Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/daf87d-dfa4-4b14-93e2-b05db0bc97c4/1/15WnJZ-VNxhkk_SC1VzvS2SxxDU.mft
File: 15WnJZ-VNxhkk_SC1VzvS2SxxDU.mft (raw, json)
Hash identifier: 1RSR4l1720zI5aOYA/qffYbW7bLTf+66J0PbwZey3Js=
Subject key identifier: 89:81:8F:C9:A6:ED:DD:2F:3F:AC:80:EA:99:03:31:11:AB:61:E7:B9
Authority key identifier: D7:95:A7:25:9F:95:37:18:64:93:F4:82:D5:5C:EF:4B:64:B1:C4:35
Certificate issuer: /CN=d795a7259f9537186493f482d55cef4b64b1c435
Certificate serial: 0194BC3C55D94E12BB1219EAD6EA19FC0DF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/15WnJZ-VNxhkk_SC1VzvS2SxxDU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/daf87d-dfa4-4b14-93e2-b05db0bc97c4/1/15WnJZ-VNxhkk_SC1VzvS2SxxDU.mft
Manifest number: 0C2E
Signing time: Fri 31 Jan 2025 12:00:58 +0000
Manifest this update: Fri 31 Jan 2025 12:00:58 +0000
Manifest next update: Sat 01 Feb 2025 12:00:58 +0000
Files and hashes: 1: 15WnJZ-VNxhkk_SC1VzvS2SxxDU.crl (hash: zYSoKJF3u38fX2FxQ7rE2F1DejLi54lDdLmrvEDm5bo=)
2: ZllkD09XX0UjmpDgviQyHJhN0tQ.roa (hash: cXj6wMyOUxluunshyfWaumFrSwMD+oIYxgPqs4SCj1I=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:55:d9:4e:12:bb:12:19:ea:d6:ea:19:fc:0d:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d795a7259f9537186493f482d55cef4b64b1c435
Validity
Not Before: Jan 31 12:00:58 2025 GMT
Not After : Feb 1 12:00:58 2025 GMT
Subject: CN=89818fc9a6eddd2f3fac80ea99033111ab61e7b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:f2:51:cc:60:85:5f:0f:c8:95:38:47:bc:d3:
2f:d7:3b:40:e7:bd:d2:28:40:ef:46:ee:04:0a:91:
0d:a9:18:55:b7:c5:53:eb:aa:65:f1:85:50:01:3c:
7a:9b:62:4f:d2:2d:be:0d:6c:3a:b0:7e:c8:e3:79:
21:42:3b:de:2f:f5:58:0b:e2:56:23:c9:f6:9b:fd:
0a:37:60:d3:7c:5d:20:f2:50:03:89:17:b5:b4:45:
15:b3:56:24:88:cb:c4:d6:ce:30:66:96:eb:bc:5e:
82:64:d6:ad:6b:91:52:ea:20:94:31:8e:05:b4:d5:
f7:f0:7c:1d:b1:a7:dc:74:27:7e:f4:f9:ca:a1:0f:
71:ca:fd:a1:10:c8:8b:f5:f1:95:9c:30:ae:07:5f:
bf:59:b4:fa:36:7a:35:d4:d6:5c:98:d5:4d:29:0d:
f6:85:52:e7:f5:93:41:eb:bc:96:bd:52:1a:e2:3d:
ab:7e:e9:49:8b:99:ac:38:ca:04:b3:b8:2d:43:6b:
da:0c:13:b0:54:d4:45:1a:3f:85:31:29:09:45:d5:
87:41:0e:d4:77:82:39:65:2f:42:41:8b:b8:7b:c5:
3d:10:53:9f:53:f5:f3:93:71:f2:fb:b7:ce:bd:cb:
d6:2b:c9:15:4b:f7:3d:86:b6:4a:1d:3c:c3:24:77:
50:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:81:8F:C9:A6:ED:DD:2F:3F:AC:80:EA:99:03:31:11:AB:61:E7:B9
X509v3 Authority Key Identifier:
keyid:D7:95:A7:25:9F:95:37:18:64:93:F4:82:D5:5C:EF:4B:64:B1:C4:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/15WnJZ-VNxhkk_SC1VzvS2SxxDU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/daf87d-dfa4-4b14-93e2-b05db0bc97c4/1/15WnJZ-VNxhkk_SC1VzvS2SxxDU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/daf87d-dfa4-4b14-93e2-b05db0bc97c4/1/15WnJZ-VNxhkk_SC1VzvS2SxxDU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:80:2a:e0:94:11:b8:54:e7:37:46:1a:b7:d6:0e:4c:d8:86:
44:77:cb:87:d6:c0:59:db:7c:58:7f:bf:f5:01:0a:43:48:00:
5a:01:2f:28:cb:47:f3:91:04:09:ae:7d:f9:60:32:09:ab:95:
e0:e3:ee:93:cd:9e:48:44:14:63:3e:73:b7:4e:1d:f2:43:38:
fc:e1:a5:6a:77:11:1c:2e:f8:52:68:3f:83:fc:d7:04:09:81:
7c:cd:fb:df:79:76:dd:10:39:d2:db:91:80:15:f4:94:c7:06:
be:c0:e5:dd:f2:cb:d1:47:02:21:ce:6f:4c:48:75:2b:17:9c:
4a:ca:3e:85:c5:01:0a:17:28:22:bb:10:d6:42:45:aa:4c:0c:
17:7e:71:19:ab:0c:5c:ae:b8:e9:ee:96:17:ec:e6:26:55:e0:
92:84:6b:24:a8:64:f7:d7:9f:1b:9f:24:7b:bf:29:8e:57:eb:
13:0b:70:bd:f4:16:27:6e:54:d6:34:25:ed:e6:de:ec:d6:f0:
19:a4:da:4e:4f:a8:63:5b:bb:32:f7:64:94:13:c6:ae:49:f9:
73:0e:af:79:e7:c9:8b:76:56:fb:37:ab:58:c7:47:e8:61:d6:
7b:4f:1f:c5:05:3a:59:df:73:c2:0c:39:cf:0e:b8:cd:e6:b3:
eb:32:cf:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 20:23:08 2025 by rpki-client