Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/ddc9a1-5892-44d1-b490-267da91fbff8/1/wwrvOWOU6llQ3HlWqxv0kTZGIqQ.mft
File: wwrvOWOU6llQ3HlWqxv0kTZGIqQ.mft (raw, json)
Hash identifier: bltnC/Pcqu7xVCNEl91ZGmW3YFOVqvIzQa5bG3LPbpM=
Subject key identifier: 85:C5:AF:0E:21:75:2E:98:22:41:8C:34:17:15:68:EA:61:53:56:37
Authority key identifier: C3:0A:EF:39:63:94:EA:59:50:DC:79:56:AB:1B:F4:91:36:46:22:A4
Certificate issuer: /CN=c30aef396394ea5950dc7956ab1bf491364622a4
Certificate serial: 0194BC050A1989070BF240310E08BC8EC886
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wwrvOWOU6llQ3HlWqxv0kTZGIqQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/ddc9a1-5892-44d1-b490-267da91fbff8/1/wwrvOWOU6llQ3HlWqxv0kTZGIqQ.mft
Manifest number: 1384
Signing time: Fri 31 Jan 2025 11:00:34 +0000
Manifest this update: Fri 31 Jan 2025 11:00:34 +0000
Manifest next update: Sat 01 Feb 2025 11:00:34 +0000
Files and hashes: 1: rZbNK2xJ4XhKao8afy4CimeXVSk.roa (hash: DH234KafhTlCh4Rrjfu8Y3PnZSWa2Wt2QfsLpMy42vQ=)
2: wwrvOWOU6llQ3HlWqxv0kTZGIqQ.crl (hash: kulDyoU1J0v17vTIhaCv6OKNgPwfd2rnHUza3nuQ3v0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:0a:19:89:07:0b:f2:40:31:0e:08:bc:8e:c8:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c30aef396394ea5950dc7956ab1bf491364622a4
Validity
Not Before: Jan 31 11:00:34 2025 GMT
Not After : Feb 1 11:00:34 2025 GMT
Subject: CN=85c5af0e21752e9822418c34171568ea61535637
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:87:42:f7:29:21:91:7a:95:f4:f5:82:71:c1:
06:e9:a1:f7:07:9b:07:4f:1f:94:5f:68:d7:23:d7:
28:f7:9f:ba:cd:eb:59:c7:6c:c7:9f:e2:cc:49:f5:
be:e6:f1:39:4a:db:cd:f4:b7:fe:81:6c:6d:28:82:
ef:fd:0c:03:43:b0:86:bb:31:1e:68:e8:51:c9:d8:
3b:2e:26:be:26:88:11:50:78:68:42:7f:22:a9:82:
af:80:f3:60:ad:39:e8:50:b3:f6:c1:a5:08:21:2a:
f2:97:c0:48:35:f4:19:42:a8:5b:52:bf:5f:bf:79:
e3:a1:c6:1f:0a:30:38:3b:d5:90:86:68:50:43:8f:
2e:a5:e9:79:a6:ed:a7:13:5a:51:f8:8f:13:3b:e5:
68:12:f4:0e:39:88:a1:33:35:5f:6d:34:c9:f5:fb:
70:ab:3f:70:5c:c1:7e:89:73:21:4b:df:24:32:ba:
6b:89:6b:a9:1d:14:6e:a8:cc:b9:86:14:92:fd:0e:
b0:0b:5c:f1:da:a6:18:20:48:14:b6:c0:c8:8d:a6:
f2:fc:9d:79:a6:f0:1c:36:b9:4b:91:99:7b:6c:b4:
e5:3c:39:5a:ee:a0:9c:49:46:f5:ed:5e:19:74:45:
ce:f6:b3:09:dc:69:5d:9c:b1:b3:72:92:a0:c1:c1:
e3:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:C5:AF:0E:21:75:2E:98:22:41:8C:34:17:15:68:EA:61:53:56:37
X509v3 Authority Key Identifier:
keyid:C3:0A:EF:39:63:94:EA:59:50:DC:79:56:AB:1B:F4:91:36:46:22:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wwrvOWOU6llQ3HlWqxv0kTZGIqQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/ddc9a1-5892-44d1-b490-267da91fbff8/1/wwrvOWOU6llQ3HlWqxv0kTZGIqQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/ddc9a1-5892-44d1-b490-267da91fbff8/1/wwrvOWOU6llQ3HlWqxv0kTZGIqQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:87:36:a0:6e:62:d2:84:af:8f:bb:26:73:06:cb:e6:34:81:
05:b0:6e:d7:c1:50:fa:43:a1:a8:b0:b3:4c:ad:96:9f:93:f1:
8f:4b:6a:02:71:03:cc:93:e0:59:00:95:69:bc:5b:1e:f0:50:
3f:bf:47:74:47:e5:c0:a9:a2:0f:1d:87:98:51:ac:5d:d8:b1:
f8:dd:41:4a:1f:fa:95:7b:24:5a:09:94:43:8b:d5:1c:56:ca:
94:91:13:5d:51:c8:69:ba:aa:40:cd:f0:0a:71:3a:61:67:7b:
26:9a:8d:39:99:0f:83:82:61:24:2d:39:58:53:49:87:a0:2a:
09:28:56:3a:de:5b:4d:21:0c:3c:5c:da:64:62:c7:ed:0a:f0:
68:4e:5a:db:aa:ea:41:f8:36:e5:da:08:d0:1b:71:63:52:24:
a6:e5:29:16:9e:62:fe:44:6f:d0:74:1e:53:df:5c:3d:ae:1f:
3d:c9:3a:65:51:b5:b8:a2:19:fc:0a:c8:ae:da:61:b3:04:9e:
4e:5b:e7:ec:cb:f4:c5:7b:20:25:b4:48:bc:89:fb:09:1e:df:
1a:15:93:6b:13:c0:d2:27:18:7b:27:2e:1d:5a:99:d8:de:32:
79:5d:26:e4:a5:73:97:2e:da:00:f4:04:c7:1d:db:7e:3e:b3:
04:09:8e:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:53:59 2025 by rpki-client