Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/34d548-e02f-4f82-baeb-bb1df1b3d32d/1/CWM-9lUKgq8xUUapQs81WVV8H-I.mft
File: CWM-9lUKgq8xUUapQs81WVV8H-I.mft (raw, json)
Hash identifier: il6mwm4SqfKx2LA2c330QXW0+bw0dPIiWy/bZQSZz2E=
Subject key identifier: 07:A2:23:76:2A:A3:FF:A2:98:4C:86:75:E0:AB:8E:7A:53:33:72:0D
Authority key identifier: 09:63:3E:F6:55:0A:82:AF:31:51:46:A9:42:CF:35:59:55:7C:1F:E2
Certificate issuer: /CN=09633ef6550a82af315146a942cf3559557c1fe2
Certificate serial: 0194BC72967F80B59F1DE9117F02316B65E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CWM-9lUKgq8xUUapQs81WVV8H-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/34d548-e02f-4f82-baeb-bb1df1b3d32d/1/CWM-9lUKgq8xUUapQs81WVV8H-I.mft
Manifest number: 1395
Signing time: Fri 31 Jan 2025 13:00:13 +0000
Manifest this update: Fri 31 Jan 2025 13:00:13 +0000
Manifest next update: Sat 01 Feb 2025 13:00:13 +0000
Files and hashes: 1: CWM-9lUKgq8xUUapQs81WVV8H-I.crl (hash: WLKSPzvUrc2+t3CrZaKaiMHHpZrBSNoNXiVK5y3x6Yo=)
2: Xr-NcPqiqWD0En7rU2u7z5juqP8.roa (hash: YXFDQGXz9/9G7jKbS0K5dvch1N6iWyFu6xqTpl4Ldmo=)
3: rq_oZa_SZEb32ybWeygCoeNjLls.roa (hash: 9pP/rYQ3u047jI86pJfIRzeAtAxGNXEsEC5OQUjt+V4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:96:7f:80:b5:9f:1d:e9:11:7f:02:31:6b:65:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09633ef6550a82af315146a942cf3559557c1fe2
Validity
Not Before: Jan 31 13:00:13 2025 GMT
Not After : Feb 1 13:00:13 2025 GMT
Subject: CN=07a223762aa3ffa2984c8675e0ab8e7a5333720d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:af:c7:46:a7:13:16:9a:90:d3:bd:3e:bd:e5:
4a:cf:31:1f:d5:4b:1e:91:85:e2:29:a3:91:66:cf:
08:8f:46:6d:55:b0:ac:d4:65:7d:6d:aa:4b:30:af:
e1:d0:20:d5:48:df:a9:4f:07:d9:3f:2b:a2:eb:5d:
f3:63:38:e8:d8:17:61:1b:fd:f0:36:87:52:81:83:
c8:4b:41:44:20:f9:45:3a:6d:f3:16:43:25:af:cd:
fa:ea:ae:9a:0c:a8:72:0a:fe:cf:f4:78:cf:4a:04:
ba:47:7f:f0:4b:15:cc:b1:d1:59:ee:c0:32:b9:07:
fb:8e:21:c2:21:91:63:1e:44:ca:06:b2:0c:95:65:
cb:3e:69:b6:b3:a5:c5:8d:3c:b7:01:19:2d:98:70:
8c:bc:47:09:05:31:3c:32:a5:f4:a0:86:71:96:78:
43:89:de:0e:4d:8a:b0:c4:60:ec:27:28:da:fe:2c:
6d:4a:d9:3a:48:4c:1c:86:44:c4:0c:c8:88:f6:77:
51:04:4a:c4:63:df:8c:10:57:bd:f4:be:ad:6d:5b:
cc:b3:27:eb:0f:3d:23:1d:bd:9a:1b:8d:35:0c:71:
ff:70:64:1f:1f:68:ba:1a:ac:7b:60:c1:22:ca:f1:
78:73:b0:98:bb:51:6f:6e:7a:8e:6a:a7:98:f6:56:
be:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:A2:23:76:2A:A3:FF:A2:98:4C:86:75:E0:AB:8E:7A:53:33:72:0D
X509v3 Authority Key Identifier:
keyid:09:63:3E:F6:55:0A:82:AF:31:51:46:A9:42:CF:35:59:55:7C:1F:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CWM-9lUKgq8xUUapQs81WVV8H-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/34d548-e02f-4f82-baeb-bb1df1b3d32d/1/CWM-9lUKgq8xUUapQs81WVV8H-I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/34d548-e02f-4f82-baeb-bb1df1b3d32d/1/CWM-9lUKgq8xUUapQs81WVV8H-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:8a:67:66:ce:a6:84:7f:9f:ed:f2:3f:7c:e9:5b:a3:d8:49:
5e:82:4b:a4:48:61:21:44:cc:5b:35:19:94:7e:31:d2:27:2d:
3d:23:46:eb:51:9d:9e:e0:30:a6:2e:3a:9b:4a:27:f4:70:69:
96:00:61:83:40:10:0b:18:4d:5a:84:cf:f4:f2:f3:b7:68:35:
5f:7d:37:e7:c7:b5:b1:9e:fd:8f:71:d5:de:bc:08:18:0d:62:
ea:8a:05:f0:ed:24:80:8d:ab:f0:22:f9:ed:b3:59:35:89:f2:
13:d8:86:cd:d6:8c:c6:41:94:8b:1c:dd:00:07:b5:97:09:73:
9b:07:42:db:dd:ac:ea:76:f4:14:63:31:55:74:0b:ad:a4:89:
3a:e8:33:cf:bd:e0:92:c1:1a:4c:30:1e:59:5b:ba:88:f8:96:
ff:fc:38:6d:5f:17:d7:6f:83:c6:6b:da:79:e2:6c:22:3d:bc:
db:6b:58:e0:6a:c5:9a:b6:4c:17:44:1d:4e:24:a1:a6:34:6a:
57:6e:ca:26:4b:04:4d:f5:c6:8c:46:89:b7:c8:49:ad:a6:1a:
44:0e:71:d4:af:fc:cd:88:ce:fe:52:29:cd:a0:06:1c:d4:17:
04:ac:63:c7:1f:ad:ba:61:b1:80:81:47:7a:c1:af:aa:be:84:
46:ec:12:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 22:19:42 2025 by rpki-client