Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/c2560f-1c4c-4ca3-a63b-304fa18898bf/1/wHgEdmsjU5hblxgIi1xnngw-pn8.mft
File: wHgEdmsjU5hblxgIi1xnngw-pn8.mft (raw, json)
Hash identifier: 53+csBN+093QYduaKJT8LisZ5LckwKXexjzEsIqVlkE=
Subject key identifier: 35:DB:85:63:C9:14:0F:1C:D7:C2:34:8A:3E:DC:83:C3:F6:E8:8F:73
Authority key identifier: C0:78:04:76:6B:23:53:98:5B:97:18:08:8B:5C:67:9E:0C:3E:A6:7F
Certificate issuer: /CN=c07804766b2353985b9718088b5c679e0c3ea67f
Certificate serial: 0194BD17AD30907407F160366ABE75564021
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wHgEdmsjU5hblxgIi1xnngw-pn8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/c2560f-1c4c-4ca3-a63b-304fa18898bf/1/wHgEdmsjU5hblxgIi1xnngw-pn8.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 16:00:32 +0000
Manifest this update: Fri 31 Jan 2025 16:00:32 +0000
Manifest next update: Sat 01 Feb 2025 16:00:32 +0000
Files and hashes: 1: JQloxPoQ9afiJp-IoXzHvRWMpm4.roa (hash: J8Wxq2Z9UXMMHjhsUvukCz7EJtE55wrWEedjgrBy+C4=)
2: wHgEdmsjU5hblxgIi1xnngw-pn8.crl (hash: X2Ntii7Ltq+wrxe8rE+jRiV61WRzPmXePMa4tU7mR3o=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:ad:30:90:74:07:f1:60:36:6a:be:75:56:40:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c07804766b2353985b9718088b5c679e0c3ea67f
Validity
Not Before: Jan 31 16:00:32 2025 GMT
Not After : Feb 1 16:00:32 2025 GMT
Subject: CN=35db8563c9140f1cd7c2348a3edc83c3f6e88f73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:38:22:33:78:01:bc:09:e6:a4:e2:ec:c2:95:
98:c0:27:6c:9b:c1:dd:be:5d:1e:f0:ce:4d:3c:08:
95:d0:48:35:ac:c5:22:44:ea:c1:32:8b:8d:be:43:
8a:2a:a0:10:ae:32:3e:62:8c:54:8a:ff:4a:28:7a:
f4:b1:b2:d2:b3:bf:04:06:0b:b7:15:2e:77:d8:b4:
79:7f:79:d7:43:9e:13:2f:42:45:10:43:71:63:c2:
c8:bd:bd:c3:c0:26:c7:80:25:3a:31:70:6d:85:44:
80:0c:65:01:2b:2f:09:ed:19:88:42:7c:81:db:12:
43:66:b5:95:e6:7f:6f:1d:65:79:0c:f4:41:12:64:
34:c4:9d:f7:f4:5a:cb:33:fd:41:12:47:aa:53:3d:
b4:71:e7:7d:3a:8a:c9:29:78:a1:8b:b5:8c:b5:90:
56:5a:b7:8e:0c:ef:ba:60:04:6b:9f:2b:29:98:de:
45:f2:ae:04:ad:9f:ba:76:42:88:66:14:1e:1d:f1:
54:f8:88:7a:d7:f7:e6:05:61:fd:6c:e2:a9:fc:41:
db:99:90:e2:b2:24:20:24:28:4a:63:ac:e7:79:3b:
7e:0b:6c:bd:6b:8c:da:d8:35:cf:22:65:aa:c6:7c:
49:7b:40:5c:f5:97:a8:a0:15:1e:06:a6:b5:76:35:
30:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:DB:85:63:C9:14:0F:1C:D7:C2:34:8A:3E:DC:83:C3:F6:E8:8F:73
X509v3 Authority Key Identifier:
keyid:C0:78:04:76:6B:23:53:98:5B:97:18:08:8B:5C:67:9E:0C:3E:A6:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wHgEdmsjU5hblxgIi1xnngw-pn8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/c2560f-1c4c-4ca3-a63b-304fa18898bf/1/wHgEdmsjU5hblxgIi1xnngw-pn8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/c2560f-1c4c-4ca3-a63b-304fa18898bf/1/wHgEdmsjU5hblxgIi1xnngw-pn8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:53:24:70:95:d1:7d:90:fd:3a:77:7a:cc:ae:86:f1:1b:9c:
6a:c3:55:83:58:99:06:88:56:33:dd:54:6a:7a:7f:4d:53:02:
40:da:22:1b:98:89:82:af:16:6c:47:a2:76:3a:81:51:78:4e:
89:fb:72:21:fc:54:9b:3c:25:a0:e1:2c:c0:ca:b3:2c:1b:c0:
66:8d:f6:fb:52:82:42:7d:df:7f:de:d3:cc:ae:1e:3b:35:34:
da:4f:15:b3:cd:8e:f9:2e:4a:a9:22:69:2d:7d:0f:a5:36:d6:
22:50:df:c6:c1:1b:38:78:f2:78:90:a8:bc:4b:7d:1d:5a:8a:
6c:34:cb:dd:f6:d3:c9:e5:29:74:d8:c3:5e:d8:e9:49:24:0e:
94:be:6d:10:e5:23:e8:ec:8e:c1:42:cd:d1:e8:3c:c2:ef:62:
dc:70:1d:84:ef:f9:92:b2:4a:88:88:17:8c:a3:f1:bf:78:58:
69:b5:ea:79:2f:9b:57:84:14:c3:f2:74:05:0d:10:95:30:57:
51:ce:b6:13:f9:18:5b:eb:8e:ed:5b:38:de:91:0c:5a:48:65:
bb:42:bf:dd:de:48:fd:35:95:96:52:c6:71:84:1b:e6:0a:99:
98:63:c5:69:fb:59:2b:72:9a:e4:af:7d:56:ce:8d:77:9c:70:
1b:c4:1e:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:50:36 2025 by rpki-client