Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/2c6590-ab29-46b4-a6ae-da388bc34efb/1/wMfxuj-ucTZOkysFYNYCxXJd2o4.mft
File: wMfxuj-ucTZOkysFYNYCxXJd2o4.mft (raw, json)
Hash identifier: Wk80DfFujQF9lj+Z3x/Zj6ZEj8WGuSE4/idgyoEbF1A=
Subject key identifier: E0:E6:69:DF:EC:08:B3:E2:31:89:1D:54:55:71:BF:18:C8:B2:C1:DA
Authority key identifier: C0:C7:F1:BA:3F:AE:71:36:4E:93:2B:05:60:D6:02:C5:72:5D:DA:8E
Certificate issuer: /CN=c0c7f1ba3fae71364e932b0560d602c5725dda8e
Certificate serial: 0194BCE0AE7E04E8D1411B1C6F649F00BEC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wMfxuj-ucTZOkysFYNYCxXJd2o4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/2c6590-ab29-46b4-a6ae-da388bc34efb/1/wMfxuj-ucTZOkysFYNYCxXJd2o4.mft
Manifest number: 08A3
Signing time: Fri 31 Jan 2025 15:00:28 +0000
Manifest this update: Fri 31 Jan 2025 15:00:28 +0000
Manifest next update: Sat 01 Feb 2025 15:00:28 +0000
Files and hashes: 1: Ts1wD-6dXK6YF6lbWc4Bp6qGGOU.roa (hash: l6AYzjv5b4VOeQIHxSNacHxCFNVxW6gn4dbeXJ7uQKA=)
2: wMfxuj-ucTZOkysFYNYCxXJd2o4.crl (hash: pUYJpnEATwf4qviEY5mFIp/lIecGzGnYSsFuLzKUC5Y=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:ae:7e:04:e8:d1:41:1b:1c:6f:64:9f:00:be:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0c7f1ba3fae71364e932b0560d602c5725dda8e
Validity
Not Before: Jan 31 15:00:28 2025 GMT
Not After : Feb 1 15:00:28 2025 GMT
Subject: CN=e0e669dfec08b3e231891d545571bf18c8b2c1da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:2e:62:86:81:ff:6c:bb:6a:df:ea:12:3f:ee:
c9:ea:0d:20:1b:a8:8e:22:eb:6c:9e:ce:82:63:7a:
52:79:4b:b9:1b:d5:d9:ff:d8:cf:34:7d:18:19:45:
b4:76:0f:a4:f5:a5:2f:df:d1:df:d6:17:aa:28:a0:
cc:0a:d1:75:bc:41:7d:d6:14:92:c7:b3:c2:6f:cc:
37:fc:1e:4e:71:8d:a4:71:2d:42:93:51:6f:98:92:
1b:63:ee:b3:63:d2:2e:1f:17:e7:d7:f9:91:70:32:
d5:35:c6:26:25:c2:71:fc:1a:52:10:76:67:03:ee:
fa:71:85:e8:18:3e:52:2d:00:b3:ab:11:d0:2a:55:
93:0d:fa:82:e3:50:65:17:93:e3:27:81:f2:6d:1c:
7c:1b:9f:a5:e4:26:4c:95:9e:cf:20:c9:bd:8c:05:
9a:a5:1b:5d:28:48:59:f7:b7:83:54:82:be:da:b9:
14:2a:a9:3a:ef:31:36:83:43:7d:7a:7c:5d:f8:bb:
51:da:34:46:58:5e:a0:92:31:b1:14:14:d6:5e:a3:
8d:3a:8e:f7:31:10:73:ec:6c:71:59:8a:38:93:1c:
6f:4c:99:bc:86:c9:67:3c:71:51:23:f2:9a:ef:38:
b7:a3:bd:08:a7:0e:2d:2f:22:ed:75:2b:55:84:9d:
14:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:E6:69:DF:EC:08:B3:E2:31:89:1D:54:55:71:BF:18:C8:B2:C1:DA
X509v3 Authority Key Identifier:
keyid:C0:C7:F1:BA:3F:AE:71:36:4E:93:2B:05:60:D6:02:C5:72:5D:DA:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wMfxuj-ucTZOkysFYNYCxXJd2o4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/2c6590-ab29-46b4-a6ae-da388bc34efb/1/wMfxuj-ucTZOkysFYNYCxXJd2o4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/2c6590-ab29-46b4-a6ae-da388bc34efb/1/wMfxuj-ucTZOkysFYNYCxXJd2o4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:c1:7f:4b:a7:de:33:7a:f6:db:2f:32:35:53:04:01:41:49:
b4:22:54:e0:65:f0:19:32:eb:dd:34:0d:4e:6d:d8:8d:8c:8c:
ca:3b:04:c6:3d:38:18:22:cd:48:25:56:aa:b5:ab:c0:95:3e:
f8:ab:f2:65:ad:52:a3:d8:ad:c4:e1:b7:8b:89:22:43:ff:cd:
3c:64:5a:92:a9:05:49:9d:06:56:29:b8:44:5b:27:89:b0:2b:
82:55:fc:d8:1a:8c:82:77:62:95:55:61:3f:45:44:3f:a2:98:
db:3b:c1:d9:83:95:c4:28:0b:9b:9a:9b:0b:48:a0:3b:c1:d7:
21:73:2a:4d:82:78:b8:74:a1:3a:2f:09:25:a5:44:24:f3:ca:
63:3f:61:74:c5:59:fe:bc:c0:ea:81:4c:78:49:5d:19:f4:0c:
dc:30:1e:70:81:82:66:a0:30:ca:5f:e4:4e:87:26:f6:5c:ad:
a2:f2:a7:a6:fa:ad:03:92:15:b0:5c:52:96:54:be:36:f4:c8:
8c:33:f7:fe:7f:cb:26:c9:23:dc:d3:ee:f9:e4:2b:2f:7c:5b:
eb:a5:a3:f9:d6:92:82:91:06:5d:bf:61:57:b5:8c:bf:14:8b:
53:01:bc:b8:5f:b7:3e:94:3e:64:72:34:21:cb:9b:cb:0c:27:
89:12:ee:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:44:48 2025 by rpki-client