Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/b49460-c42f-4186-a556-b2426736c1e5/1/w6PCvRb4MYvdnD6yCoqKcB8-J8c.mft
File: w6PCvRb4MYvdnD6yCoqKcB8-J8c.mft (raw, json)
Hash identifier: zWGmstg4oIXkNNjkbJfEOTLJs5oUltrNCc5kxm5deWE=
Subject key identifier: A8:E7:D9:45:32:0D:F2:13:52:90:C2:F6:3B:0A:16:63:2A:31:67:D7
Authority key identifier: C3:A3:C2:BD:16:F8:31:8B:DD:9C:3E:B2:0A:8A:8A:70:1F:3E:27:C7
Certificate issuer: /CN=c3a3c2bd16f8318bdd9c3eb20a8a8a701f3e27c7
Certificate serial: 0193E2A6FA78FB01C4121B20A4CC1611C741
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w6PCvRb4MYvdnD6yCoqKcB8-J8c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/b49460-c42f-4186-a556-b2426736c1e5/1/w6PCvRb4MYvdnD6yCoqKcB8-J8c.mft
Manifest number: 0525
Signing time: Fri 20 Dec 2024 06:00:14 +0000
Manifest this update: Fri 20 Dec 2024 06:00:14 +0000
Manifest next update: Sat 21 Dec 2024 06:00:14 +0000
Files and hashes: 1: EyDvH0uBJ9QJkqjXfWZa4XqNdG4.roa (hash: QvtHnmGfnryJpbqn3yjanMcZb0o3HqBC919l0nHf8gA=)
2: aVhvh8nOxUteryHLBGXv9ZJjT9o.roa (hash: KPhlDtt412fTLo/HDpy1qG2Y7e+hjTp1F5+vQgOeS2I=)
3: w6PCvRb4MYvdnD6yCoqKcB8-J8c.crl (hash: 1jti9cdu4lLU9qqZLNASlJAGOW+muhK97cKsT6eT+WY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:e2:a6:fa:78:fb:01:c4:12:1b:20:a4:cc:16:11:c7:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3a3c2bd16f8318bdd9c3eb20a8a8a701f3e27c7
Validity
Not Before: Dec 20 06:00:14 2024 GMT
Not After : Dec 21 06:00:14 2024 GMT
Subject: CN=a8e7d945320df2135290c2f63b0a16632a3167d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:9a:93:f7:9c:e3:c3:84:ef:2c:db:45:cd:e3:
05:46:47:3f:49:dc:18:35:b7:df:0a:c3:64:a2:52:
c6:97:c9:95:b0:2e:f1:af:cc:c4:80:26:91:59:9f:
4c:93:f5:e0:69:07:c6:2d:f7:21:8a:15:85:58:dc:
11:07:c8:19:c8:4e:b8:8d:59:bf:f9:67:ea:dc:5f:
d5:af:3a:9a:4b:78:67:b7:cc:5e:63:11:4d:22:08:
92:e9:d2:1c:d4:05:5d:19:a4:d0:b4:16:e7:41:28:
6a:1c:18:6f:ac:2e:65:46:e6:74:3b:b5:81:ae:4f:
28:94:72:bd:e1:3b:24:91:14:60:73:4e:8c:93:c0:
cd:6f:22:59:df:bc:cf:e0:1d:2e:dd:fa:5d:5c:bc:
c9:e7:91:b8:41:8b:ea:0b:06:54:ae:c7:db:25:08:
a2:06:fc:0e:fd:b7:6b:9c:c3:1f:a7:0b:91:f0:7f:
89:78:b8:c8:55:8b:e4:c3:b2:57:6a:db:16:74:42:
88:27:6e:b4:c4:90:4a:79:a2:01:df:8c:02:1f:09:
ab:8b:b5:fe:56:72:f7:e9:01:82:2e:a8:6d:ce:dd:
c2:a8:f9:7c:0a:c6:7c:fe:e7:20:58:b3:19:4d:40:
06:4b:d3:c2:27:1a:d9:3d:9b:ce:32:eb:e3:52:30:
83:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:E7:D9:45:32:0D:F2:13:52:90:C2:F6:3B:0A:16:63:2A:31:67:D7
X509v3 Authority Key Identifier:
keyid:C3:A3:C2:BD:16:F8:31:8B:DD:9C:3E:B2:0A:8A:8A:70:1F:3E:27:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w6PCvRb4MYvdnD6yCoqKcB8-J8c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/b49460-c42f-4186-a556-b2426736c1e5/1/w6PCvRb4MYvdnD6yCoqKcB8-J8c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/b49460-c42f-4186-a556-b2426736c1e5/1/w6PCvRb4MYvdnD6yCoqKcB8-J8c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:5c:ff:8b:84:fc:12:bb:56:22:c5:47:c1:6a:f7:67:70:f7:
ed:37:a4:14:a3:93:7e:fe:20:08:a4:01:59:cc:2b:1e:74:46:
40:3d:d5:e4:e7:ba:76:4d:31:7e:c6:9b:0c:78:b9:e5:8b:21:
d2:77:21:bc:b2:0e:32:6e:ab:3d:0c:e4:c2:5b:ba:a9:3a:86:
ed:51:24:b4:26:56:70:48:62:33:8f:74:c3:60:07:a8:91:b8:
94:7c:b2:9a:7d:b2:a9:dc:81:a0:87:d4:02:55:5d:09:1e:e5:
0c:c9:2d:a4:42:03:6f:6e:9f:fb:1d:9c:3f:61:35:d5:67:c1:
40:51:be:0b:17:ea:cc:8d:66:15:a2:34:10:e6:6d:27:03:5b:
06:60:32:3f:92:59:9c:39:4c:5e:35:81:e6:80:30:68:3b:d9:
94:64:0c:6c:a0:14:5e:a5:77:59:2c:51:77:46:f1:80:86:b6:
fa:e9:e5:e0:46:0f:47:ab:1b:9d:ca:6a:e4:fb:24:cd:4b:23:
fc:4b:73:f8:6f:6a:e7:05:5d:93:c7:19:2e:26:3f:75:8c:97:
75:6f:5d:9c:bc:67:ec:a9:7a:66:64:c8:a3:61:f0:de:ef:5e:
ab:18:bb:6c:ff:18:69:c5:cb:b2:3f:f7:29:d6:7c:0c:60:a2:
b2:50:19:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:10:49 2025 by rpki-client