Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/8e9316-b5b9-4ecb-bca2-b0c228ec6aa7/1/waCjz_MuENnPIeiqvD5LSnG_HdE.mft
File: waCjz_MuENnPIeiqvD5LSnG_HdE.mft (raw, json)
Hash identifier: i3rP/uu5NJWbvF7biZvqewthzQXfKa8TU1k/zoqhB98=
Subject key identifier: 60:52:CC:30:C9:7C:5E:11:B1:82:BC:3D:1E:D5:72:45:B2:F2:9F:2E
Authority key identifier: C1:A0:A3:CF:F3:2E:10:D9:CF:21:E8:AA:BC:3E:4B:4A:71:BF:1D:D1
Certificate issuer: /CN=c1a0a3cff32e10d9cf21e8aabc3e4b4a71bf1dd1
Certificate serial: 0194A6904AB574BDE996E0ED44F1F982BBC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/waCjz_MuENnPIeiqvD5LSnG_HdE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/8e9316-b5b9-4ecb-bca2-b0c228ec6aa7/1/waCjz_MuENnPIeiqvD5LSnG_HdE.mft
Manifest number: 13AE
Signing time: Mon 27 Jan 2025 07:01:01 +0000
Manifest this update: Mon 27 Jan 2025 07:01:01 +0000
Manifest next update: Tue 28 Jan 2025 07:01:01 +0000
Files and hashes: 1: waCjz_MuENnPIeiqvD5LSnG_HdE.crl (hash: wKbxMaeuim8zCuBMARFrJ11AoHvoFeiAkjG3xwpkhK4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:a6:90:4a:b5:74:bd:e9:96:e0:ed:44:f1:f9:82:bb:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1a0a3cff32e10d9cf21e8aabc3e4b4a71bf1dd1
Validity
Not Before: Jan 27 07:01:01 2025 GMT
Not After : Jan 28 07:01:01 2025 GMT
Subject: CN=6052cc30c97c5e11b182bc3d1ed57245b2f29f2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:12:4c:0d:83:3c:fb:21:c6:4b:c8:65:bf:f5:
cb:63:a5:41:59:aa:f0:b4:bf:dd:93:4b:56:b1:c6:
92:8e:99:8e:7f:c1:e0:47:37:70:9c:5f:c4:d0:f7:
7f:ba:ca:4d:75:f3:c2:26:d2:12:ff:bb:7b:51:18:
e5:b4:0c:50:f8:2e:2f:3a:93:ab:60:9d:45:f4:63:
cd:ab:b1:66:cc:de:8a:4d:65:90:a2:74:1d:c9:0f:
ec:1f:67:ea:be:70:67:1e:74:9b:39:73:44:4d:b2:
be:3a:94:05:1f:a7:46:fc:8d:1a:25:ef:71:74:53:
8a:93:96:0f:ec:2b:fc:3e:05:bf:0e:1d:b9:eb:37:
31:63:3d:27:c9:29:7a:da:c5:9d:cf:38:dc:30:92:
5a:41:21:57:9a:04:a3:63:d3:40:c7:78:56:13:06:
d3:9e:55:b6:f8:a6:9f:a9:51:61:ba:bf:7c:6c:d0:
7a:54:d2:79:90:15:ce:e3:2b:99:d9:af:f4:88:bd:
5a:3b:dc:d5:80:be:f0:75:a5:cf:71:9c:3f:d0:1a:
e4:b6:86:20:5d:5c:08:f3:b3:b8:78:06:79:a8:c5:
54:03:d3:cf:d1:4f:8e:db:6d:0c:55:f5:07:7f:96:
61:49:d2:88:05:bd:3a:7f:d9:6b:d9:12:9a:cb:c7:
48:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:52:CC:30:C9:7C:5E:11:B1:82:BC:3D:1E:D5:72:45:B2:F2:9F:2E
X509v3 Authority Key Identifier:
keyid:C1:A0:A3:CF:F3:2E:10:D9:CF:21:E8:AA:BC:3E:4B:4A:71:BF:1D:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/waCjz_MuENnPIeiqvD5LSnG_HdE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/8e9316-b5b9-4ecb-bca2-b0c228ec6aa7/1/waCjz_MuENnPIeiqvD5LSnG_HdE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/8e9316-b5b9-4ecb-bca2-b0c228ec6aa7/1/waCjz_MuENnPIeiqvD5LSnG_HdE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:f2:f4:03:45:80:13:2a:e5:16:0a:01:6f:2a:7d:3b:46:97:
86:86:39:72:2e:06:eb:66:06:f7:74:13:e3:22:f9:8c:e4:d6:
40:37:d1:8b:2e:5d:45:1d:8e:f1:71:b2:78:86:b7:32:eb:48:
cc:db:1e:63:c5:b0:76:6e:1b:b4:ed:7e:cb:7d:8f:b2:a3:ff:
25:03:e9:e8:53:f7:b0:94:50:e2:fc:b7:3d:cf:20:ac:86:01:
dd:2b:07:ff:b5:bd:7d:66:4a:09:c8:b1:11:93:61:71:35:9f:
73:11:57:c5:5b:35:56:de:00:08:2b:bb:94:68:05:fe:37:da:
4a:d9:43:79:ed:23:c4:fd:e5:f8:64:90:ca:c0:d0:5a:51:bf:
1d:6e:8d:39:2c:87:38:35:20:65:ad:48:d8:32:da:12:ed:8e:
24:42:a6:f9:a3:fa:54:1b:a1:b6:43:2c:ea:50:cf:93:af:be:
da:32:9f:f7:59:11:de:13:fc:0b:4d:25:da:36:bb:92:41:8e:
fc:b5:d6:70:ae:08:88:6d:6e:58:7d:49:c8:e5:e2:8a:88:0e:
36:a4:fa:67:fc:1d:8d:7e:4f:d9:e2:05:47:5b:ca:5b:89:3b:
12:3f:ac:f1:42:84:d3:39:92:a8:b6:74:ba:6d:7f:24:62:d5:
2d:63:90:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:16:22 2025 by rpki-client