Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/f6fc89-3376-4ea5-ae8b-ef7d21414db6/1/wNS8tF2FECWBH1MvR4qMezzmaIg.mft
File: wNS8tF2FECWBH1MvR4qMezzmaIg.mft (raw, json)
Hash identifier: EVmaVoadOXZXAcM/WsWpu8a8EvU0C/o5qTDWSNOPa00=
Subject key identifier: C5:D4:2A:C1:23:9A:46:04:C7:49:4B:61:96:D6:4E:68:1E:E3:38:88
Authority key identifier: C0:D4:BC:B4:5D:85:10:25:81:1F:53:2F:47:8A:8C:7B:3C:E6:68:88
Certificate issuer: /CN=c0d4bcb45d851025811f532f478a8c7b3ce66888
Certificate serial: 018C803B1E85E019402DD4BDC778BFA25BBF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wNS8tF2FECWBH1MvR4qMezzmaIg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/f6fc89-3376-4ea5-ae8b-ef7d21414db6/1/wNS8tF2FECWBH1MvR4qMezzmaIg.mft
Manifest number: 0A0A
Signing time: Tue 19 Dec 2023 04:00:07 +0000
Manifest this update: Tue 19 Dec 2023 04:00:07 +0000
Manifest next update: Wed 20 Dec 2023 04:00:07 +0000
Files and hashes: 1: QZv4H6QmR4KlFk_KiKKu8KHIzPU.roa (hash: UP/69NbsvJtGxr669f0F4waigWnepp8tSrn0QTLxlSs=)
2: wNS8tF2FECWBH1MvR4qMezzmaIg.crl (hash: skuMFf/smc3vYu1AGARvImpTGhXqAOQvxrWBNrfyMrg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:80:3b:1e:85:e0:19:40:2d:d4:bd:c7:78:bf:a2:5b:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0d4bcb45d851025811f532f478a8c7b3ce66888
Validity
Not Before: Dec 19 04:00:07 2023 GMT
Not After : Dec 20 04:00:07 2023 GMT
Subject: CN=c5d42ac1239a4604c7494b6196d64e681ee33888
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:46:9d:8e:08:a7:d3:f1:7f:d9:a7:df:8f:58:
67:80:0b:df:ed:95:b8:ec:cf:91:1b:c3:49:f1:3e:
3d:f7:80:81:04:65:14:e2:32:51:68:f9:17:56:a5:
5b:19:3c:5e:dc:da:73:ba:d2:6f:fe:d8:28:0b:3f:
1e:d5:2a:70:dd:28:69:be:9e:12:77:4d:c9:67:ad:
e3:40:06:96:93:a0:57:e0:93:91:cb:df:f4:9d:e1:
47:ec:70:e0:92:e6:8b:6d:7c:66:aa:7b:61:26:b0:
83:0a:7e:e6:57:f3:b8:26:62:70:ea:6e:7b:31:07:
1d:63:2d:60:90:17:e0:db:af:25:f9:f0:b0:8b:ff:
f4:61:8d:d5:6e:ab:01:47:07:12:0e:db:00:96:c4:
67:ff:54:6e:26:aa:50:ff:c6:c7:1e:ab:72:b9:b1:
11:c4:38:19:87:65:ab:ec:37:e6:08:9b:80:32:63:
9e:d5:29:bd:5e:9b:54:f4:d5:a7:83:b9:ac:3b:c9:
b3:27:43:46:d7:68:e4:62:a5:01:31:76:2b:f6:49:
6e:be:b4:e6:ce:85:1f:38:d2:c7:ed:b2:9a:5c:c1:
a4:0f:b0:74:ec:50:02:05:35:13:dd:33:48:b3:1b:
41:e0:54:45:39:1a:e2:6a:a5:79:14:27:42:72:51:
8c:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:D4:2A:C1:23:9A:46:04:C7:49:4B:61:96:D6:4E:68:1E:E3:38:88
X509v3 Authority Key Identifier:
keyid:C0:D4:BC:B4:5D:85:10:25:81:1F:53:2F:47:8A:8C:7B:3C:E6:68:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wNS8tF2FECWBH1MvR4qMezzmaIg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/f6fc89-3376-4ea5-ae8b-ef7d21414db6/1/wNS8tF2FECWBH1MvR4qMezzmaIg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/f6fc89-3376-4ea5-ae8b-ef7d21414db6/1/wNS8tF2FECWBH1MvR4qMezzmaIg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:fd:b8:57:92:51:63:3d:72:6a:b2:46:1f:6d:15:34:52:37:
3c:f3:58:90:d8:9b:db:49:26:7e:b7:fd:a9:a0:d8:65:6d:dc:
b6:17:2e:73:b4:19:16:bc:5b:38:b0:fe:98:c2:c0:e8:22:ea:
c7:17:9f:a4:f7:c6:3f:3a:30:31:69:c0:c6:19:64:85:43:bc:
3c:db:80:8d:c7:31:6d:f1:1a:8a:06:9a:9d:2b:c1:fc:49:94:
3b:5e:f4:b7:19:a5:b5:10:3c:a0:d5:a6:e9:41:cc:10:5f:e9:
2c:5a:9b:9f:58:c4:96:ca:1d:b5:5a:58:ea:f5:c2:b9:54:17:
74:50:4a:0a:40:e3:58:74:f0:34:6d:79:ee:73:e3:ed:df:6f:
e8:4f:aa:a4:b1:44:a3:47:c8:10:f9:a9:2a:fe:06:ab:c7:2b:
81:eb:b1:4c:0e:66:55:8e:41:35:38:d9:59:ee:7d:eb:12:77:
1e:4a:09:21:85:5a:87:c5:a6:5f:8f:57:2c:f7:48:ea:f4:47:
fc:80:7e:4a:c2:ed:7a:76:5b:ab:aa:f0:98:87:50:be:41:57:
a6:b2:c4:c1:35:7a:d1:7f:00:9e:b4:0a:88:e5:6a:1b:07:8c:
b8:e1:0a:14:a8:79:80:f8:2b:f9:35:fc:57:78:6b:94:80:ed:
03:11:c4:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:42:29 2025 by rpki-client