Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/be306f-0f8c-4674-93ff-2a9712bf603c/1/wAk1GFxoA2oPrt7qqmv-9OYqDJM.mft
File: wAk1GFxoA2oPrt7qqmv-9OYqDJM.mft (raw, json)
Hash identifier: DmjWdi6njJkURlLDAby60AbO1+OrgjJp5Gm4EH+T6Is=
Subject key identifier: 04:30:A5:95:10:92:EB:C6:D8:F5:30:15:37:1C:AB:F9:82:FD:79:06
Authority key identifier: C0:09:35:18:5C:68:03:6A:0F:AE:DE:EA:AA:6B:FE:F4:E6:2A:0C:93
Certificate issuer: /CN=c00935185c68036a0faedeeaaa6bfef4e62a0c93
Certificate serial: 0194BC04DA1D972B813FB50A2E28FF64830C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wAk1GFxoA2oPrt7qqmv-9OYqDJM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/be306f-0f8c-4674-93ff-2a9712bf603c/1/wAk1GFxoA2oPrt7qqmv-9OYqDJM.mft
Manifest number: 04A1
Signing time: Fri 31 Jan 2025 11:00:21 +0000
Manifest this update: Fri 31 Jan 2025 11:00:21 +0000
Manifest next update: Sat 01 Feb 2025 11:00:21 +0000
Files and hashes: 1: 6zfU2J2wR6MMPAQDPcdRmDUSTTk.roa (hash: qvQ90YxdjeGEsA7jHHHCLNHaXx9teWbipOiBvb0hjRc=)
2: wAk1GFxoA2oPrt7qqmv-9OYqDJM.crl (hash: Yx3AQcAxjfc90lhPRlcy8suW12HW/62+RkxeXwJElGE=)
3: x0gusjZxaAiftvAcjczux1Ius_E.roa (hash: HFa+GGzqn2pKQb0OIJEk/YaY1MmpeAOG1mYH0pjtvqc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:da:1d:97:2b:81:3f:b5:0a:2e:28:ff:64:83:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c00935185c68036a0faedeeaaa6bfef4e62a0c93
Validity
Not Before: Jan 31 11:00:21 2025 GMT
Not After : Feb 1 11:00:21 2025 GMT
Subject: CN=0430a5951092ebc6d8f53015371cabf982fd7906
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:8f:cc:82:a5:a3:08:5a:9c:d6:5b:d0:1a:82:
8a:e7:96:e4:c7:24:90:18:59:a1:ab:28:d8:5c:7b:
8e:e4:52:d5:64:7b:e4:cd:20:39:d1:6b:10:ac:75:
14:2a:ea:b3:f4:f6:ef:1c:04:66:38:30:be:58:58:
24:f5:60:f5:f1:78:90:65:93:ad:e5:92:5f:87:09:
f5:48:c6:16:9f:a9:9e:bd:c3:62:39:2b:4d:17:d7:
66:1a:08:af:fd:d1:09:18:c4:c8:04:4c:93:df:9f:
90:98:cf:eb:b3:d4:d9:f1:d9:b3:39:43:60:fb:83:
c1:26:02:0b:28:0b:f9:0a:ec:5e:62:6d:d0:97:87:
0e:6d:bb:95:72:3e:20:2c:65:99:af:9a:11:63:a2:
b4:46:5f:53:50:6c:4d:ce:70:c9:27:e1:7b:f8:08:
97:71:ef:95:19:16:f8:e7:8f:22:38:20:eb:56:48:
9e:e8:81:4e:f7:ec:50:87:f1:48:55:91:41:5c:ae:
a8:9c:7a:c1:6d:f5:77:13:ee:d1:63:e2:b5:b4:3c:
12:24:77:96:89:7f:bb:a8:25:27:ff:c4:b1:95:8c:
f4:b2:e2:24:3c:28:1c:86:ed:77:23:94:08:1e:c3:
14:6d:3c:dc:ca:69:77:f0:84:41:32:0f:8a:27:73:
f4:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:30:A5:95:10:92:EB:C6:D8:F5:30:15:37:1C:AB:F9:82:FD:79:06
X509v3 Authority Key Identifier:
keyid:C0:09:35:18:5C:68:03:6A:0F:AE:DE:EA:AA:6B:FE:F4:E6:2A:0C:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wAk1GFxoA2oPrt7qqmv-9OYqDJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/be306f-0f8c-4674-93ff-2a9712bf603c/1/wAk1GFxoA2oPrt7qqmv-9OYqDJM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/be306f-0f8c-4674-93ff-2a9712bf603c/1/wAk1GFxoA2oPrt7qqmv-9OYqDJM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:ff:c3:f8:cb:50:4d:d5:bf:a7:3b:6d:0a:68:17:63:af:cd:
86:82:61:43:01:91:4d:60:0f:80:9d:a7:b8:05:58:f7:db:0a:
01:ed:21:89:ee:00:2e:18:fd:00:ff:b1:1b:09:a8:e3:2a:08:
06:58:6e:dc:12:c0:e1:06:32:f5:b8:49:9d:f1:15:c4:3e:9c:
ed:bf:0c:be:ad:f4:95:86:81:83:9c:14:b8:81:e0:10:8f:38:
ca:9c:75:40:b2:6d:44:8a:d0:e8:85:54:b8:a6:79:9c:0e:d8:
2f:17:a4:37:48:04:a7:39:b6:ac:56:55:77:3a:b7:57:81:b3:
4d:f2:48:42:1a:79:08:af:4e:ac:71:ba:3f:40:99:6d:fb:60:
ee:45:bb:86:c5:3e:77:de:3f:32:1d:4f:50:97:47:0b:8b:39:
44:24:5c:13:6b:47:34:d6:cd:a5:81:12:7a:fa:c9:a5:b5:d8:
b0:e9:8d:b3:44:86:32:53:9f:0b:42:81:36:f1:cd:8c:c7:35:
f5:cc:c8:d7:e1:a5:58:66:9d:1d:5e:00:5c:58:78:8c:98:56:
00:25:6a:d6:5a:73:29:3e:5b:91:40:37:27:e5:cf:bf:25:5f:
b3:4c:4b:49:85:26:4d:00:77:bf:f5:33:4f:f9:bb:ab:f4:05:
47:9b:9f:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:01:48 2025 by rpki-client