Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/2f4c80-6ec0-480a-a809-1ef920875e37/1/wHWxQ7LHigOdslu47hj-klT8kPM.mft
File: wHWxQ7LHigOdslu47hj-klT8kPM.mft (raw, json)
Hash identifier: ClZKmSYvPSbJ8m/BGESGdTUiSf+D32UGXX5LmqNUqtU=
Subject key identifier: 17:BF:00:9D:50:D5:8D:81:39:73:6C:7C:AF:9B:A3:25:92:32:4C:A0
Authority key identifier: C0:75:B1:43:B2:C7:8A:03:9D:B2:5B:B8:EE:18:FE:92:54:FC:90:F3
Certificate issuer: /CN=c075b143b2c78a039db25bb8ee18fe9254fc90f3
Certificate serial: 019417A8DAE63A629E0CE7081ED9947893E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wHWxQ7LHigOdslu47hj-klT8kPM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/2f4c80-6ec0-480a-a809-1ef920875e37/1/wHWxQ7LHigOdslu47hj-klT8kPM.mft
Manifest number: 0AFF
Signing time: Mon 30 Dec 2024 13:02:09 +0000
Manifest this update: Mon 30 Dec 2024 13:02:09 +0000
Manifest next update: Tue 31 Dec 2024 13:02:09 +0000
Files and hashes: 1: wHWxQ7LHigOdslu47hj-klT8kPM.crl (hash: Tk3gEUpY+CNQGqgJWIPXpRfK/tfqlsP0TKYdkpcbc0M=)
2: wPgg6cqy6rf9BO8zaD6ucdD8Be0.roa (hash: RdjE7LrYg26BEsRadevOuBVgb+toppFi5F+BXDxpKHA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:17:a8:da:e6:3a:62:9e:0c:e7:08:1e:d9:94:78:93:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c075b143b2c78a039db25bb8ee18fe9254fc90f3
Validity
Not Before: Dec 30 13:02:09 2024 GMT
Not After : Dec 31 13:02:09 2024 GMT
Subject: CN=17bf009d50d58d8139736c7caf9ba32592324ca0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:50:e6:81:eb:2c:a4:77:e3:0b:2e:6e:ea:22:
d0:4c:e2:50:50:23:70:40:68:29:ca:4b:c8:66:dc:
0c:46:2f:2e:fc:62:4e:22:20:e5:e4:eb:66:4b:6a:
e3:74:5f:fc:13:a9:98:4b:f1:da:92:51:bd:b6:7a:
4a:50:9b:fd:6a:c1:26:98:f4:08:71:6d:b9:12:b5:
ac:70:fb:33:e5:c6:42:24:fe:b5:62:5b:60:d9:f5:
b2:11:43:9e:a2:cb:d4:e6:58:b7:bd:c6:ee:58:e5:
40:6f:99:7b:4e:62:45:cc:84:48:eb:2f:f3:ad:3f:
6f:26:2f:41:f3:1c:b1:3a:4a:86:32:17:e3:1e:73:
d1:ba:61:de:63:f2:1d:05:1c:22:72:3a:5d:71:2f:
a0:1c:fc:7e:8e:d4:bb:52:9e:e9:47:76:20:c7:8f:
f8:1c:85:65:06:20:de:76:30:dc:04:67:2e:da:57:
7e:89:f3:fd:0e:80:38:6a:c2:d1:e1:67:f8:d3:cc:
a3:f2:66:d6:0d:f9:98:da:c6:85:ce:fe:a5:22:75:
06:a9:6e:20:8e:69:39:0c:0a:ac:7d:37:4a:77:24:
bc:9f:41:d5:61:d4:98:fd:7c:2e:a9:a7:11:d0:10:
96:ac:07:97:df:5a:40:bd:e8:be:7d:5d:11:2a:45:
10:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:BF:00:9D:50:D5:8D:81:39:73:6C:7C:AF:9B:A3:25:92:32:4C:A0
X509v3 Authority Key Identifier:
keyid:C0:75:B1:43:B2:C7:8A:03:9D:B2:5B:B8:EE:18:FE:92:54:FC:90:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wHWxQ7LHigOdslu47hj-klT8kPM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/2f4c80-6ec0-480a-a809-1ef920875e37/1/wHWxQ7LHigOdslu47hj-klT8kPM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/2f4c80-6ec0-480a-a809-1ef920875e37/1/wHWxQ7LHigOdslu47hj-klT8kPM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:db:fc:e7:b2:68:48:08:4b:b5:d9:1d:c8:0b:a7:03:cc:73:
fa:67:cb:77:c3:c8:8f:f4:49:61:52:57:63:cb:7b:be:ee:43:
0e:eb:e2:b1:c5:4a:38:24:a6:0b:50:b5:e2:7b:e7:eb:41:59:
ff:c5:5f:c9:cb:2c:b4:eb:e1:cd:9c:55:ed:c0:7f:52:54:ad:
89:4c:c8:8c:9f:c4:a1:20:bf:95:dc:c3:8a:52:44:c1:50:34:
d1:e5:5d:b3:50:06:cf:cb:2e:df:45:31:a3:ec:9f:72:b1:7d:
ed:7c:22:a1:ce:2e:c8:81:b7:dd:eb:97:46:9c:e1:e7:78:0c:
eb:cd:a7:29:bb:87:99:a2:1e:81:53:17:6d:17:0f:9c:0a:7f:
00:bc:44:61:b5:84:e6:3f:ca:3c:81:8e:2c:be:f9:84:70:43:
80:10:bf:c6:1a:ff:70:9c:1e:28:78:ef:bb:0b:d8:4a:3c:eb:
64:d9:ee:68:59:1a:ea:b5:a7:09:4f:0c:28:5d:70:4d:1f:32:
0e:02:50:b5:c4:f3:2d:d3:dd:83:7f:ab:46:8d:8f:54:93:2f:
9b:73:34:98:a3:69:21:91:2a:4e:2b:3f:c6:f9:5a:4f:be:cb:
b4:18:b1:9b:94:e4:58:1c:b3:cb:b6:8e:cb:50:13:93:4c:d6:
20:b9:9e:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 01:10:34 2025 by rpki-client