Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/e2767c-e447-4d77-87f0-883e0ebed6bf/1/w_8EiaBkHM8dwes7Z08_YRFjuu4.mft
File: w_8EiaBkHM8dwes7Z08_YRFjuu4.mft (raw, json)
Hash identifier: u+xvskMTe/XUI5cEZmfn5uGBujSjbsVW33WAzUNPaFA=
Subject key identifier: A9:9C:86:FA:49:6E:7D:23:E8:B5:89:AC:58:40:D5:2C:2D:92:E5:33
Authority key identifier: C3:FF:04:89:A0:64:1C:CF:1D:C1:EB:3B:67:4F:3F:61:11:63:BA:EE
Certificate issuer: /CN=c3ff0489a0641ccf1dc1eb3b674f3f611163baee
Certificate serial: 0194BCE08D17096849C594BBA020ACAB2793
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w_8EiaBkHM8dwes7Z08_YRFjuu4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/e2767c-e447-4d77-87f0-883e0ebed6bf/1/w_8EiaBkHM8dwes7Z08_YRFjuu4.mft
Manifest number: 1370
Signing time: Fri 31 Jan 2025 15:00:20 +0000
Manifest this update: Fri 31 Jan 2025 15:00:20 +0000
Manifest next update: Sat 01 Feb 2025 15:00:20 +0000
Files and hashes: 1: O3ljM5CB_2JtUI0Sdnkha5M5ERQ.roa (hash: NhJbXC81FRmcMSonVcZC+2A3GfW4bVjcRFKj0QoIURY=)
2: w_8EiaBkHM8dwes7Z08_YRFjuu4.crl (hash: 7kRieKY91RP4fyF2N8slPiVNOBA+Yq/EdRr8fob/JHg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:8d:17:09:68:49:c5:94:bb:a0:20:ac:ab:27:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3ff0489a0641ccf1dc1eb3b674f3f611163baee
Validity
Not Before: Jan 31 15:00:20 2025 GMT
Not After : Feb 1 15:00:20 2025 GMT
Subject: CN=a99c86fa496e7d23e8b589ac5840d52c2d92e533
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:55:a6:97:ae:31:82:67:de:b8:28:85:28:c7:
91:a4:86:23:51:a0:37:55:9d:e4:2a:b3:b3:a9:cb:
38:c5:69:39:97:63:f1:92:7f:2f:22:e0:6c:06:f4:
14:e5:71:70:1b:5b:64:f6:68:fb:9d:1b:92:71:f6:
61:02:3c:a7:c7:04:39:c3:ca:62:44:08:3d:90:bf:
0c:5e:c6:e6:1b:5d:15:06:fc:dd:a0:48:b2:45:33:
1f:bf:aa:22:92:82:5f:06:52:cf:2c:3a:93:dd:b3:
88:a7:f2:58:63:bb:b3:ee:73:02:56:bf:92:ff:ed:
0d:6f:02:0b:fe:be:82:1a:c2:58:2e:f9:a9:c7:f7:
e9:0d:48:5f:e0:b1:26:5e:86:16:82:56:f6:14:7a:
67:26:30:7d:26:0f:66:b8:72:3e:b8:6c:d7:16:e6:
cb:64:f5:5c:4d:df:0b:ad:c0:90:16:44:bc:06:3a:
fb:b8:8b:39:b2:02:46:af:ac:fd:ff:b7:0c:01:51:
46:84:78:7c:7f:b4:fb:1b:73:d5:21:c6:eb:eb:6c:
02:d0:5b:87:90:c1:81:99:84:f1:68:6d:9a:f5:b8:
eb:89:c8:77:8a:6e:e1:e3:bf:e5:0b:5e:3f:d1:f5:
47:42:39:71:48:03:a3:11:bb:39:8d:f7:68:3b:1a:
c0:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:9C:86:FA:49:6E:7D:23:E8:B5:89:AC:58:40:D5:2C:2D:92:E5:33
X509v3 Authority Key Identifier:
keyid:C3:FF:04:89:A0:64:1C:CF:1D:C1:EB:3B:67:4F:3F:61:11:63:BA:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w_8EiaBkHM8dwes7Z08_YRFjuu4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/e2767c-e447-4d77-87f0-883e0ebed6bf/1/w_8EiaBkHM8dwes7Z08_YRFjuu4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/e2767c-e447-4d77-87f0-883e0ebed6bf/1/w_8EiaBkHM8dwes7Z08_YRFjuu4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:a5:bd:27:97:fc:dd:1b:2f:0b:ba:48:1e:84:cf:db:91:08:
a2:6b:e7:04:6a:07:ae:4a:ee:7f:67:94:66:cd:84:20:39:a2:
69:16:ad:16:dc:04:1d:31:d6:28:62:1d:ec:63:cf:18:43:7d:
ce:70:64:e6:ec:f8:22:d7:74:71:45:ab:cd:5a:fa:d8:eb:c0:
9e:19:8e:75:ec:82:3d:f6:73:29:5d:49:4c:c2:a5:57:eb:10:
01:9a:d8:d7:58:93:c9:ec:06:0e:48:7a:9f:74:98:80:9d:d2:
c6:10:5f:83:53:88:fa:66:63:03:c5:73:16:b9:3b:1e:2f:73:
cc:5e:2c:d9:d8:93:0e:e8:65:8a:05:b5:a7:4a:85:34:32:36:
db:f7:1f:ae:b0:ef:4e:57:07:29:49:36:40:6a:54:34:3a:74:
a8:cc:c5:5b:19:ec:58:49:7c:40:f0:c7:b7:e4:af:92:69:e9:
42:7b:f4:a5:69:0a:f2:9f:d6:f0:88:ec:3f:ab:48:ca:d0:3d:
dd:0d:b9:07:3d:eb:df:e7:57:50:20:09:05:16:b4:41:85:f0:
66:81:93:b6:69:fe:c5:85:1a:4a:f5:81:e2:2d:c5:22:7a:05:
bc:a4:10:4e:1c:dc:70:85:02:72:e5:a8:73:e7:e1:13:26:bc:
19:60:f5:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:39:25 2025 by rpki-client