Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/50b205-8f21-46f5-a3f6-bca0a8f2f78c/1/w0CQmuwyCowu4cq84TAsu31OBIY.mft
File: w0CQmuwyCowu4cq84TAsu31OBIY.mft (raw, json)
Hash identifier: pfxeZgSM3LPc+vEAJTOBENWB8ELIEE6Nmp66ucqb6oU=
Subject key identifier: 63:87:A5:50:CF:35:59:2F:F2:BA:98:1F:80:77:74:6C:DF:40:1C:CE
Authority key identifier: C3:40:90:9A:EC:32:0A:8C:2E:E1:CA:BC:E1:30:2C:BB:7D:4E:04:86
Certificate issuer: /CN=c340909aec320a8c2ee1cabce1302cbb7d4e0486
Certificate serial: 0195E0EB1B0E388329012D14E05B24A40B86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w0CQmuwyCowu4cq84TAsu31OBIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/50b205-8f21-46f5-a3f6-bca0a8f2f78c/1/w0CQmuwyCowu4cq84TAsu31OBIY.mft
Manifest number: 1154
Signing time: Sat 29 Mar 2025 08:00:59 +0000
Manifest this update: Sat 29 Mar 2025 08:00:59 +0000
Manifest next update: Sun 30 Mar 2025 08:00:59 +0000
Files and hashes: 1: 1JRmPjjw2eEyAEj7-d9EaoFd8tQ.roa (hash: qUFNGxht8SatseV7uTcgdf36n0Wje2HhZXA6lIEPzt8=)
2: jb-zD-QZseypOhoYrz7-lEkthR4.roa (hash: NVATDU2rQowVsA5kxCOsDlRv1YWlJaECqpg6RYlVt8g=)
3: w0CQmuwyCowu4cq84TAsu31OBIY.crl (hash: ZJmp4yO9Ej5Tc/eVxhI+YTqDO13F/fiFPKVw7ailf5I=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:eb:1b:0e:38:83:29:01:2d:14:e0:5b:24:a4:0b:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c340909aec320a8c2ee1cabce1302cbb7d4e0486
Validity
Not Before: Mar 29 08:00:59 2025 GMT
Not After : Mar 30 08:00:59 2025 GMT
Subject: CN=6387a550cf35592ff2ba981f8077746cdf401cce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:c2:73:95:ab:71:03:a2:42:5b:0f:78:cc:6f:
bb:a0:f2:e4:34:e0:28:01:dd:93:63:73:5a:68:57:
c6:f2:e3:81:33:45:2f:4d:b4:06:a4:98:ac:77:41:
ec:31:06:9e:61:26:25:40:40:91:93:46:94:c5:86:
0d:a5:e7:fa:d0:5f:bd:d0:36:3c:5b:45:9d:f6:a1:
25:0a:d8:76:16:b4:02:cb:f7:e5:17:6f:cc:6e:3c:
07:b4:82:80:07:b9:0f:95:95:6a:cc:a4:e0:66:07:
25:d1:27:78:c5:3e:31:0a:1a:38:68:49:36:e6:5a:
34:c4:00:7d:36:21:67:e0:78:b9:50:98:d9:b5:2e:
d9:68:cb:13:73:00:3a:f0:a1:1a:b6:a5:95:db:60:
03:66:f4:3f:29:85:91:8e:f5:56:24:c8:48:1e:7d:
c9:27:c4:f9:a8:5a:0e:87:27:5c:b6:7c:48:f6:e6:
50:4a:cc:51:d4:0a:19:f4:fc:54:0f:7a:f8:be:51:
a3:08:76:23:90:c5:69:cc:80:a4:1a:db:82:af:2b:
58:91:1c:e7:46:d5:78:18:61:f0:25:c2:02:2d:df:
d9:04:47:21:67:7d:fc:93:fb:51:a8:60:cd:8b:e4:
e2:69:aa:c7:75:57:92:76:32:35:29:e4:a8:e0:b4:
7d:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:87:A5:50:CF:35:59:2F:F2:BA:98:1F:80:77:74:6C:DF:40:1C:CE
X509v3 Authority Key Identifier:
keyid:C3:40:90:9A:EC:32:0A:8C:2E:E1:CA:BC:E1:30:2C:BB:7D:4E:04:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w0CQmuwyCowu4cq84TAsu31OBIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/50b205-8f21-46f5-a3f6-bca0a8f2f78c/1/w0CQmuwyCowu4cq84TAsu31OBIY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/50b205-8f21-46f5-a3f6-bca0a8f2f78c/1/w0CQmuwyCowu4cq84TAsu31OBIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
eb:47:bf:04:bd:7a:f8:27:1a:92:53:58:b6:24:bc:62:58:e7:
aa:e9:9d:3d:d3:2e:3f:7f:dd:ec:2c:93:e0:1d:f8:0e:3b:a4:
d7:ee:4f:b0:4e:7d:74:a6:16:97:10:95:3e:8a:ac:64:cc:7f:
dd:99:99:7c:2b:6f:47:0a:6b:7b:82:1e:60:a7:dd:d0:72:07:
8d:c0:21:b3:94:de:71:49:9b:74:0b:22:2c:9d:34:80:d9:e7:
e5:36:01:21:6a:ac:d1:6c:95:d9:44:34:d7:c5:42:be:97:67:
f4:17:12:49:0f:8d:48:a4:0f:24:e2:24:bb:0e:29:69:e5:42:
b1:70:7f:b0:bc:22:91:15:a8:30:25:56:51:80:fa:0d:31:1b:
de:45:5b:45:02:ad:b3:3b:02:3e:05:bb:e1:bb:23:5d:5b:c9:
59:44:51:88:a2:8a:31:8b:a4:0b:69:f1:b6:d1:f0:1d:ed:02:
a3:88:37:7e:02:2f:28:9a:e7:60:7d:84:14:b0:c2:f2:24:1d:
e7:c0:5c:d2:63:d3:75:4d:0c:e5:fb:13:ec:56:b1:83:2f:ee:
96:92:47:0b:10:fa:b4:54:55:df:4f:79:1f:6c:e6:86:6d:58:
e0:c3:30:d1:5a:38:65:d2:fb:d8:0a:b9:46:61:0f:71:42:3a:
c8:82:12:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:22:22 2025 by rpki-client