Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/e2e048-2788-49b8-9ed5-453bd8995bca/1/wrXTr9C3Lrc0wh7XgjKetufBzkE.mft
File: wrXTr9C3Lrc0wh7XgjKetufBzkE.mft (raw, json)
Hash identifier: RGYmKCFsrI7FResZcoBN/W3mzw6Ir1FY1xcSRnd3/z4=
Subject key identifier: B9:E7:8E:2C:03:18:03:CA:F7:47:A0:22:25:EE:2C:81:8B:73:E7:40
Authority key identifier: C2:B5:D3:AF:D0:B7:2E:B7:34:C2:1E:D7:82:32:9E:B6:E7:C1:CE:41
Certificate issuer: /CN=c2b5d3afd0b72eb734c21ed782329eb6e7c1ce41
Certificate serial: 0194BCA979CB05CB6ED9848847377FC9CF5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wrXTr9C3Lrc0wh7XgjKetufBzkE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/e2e048-2788-49b8-9ed5-453bd8995bca/1/wrXTr9C3Lrc0wh7XgjKetufBzkE.mft
Manifest number: 06F6
Signing time: Fri 31 Jan 2025 14:00:10 +0000
Manifest this update: Fri 31 Jan 2025 14:00:10 +0000
Manifest next update: Sat 01 Feb 2025 14:00:10 +0000
Files and hashes: 1: 24ln-8DkQtv-Hk-B6dzvfSqyjQY.roa (hash: SeW6VNZ/+9bUzjzq/OzL5WVkY+lRaswkW52Mz3zEsYI=)
2: wrXTr9C3Lrc0wh7XgjKetufBzkE.crl (hash: pmYSjBbzAzc3B7ao1hE0kKAHVUzk5yszOrrfvw2fW5E=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:79:cb:05:cb:6e:d9:84:88:47:37:7f:c9:cf:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2b5d3afd0b72eb734c21ed782329eb6e7c1ce41
Validity
Not Before: Jan 31 14:00:10 2025 GMT
Not After : Feb 1 14:00:10 2025 GMT
Subject: CN=b9e78e2c031803caf747a02225ee2c818b73e740
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:33:ee:eb:7b:14:bd:e5:c5:d1:90:3e:96:be:
24:07:0e:06:8e:d6:ed:7f:1d:ad:30:b6:7b:66:76:
fe:c6:2c:4a:7d:d6:74:f5:57:a4:dc:e4:c7:80:dc:
0c:52:bd:7f:a4:02:0a:00:a7:ae:65:30:f4:3b:82:
30:0b:e3:67:c4:3b:e0:f9:4a:8f:ab:7c:3a:f4:18:
3a:58:1a:72:cb:a8:84:71:a6:14:9c:df:09:35:67:
d4:d4:73:03:88:c9:e9:80:bc:74:0b:ed:f2:ae:fb:
dd:3a:ef:14:7f:7c:5e:be:25:8c:33:d2:6f:97:04:
4c:70:27:4d:ae:a7:c0:07:ae:b5:91:6d:6b:6e:d5:
25:16:a3:29:3e:69:17:ee:94:cf:50:60:4a:85:f9:
b1:67:49:0f:34:06:94:2f:c1:35:d2:c4:44:1f:c4:
63:3a:7d:29:ab:e6:f5:fd:59:40:28:de:9d:62:89:
0c:08:7f:85:a4:a7:8f:cc:b1:2e:a4:2e:8e:d5:78:
0e:a2:31:08:cb:59:be:ed:28:04:ad:ff:b0:1e:02:
e6:83:b1:a5:77:8e:8f:ad:7f:de:68:16:a2:9f:dc:
9a:45:e9:d6:b0:a9:09:1c:bf:f0:9d:0f:b1:f4:87:
2a:51:a5:aa:d9:9d:65:ff:9b:3b:37:c0:4a:48:4f:
cc:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:E7:8E:2C:03:18:03:CA:F7:47:A0:22:25:EE:2C:81:8B:73:E7:40
X509v3 Authority Key Identifier:
keyid:C2:B5:D3:AF:D0:B7:2E:B7:34:C2:1E:D7:82:32:9E:B6:E7:C1:CE:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wrXTr9C3Lrc0wh7XgjKetufBzkE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/e2e048-2788-49b8-9ed5-453bd8995bca/1/wrXTr9C3Lrc0wh7XgjKetufBzkE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/e2e048-2788-49b8-9ed5-453bd8995bca/1/wrXTr9C3Lrc0wh7XgjKetufBzkE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:84:46:48:83:9c:36:be:04:21:62:ab:f5:c6:a3:3e:47:51:
29:0c:17:8c:f4:83:fd:f1:9c:3e:b8:cf:5d:cd:24:2a:50:13:
b6:ad:c8:57:2e:d9:7e:4b:40:50:7d:1c:1d:81:36:ce:79:36:
8e:35:2e:02:ad:9c:0e:3f:d7:8d:dc:89:60:0f:33:b1:4b:57:
18:4a:de:d9:70:e2:4d:8b:4e:2c:b4:ad:05:c9:7b:b9:0c:d3:
ce:a6:24:1d:29:af:e6:4e:80:da:bb:dd:9e:d7:7b:03:6f:db:
22:c6:16:9c:c0:9d:ff:c5:86:3c:d0:4e:cb:7a:b8:98:88:1f:
9a:ef:68:ed:c2:9a:d0:3a:ff:cd:8f:81:41:86:80:c9:45:f3:
9c:bd:72:8b:41:0c:dd:86:f1:62:80:14:0e:3d:57:a3:c0:31:
a1:48:92:82:4a:ec:19:1f:6a:4d:8e:6c:35:c4:b8:ce:56:da:
50:54:17:54:88:0d:a8:a9:2c:be:ed:56:6d:1d:69:04:f6:d4:
ce:60:bd:bc:91:5c:53:0f:8d:46:ce:3b:8c:9e:63:5c:96:74:
73:f0:7c:18:e6:ea:2b:b1:cc:d5:b6:e4:27:68:95:63:f8:f3:
56:d6:7e:fe:00:7b:42:11:16:75:bb:a3:9e:95:bb:48:28:e9:
d7:b2:3c:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:43:34 2025 by rpki-client