Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/17527b-ecc2-4498-9208-e22b8c0a1726/1/1WxQdOZvQ85Xij1KLnvMIVy16WA.mft
File: 1WxQdOZvQ85Xij1KLnvMIVy16WA.mft (raw, json)
Hash identifier: MO0glncY7+Gt9puJqdJJu39TdsXu9qxKm6vlSd3jMmc=
Subject key identifier: 67:67:39:CA:65:1A:3D:1B:1D:76:54:97:73:ED:F3:41:56:E2:09:7D
Authority key identifier: D5:6C:50:74:E6:6F:43:CE:57:8A:3D:4A:2E:7B:CC:21:5C:B5:E9:60
Certificate issuer: /CN=d56c5074e66f43ce578a3d4a2e7bcc215cb5e960
Certificate serial: 0195E15A08A08E4DCCC2805057D476B0DBDF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1WxQdOZvQ85Xij1KLnvMIVy16WA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/17527b-ecc2-4498-9208-e22b8c0a1726/1/1WxQdOZvQ85Xij1KLnvMIVy16WA.mft
Manifest number: 14C2
Signing time: Sat 29 Mar 2025 10:02:08 +0000
Manifest this update: Sat 29 Mar 2025 10:02:08 +0000
Manifest next update: Sun 30 Mar 2025 10:02:08 +0000
Files and hashes: 1: 1WxQdOZvQ85Xij1KLnvMIVy16WA.crl (hash: zJte2vSSlskDNqRvNJJFe1QdIT8WtpXURxdTnNbZ6xs=)
2: CyWNAfuECP2rY1LiJUk0SECEFDs.roa (hash: +Pj5JZ248Xn9Erx65xMCWTlLTKb0C7POgosn0n4yJ1M=)
3: uUPx_cMqIM_PKJQ7ZhuZzapT-_8.roa (hash: WaVxbJpwd7CxDJ+kHTNGdXrn2kmcA7TEwyZR65DTwhA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e1:5a:08:a0:8e:4d:cc:c2:80:50:57:d4:76:b0:db:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d56c5074e66f43ce578a3d4a2e7bcc215cb5e960
Validity
Not Before: Mar 29 10:02:08 2025 GMT
Not After : Mar 30 10:02:08 2025 GMT
Subject: CN=676739ca651a3d1b1d76549773edf34156e2097d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:45:fa:95:0b:b9:54:72:d2:8a:1b:39:a6:97:
8c:86:2e:95:d4:57:50:c9:f0:48:87:c6:cb:85:ea:
a8:4e:b1:64:70:a9:e2:59:4d:cd:71:96:5a:2a:a8:
40:36:ad:33:1c:77:ab:43:cc:8d:f8:66:0b:c1:89:
61:09:83:bb:b4:1f:45:10:82:fd:36:ce:83:48:44:
b5:9c:b3:04:8a:58:c8:52:17:89:4c:d1:81:55:8a:
c3:5e:22:c2:c7:0a:5e:ca:5f:68:84:e5:76:a2:b2:
94:98:f3:1b:64:a5:a1:44:e5:58:8a:eb:9c:97:ca:
70:e0:12:e7:43:34:b4:74:54:75:84:20:5a:f0:ca:
5e:fd:71:2d:5d:d1:4d:52:8d:78:97:63:95:96:14:
79:f8:3f:9a:ed:79:06:b7:d2:84:35:18:7d:fe:07:
06:71:09:4c:ea:1f:49:3e:be:7c:c8:8f:0f:5b:ef:
de:33:e3:3c:f2:d2:03:1e:de:17:cb:f8:67:7f:e5:
c0:42:3d:67:7b:5d:3e:77:e4:d9:70:dc:0b:02:4b:
44:0e:a9:7c:34:ef:6f:37:03:6f:f4:20:e1:b5:d1:
66:da:d8:d8:06:78:58:8a:46:fb:5e:5f:62:63:6d:
4d:22:a4:a7:38:82:65:6a:49:6d:b4:d5:16:49:f0:
bf:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:67:39:CA:65:1A:3D:1B:1D:76:54:97:73:ED:F3:41:56:E2:09:7D
X509v3 Authority Key Identifier:
keyid:D5:6C:50:74:E6:6F:43:CE:57:8A:3D:4A:2E:7B:CC:21:5C:B5:E9:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1WxQdOZvQ85Xij1KLnvMIVy16WA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/17527b-ecc2-4498-9208-e22b8c0a1726/1/1WxQdOZvQ85Xij1KLnvMIVy16WA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/17527b-ecc2-4498-9208-e22b8c0a1726/1/1WxQdOZvQ85Xij1KLnvMIVy16WA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:f1:0c:e7:38:0d:3c:7f:2d:e5:51:ae:7e:9d:d2:97:5b:2c:
55:4a:20:4a:eb:26:7b:99:19:1b:46:66:3e:27:a2:f3:95:c6:
dd:89:e2:ce:65:30:39:30:48:01:8a:6b:b9:3f:18:72:dc:28:
54:9c:7a:81:87:80:e1:c0:09:1b:0d:9f:6a:12:81:8a:2e:3b:
0a:60:58:f1:1a:ee:e8:46:4d:67:f2:18:81:04:70:c2:4e:41:
c9:ac:4a:fb:6d:75:e0:9a:32:33:74:13:e3:35:09:28:64:a2:
c5:31:80:21:b7:09:68:9d:4e:1f:e6:74:f6:64:a9:ca:9f:85:
5d:07:9c:2f:f4:d9:f5:d0:b6:62:a5:d3:f4:f2:33:91:ef:81:
57:f0:14:dd:68:fa:01:70:bd:84:52:b5:27:b0:de:27:a7:ee:
35:70:78:e1:41:5e:b6:50:cf:f2:71:a8:94:ad:f7:46:fb:90:
1c:8c:d3:2f:64:be:c4:d1:57:fd:c5:69:4c:b9:64:74:b9:a2:
b5:45:ee:e9:4d:7b:3f:91:30:27:f2:cb:f8:ca:b9:ec:46:38:
c1:39:f2:a9:2a:2e:54:62:c8:b3:a3:8f:4c:f0:03:42:8c:ed:
2d:9f:92:7c:1f:ac:86:1a:dd:0c:63:66:ed:aa:55:49:c6:62:
86:f6:f7:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 03:53:17 2025 by rpki-client