Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/49d050-dace-45ec-8139-9e71f6a84801/1/wE7eHnv2cZnnq29e0ASelggxc2I.mft
File: wE7eHnv2cZnnq29e0ASelggxc2I.mft (raw, json)
Hash identifier: HjWYiwZA3oN7yyXyvvbEyLCkGoz5JzYyoBbLw5sdHTI=
Subject key identifier: B7:9A:0C:CE:72:82:24:04:EE:51:0E:34:77:71:C0:68:C6:D6:4E:6D
Authority key identifier: C0:4E:DE:1E:7B:F6:71:99:E7:AB:6F:5E:D0:04:9E:96:08:31:73:62
Certificate issuer: /CN=c04ede1e7bf67199e7ab6f5ed0049e9608317362
Certificate serial: 0194BD4E650E599A01C3CAAF0D9D6C18997A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wE7eHnv2cZnnq29e0ASelggxc2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/49d050-dace-45ec-8139-9e71f6a84801/1/wE7eHnv2cZnnq29e0ASelggxc2I.mft
Manifest number: 13AD
Signing time: Fri 31 Jan 2025 17:00:18 +0000
Manifest this update: Fri 31 Jan 2025 17:00:18 +0000
Manifest next update: Sat 01 Feb 2025 17:00:18 +0000
Files and hashes: 1: PNGVC-CrfH1p9OIprudcP9OFefc.roa (hash: nc5dlgvbSht3Pu2b1emN1gFyKryX3zAIW0Vn1s/MtZQ=)
2: ZH517UMHt57T2FttefkfbwPx0bw.roa (hash: Tv8TZN2c/ZcUSn9bX3gVpx2AiLfp54IyB2SfPNHaM/A=)
3: wE7eHnv2cZnnq29e0ASelggxc2I.crl (hash: XzZPeVz0HEGU37PWQcuiXryAIiwfIEazNEVhQiG5brE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:65:0e:59:9a:01:c3:ca:af:0d:9d:6c:18:99:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c04ede1e7bf67199e7ab6f5ed0049e9608317362
Validity
Not Before: Jan 31 17:00:18 2025 GMT
Not After : Feb 1 17:00:18 2025 GMT
Subject: CN=b79a0cce72822404ee510e347771c068c6d64e6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:77:58:b6:d4:fa:2b:1c:88:7b:03:eb:62:bb:
01:89:98:7c:09:8b:df:18:9e:e4:f5:04:71:72:20:
27:59:04:22:6e:39:2f:d2:79:3d:ec:83:6f:8b:3b:
48:4d:e8:5d:0b:11:8e:71:23:d2:18:60:9b:8a:83:
7c:68:d7:16:4a:15:93:b0:f5:34:88:da:4f:3e:07:
17:77:bd:aa:d8:4d:c6:65:7f:d4:bf:d5:65:47:fe:
f9:57:d9:c9:88:be:13:e3:79:d1:f1:03:62:4e:88:
58:04:93:bf:a3:23:d7:9b:81:0e:ef:7f:89:00:2d:
c4:c0:c4:76:23:3d:e0:0d:e6:74:59:22:3a:4d:bb:
a5:19:02:9f:42:ae:66:bc:0e:d7:c4:7d:ee:3f:e9:
75:27:7c:cd:ec:3e:3b:8d:94:94:d5:1a:75:61:7d:
d2:2b:63:47:af:1d:96:d9:c3:72:9f:52:cc:be:f8:
a4:a3:68:af:ed:59:2d:85:de:ab:d4:97:e6:18:d0:
bf:f0:02:28:69:df:6a:f1:0a:b7:73:36:0d:e5:02:
4c:bb:e3:65:6d:58:70:e8:d5:e1:01:26:9a:38:ec:
c5:bb:17:f3:a2:01:01:a4:31:13:9e:ce:29:35:69:
88:63:eb:ca:ff:bb:98:56:41:95:87:69:46:1c:78:
04:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:9A:0C:CE:72:82:24:04:EE:51:0E:34:77:71:C0:68:C6:D6:4E:6D
X509v3 Authority Key Identifier:
keyid:C0:4E:DE:1E:7B:F6:71:99:E7:AB:6F:5E:D0:04:9E:96:08:31:73:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wE7eHnv2cZnnq29e0ASelggxc2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/49d050-dace-45ec-8139-9e71f6a84801/1/wE7eHnv2cZnnq29e0ASelggxc2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/49d050-dace-45ec-8139-9e71f6a84801/1/wE7eHnv2cZnnq29e0ASelggxc2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:ba:01:7b:8d:f5:67:5f:69:fe:95:d7:7b:5d:8a:2e:09:d2:
d4:ba:40:ee:40:e1:76:48:73:20:dd:22:75:87:9f:99:90:b0:
2e:89:ba:4c:4e:d7:b2:54:45:d2:f8:43:46:1c:27:9b:e8:76:
02:ca:63:1a:35:14:84:39:92:b5:05:5b:d9:e9:48:2d:f1:23:
af:e2:fc:11:50:7d:8a:04:0f:ed:a7:60:89:65:93:86:a6:48:
cb:3a:95:6e:2d:8e:1f:8d:ef:f0:a6:21:6b:c6:20:fa:d7:d7:
6a:45:ce:44:7f:95:26:8b:27:86:6d:f8:23:8c:a0:f8:ee:96:
cd:61:47:c3:fe:70:7e:c3:d9:47:23:5e:18:e4:32:43:33:05:
1a:06:5a:d4:6e:4d:4d:e5:f1:85:29:fe:1b:99:ee:db:f6:51:
22:f8:aa:5e:3c:92:34:ab:04:1e:1c:0d:10:7a:d6:5a:1e:92:
7f:4e:a6:6a:bf:dd:8b:00:08:97:1b:7f:54:0c:99:74:01:4e:
c3:79:48:85:68:e1:f1:0b:0b:ba:e0:9e:1d:63:a2:ae:5f:91:
18:de:65:76:5f:69:06:d1:e7:8e:90:49:54:5d:8f:c2:60:2b:
12:ba:a7:5e:eb:5a:da:bb:d6:4f:d5:d6:11:3b:69:52:f9:f2:
d0:73:64:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:48:12 2025 by rpki-client