Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/387f21-101b-487e-8a0f-0b838a599662/1/waGQUEttntnBgJaEBCWxHXsi3_Q.mft
File: waGQUEttntnBgJaEBCWxHXsi3_Q.mft (raw, json)
Hash identifier: hY3E0m8zrfhonGe7ZxlJNj8adIwIpBM3LG6090xgz4k=
Subject key identifier: 98:39:3C:4D:D6:8D:E8:56:1E:28:7B:7D:48:DE:69:BA:77:64:2B:A1
Authority key identifier: C1:A1:90:50:4B:6D:9E:D9:C1:80:96:84:04:25:B1:1D:7B:22:DF:F4
Certificate issuer: /CN=c1a190504b6d9ed9c18096840425b11d7b22dff4
Certificate serial: 0194BD85556A7373B671030BE3313C5B1D2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/waGQUEttntnBgJaEBCWxHXsi3_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/387f21-101b-487e-8a0f-0b838a599662/1/waGQUEttntnBgJaEBCWxHXsi3_Q.mft
Manifest number: 142E
Signing time: Fri 31 Jan 2025 18:00:19 +0000
Manifest this update: Fri 31 Jan 2025 18:00:19 +0000
Manifest next update: Sat 01 Feb 2025 18:00:19 +0000
Files and hashes: 1: A9fopaXO-fVQpKdJ8LHIGXii_SU.roa (hash: 8zkX8M3Fk6VQlJpwJIcZtNmfIBhTghba03PireQiTxw=)
2: waGQUEttntnBgJaEBCWxHXsi3_Q.crl (hash: vpTww5nhhrMEwhYIODKThEQi6/Aqjt7zdE0U1ohRcNU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:55:6a:73:73:b6:71:03:0b:e3:31:3c:5b:1d:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1a190504b6d9ed9c18096840425b11d7b22dff4
Validity
Not Before: Jan 31 18:00:19 2025 GMT
Not After : Feb 1 18:00:19 2025 GMT
Subject: CN=98393c4dd68de8561e287b7d48de69ba77642ba1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:06:a3:e5:53:03:4e:63:8d:84:93:81:1b:45:
eb:72:22:21:ca:bb:8b:60:ed:a3:e7:10:41:7a:2e:
3c:e8:a4:b7:5b:ca:9f:ef:1c:d7:87:8f:be:88:9a:
13:e6:00:67:72:fd:2c:cc:19:9d:1d:38:71:30:62:
e0:85:ca:e0:a2:ea:d8:25:be:c6:dd:7d:0a:9c:8c:
73:38:85:a5:3b:fc:90:43:4c:51:3d:f1:d1:08:b9:
e9:7c:76:f6:9c:3c:e9:35:f7:d8:87:d2:09:9e:d7:
1f:91:10:28:8a:fe:c6:13:eb:eb:e5:20:a0:37:0c:
25:d3:1f:bd:2c:25:ab:21:e7:30:2d:9f:16:1f:4a:
d1:5e:36:eb:96:af:4c:16:db:97:c9:b7:ed:11:00:
af:06:37:07:11:53:af:45:b0:e0:b5:c0:89:e8:ed:
30:95:91:ab:37:f6:75:ed:91:c6:02:1b:fa:74:c4:
b3:8a:6d:c0:29:2f:6d:0c:c0:29:4b:d8:53:99:01:
8a:0b:a0:e5:7e:b4:e3:c4:4c:77:52:82:9a:0e:0f:
09:75:ef:dd:8a:00:39:f7:f9:0f:5c:12:74:7e:cc:
f4:3e:4d:e5:ee:e5:ae:c4:36:80:52:2c:d0:55:fc:
e7:ec:c7:c8:fa:35:e7:c7:05:5c:d0:4f:95:ed:fe:
40:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:39:3C:4D:D6:8D:E8:56:1E:28:7B:7D:48:DE:69:BA:77:64:2B:A1
X509v3 Authority Key Identifier:
keyid:C1:A1:90:50:4B:6D:9E:D9:C1:80:96:84:04:25:B1:1D:7B:22:DF:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/waGQUEttntnBgJaEBCWxHXsi3_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/387f21-101b-487e-8a0f-0b838a599662/1/waGQUEttntnBgJaEBCWxHXsi3_Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/387f21-101b-487e-8a0f-0b838a599662/1/waGQUEttntnBgJaEBCWxHXsi3_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:87:2c:84:ea:08:78:77:45:2f:a5:2c:91:0b:2d:ba:e7:d2:
6b:07:54:6f:c5:f5:56:e8:1d:82:dd:29:32:fd:2c:a8:40:76:
f6:d2:80:fe:2f:6b:47:9c:b6:b5:8c:54:b0:30:a4:7c:e5:65:
89:53:3c:a0:32:16:62:4c:6b:f7:29:8c:1c:47:cc:b6:85:01:
53:60:20:dc:b4:b6:1f:c9:1c:a9:ec:f0:d4:ac:21:79:d1:bb:
5d:9c:f9:1d:2a:7f:a2:cc:33:54:20:5f:4b:dd:ca:8f:0c:fc:
c6:49:cf:e2:22:90:ec:1f:b5:b5:02:a3:5a:eb:64:52:f8:3a:
4f:6b:38:6f:ca:cb:5e:23:4d:cb:09:c5:79:a6:12:4d:3f:7e:
56:c0:3e:39:88:dc:c4:df:1b:ba:25:a6:81:62:60:34:db:05:
3c:94:51:11:d7:8b:25:15:36:33:e8:99:d7:43:05:d7:e0:f0:
75:c2:a1:bf:24:a8:40:ed:6a:d0:29:4f:dd:a7:4d:13:0d:98:
8d:92:7e:b5:dd:b8:27:40:87:94:9d:c1:a4:91:a9:52:43:06:
4d:26:27:ff:69:20:40:97:79:eb:10:b0:f9:09:90:1a:e5:47:
7b:d9:3a:0f:74:55:91:49:bb:76:7f:fb:25:a4:a1:92:b7:6a:
80:67:55:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:25:12 2025 by rpki-client