Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/a43c6e-349c-4914-8da3-6c32a6ab1ef2/1/wesHbRZwLH2-qXLily71dqHyyHM.mft
File: wesHbRZwLH2-qXLily71dqHyyHM.mft (raw, json)
Hash identifier: hnrD43LgP08iBrx6wBMhAvIXX+H0FPcum8/Sk7dWGCY=
Subject key identifier: B0:10:8D:0F:DF:14:BA:6B:0A:1D:7D:8C:FE:5A:90:AA:C0:C0:77:24
Authority key identifier: C1:EB:07:6D:16:70:2C:7D:BE:A9:72:E2:97:2E:F5:76:A1:F2:C8:73
Certificate issuer: /CN=c1eb076d16702c7dbea972e2972ef576a1f2c873
Certificate serial: 0194BC7301543C6E0AD0394FFEFF518DC2EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wesHbRZwLH2-qXLily71dqHyyHM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/a43c6e-349c-4914-8da3-6c32a6ab1ef2/1/wesHbRZwLH2-qXLily71dqHyyHM.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 13:00:40 +0000
Manifest this update: Fri 31 Jan 2025 13:00:40 +0000
Manifest next update: Sat 01 Feb 2025 13:00:40 +0000
Files and hashes: 1: 2UZkcfvHBD0nlLVShbBCdFbgaEM.roa (hash: HqtlmZWEJIZpNtC58lOjwfZX2SNzuDVgWAhhp7ppdfQ=)
2: frLrA0keoZHqLNQ6H6mr7HttS6s.roa (hash: Mfy5d8aC18pzCzwCyFVqYxGvs9LiQ6tdwOia7qFz85A=)
3: suBVFY86lLLNw-jyyfI-FYfhvNA.roa (hash: 81WEqdV7PNWoCGw6D45g6WF3xPhoMsG1WXe8GERJGtA=)
4: twmga9_E_KzkAm9sOwBfykbdGZk.roa (hash: BS47sv4rbsHbtLhVm7asDcUh2pqMrmQZsTAWkFmOWjE=)
5: wesHbRZwLH2-qXLily71dqHyyHM.crl (hash: pg/RRMK9OB/kJ62OcZ3VdIFTAkg3L8LglTOB/Skpg7U=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:01:54:3c:6e:0a:d0:39:4f:fe:ff:51:8d:c2:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1eb076d16702c7dbea972e2972ef576a1f2c873
Validity
Not Before: Jan 31 13:00:40 2025 GMT
Not After : Feb 1 13:00:40 2025 GMT
Subject: CN=b0108d0fdf14ba6b0a1d7d8cfe5a90aac0c07724
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:31:85:cb:e0:65:c3:b1:71:96:a4:b1:c2:fe:
5e:e4:15:ae:86:38:8c:7c:9b:f0:cb:3b:b7:97:e1:
0b:64:4b:f7:e3:77:e1:65:f9:d7:41:1e:32:b6:d2:
59:3b:cd:19:23:49:b5:e8:d8:69:45:1f:f9:08:20:
61:a1:c9:d6:91:49:3c:13:b7:69:5c:4d:2f:20:d0:
ce:0e:c7:00:63:dc:54:77:cb:d9:ed:57:bb:4b:74:
74:8c:89:22:b3:81:36:73:d8:51:e6:0a:85:b8:0d:
df:ae:b9:d0:34:04:9f:ef:96:f1:50:a7:74:66:97:
d0:b1:0b:db:76:9c:79:79:f0:4f:3a:fb:b9:f9:b2:
f6:a7:83:ec:5b:6b:1e:bc:53:fe:5e:93:01:90:59:
8a:b9:0a:4e:70:d5:b3:f2:19:b8:f2:53:2d:0d:d3:
2f:18:0a:95:99:bc:8f:cb:0f:a6:da:2c:4b:70:69:
74:0e:79:08:73:a2:e1:26:3b:01:ec:a4:f6:69:5d:
cc:3f:6f:7c:24:86:0b:df:d2:6d:75:20:10:da:8a:
44:5f:0f:c5:83:07:f9:51:9d:1f:ee:01:a8:26:b1:
b2:fc:5e:cc:4f:8e:ee:1d:de:27:9b:73:85:ee:1c:
df:8e:eb:9f:1a:a4:b3:4a:d7:db:a3:01:5a:e8:39:
ee:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:10:8D:0F:DF:14:BA:6B:0A:1D:7D:8C:FE:5A:90:AA:C0:C0:77:24
X509v3 Authority Key Identifier:
keyid:C1:EB:07:6D:16:70:2C:7D:BE:A9:72:E2:97:2E:F5:76:A1:F2:C8:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wesHbRZwLH2-qXLily71dqHyyHM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/a43c6e-349c-4914-8da3-6c32a6ab1ef2/1/wesHbRZwLH2-qXLily71dqHyyHM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/a43c6e-349c-4914-8da3-6c32a6ab1ef2/1/wesHbRZwLH2-qXLily71dqHyyHM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:f6:8d:9a:05:18:fa:59:95:64:ab:d6:fe:42:3e:60:a2:d8:
e3:67:06:4b:de:58:81:95:e9:e9:74:dd:81:d1:6f:1c:80:f6:
75:85:c1:76:d8:ab:3e:94:17:0f:23:e2:f7:04:18:f2:b3:e3:
b9:14:1b:47:aa:97:7f:48:73:f6:eb:04:0d:7d:93:a0:3b:78:
de:51:e9:55:b9:48:b2:ce:49:d5:40:19:ca:c7:a3:39:87:4b:
6f:a3:fb:0b:73:55:1c:ed:a0:35:20:7a:95:fc:92:57:c4:02:
06:d8:80:c0:ac:99:86:04:13:e9:13:ff:d1:d9:80:a1:ff:86:
49:1b:21:46:5d:f6:45:40:ac:dd:41:31:14:7d:7c:9d:80:be:
3a:49:e2:a2:4e:d5:69:eb:33:4d:e9:4b:ce:54:38:2b:7a:5c:
74:10:71:6d:04:b7:88:2b:ba:6b:ce:a2:f1:a4:42:11:7d:4b:
d2:35:b3:e9:ff:18:4e:f1:7d:db:b2:57:65:09:5f:ec:21:88:
1d:fb:a7:57:18:06:d6:ee:6d:db:3a:b5:a9:cd:2c:a4:8b:06:
4c:f7:85:05:61:79:0b:42:fc:a1:9e:20:26:e7:fd:38:a7:1f:
10:d9:77:59:9a:25:b2:0e:b6:af:25:01:00:be:2a:e0:ec:45:
78:88:87:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:42:17 2025 by rpki-client