Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/c4fe04-063b-47b7-bebb-b2c0a4e7afc3/1/wXPRwALuqv2ht1iN1WIcTm_Jn64.mft
File: wXPRwALuqv2ht1iN1WIcTm_Jn64.mft (raw, json)
Hash identifier: 5NKltZitgs4T8oQTOkkTG3wAJD7vfiv1nDED/dioFHM=
Subject key identifier: 9E:95:DE:3E:D0:33:C5:23:DE:78:86:D8:53:03:99:BC:5C:40:3A:C3
Authority key identifier: C1:73:D1:C0:02:EE:AA:FD:A1:B7:58:8D:D5:62:1C:4E:6F:C9:9F:AE
Certificate issuer: /CN=c173d1c002eeaafda1b7588dd5621c4e6fc99fae
Certificate serial: 0194BBCE3CE08FA0F0E97D752281E836F7FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wXPRwALuqv2ht1iN1WIcTm_Jn64.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/c4fe04-063b-47b7-bebb-b2c0a4e7afc3/1/wXPRwALuqv2ht1iN1WIcTm_Jn64.mft
Manifest number: 02EE
Signing time: Fri 31 Jan 2025 10:00:42 +0000
Manifest this update: Fri 31 Jan 2025 10:00:42 +0000
Manifest next update: Sat 01 Feb 2025 10:00:42 +0000
Files and hashes: 1: JVqwz5mxYEMKGOHUiJ_GpSZnGN0.roa (hash: h8BGg/oG3iccU6NMytqMgx4YDS4KmCfVV7fVMEeYu2Y=)
2: wXPRwALuqv2ht1iN1WIcTm_Jn64.crl (hash: LquN2Y+JU5mHKOgiT/YjC3DA/DxP3Ip2xSAG5VRdek4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:3c:e0:8f:a0:f0:e9:7d:75:22:81:e8:36:f7:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c173d1c002eeaafda1b7588dd5621c4e6fc99fae
Validity
Not Before: Jan 31 10:00:42 2025 GMT
Not After : Feb 1 10:00:42 2025 GMT
Subject: CN=9e95de3ed033c523de7886d8530399bc5c403ac3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:3f:78:30:b9:8e:8c:60:a0:49:02:eb:67:94:
3b:cd:5c:09:c9:58:93:51:cc:c6:36:3f:1d:55:07:
aa:6a:c0:48:e5:32:f0:7e:5e:23:b6:39:44:67:2c:
f3:8c:15:94:c4:51:52:4c:49:f1:a8:4c:4d:5a:96:
61:59:f0:a9:24:db:99:cf:88:73:3f:95:e5:f7:15:
47:96:9b:b8:a1:7c:fa:25:8d:5a:dc:9a:a1:3c:10:
11:eb:05:78:d6:59:e7:d9:a3:2e:ce:aa:e5:66:b2:
b4:72:f9:bf:8d:22:a9:91:69:55:ba:8b:ba:20:68:
ad:00:27:d3:21:6f:73:43:5c:9b:28:b3:13:91:56:
24:3f:18:d8:30:2e:ed:a8:ad:40:c0:33:b6:85:a2:
b1:c5:63:04:49:d1:7f:57:ba:47:47:9f:3c:23:e1:
bc:86:07:ed:26:9a:6a:67:38:b9:1f:b1:96:ac:04:
ff:93:a5:57:b3:bf:ed:bc:7b:a7:7f:cb:4d:86:44:
7e:58:5f:f8:6e:eb:a9:1a:26:e7:9b:ac:8c:57:5f:
55:55:2e:a1:41:b9:69:57:f3:3e:12:5b:b6:71:24:
0b:df:53:94:78:3d:79:db:9d:d9:e9:cc:01:50:e1:
30:c0:01:6e:32:0b:65:8d:a9:f7:59:d5:53:97:d1:
6a:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:95:DE:3E:D0:33:C5:23:DE:78:86:D8:53:03:99:BC:5C:40:3A:C3
X509v3 Authority Key Identifier:
keyid:C1:73:D1:C0:02:EE:AA:FD:A1:B7:58:8D:D5:62:1C:4E:6F:C9:9F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wXPRwALuqv2ht1iN1WIcTm_Jn64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/c4fe04-063b-47b7-bebb-b2c0a4e7afc3/1/wXPRwALuqv2ht1iN1WIcTm_Jn64.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/c4fe04-063b-47b7-bebb-b2c0a4e7afc3/1/wXPRwALuqv2ht1iN1WIcTm_Jn64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:ec:9a:37:0a:6d:77:2c:78:51:fc:98:48:88:82:86:dd:c3:
af:34:ec:ea:21:5d:27:03:58:f3:b9:2d:bb:b8:48:6c:bc:e5:
77:13:fd:b2:c6:72:3f:76:07:25:ec:d3:f5:15:03:e3:b0:bb:
66:74:b9:7f:92:63:22:43:e6:3d:e5:13:75:69:3c:43:33:c8:
80:28:0a:4d:45:88:e3:f1:f2:f3:ea:ae:8b:c3:d2:51:4a:0d:
b8:ba:69:5d:d3:e0:ae:6c:e2:21:b6:2a:0e:8a:7d:d6:52:f8:
01:70:aa:65:28:bf:c4:33:22:8d:be:70:17:c3:12:99:14:26:
5b:b2:41:c6:b9:ce:5b:04:ef:1b:be:06:54:e1:a2:03:6f:43:
1a:c3:74:c2:10:c4:56:5e:5d:2d:cf:f0:74:7c:8f:50:e7:2e:
55:11:96:3a:46:b9:4a:ea:01:38:e2:fe:b6:48:13:04:c6:bc:
31:09:b2:64:67:35:43:c8:46:f8:da:7c:61:1d:c6:57:1c:69:
f7:03:04:0a:56:6d:9e:45:d4:af:f6:a3:b3:15:1c:72:3f:d7:
6c:bb:e2:9a:c4:18:47:56:09:88:1a:6e:66:07:43:c1:8d:7c:
74:0f:67:11:29:bc:21:99:21:b5:52:d0:b7:3f:5a:62:e2:00:
07:47:63:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:47:15 2025 by rpki-client