Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/f73458-5ce0-4ac2-9167-71aea54af858/1/wcbkBg4mngi5NmYHAsl4ros6GZY.mft
File: wcbkBg4mngi5NmYHAsl4ros6GZY.mft (raw, json)
Hash identifier: 5CDkjpY6QQN78F/uaHVoyQMjDcsaV0eylWRKIecEAbg=
Subject key identifier: 2E:2E:BF:3F:9B:F8:E4:CC:1D:CA:8B:64:DB:B2:32:CD:EE:D3:F5:84
Authority key identifier: C1:C6:E4:06:0E:26:9E:08:B9:36:66:07:02:C9:78:AE:8B:3A:19:96
Certificate issuer: /CN=c1c6e4060e269e08b936660702c978ae8b3a1996
Certificate serial: 0194BD4E8A17CC50DB4A5225EA436D66B365
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wcbkBg4mngi5NmYHAsl4ros6GZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/f73458-5ce0-4ac2-9167-71aea54af858/1/wcbkBg4mngi5NmYHAsl4ros6GZY.mft
Manifest number: 0211
Signing time: Fri 31 Jan 2025 17:00:28 +0000
Manifest this update: Fri 31 Jan 2025 17:00:28 +0000
Manifest next update: Sat 01 Feb 2025 17:00:28 +0000
Files and hashes: 1: nvT_HNaheF7AuMYSBVzSYd3DVGE.roa (hash: f440eLAYfJKuxJN3bKdcZpOgumvQKi1Mg+JrUe7gMQo=)
2: wcbkBg4mngi5NmYHAsl4ros6GZY.crl (hash: yqJ2XhoqmfR65rrnTZeD7iAqwQ6fzYuk1m2xOnVZyxU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:8a:17:cc:50:db:4a:52:25:ea:43:6d:66:b3:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c6e4060e269e08b936660702c978ae8b3a1996
Validity
Not Before: Jan 31 17:00:28 2025 GMT
Not After : Feb 1 17:00:28 2025 GMT
Subject: CN=2e2ebf3f9bf8e4cc1dca8b64dbb232cdeed3f584
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:2e:4f:bf:73:59:d9:36:65:f5:39:0d:da:8f:
56:f1:61:67:7a:d9:87:c5:08:64:7e:fc:cd:8b:56:
92:b5:72:dd:ea:04:3f:d2:10:cf:12:0b:0b:4f:2a:
31:50:17:28:4f:d9:e3:c0:6b:27:87:28:8d:3f:fd:
76:36:6e:00:76:c3:dd:eb:e6:9f:a1:d7:53:5b:32:
ab:04:03:6b:e3:27:f1:21:c9:db:76:24:5f:69:56:
37:29:da:b8:44:e0:13:d8:63:1a:3b:57:a5:a9:2e:
f9:4a:a8:d3:86:90:6b:d8:44:10:63:d1:75:7d:6e:
9e:e6:7e:a4:ec:24:23:50:ae:5a:dd:07:b4:ea:45:
2c:c8:63:ca:e3:66:4a:4c:a6:93:a6:85:4f:e9:42:
85:e9:55:91:06:c5:3f:3d:87:d0:22:20:5d:72:c7:
8f:be:0b:e5:88:1e:f9:bb:35:4c:7d:c6:3f:12:9d:
b5:74:7e:9b:89:da:04:12:2c:60:8a:94:2a:ec:de:
86:c3:1a:34:18:b4:fb:55:f1:9e:8d:96:ff:fa:7c:
9e:62:b6:30:5e:09:ff:da:15:af:c7:27:60:33:79:
f3:6c:9a:4c:be:b3:77:30:70:46:ad:aa:aa:d9:d9:
ba:95:c3:60:7f:e8:d2:4b:ad:f9:cd:98:6e:ac:6b:
5b:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:2E:BF:3F:9B:F8:E4:CC:1D:CA:8B:64:DB:B2:32:CD:EE:D3:F5:84
X509v3 Authority Key Identifier:
keyid:C1:C6:E4:06:0E:26:9E:08:B9:36:66:07:02:C9:78:AE:8B:3A:19:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wcbkBg4mngi5NmYHAsl4ros6GZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/f73458-5ce0-4ac2-9167-71aea54af858/1/wcbkBg4mngi5NmYHAsl4ros6GZY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/f73458-5ce0-4ac2-9167-71aea54af858/1/wcbkBg4mngi5NmYHAsl4ros6GZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:52:57:1a:e4:ec:75:f6:66:c5:d0:83:2b:a7:15:bc:1d:04:
2c:69:82:50:76:6f:89:56:24:c9:ec:29:e5:5f:25:8d:d5:ee:
ae:a3:f6:97:34:dc:1b:4a:a0:16:b5:13:bf:57:fe:e5:71:67:
45:16:f2:d5:f3:98:5d:b1:aa:b2:7e:a8:8a:04:b7:0a:db:93:
f4:33:75:ff:cb:99:8d:07:18:46:db:8c:2e:6e:94:56:0c:35:
b9:6e:d7:0f:53:66:4c:0e:d9:b7:51:52:c3:fc:bd:dd:77:84:
48:21:23:2f:93:fc:73:68:bb:bf:62:46:29:7b:7c:74:61:1c:
4f:c9:df:80:b8:13:48:74:ab:77:01:e3:5a:d0:64:48:fe:f7:
1c:2e:29:82:37:49:96:42:81:39:a4:ec:33:10:1d:ec:5b:0a:
4d:ca:84:f0:c7:8e:3a:3a:97:20:8b:bc:f3:f4:11:c1:6a:e2:
c9:6f:9d:1d:f2:76:e6:b2:b6:73:35:06:f5:6b:ec:40:98:56:
f1:ad:c5:b5:15:50:de:d9:ef:c1:6e:5c:3c:86:6b:53:81:12:
ea:41:70:de:f6:79:5a:d8:89:13:97:df:12:21:75:25:1a:30:
ec:a4:fd:1d:6a:77:4b:10:d9:23:f5:86:02:86:e9:72:5d:93:
37:43:ef:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:44:45 2025 by rpki-client