Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/32f3bb-2594-4b37-94aa-941244f5dded/1/wnz1VgIH7OhILDL8tplfd9f3MMs.mft
File: wnz1VgIH7OhILDL8tplfd9f3MMs.mft (raw, json)
Hash identifier: YFT5DzcoAPhjeNzSVYGwI81WDDi3Vx2JMu5OJD2o8rI=
Subject key identifier: 4A:C2:82:9E:6F:86:9B:96:51:A9:B0:81:54:74:E3:79:08:75:F1:05
Authority key identifier: C2:7C:F5:56:02:07:EC:E8:48:2C:32:FC:B6:99:5F:77:D7:F7:30:CB
Certificate issuer: /CN=c27cf5560207ece8482c32fcb6995f77d7f730cb
Certificate serial: 0194BBCE72489FA8C818FC73F9B05DB852D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wnz1VgIH7OhILDL8tplfd9f3MMs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/32f3bb-2594-4b37-94aa-941244f5dded/1/wnz1VgIH7OhILDL8tplfd9f3MMs.mft
Manifest number: 0110
Signing time: Fri 31 Jan 2025 10:00:56 +0000
Manifest this update: Fri 31 Jan 2025 10:00:56 +0000
Manifest next update: Sat 01 Feb 2025 10:00:56 +0000
Files and hashes: 1: f45K-_tztLGikN2V1uWSCFuY_68.roa (hash: xJe3gW2GTPkOmGgSxCeDd1gAbtFU96D/eKs9HOKj+Eo=)
2: wnz1VgIH7OhILDL8tplfd9f3MMs.crl (hash: AwcZ7RAGbFlh43mTI4teLQ54RZPbCQki+IBChTn12t8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:72:48:9f:a8:c8:18:fc:73:f9:b0:5d:b8:52:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c27cf5560207ece8482c32fcb6995f77d7f730cb
Validity
Not Before: Jan 31 10:00:56 2025 GMT
Not After : Feb 1 10:00:56 2025 GMT
Subject: CN=4ac2829e6f869b9651a9b0815474e3790875f105
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:05:aa:ca:25:32:11:3e:05:07:c9:02:77:3a:
ca:b4:a5:70:50:b2:c1:86:98:c1:c8:e0:84:03:d9:
62:85:f2:2c:5c:5c:64:39:d4:66:68:df:00:8a:1d:
41:7d:5e:52:c9:b7:ef:cf:6d:4c:78:b1:38:95:c2:
2a:22:93:c3:ec:5a:01:9c:4f:6f:fa:d3:80:9c:b9:
a7:96:81:e7:ae:df:e8:04:64:7f:14:20:4e:8b:e0:
30:64:1b:f6:98:79:0e:ec:99:35:ed:e8:4c:16:ad:
a4:87:a2:2c:d3:f2:c5:2c:43:a1:7d:ce:cc:65:43:
2a:10:f2:5b:97:1f:f6:0e:30:86:ed:8d:c8:a8:b9:
18:a2:ce:2e:94:4f:2a:38:b2:a9:fd:ef:f6:b9:63:
7c:ad:df:62:7a:a8:5e:99:66:ec:99:50:38:80:e1:
39:ec:ab:06:4b:04:8f:19:70:cb:87:59:7c:d8:35:
1b:50:93:e6:bd:9f:87:6b:2f:9a:e8:53:58:57:1b:
a7:6f:a5:21:43:c7:16:43:cb:d3:52:27:d7:fb:da:
a9:0e:91:26:0d:3a:0d:c3:df:40:79:da:4d:fb:2b:
bc:14:67:e3:99:9c:64:fc:1e:5b:74:98:41:c1:af:
53:b2:d4:e4:b6:b3:3c:ed:73:f8:5a:95:66:96:cf:
18:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:C2:82:9E:6F:86:9B:96:51:A9:B0:81:54:74:E3:79:08:75:F1:05
X509v3 Authority Key Identifier:
keyid:C2:7C:F5:56:02:07:EC:E8:48:2C:32:FC:B6:99:5F:77:D7:F7:30:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wnz1VgIH7OhILDL8tplfd9f3MMs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/32f3bb-2594-4b37-94aa-941244f5dded/1/wnz1VgIH7OhILDL8tplfd9f3MMs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/32f3bb-2594-4b37-94aa-941244f5dded/1/wnz1VgIH7OhILDL8tplfd9f3MMs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:a6:12:60:f3:38:d4:8b:c7:b5:69:5a:48:33:27:9d:60:29:
62:5d:7d:e0:74:0f:89:d2:d2:bb:22:17:9a:bb:8b:cd:58:b5:
d5:cc:ef:57:3f:cb:15:99:8d:fa:61:c4:d2:c9:78:ae:ec:42:
3b:16:4b:ea:a9:87:24:5e:b4:84:51:ed:61:dc:d7:67:f3:10:
11:f6:2f:8c:ba:7c:ff:b7:2e:38:5d:7f:a3:e4:1f:15:79:94:
65:aa:ee:c8:81:1f:d4:b9:da:d8:b9:f6:a6:af:e3:48:68:00:
4e:d6:a4:af:5a:6a:47:64:b6:8c:e4:7d:87:db:af:f7:26:f0:
2d:d4:d2:a4:80:19:e2:ca:86:b9:d2:35:d5:71:44:c2:42:54:
f7:16:01:86:6c:d2:cb:0e:20:b1:e5:5b:55:b0:87:47:50:48:
af:55:36:0f:2d:c5:7d:1f:ca:ce:76:cb:ea:4a:10:db:28:fa:
bb:ef:ea:7d:be:e6:fb:90:16:d5:5b:4f:f2:c4:63:68:19:29:
82:9f:3b:40:75:97:2d:eb:08:a2:e5:f0:98:6f:1d:6b:1a:e3:
89:1f:03:e4:05:95:39:7f:32:20:aa:9f:28:1d:f4:61:fd:af:
e5:80:f6:0f:b5:61:f8:6f:db:6a:51:00:75:f8:1c:89:bc:a6:
2d:25:cd:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:09:16 2025 by rpki-client