Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/289fc2-f278-4f66-b8ec-c743cb6d2fc3/1/w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.mft
File: w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.mft (raw, json)
Hash identifier: BpK4P4/UfUltEv54beSedI4fPiSVeqF/O59eMvsotUE=
Subject key identifier: BD:60:1E:86:63:6F:EA:46:26:AF:C2:91:BD:81:DF:E4:A0:35:3E:7F
Authority key identifier: C3:5F:03:94:9E:66:1E:24:BE:0F:1E:08:C6:4D:AD:05:E3:1C:4E:AF
Certificate issuer: /CN=c35f03949e661e24be0f1e08c64dad05e31c4eaf
Certificate serial: 0194BD1792100E902FCBAED02256AEC6D911
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/289fc2-f278-4f66-b8ec-c743cb6d2fc3/1/w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.mft
Manifest number: 1435
Signing time: Fri 31 Jan 2025 16:00:26 +0000
Manifest this update: Fri 31 Jan 2025 16:00:26 +0000
Manifest next update: Sat 01 Feb 2025 16:00:26 +0000
Files and hashes: 1: Gp59J-5Sjta1tmO1BUNSwj87vUI.roa (hash: OgOIKzaveJZdrN8U7gkn47rkfBwhkft0gqHgmzmYmdc=)
2: oX3nNgieJ2JInSOqTkqnW4BSKKU.roa (hash: E/puRqDQplddqvaDsExSE6S/JUmdbOP6wn7iah2FAFE=)
3: w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.crl (hash: At3bbCpbS3lm1/jUqQc/sp9JkuwN7VqXStOhCsuxC+s=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:92:10:0e:90:2f:cb:ae:d0:22:56:ae:c6:d9:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c35f03949e661e24be0f1e08c64dad05e31c4eaf
Validity
Not Before: Jan 31 16:00:26 2025 GMT
Not After : Feb 1 16:00:26 2025 GMT
Subject: CN=bd601e86636fea4626afc291bd81dfe4a0353e7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:46:03:fb:54:98:cd:41:41:61:97:c7:d1:09:
07:e5:6c:36:98:95:aa:99:a5:13:1d:f3:8d:9b:c1:
05:cd:55:38:e3:7e:78:2d:af:01:c5:1f:e3:96:df:
12:e9:08:07:b8:5b:43:f0:61:69:df:00:1c:fd:2b:
20:5d:55:40:b5:30:60:fe:18:9c:58:59:a5:d0:bd:
44:b4:ce:5d:a1:b1:7f:9b:82:77:4b:fc:7c:74:4c:
c2:8e:49:81:b3:d8:ac:76:c3:38:df:58:be:0b:ea:
a4:25:e3:f1:94:39:9d:18:0f:82:5c:93:e9:d2:0e:
e3:6d:6a:cc:cf:76:5a:bd:0a:cc:d2:b0:48:a6:1b:
02:e8:b4:91:94:92:bb:d8:6b:56:57:2a:df:a6:a7:
92:c6:93:ce:0e:43:d2:40:57:c3:05:05:32:2a:a0:
f9:bf:a4:9f:fa:62:7a:2b:45:ee:f6:89:e5:98:59:
7c:4e:29:76:0e:b2:f1:3e:c3:97:e2:1d:6a:66:6e:
4a:51:e2:13:2e:fc:cb:2b:9d:e3:2e:7d:6d:18:d1:
66:f3:0f:24:ee:b3:ad:61:b5:14:2f:a7:d0:ae:5f:
9e:c9:a6:5c:33:67:61:b5:ac:c2:64:00:b6:b4:49:
01:69:38:a7:0c:ba:ad:fa:9e:c9:a7:b7:8f:0c:2c:
03:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:60:1E:86:63:6F:EA:46:26:AF:C2:91:BD:81:DF:E4:A0:35:3E:7F
X509v3 Authority Key Identifier:
keyid:C3:5F:03:94:9E:66:1E:24:BE:0F:1E:08:C6:4D:AD:05:E3:1C:4E:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/289fc2-f278-4f66-b8ec-c743cb6d2fc3/1/w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/289fc2-f278-4f66-b8ec-c743cb6d2fc3/1/w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:79:45:df:4f:6c:03:87:b0:73:06:b2:61:c1:3f:49:25:bc:
d9:9f:5a:91:b7:3d:27:f1:dd:f4:cd:9e:0c:73:e0:13:23:a0:
0c:10:41:f4:f2:81:e4:92:42:18:78:50:13:87:e7:ec:9d:33:
95:3b:02:3a:8d:2b:d7:38:aa:a3:6c:0e:2f:f1:e7:bf:c3:da:
1e:ac:a6:fb:d2:32:cd:79:9a:f4:c9:61:47:1d:09:a4:b0:91:
a1:5e:b1:0f:be:4e:db:05:6f:94:84:a8:8a:99:9f:6c:8c:02:
8c:f1:07:3c:d4:92:ec:66:90:b5:6d:0d:d2:5c:c4:67:b7:e6:
66:62:bc:51:04:87:d6:ef:6e:dc:ee:f7:68:bb:2e:05:b4:6d:
de:f0:cc:a8:24:22:23:b4:f9:f5:26:1f:a4:e1:8b:6d:9d:6f:
fb:ad:25:45:64:90:15:76:46:30:ea:5c:65:c4:20:e4:e8:29:
a5:6b:9a:90:f8:a6:a3:2c:22:1d:d5:0c:f2:1e:48:d9:68:2c:
d1:fb:e8:ad:d2:96:9f:8f:f4:a6:6c:7a:02:ad:33:c2:c7:bf:
92:c5:cc:2b:3a:ca:48:3b:df:9a:9f:34:df:cd:d3:22:c9:23:
3b:67:a0:2b:1d:21:60:12:73:a9:56:d3:a9:cc:e5:6d:66:dd:
22:1e:8c:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:53:26 2025 by rpki-client