Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6c78da-bded-41a9-b508-302ce1bc99c0/1/wcIPvEj6WafY3qV5CPNQobl0Wd8.mft
File: wcIPvEj6WafY3qV5CPNQobl0Wd8.mft (raw, json)
Hash identifier: KPpCga7mJwfvONjIrkRYXzXr9gn4f1a3zIORgNlRUuM=
Subject key identifier: E7:C0:AE:97:F4:D5:4B:D8:D2:2A:84:29:4B:3F:24:25:81:44:A7:AF
Authority key identifier: C1:C2:0F:BC:48:FA:59:A7:D8:DE:A5:79:08:F3:50:A1:B9:74:59:DF
Certificate issuer: /CN=c1c20fbc48fa59a7d8dea57908f350a1b97459df
Certificate serial: 0194BC72C92A3A9F2FFAB31DD3193117F50E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wcIPvEj6WafY3qV5CPNQobl0Wd8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6c78da-bded-41a9-b508-302ce1bc99c0/1/wcIPvEj6WafY3qV5CPNQobl0Wd8.mft
Manifest number: 1242
Signing time: Fri 31 Jan 2025 13:00:26 +0000
Manifest this update: Fri 31 Jan 2025 13:00:26 +0000
Manifest next update: Sat 01 Feb 2025 13:00:26 +0000
Files and hashes: 1: gZ9Ojc4UNWeqqwMBpp7FrP10wiI.roa (hash: LB2ZQVKXYnVtOl1GjrynJ1NY20hqhQVioGRUarT0MgI=)
2: wcIPvEj6WafY3qV5CPNQobl0Wd8.crl (hash: haG05D++eOtpHv3DacfbvYKLDQjeU25AvZnCrIw/7kE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:c9:2a:3a:9f:2f:fa:b3:1d:d3:19:31:17:f5:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c20fbc48fa59a7d8dea57908f350a1b97459df
Validity
Not Before: Jan 31 13:00:26 2025 GMT
Not After : Feb 1 13:00:26 2025 GMT
Subject: CN=e7c0ae97f4d54bd8d22a84294b3f24258144a7af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:63:83:91:ce:9b:3b:c5:13:d9:b6:c6:0f:5b:
f5:ab:16:ba:17:db:62:ce:19:eb:e4:e5:b1:00:d7:
46:8a:6e:88:fb:3f:8b:77:83:08:b6:d1:ad:57:1b:
3c:19:9e:e1:97:fe:05:2a:1f:f0:6e:5c:5e:35:67:
ef:9a:b1:f0:6e:b3:85:95:34:e1:c5:c7:f5:01:5f:
93:11:ce:52:2c:6a:ef:97:37:b5:0f:31:4a:a6:8e:
a2:18:fb:bc:07:8c:12:72:80:5e:36:2a:ae:27:9b:
21:24:e6:d8:2b:1f:a6:e8:89:9e:61:5c:32:a8:f4:
f0:ed:1f:60:9a:df:73:3e:2f:93:a8:0e:08:7b:35:
11:64:cf:21:2d:b6:95:c3:23:03:2e:49:f3:96:e5:
33:3d:68:e8:60:1e:a0:01:1d:3b:a6:0d:d7:20:c5:
01:bc:67:40:e8:c4:9e:dc:5b:21:a5:6e:50:4f:54:
aa:99:73:7c:ac:4e:ca:43:6d:1f:93:09:84:e8:ef:
bd:98:e1:23:9a:e7:22:fe:09:03:80:07:4e:0a:9a:
06:af:da:68:9c:6d:14:ac:44:cf:52:a3:ab:26:56:
73:65:73:c6:fa:da:bd:b2:42:50:28:59:f6:22:65:
b6:54:ab:e9:79:af:a3:4a:06:03:5f:a3:58:ec:1a:
e5:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:C0:AE:97:F4:D5:4B:D8:D2:2A:84:29:4B:3F:24:25:81:44:A7:AF
X509v3 Authority Key Identifier:
keyid:C1:C2:0F:BC:48:FA:59:A7:D8:DE:A5:79:08:F3:50:A1:B9:74:59:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wcIPvEj6WafY3qV5CPNQobl0Wd8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6c78da-bded-41a9-b508-302ce1bc99c0/1/wcIPvEj6WafY3qV5CPNQobl0Wd8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6c78da-bded-41a9-b508-302ce1bc99c0/1/wcIPvEj6WafY3qV5CPNQobl0Wd8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:dc:8e:80:a0:1d:bc:07:a8:11:53:94:69:d1:ef:2b:b6:c0:
b8:25:2e:26:56:87:e6:e3:6f:ab:e7:45:de:15:52:95:92:7b:
4f:e2:3a:ca:8c:36:67:c4:e8:16:1e:1f:29:3d:c2:87:d9:8b:
5b:31:f2:53:0c:32:f5:7c:de:f6:93:1d:da:f0:49:55:89:a4:
3d:46:c8:96:8e:13:5e:13:04:28:fd:3b:0a:84:40:fa:a7:76:
7d:90:72:a9:66:8a:32:b8:52:1a:df:e4:9d:11:70:92:39:ba:
61:23:6c:3c:b9:47:59:fe:39:e5:71:d7:a7:e8:33:c9:2d:55:
08:2a:26:d5:b6:05:df:66:91:a7:cd:d5:bd:e3:6b:5e:b1:65:
75:2d:50:6b:c3:a2:5e:3a:0a:92:6a:e0:c1:aa:ab:90:cc:9d:
5e:7f:51:ad:89:e3:ef:9c:4f:b9:73:40:fd:68:52:41:21:17:
7e:35:a2:b4:65:87:f4:37:e4:31:53:00:da:5e:79:3b:56:d9:
9f:ae:fd:16:6e:1d:e2:d8:3c:a8:69:d5:2b:c7:43:00:88:b2:
48:eb:3b:82:16:fb:37:6a:6c:dd:20:af:b6:67:61:f9:5c:19:
47:fa:33:bf:b3:b9:da:c6:46:61:70:f4:8f:ab:35:aa:4d:1c:
f2:c0:27:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:04:11 2025 by rpki-client