Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/db5d51-0950-4e4e-a003-2456f0ab8e72/1/wn0dON377r2u5sDEJkvWihqyNaw.mft
File: wn0dON377r2u5sDEJkvWihqyNaw.mft (raw, json)
Hash identifier: fHmZQmpTAehE9XYFVaYqLpbHcxks3E1SX4zlHDIt7Vc=
Subject key identifier: 4A:68:C2:67:93:1F:E0:73:86:29:7E:B5:91:4D:5B:13:96:E6:10:72
Authority key identifier: C2:7D:1D:38:DD:FB:EE:BD:AE:E6:C0:C4:26:4B:D6:8A:1A:B2:35:AC
Certificate issuer: /CN=c27d1d38ddfbeebdaee6c0c4264bd68a1ab235ac
Certificate serial: 0195127E484998EF3BBB96B3AD1D967A4AB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wn0dON377r2u5sDEJkvWihqyNaw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/db5d51-0950-4e4e-a003-2456f0ab8e72/1/wn0dON377r2u5sDEJkvWihqyNaw.mft
Manifest number: 0B4C
Signing time: Mon 17 Feb 2025 06:00:20 +0000
Manifest this update: Mon 17 Feb 2025 06:00:20 +0000
Manifest next update: Tue 18 Feb 2025 06:00:20 +0000
Files and hashes: 1: wn0dON377r2u5sDEJkvWihqyNaw.crl (hash: 7bVayMYwxboe0UosPiqgWH995znM03SwFP1BxEcRz60=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:7e:48:49:98:ef:3b:bb:96:b3:ad:1d:96:7a:4a:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c27d1d38ddfbeebdaee6c0c4264bd68a1ab235ac
Validity
Not Before: Feb 17 06:00:20 2025 GMT
Not After : Feb 18 06:00:20 2025 GMT
Subject: CN=4a68c267931fe07386297eb5914d5b1396e61072
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:bc:6d:08:4c:76:e9:24:6a:42:d1:79:8e:e6:
53:f6:46:07:28:66:ab:5e:60:47:24:ef:d7:fe:d4:
93:bb:c8:c0:a6:20:65:25:8f:ba:1d:cc:84:15:5e:
84:40:24:48:f8:a3:01:ab:cd:3a:f0:01:3b:8a:f1:
bb:3b:00:d1:ac:9d:85:b5:2e:dc:2b:43:bb:d4:bd:
49:a1:65:b0:b1:b7:07:e8:cd:06:f8:aa:10:58:50:
a6:96:d7:f5:74:db:2a:b3:a4:7b:d6:fe:1d:99:9f:
eb:2d:2c:fe:c8:65:df:7c:7c:d8:d5:2d:69:9e:5d:
0e:2a:32:e4:9a:dc:17:17:ec:2b:24:bd:83:b3:13:
0c:dc:01:87:b1:b3:66:ca:a6:56:25:e3:58:3a:a9:
55:05:2e:94:cb:c6:c9:80:d0:ef:41:cf:a5:82:db:
d9:86:08:be:af:46:2d:61:40:25:66:20:d8:af:a6:
dc:5e:56:a4:b6:dd:7e:4a:99:b6:11:35:85:29:c3:
02:2b:b5:41:99:90:02:b4:09:16:d5:54:6d:83:0f:
d0:14:bf:03:50:d6:d7:fa:73:fb:38:2a:90:98:8f:
98:be:7e:9e:dc:bd:4d:48:dd:5f:77:c1:f8:9d:c5:
46:3f:8d:f9:5b:95:7b:01:ee:39:6e:97:d6:60:d4:
b5:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:68:C2:67:93:1F:E0:73:86:29:7E:B5:91:4D:5B:13:96:E6:10:72
X509v3 Authority Key Identifier:
keyid:C2:7D:1D:38:DD:FB:EE:BD:AE:E6:C0:C4:26:4B:D6:8A:1A:B2:35:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wn0dON377r2u5sDEJkvWihqyNaw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/db5d51-0950-4e4e-a003-2456f0ab8e72/1/wn0dON377r2u5sDEJkvWihqyNaw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/db5d51-0950-4e4e-a003-2456f0ab8e72/1/wn0dON377r2u5sDEJkvWihqyNaw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:b7:af:50:4e:93:a8:b5:a1:67:9c:c3:03:9e:dc:21:bc:6c:
e2:5d:28:78:ac:30:7d:40:20:7d:a1:61:14:13:bc:09:ab:cf:
1d:74:05:3c:f1:06:f2:3d:2f:27:58:9f:77:ce:73:27:c3:fc:
70:cc:df:53:1a:30:be:1f:1c:b9:5f:75:81:72:08:79:dd:6a:
51:01:8f:a8:67:8b:d5:cd:71:7a:40:37:f3:b0:81:79:fd:55:
da:66:8d:e6:f4:5e:a2:c9:49:61:12:9b:ce:e3:4d:27:ef:10:
74:40:94:d3:38:6f:ac:95:75:c4:e0:fd:a2:96:80:2e:c6:cf:
56:72:95:39:cc:8e:49:22:6c:7c:e1:25:90:df:ed:0b:30:63:
da:c0:51:58:a5:eb:e7:fb:9b:e5:f5:99:fa:36:8d:32:5c:89:
46:44:ed:c9:86:b6:af:a2:22:d5:88:e7:8a:a8:6c:d8:60:e6:
7f:0a:f4:18:e8:e1:da:f0:7d:e9:19:e7:a5:ec:e9:52:d3:5c:
39:19:87:0e:19:92:ed:7c:f5:0a:c7:d6:a6:24:9b:d3:c8:f7:
4a:ca:ee:6a:26:b1:2b:e8:c6:ab:84:3e:2d:6b:ed:e5:c6:34:
68:dc:a5:4c:09:74:cf:57:87:b8:f7:e5:ad:bb:44:1f:35:ad:
12:d6:4f:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:21:21 2025 by rpki-client