Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/bf1ccb-9f32-4f41-8dad-9b2b9ea95535/1/wPklcRCJWHhrZf-iQbHxH20Fi1Y.mft
File: wPklcRCJWHhrZf-iQbHxH20Fi1Y.mft (raw, json)
Hash identifier: Cm5rIDk4c2FaKVxGuluf6i55Ct8bXQVXe6QCGfGHE38=
Subject key identifier: FD:47:23:0D:D9:AC:83:95:41:25:E4:D6:6B:81:87:65:A9:64:2F:3D
Authority key identifier: C0:F9:25:71:10:89:58:78:6B:65:FF:A2:41:B1:F1:1F:6D:05:8B:56
Certificate issuer: /CN=c0f92571108958786b65ffa241b1f11f6d058b56
Certificate serial: 0194BC04BD944478CCD8CBFEAC90795CFC6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wPklcRCJWHhrZf-iQbHxH20Fi1Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/bf1ccb-9f32-4f41-8dad-9b2b9ea95535/1/wPklcRCJWHhrZf-iQbHxH20Fi1Y.mft
Manifest number: 0A6F
Signing time: Fri 31 Jan 2025 11:00:14 +0000
Manifest this update: Fri 31 Jan 2025 11:00:14 +0000
Manifest next update: Sat 01 Feb 2025 11:00:14 +0000
Files and hashes: 1: 42TScFyDsL36h4YpEfhHoHfnzjk.roa (hash: PlV9CG6o3L7E63lVcJyc5UxCQesBmENg5els1UMNldc=)
2: GzDEyQPlP7XqkDOXMJVrm-t5quA.roa (hash: yHlRVvenZ9bcsv8W/dTmVIqnz02wrgwCRtxhDUrDoKo=)
3: wPklcRCJWHhrZf-iQbHxH20Fi1Y.crl (hash: vzJuSioqH7N+WvL54qD2YBH0j/ztALfyJzlWoJYF0ik=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:bd:94:44:78:cc:d8:cb:fe:ac:90:79:5c:fc:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0f92571108958786b65ffa241b1f11f6d058b56
Validity
Not Before: Jan 31 11:00:14 2025 GMT
Not After : Feb 1 11:00:14 2025 GMT
Subject: CN=fd47230dd9ac83954125e4d66b818765a9642f3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:f6:3f:ea:28:2b:98:e9:25:f9:6c:9c:d6:e3:
e3:9d:41:34:25:1d:ea:47:e2:5c:71:cf:3d:6b:4d:
b6:3a:0b:4b:62:9a:75:ae:93:68:08:1b:b8:6e:9f:
aa:c9:f6:69:ae:e7:15:d4:c9:c0:49:92:66:4c:02:
83:8d:67:f8:78:a9:3f:10:64:1e:bd:92:48:7e:09:
b3:82:41:3a:b0:89:8f:c7:fa:fb:a4:68:a2:fe:83:
f5:71:8a:7b:32:cb:59:30:ca:67:18:88:8f:7f:0e:
60:d8:12:71:be:c9:f9:dc:e8:26:f4:ba:0b:33:86:
53:16:ec:ad:49:4e:e2:33:7b:0c:85:1f:65:4d:05:
ea:77:af:4b:7e:6b:5d:da:e7:9a:24:e8:0a:3c:ab:
22:e9:5a:06:61:a6:42:8b:26:c8:bf:f4:8e:66:6d:
4c:e8:e5:0b:7c:2c:61:0f:e2:a2:96:f3:14:22:b6:
cb:9c:61:e1:48:25:1f:7c:46:8d:60:89:66:96:e8:
03:56:53:1c:20:83:f8:0a:4f:4d:31:3f:07:8c:0c:
f5:05:0d:64:b2:2c:77:87:df:97:17:89:e9:bb:6b:
e2:b3:bb:dd:5b:7e:af:08:0b:6e:37:9a:6e:7a:f7:
2a:75:fb:80:4a:41:21:8c:db:fb:95:c3:ff:25:8e:
46:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:47:23:0D:D9:AC:83:95:41:25:E4:D6:6B:81:87:65:A9:64:2F:3D
X509v3 Authority Key Identifier:
keyid:C0:F9:25:71:10:89:58:78:6B:65:FF:A2:41:B1:F1:1F:6D:05:8B:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wPklcRCJWHhrZf-iQbHxH20Fi1Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/bf1ccb-9f32-4f41-8dad-9b2b9ea95535/1/wPklcRCJWHhrZf-iQbHxH20Fi1Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/bf1ccb-9f32-4f41-8dad-9b2b9ea95535/1/wPklcRCJWHhrZf-iQbHxH20Fi1Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:e3:9a:eb:73:80:1a:82:e6:29:53:64:33:69:bc:b2:1a:4b:
82:c4:53:7f:a0:07:f6:7d:98:24:63:96:87:87:b1:26:32:6e:
af:2f:91:12:3f:19:aa:0f:73:b8:35:04:f6:89:9e:44:4d:73:
db:c0:56:9f:3f:7f:5c:de:4b:15:64:9b:a5:90:22:32:11:5c:
64:65:43:66:b8:54:4e:11:02:e7:3f:d9:d4:57:58:19:3d:fa:
57:af:78:f0:92:18:5f:d4:f5:1c:61:43:8c:5d:84:af:35:0c:
9e:94:06:e8:db:ff:30:a4:d5:a0:fd:84:82:6b:2f:19:36:78:
90:26:74:aa:1a:de:e6:86:26:45:0d:68:15:fd:be:10:b0:3b:
59:4a:00:a1:6b:d1:e4:15:29:4e:be:34:df:48:4d:53:04:72:
f7:fc:3b:e5:5c:d5:39:b9:d7:2b:29:39:66:22:23:37:4c:40:
e3:0b:0b:d0:ed:ff:e2:d9:19:de:0a:ff:f8:02:64:17:aa:23:
84:a0:f6:79:ae:56:16:b7:08:c2:df:a9:5b:d3:b9:0b:fd:f5:
13:41:13:0e:7e:ef:38:21:36:9a:13:32:c9:f8:74:13:0a:b7:
e0:40:0a:5a:51:75:8d:54:b4:3a:25:35:c1:e1:48:0c:f2:32:
c4:ff:92:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:55:43 2025 by rpki-client