Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/b1ec5c-1770-4b1a-894b-c2611b7420f2/1/wzdo22Ch8ho07lwqNDVFYXvvi0A.mft
File: wzdo22Ch8ho07lwqNDVFYXvvi0A.mft (raw, json)
Hash identifier: uyBl4kq7wh1mec8eH8D8KkdZ1FPpNSrk3MhS26GfIjs=
Subject key identifier: A4:C2:D9:86:A3:CB:36:BC:AD:CD:24:18:02:43:00:70:73:B9:5D:D0
Authority key identifier: C3:37:68:DB:60:A1:F2:1A:34:EE:5C:2A:34:35:45:61:7B:EF:8B:40
Certificate issuer: /CN=c33768db60a1f21a34ee5c2a343545617bef8b40
Certificate serial: 0194BD17645D6FEDB16095CAC1EBD982D399
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wzdo22Ch8ho07lwqNDVFYXvvi0A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/b1ec5c-1770-4b1a-894b-c2611b7420f2/1/wzdo22Ch8ho07lwqNDVFYXvvi0A.mft
Manifest number: 1426
Signing time: Fri 31 Jan 2025 16:00:14 +0000
Manifest this update: Fri 31 Jan 2025 16:00:14 +0000
Manifest next update: Sat 01 Feb 2025 16:00:14 +0000
Files and hashes: 1: wzdo22Ch8ho07lwqNDVFYXvvi0A.crl (hash: SlKjSid7RfzVhXHw9cWk+6s6GGR9BFL8R0GUSmB2lso=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:64:5d:6f:ed:b1:60:95:ca:c1:eb:d9:82:d3:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c33768db60a1f21a34ee5c2a343545617bef8b40
Validity
Not Before: Jan 31 16:00:14 2025 GMT
Not After : Feb 1 16:00:14 2025 GMT
Subject: CN=a4c2d986a3cb36bcadcd24180243007073b95dd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:f1:e0:f9:56:20:fa:ae:24:6c:2f:8e:24:02:
6a:e5:12:dc:2d:27:2d:57:15:89:e5:df:33:cc:9f:
8d:ae:91:70:8d:1b:ea:c9:e1:3c:75:13:39:99:26:
79:cd:55:89:67:9e:30:47:85:ee:d9:85:8d:95:fb:
e9:1f:87:03:15:9a:04:ad:a4:8c:92:50:1c:e4:64:
d9:18:4e:84:39:52:56:b6:35:98:10:68:9a:4e:42:
ac:f5:c2:d1:3f:d4:23:96:75:4b:86:a8:bf:b5:e0:
ac:b7:61:d0:25:6e:44:df:87:bb:9f:d2:4e:84:2b:
8f:cf:8f:5d:de:39:e8:54:86:3c:4f:d8:c5:47:ca:
db:31:ac:0c:d6:0c:1e:ee:12:06:c9:e8:e9:f3:7d:
af:17:cf:5d:f9:50:de:30:9e:ca:5d:87:a7:e9:a6:
3c:fc:76:21:82:5a:8f:f2:9c:0c:d1:5b:75:99:a2:
e2:b8:ad:cf:48:63:28:3a:3f:7c:98:9b:3f:2c:31:
7e:d1:b5:cf:eb:dc:d8:80:c8:36:af:29:6d:54:d0:
93:54:de:d8:1c:33:21:df:9d:8c:7b:f2:fd:10:5a:
06:dc:c1:03:cd:5f:11:8f:df:a9:8f:49:b9:f2:49:
7a:6f:85:d2:fa:14:78:36:66:c2:5c:26:e3:f1:c3:
58:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:C2:D9:86:A3:CB:36:BC:AD:CD:24:18:02:43:00:70:73:B9:5D:D0
X509v3 Authority Key Identifier:
keyid:C3:37:68:DB:60:A1:F2:1A:34:EE:5C:2A:34:35:45:61:7B:EF:8B:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wzdo22Ch8ho07lwqNDVFYXvvi0A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/b1ec5c-1770-4b1a-894b-c2611b7420f2/1/wzdo22Ch8ho07lwqNDVFYXvvi0A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/b1ec5c-1770-4b1a-894b-c2611b7420f2/1/wzdo22Ch8ho07lwqNDVFYXvvi0A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:83:6f:d3:a5:b3:12:93:3e:c2:40:45:28:42:51:70:f8:31:
ab:1b:a4:96:53:51:01:0b:4b:17:29:0e:5d:7f:d2:31:a0:10:
81:89:14:1b:fb:45:8a:3e:ff:36:51:3c:3c:ea:a2:a3:0b:ed:
77:2d:12:ac:2c:4a:6f:f5:cd:b4:4b:b0:b3:23:09:07:fc:54:
9d:aa:b6:28:ea:63:c2:d7:3c:5f:d8:b9:4b:35:e0:a1:7d:67:
6d:d2:ac:5b:66:83:f5:a9:a5:23:6d:99:0e:27:47:4a:5f:d2:
0d:cc:4a:fe:16:c5:fa:cf:e4:c6:bb:22:d3:a6:41:90:55:eb:
6b:e5:68:dc:e7:e6:0c:54:5b:90:68:65:f3:b9:dc:9a:a5:27:
d8:f9:59:83:02:14:e5:3f:83:50:39:74:b8:59:bd:e7:6f:c4:
3c:df:52:d6:e6:05:0f:f8:c5:0e:4d:9b:49:01:90:4a:6b:67:
1d:a0:89:c0:62:fc:c7:ac:af:1e:ce:b4:2a:87:f3:dc:c8:bf:
94:5e:51:39:b4:9e:ad:45:89:25:90:51:e6:f4:33:e3:40:ae:
c5:4b:a2:c9:db:40:44:fa:7c:d3:27:5e:19:97:83:7a:f9:6a:
04:63:7a:cb:e3:cc:e0:3f:46:c2:fc:90:29:b7:36:3c:75:af:
5b:e8:a2:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:17 2025 by rpki-client