Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/6ec66d-d6b6-430f-8fcb-e70a911a1c7b/1/w9yyPepY-X-tWnl7RXdB1b_msbA.mft
File: w9yyPepY-X-tWnl7RXdB1b_msbA.mft (raw, json)
Hash identifier: oAF1RqvtGylhLa9dXQi8uM4QVa6Ou68YREZ3ijX7G+s=
Subject key identifier: 27:21:60:2D:C6:D5:99:D9:17:9F:E7:09:83:F8:52:60:8A:93:37:28
Authority key identifier: C3:DC:B2:3D:EA:58:F9:7F:AD:5A:79:7B:45:77:41:D5:BF:E6:B1:B0
Certificate issuer: /CN=c3dcb23dea58f97fad5a797b457741d5bfe6b1b0
Certificate serial: 0194BD17E381590B638DE627806342FF1017
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w9yyPepY-X-tWnl7RXdB1b_msbA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/6ec66d-d6b6-430f-8fcb-e70a911a1c7b/1/w9yyPepY-X-tWnl7RXdB1b_msbA.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 16:00:46 +0000
Manifest this update: Fri 31 Jan 2025 16:00:46 +0000
Manifest next update: Sat 01 Feb 2025 16:00:46 +0000
Files and hashes: 1: KvTnsIcL8m_pQPoNHudO5mxyd6I.roa (hash: LQX5cYypJwp0YO63rbhroJGzv3tgP3X96RXpqlbq7V0=)
2: w9yyPepY-X-tWnl7RXdB1b_msbA.crl (hash: A5t3em/nhn0RDlctW/Dx6ztKZ/v5rDPxYok+4ME5xCg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:e3:81:59:0b:63:8d:e6:27:80:63:42:ff:10:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3dcb23dea58f97fad5a797b457741d5bfe6b1b0
Validity
Not Before: Jan 31 16:00:46 2025 GMT
Not After : Feb 1 16:00:46 2025 GMT
Subject: CN=2721602dc6d599d9179fe70983f852608a933728
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:13:ac:c5:36:99:31:fe:e8:1b:7b:5e:fe:ad:
02:ef:d2:19:0e:27:d7:85:43:73:c9:5a:8c:94:70:
eb:72:77:12:39:70:f9:c8:b4:b0:88:c4:62:66:fc:
fe:ff:ee:0e:a7:de:d8:8f:94:19:8a:8f:0d:61:6d:
ca:65:a1:11:76:15:ce:b7:7d:74:5e:49:12:da:03:
fc:cb:30:02:a7:e4:50:96:eb:92:c1:35:a4:21:24:
0a:78:ae:fc:99:eb:41:e7:30:16:06:97:b0:32:d1:
0c:fb:13:89:fb:07:2c:fe:5d:c6:30:f0:24:68:e6:
be:7d:da:93:09:93:95:f5:f7:e9:19:73:5c:e1:e4:
25:32:3c:9f:8a:f5:c3:40:51:ef:c5:77:26:01:5d:
df:c8:04:8d:80:b8:47:5d:29:8e:10:f2:4d:9d:52:
9a:47:a3:89:08:37:d5:0b:32:1b:80:1b:50:09:85:
df:59:a7:39:ee:55:d6:70:1b:c4:c3:ef:3e:a1:23:
f6:fa:4b:38:bb:e3:78:aa:97:f1:84:f3:3b:4b:5d:
9e:cf:02:88:47:bf:37:12:57:47:ac:1e:86:3b:3e:
a2:76:d6:fa:4d:af:9e:e8:50:08:ec:8f:2a:ad:28:
9e:5e:79:13:62:ac:90:db:6f:94:cc:14:ab:b2:4c:
4d:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:21:60:2D:C6:D5:99:D9:17:9F:E7:09:83:F8:52:60:8A:93:37:28
X509v3 Authority Key Identifier:
keyid:C3:DC:B2:3D:EA:58:F9:7F:AD:5A:79:7B:45:77:41:D5:BF:E6:B1:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w9yyPepY-X-tWnl7RXdB1b_msbA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/6ec66d-d6b6-430f-8fcb-e70a911a1c7b/1/w9yyPepY-X-tWnl7RXdB1b_msbA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/6ec66d-d6b6-430f-8fcb-e70a911a1c7b/1/w9yyPepY-X-tWnl7RXdB1b_msbA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:e7:8c:da:1f:d9:06:d9:66:ed:27:bb:6e:77:a7:69:61:3c:
46:00:ce:48:b8:8d:33:aa:e5:23:e8:bf:46:a4:9e:5a:80:17:
31:dc:bb:79:6b:44:3a:e2:9a:26:5c:43:31:7e:8a:3f:6c:de:
cf:6c:f5:fc:5e:c9:f5:9d:2a:3f:ee:56:f8:28:55:d2:6d:c9:
83:9b:c7:01:d3:28:fd:29:63:ed:77:b1:ad:0f:e8:3a:03:44:
9e:1e:03:cd:b7:29:ed:65:b9:9b:62:97:04:57:33:d0:7e:11:
05:bf:de:bd:0e:c3:5d:be:50:86:74:79:96:78:b9:14:f6:e2:
3f:d8:09:f7:b3:ae:fd:87:7d:eb:ac:11:a2:ed:17:9e:39:87:
46:eb:82:dd:73:01:36:9b:3e:dd:6a:bd:0a:f8:9a:7d:47:2b:
5b:82:3e:e2:95:c2:c8:58:d6:dc:2a:3d:38:e1:e2:e7:90:5f:
0d:98:23:b8:f8:3f:0d:dd:86:15:1e:81:ea:52:0d:54:02:ee:
2d:e1:1a:69:b0:c5:29:c1:76:e4:6f:0d:3a:be:ca:a0:2b:f5:
23:c4:a4:04:ad:4f:0e:1a:5a:31:87:f0:a0:c3:1d:26:d6:d8:
53:e3:d6:45:19:3a:20:2a:fd:13:d4:73:e8:42:37:c8:a0:c3:
97:b0:b8:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:46:31 2025 by rpki-client