Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/580e51-4c0d-4162-a9ae-7d7fce5db05c/1/wg8AjBzMpi5vw1bWNCBVpifcbPI.mft
File: wg8AjBzMpi5vw1bWNCBVpifcbPI.mft (raw, json)
Hash identifier: D4G6M2oq+ym12sdo9wYxpkkyUYNtSQEuC0CYDCBcFfI=
Subject key identifier: EB:E1:0D:D6:26:61:C2:E8:5C:64:4A:FB:FF:75:E2:37:B6:15:15:1B
Authority key identifier: C2:0F:00:8C:1C:CC:A6:2E:6F:C3:56:D6:34:20:55:A6:27:DC:6C:F2
Certificate issuer: /CN=c20f008c1ccca62e6fc356d6342055a627dc6cf2
Certificate serial: 0194BD4EBBD22B819BB49465C4FF5016E34C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wg8AjBzMpi5vw1bWNCBVpifcbPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/580e51-4c0d-4162-a9ae-7d7fce5db05c/1/wg8AjBzMpi5vw1bWNCBVpifcbPI.mft
Manifest number: 021C
Signing time: Fri 31 Jan 2025 17:00:41 +0000
Manifest this update: Fri 31 Jan 2025 17:00:41 +0000
Manifest next update: Sat 01 Feb 2025 17:00:41 +0000
Files and hashes: 1: CGLcLVB_nqLd9iNoes6GRQjCoVY.roa (hash: PUaaifTKcP0kb/F/TYWEggzMP0VnUab0IhVecDySCrE=)
2: wg8AjBzMpi5vw1bWNCBVpifcbPI.crl (hash: aOpVCLZ185nNRoXSYTTuIAKeWmKw9XpvsLVfDivkg1Q=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:bb:d2:2b:81:9b:b4:94:65:c4:ff:50:16:e3:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c20f008c1ccca62e6fc356d6342055a627dc6cf2
Validity
Not Before: Jan 31 17:00:41 2025 GMT
Not After : Feb 1 17:00:41 2025 GMT
Subject: CN=ebe10dd62661c2e85c644afbff75e237b615151b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:6d:37:0a:81:03:ca:a5:f3:f5:42:62:3e:e1:
73:db:11:f6:eb:cc:23:fe:dd:7d:71:2d:ff:2a:db:
46:05:86:2e:37:1d:e9:d0:2a:0b:dc:8f:8b:f8:e1:
4c:95:42:4b:7e:23:b7:de:78:7e:fa:54:14:ea:96:
49:f0:36:62:33:91:ca:dc:1f:af:6f:57:4f:b7:af:
08:4e:03:08:87:0a:4a:6e:f8:8b:33:3f:aa:8c:74:
37:51:fb:fd:a6:97:f7:70:00:a3:39:8a:87:51:5f:
58:38:6f:92:5f:2f:55:af:33:97:d3:fb:e2:a9:45:
90:38:7f:3d:4e:7f:72:8b:f5:32:60:52:d3:96:29:
7c:07:ce:69:a8:e0:4d:42:71:36:e1:a9:0f:22:e5:
a7:9a:aa:81:77:fb:f0:f6:43:3f:44:e2:00:37:4f:
1b:d0:15:52:7e:59:c9:7d:49:c1:b6:03:a3:31:57:
5c:b6:7c:e7:9e:09:57:7b:9b:d9:fa:a3:28:57:3d:
89:f1:43:e0:25:b7:32:a1:4e:a1:9a:45:55:9e:ec:
7d:2f:fb:51:e7:92:01:b4:b0:17:a2:55:ff:9d:9a:
3a:dc:0f:19:2f:d0:af:0e:c0:f1:cd:41:c5:48:bf:
2f:f6:bc:56:01:4f:b7:90:8b:b9:1b:17:bc:3e:18:
ea:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:E1:0D:D6:26:61:C2:E8:5C:64:4A:FB:FF:75:E2:37:B6:15:15:1B
X509v3 Authority Key Identifier:
keyid:C2:0F:00:8C:1C:CC:A6:2E:6F:C3:56:D6:34:20:55:A6:27:DC:6C:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wg8AjBzMpi5vw1bWNCBVpifcbPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/580e51-4c0d-4162-a9ae-7d7fce5db05c/1/wg8AjBzMpi5vw1bWNCBVpifcbPI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/580e51-4c0d-4162-a9ae-7d7fce5db05c/1/wg8AjBzMpi5vw1bWNCBVpifcbPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:78:ae:6f:79:18:b6:f8:06:80:51:2b:1b:9c:a8:65:68:ca:
bc:0b:8b:aa:e8:73:e6:44:7b:cb:d6:81:20:54:f7:c7:64:e4:
65:08:a6:a8:3f:23:f0:38:2f:da:8c:c6:88:ad:27:73:1e:23:
a8:56:bc:03:17:67:6b:ae:ac:e2:af:21:4e:17:40:ec:a6:55:
f2:07:9f:ad:03:10:45:7e:56:5b:a8:28:0b:a4:bf:34:e6:33:
f2:01:3b:88:f2:7e:e7:66:9d:f1:0b:fe:1e:88:b3:43:66:39:
14:ba:90:b9:16:8f:42:c4:ca:89:eb:d8:2c:2d:40:01:41:b4:
56:42:d2:e4:29:bc:e5:14:14:66:fe:0b:a3:fb:e8:25:a9:16:
b2:6d:7d:72:a0:ac:e4:76:b3:6a:6c:86:c7:08:e3:bc:33:e7:
d0:a0:38:af:5a:d2:f4:1e:40:32:d2:6e:ca:f7:35:3f:02:3c:
1c:d1:85:97:68:4f:05:51:f8:6a:7e:44:2f:e4:9f:d2:53:95:
e9:5c:f9:56:2d:e6:59:ac:5c:db:02:9c:70:d8:ff:31:c8:f5:
13:cf:da:39:35:12:70:d5:f3:53:7b:a4:b8:b6:1a:f0:72:10:
12:a8:2d:22:bb:c9:ab:e1:f5:32:38:92:b5:df:74:60:11:8d:
b1:f3:24:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 16:31:51 2025 by rpki-client