
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/8dbca3-6934-44ae-8fc9-2f8d4240c436/1/w16ED0bhmFswYQC1wTG7uGO33AY.mft
File: w16ED0bhmFswYQC1wTG7uGO33AY.mft (raw, json)
Hash identifier: je8W7+xxISEGfENfAN8WGid8AgQZUC/N6Zf9Y72ZZ28=
Subject key identifier: C9:71:AB:BA:F4:FD:75:47:0C:DB:CB:26:5D:07:A6:90:24:3F:17:D6
Authority key identifier: C3:5E:84:0F:46:E1:98:5B:30:61:00:B5:C1:31:BB:B8:63:B7:DC:06
Certificate issuer: /CN=c35e840f46e1985b306100b5c131bbb863b7dc06
Certificate serial: 0194BD17AF524D430542FBFE4AF56147551B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w16ED0bhmFswYQC1wTG7uGO33AY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/8dbca3-6934-44ae-8fc9-2f8d4240c436/1/w16ED0bhmFswYQC1wTG7uGO33AY.mft
Manifest number: 12AC
Signing time: Fri 31 Jan 2025 16:00:33 +0000
Manifest this update: Fri 31 Jan 2025 16:00:33 +0000
Manifest next update: Sat 01 Feb 2025 16:00:33 +0000
Files and hashes: 1: w16ED0bhmFswYQC1wTG7uGO33AY.crl (hash: toHwq7ch4PAM/rIlb3UuU0/zeTv6Dovgq0YixUnsqi8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:af:52:4d:43:05:42:fb:fe:4a:f5:61:47:55:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c35e840f46e1985b306100b5c131bbb863b7dc06
Validity
Not Before: Jan 31 16:00:33 2025 GMT
Not After : Feb 1 16:00:33 2025 GMT
Subject: CN=c971abbaf4fd75470cdbcb265d07a690243f17d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:2e:c5:c4:d0:da:90:8e:70:98:f0:66:fc:69:
9c:e4:dd:98:82:2d:8d:7b:c1:cb:00:12:6e:d2:69:
ee:6c:b5:b1:1f:a7:9a:0c:be:21:cc:c2:ea:bf:94:
a5:0f:d7:f6:60:69:e5:08:f5:12:97:51:74:cb:21:
5f:85:f1:4b:ed:10:15:a9:ec:f4:86:37:5a:e6:bf:
0d:4f:95:2c:72:2d:fa:89:e3:95:9b:f8:14:81:a4:
d6:06:c6:cf:e5:db:c2:31:49:97:11:80:56:82:57:
9d:e6:1f:4c:dd:8f:02:d3:e9:99:da:d2:94:85:a6:
94:44:ca:24:1f:18:9f:a6:16:e4:40:d5:88:af:7a:
87:9a:e9:b5:54:c6:49:5d:36:5b:45:11:06:38:1a:
34:8d:fa:6a:53:3d:18:3a:e5:7e:0f:ce:7d:bc:70:
71:e3:2b:a6:75:9d:90:9f:de:e8:9e:bb:5f:3f:4b:
94:d2:d0:96:af:78:b0:e6:d1:47:8d:53:04:25:f5:
42:ad:91:c9:89:4c:62:70:31:05:a1:dd:00:ac:d3:
92:ab:c9:f1:7a:df:0f:4f:eb:f8:ed:37:0e:74:a0:
d3:d6:7a:98:a1:d6:db:7c:ce:97:54:42:f6:5c:6c:
6b:35:a1:1b:02:a0:86:41:28:a5:a0:2b:4b:b8:09:
e8:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:71:AB:BA:F4:FD:75:47:0C:DB:CB:26:5D:07:A6:90:24:3F:17:D6
X509v3 Authority Key Identifier:
keyid:C3:5E:84:0F:46:E1:98:5B:30:61:00:B5:C1:31:BB:B8:63:B7:DC:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w16ED0bhmFswYQC1wTG7uGO33AY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/8dbca3-6934-44ae-8fc9-2f8d4240c436/1/w16ED0bhmFswYQC1wTG7uGO33AY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/8dbca3-6934-44ae-8fc9-2f8d4240c436/1/w16ED0bhmFswYQC1wTG7uGO33AY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:3d:cf:33:16:c6:26:cb:c8:0f:bb:ce:c1:7d:45:3f:0b:fe:
9c:31:d2:ab:6a:b3:58:54:84:5b:50:87:1b:18:1e:33:5c:95:
38:4e:fe:e5:15:d4:86:c9:ed:ef:6f:c7:06:7b:12:01:ad:ba:
9a:18:58:2e:d3:73:b9:3c:01:ba:ac:10:4b:7e:e4:55:75:f3:
01:ec:06:95:6f:ef:3e:7d:6c:1a:10:4b:4d:20:52:cd:54:65:
0f:6a:46:30:48:24:8d:79:b6:d6:9e:6e:0b:04:ca:db:63:2d:
a8:03:ab:21:3b:9f:8f:c7:cd:24:ab:0c:22:5f:7d:cd:d5:60:
36:e5:fa:1c:28:f9:e7:b3:f4:06:5d:47:d7:f3:01:2c:4c:43:
9d:33:a3:04:08:fe:77:8d:46:66:ab:0b:2b:d4:82:13:6b:20:
1a:c8:1a:00:31:83:7e:9a:86:9e:62:1d:8c:30:56:aa:0a:0a:
d1:cf:7d:d2:04:e2:f2:12:18:23:b5:bb:3f:47:bd:bc:3e:05:
fc:9a:5e:16:47:63:9c:44:0c:2c:94:27:49:1d:c3:db:d2:56:
41:d6:04:8b:16:20:7f:5e:4b:98:4c:c5:c2:64:34:e1:28:45:
27:df:ce:8a:4d:e1:92:07:e5:a2:59:e5:7d:31:b0:6e:13:f7:
a9:2f:a0:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:04:48 2025 by rpki-client