Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/7f1275-12fc-4397-9e3b-edf6cad1249d/1/w4Me3AugfH40q6cBw1c9jnKvGP4.mft
File: w4Me3AugfH40q6cBw1c9jnKvGP4.mft (raw, json)
Hash identifier: F1RCesXm/T4k5z5rMdC9fN8LLp8jLiwfb7WOcWCG0Cc=
Subject key identifier: 08:B6:86:F7:E9:D2:B6:5F:2F:67:A1:43:8F:44:E0:6A:FB:25:3B:F7
Authority key identifier: C3:83:1E:DC:0B:A0:7C:7E:34:AB:A7:01:C3:57:3D:8E:72:AF:18:FE
Certificate issuer: /CN=c3831edc0ba07c7e34aba701c3573d8e72af18fe
Certificate serial: 0194BC04C33E55BF6BE387D0705A0B99030C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w4Me3AugfH40q6cBw1c9jnKvGP4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/7f1275-12fc-4397-9e3b-edf6cad1249d/1/w4Me3AugfH40q6cBw1c9jnKvGP4.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 11:00:16 +0000
Manifest this update: Fri 31 Jan 2025 11:00:16 +0000
Manifest next update: Sat 01 Feb 2025 11:00:16 +0000
Files and hashes: 1: UkowmR7j8dX0saZm2LcqRKWc1As.roa (hash: GBF5K+d4pg2yE1Y/OoUy9KgNyBcuaLjAQkgdpqJHVgo=)
2: w4Me3AugfH40q6cBw1c9jnKvGP4.crl (hash: v5gfUH+sDtfGCAs4MoKtV32+VmZcSahiIkAI6j0FwfE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:c3:3e:55:bf:6b:e3:87:d0:70:5a:0b:99:03:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3831edc0ba07c7e34aba701c3573d8e72af18fe
Validity
Not Before: Jan 31 11:00:16 2025 GMT
Not After : Feb 1 11:00:16 2025 GMT
Subject: CN=08b686f7e9d2b65f2f67a1438f44e06afb253bf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:28:18:ad:38:66:a1:99:46:4c:b6:fa:37:58:
b7:ee:b6:e4:f9:64:ae:25:a2:8d:ec:8a:2d:f0:4a:
35:40:85:9f:74:41:bd:2a:c9:df:ec:a7:c6:de:bc:
12:60:84:c0:50:e8:0c:6f:fe:0d:57:9b:00:b0:e1:
75:c1:61:b4:42:ba:3c:27:83:4b:df:9a:1b:8a:23:
06:32:22:2e:ab:58:b0:67:3d:21:61:fb:78:e3:56:
1c:90:f6:bd:fd:9e:03:11:86:74:72:fa:17:cb:2a:
04:ae:52:e9:34:10:53:66:c3:74:a8:ac:75:f3:8a:
ba:a3:0c:f5:60:55:f1:f8:c6:19:29:b5:db:09:de:
9e:85:81:6b:b6:8a:b4:ca:b1:8b:54:1f:a1:fb:4a:
6f:27:5f:c8:55:6d:b1:21:af:0d:85:5f:dc:e6:f1:
79:50:00:52:fb:52:b6:e7:0f:b9:d2:c5:b8:03:c4:
37:11:53:da:fe:47:4d:68:87:16:0a:77:10:ee:d3:
42:61:b0:8e:45:40:b6:70:56:b2:a7:0a:4a:a6:ad:
7f:50:5d:b3:fa:a7:5a:d0:57:14:e1:d3:75:15:e5:
0b:f6:2c:a7:38:ad:49:97:32:36:cb:22:97:51:dd:
72:1e:86:2f:b1:33:5e:01:20:85:8b:d8:d4:8f:59:
5d:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:B6:86:F7:E9:D2:B6:5F:2F:67:A1:43:8F:44:E0:6A:FB:25:3B:F7
X509v3 Authority Key Identifier:
keyid:C3:83:1E:DC:0B:A0:7C:7E:34:AB:A7:01:C3:57:3D:8E:72:AF:18:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w4Me3AugfH40q6cBw1c9jnKvGP4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/7f1275-12fc-4397-9e3b-edf6cad1249d/1/w4Me3AugfH40q6cBw1c9jnKvGP4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/7f1275-12fc-4397-9e3b-edf6cad1249d/1/w4Me3AugfH40q6cBw1c9jnKvGP4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:a0:be:83:e6:53:03:b2:3b:9f:ad:f1:e9:71:1d:26:11:f9:
71:ba:52:d1:64:33:90:b6:bf:43:61:a0:b9:51:36:0b:ec:45:
dc:5e:e3:b9:2e:8a:15:5b:96:c2:fe:3d:12:f4:70:0a:3e:78:
8e:f2:30:d9:49:d7:c9:8a:f5:48:1a:3c:b1:ca:e5:2a:47:c5:
55:1b:54:28:f1:eb:d7:e7:64:fa:a8:ed:5b:ab:3a:fc:11:41:
df:46:d4:03:4e:59:4f:32:fa:4b:61:7e:d3:8b:60:19:f7:08:
64:9a:3b:6f:19:c5:7f:77:92:0a:14:54:42:a7:1c:eb:ee:64:
2b:15:a5:1f:3d:88:43:ed:1a:b1:3d:bd:fa:89:1a:0e:3b:64:
60:a8:7e:f9:8e:0c:88:06:05:86:65:27:15:a6:5b:a5:c8:43:
c4:9d:7d:4c:5b:0e:a6:0d:cc:b7:e7:e4:be:1f:6f:c4:39:5c:
73:c5:5a:d0:24:c6:5f:2b:91:a5:ba:8d:27:82:00:5b:0a:e5:
58:92:0f:4d:8e:9d:78:73:0f:67:40:0c:b2:07:31:01:e1:9a:
85:63:6a:38:fc:45:96:ea:6a:70:6d:68:f9:9c:2f:1f:53:d6:
39:c1:46:53:76:0d:6d:d2:3f:25:87:70:4f:69:5b:6e:76:7a:
90:01:ec:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:28:51 2025 by rpki-client