:bc:cc:
e0:da:93:da:04:28:70:43:1e:9e:95:81:dd:7c:51:
ef:3e:9c:ac:cb:88:da:65:54:cc:8d:ae:f9:65:13:
5c:e1:d3:c7:79:32:01:07:9e:b9:5c:73:db:6b:59:
26:2f:e7:bd:d3:ff:d1:06:83:a4:98:89:2c:3c:c1:
1a:dc:b8:30:d4:93:cf:eb:58:67:1e:98:70:a9:35:
72:eb:43:7c:59:2f:90:96:c3:04:88:91:75:41:39:
2c:a7:6c:66:7a:e9:81:10:e4:f7:4f:df:fb:fd:fb:
e7:84:b9:af:e0:a2:57:7d:9c:af:d8:51:86:07:8d:
89:0e:4f:fa:8b:10:a9:aa:7b:29:8c:1a:87:99:da:
c7:35:2b:a1:d9:fc:9b:98:0d:bc:43:d0:a9:58:8b:
e1:be:96:aa:2f:e0:c9:63:42:b1:59:72:72:10:cd:
e0:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:90:B5:A6:D9:AD:6A:F8:53:82:32:91:D4:C7:9A:CF:B9:94:F6:32
X509v3 Authority Key Identifier:
keyid:C1:C9:08:8F:5B:44:38:A4:34:8C:80:5E:EB:CB:F4:A8:0E:07:FF:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wckIj1tEOKQ0jIBe68v0qA4H_1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/d662a6-0af5-459f-a77b-6ad533df0d24/1/wckIj1tEOKQ0jIBe68v0qA4H_1Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/d662a6-0af5-459f-a77b-6ad533df0d24/1/wckIj1tEOKQ0jIBe68v0qA4H_1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:32:eb:82:e1:81:43:8e:7f:b4:53:d2:46:dc:fb:5b:dc:de:
c0:72:df:fa:6f:62:87:69:ac:ad:be:dd:12:36:06:73:48:e7:
9f:9c:11:bb:ef:5a:ef:1d:75:ee:cf:d0:7d:12:f3:e6:23:c9:
48:2a:b7:67:93:6f:a8:03:a7:43:cc:43:b2:ef:fb:28:52:ad:
b0:ca:f4:77:94:f6:b6:8e:8a:8f:7e:93:f0:51:ad:34:6d:ee:
ff:e9:ab:45:7b:38:6f:5c:53:bf:00:b5:2f:f4:c8:26:4c:2e:
8b:f3:83:fa:66:69:6c:cb:44:15:71:be:06:1d:cb:76:d8:c6:
01:b2:18:62:d3:b5:8a:ae:a3:60:2a:3f:c5:ba:52:c0:8f:84:
a7:c2:d5:89:10:51:86:93:65:04:12:9b:0e:e9:49:e7:e3:7f:
d0:f8:b3:45:7c:b8:94:60:db:f7:ec:69:80:45:ac:c8:33:14:
b7:63:4a:5c:7a:b1:33:89:27:5a:9e:b2:7d:57:35:8a:34:7e:
5f:b8:af:86:e8:85:7f:a4:aa:5e:e2:82:74:0b:8e:7b:d6:d2:
4a:50:03:d4:ea:e7:7e:8b:9b:2e:f3:e6:a2:55:9a:f8:31:1c:
13:e9:04:4b:ca:fd:39:e9:74:aa:5d:09:be:bb:2a:57:e6:3e:
f1:0b:15:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:08:30 2025 by rpki-client