Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/bf4a44-bb8a-4651-a0aa-38d292d0f7ec/1/weOkSujPAkPx3_4mhOPdWo_IXXk.mft
File: weOkSujPAkPx3_4mhOPdWo_IXXk.mft (raw, json)
Hash identifier: QvbpLKy9RE/swUMztrh7iObDplxPujmgDmuoP1PbY7I=
Subject key identifier: 88:23:DA:AF:24:99:24:F3:31:4F:9C:FA:36:E2:8A:7F:30:6F:64:B8
Authority key identifier: C1:E3:A4:4A:E8:CF:02:43:F1:DF:FE:26:84:E3:DD:5A:8F:C8:5D:79
Certificate issuer: /CN=c1e3a44ae8cf0243f1dffe2684e3dd5a8fc85d79
Certificate serial: 0194BD17528544636FDFF9DF539A8C91D1D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/weOkSujPAkPx3_4mhOPdWo_IXXk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/bf4a44-bb8a-4651-a0aa-38d292d0f7ec/1/weOkSujPAkPx3_4mhOPdWo_IXXk.mft
Manifest number: 129F
Signing time: Fri 31 Jan 2025 16:00:09 +0000
Manifest this update: Fri 31 Jan 2025 16:00:09 +0000
Manifest next update: Sat 01 Feb 2025 16:00:09 +0000
Files and hashes: 1: 6vU4Y-FLIeFLtxbYrYQxP7rEkJw.roa (hash: OiM+asEBFnJBn2ul9evzYMK3DJnJ0TrJLx139d4J6Rk=)
2: weOkSujPAkPx3_4mhOPdWo_IXXk.crl (hash: Yv78GHBL0tniHbIF2SBveCiwT9Cl6pTpprOQVfDiwpY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:52:85:44:63:6f:df:f9:df:53:9a:8c:91:d1:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1e3a44ae8cf0243f1dffe2684e3dd5a8fc85d79
Validity
Not Before: Jan 31 16:00:09 2025 GMT
Not After : Feb 1 16:00:09 2025 GMT
Subject: CN=8823daaf249924f3314f9cfa36e28a7f306f64b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:0f:1f:e4:ff:46:f7:89:73:48:0c:a5:dc:6d:
7c:00:9f:86:3b:6b:1b:23:a8:af:af:bb:4b:ac:58:
90:19:3c:18:db:7d:41:5e:30:75:95:9b:cd:00:7b:
38:5b:fc:47:77:89:96:54:87:3a:60:3f:f8:bf:cb:
5c:87:ff:48:5d:20:30:72:69:30:1d:95:17:d6:65:
34:99:49:03:74:fc:e5:45:c6:25:9f:9d:73:fd:8d:
da:4d:db:b3:ae:60:04:b0:4c:50:bb:be:6f:24:e1:
0c:b1:e9:1c:29:cb:e4:39:b4:fc:17:b1:b1:6a:1a:
98:35:c9:e3:4c:57:15:87:b5:95:e4:d8:5a:9c:a0:
7c:7f:3d:ef:0d:a6:a6:a7:f7:c9:06:c1:e5:60:df:
83:88:f7:70:80:9f:3d:92:3a:a9:fd:48:66:af:2a:
18:67:7b:c9:c4:cc:33:ce:c4:02:0a:cf:ed:b1:69:
11:4a:de:72:5e:d4:94:33:c5:71:41:6a:da:e1:ff:
af:d9:5d:b1:93:60:03:3e:e8:cf:9f:50:a2:45:4e:
5d:ac:80:87:a4:b9:f7:9e:6b:b1:67:32:29:49:70:
92:12:05:88:b3:8c:00:92:9a:30:99:70:18:bb:bc:
18:50:0a:01:f4:e5:8b:df:10:1a:a2:2e:a0:a2:97:
e3:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:23:DA:AF:24:99:24:F3:31:4F:9C:FA:36:E2:8A:7F:30:6F:64:B8
X509v3 Authority Key Identifier:
keyid:C1:E3:A4:4A:E8:CF:02:43:F1:DF:FE:26:84:E3:DD:5A:8F:C8:5D:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/weOkSujPAkPx3_4mhOPdWo_IXXk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/bf4a44-bb8a-4651-a0aa-38d292d0f7ec/1/weOkSujPAkPx3_4mhOPdWo_IXXk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/bf4a44-bb8a-4651-a0aa-38d292d0f7ec/1/weOkSujPAkPx3_4mhOPdWo_IXXk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:32:af:89:91:7a:12:4a:68:c3:da:a9:92:4c:f9:90:24:0d:
32:ee:df:41:01:01:d0:b0:77:d6:aa:c6:dd:80:67:68:08:55:
d5:26:33:c5:c5:93:d4:65:cd:d9:8d:7f:6b:bb:a3:83:76:7f:
a0:89:f1:0b:60:69:d3:e7:08:02:ad:00:dc:13:d3:89:70:86:
f9:d1:80:11:90:73:6f:d0:bd:34:1b:db:8d:30:c6:7c:47:8f:
17:26:fe:a9:6e:80:14:bd:42:8d:0b:54:c0:30:cc:af:a9:42:
3b:84:b1:ca:19:aa:dc:8d:a3:f4:14:30:32:29:62:2f:62:1c:
29:28:91:74:bb:bd:96:b9:e1:2b:7a:46:d6:d2:86:4d:c9:a8:
a6:d0:d3:fa:20:56:6a:ae:b8:8c:e1:2d:55:52:23:56:62:c4:
96:1c:31:b5:cb:0e:ea:ac:a8:86:3a:37:94:cb:1a:5e:eb:da:
ca:4d:f5:65:ba:30:06:1b:8d:3f:64:61:7e:4b:dd:47:89:19:
15:a0:32:e9:b9:4e:a1:23:4a:23:f0:a7:84:70:9d:16:51:89:
af:19:bc:0a:75:a3:0e:7c:85:e7:79:05:10:5b:e7:95:e7:ce:
66:70:40:28:90:5c:36:f7:66:d8:42:ca:69:42:c8:35:75:df:
44:eb:95:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:23:33 2025 by rpki-client