Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/3c9e24-7e5a-48b6-b75f-d1b36841dee1/1/0WLKpqmE8Ihb_op-XgkfkyN3RCs.mft
File: 0WLKpqmE8Ihb_op-XgkfkyN3RCs.mft (raw, json)
Hash identifier: Abxxb+FU4Yk7oYjC1CYPxpbRhMOj60L8ziWDfX/JNAQ=
Subject key identifier: FE:1D:94:4A:77:80:52:C4:E7:A0:12:CC:E7:29:BC:59:AC:D8:7D:03
Authority key identifier: D1:62:CA:A6:A9:84:F0:88:5B:FE:8A:7E:5E:09:1F:93:23:77:44:2B
Certificate issuer: /CN=d162caa6a984f0885bfe8a7e5e091f932377442b
Certificate serial: 018CC8FA8D0ACEE2B2BFF5D727999F92E0E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0WLKpqmE8Ihb_op-XgkfkyN3RCs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/3c9e24-7e5a-48b6-b75f-d1b36841dee1/1/0WLKpqmE8Ihb_op-XgkfkyN3RCs.mft
Manifest number: 0CF7
Signing time: Tue 02 Jan 2024 07:01:52 +0000
Manifest this update: Tue 02 Jan 2024 07:01:52 +0000
Manifest next update: Wed 03 Jan 2024 07:01:52 +0000
Files and hashes: 1: 0WLKpqmE8Ihb_op-XgkfkyN3RCs.crl (hash: wc3kBVEOIPc61b6ltFnY1h0UX48tjbu5cgRdsPpqOFw=)
2: wpiIhF99PgOJXsAb6NWknecmFn4.roa (hash: AZNOZF8wcb9xhNCq+Y6NjAOIKL3/0HXbu4Ppl2VFSd4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:fa:8d:0a:ce:e2:b2:bf:f5:d7:27:99:9f:92:e0:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d162caa6a984f0885bfe8a7e5e091f932377442b
Validity
Not Before: Jan 2 07:01:52 2024 GMT
Not After : Jan 3 07:01:52 2024 GMT
Subject: CN=fe1d944a778052c4e7a012cce729bc59acd87d03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:34:87:9f:b4:be:6f:ce:a1:44:b1:f8:8a:15:
85:0b:8f:5d:34:2d:76:c7:df:73:7a:de:ea:93:1d:
07:cb:0a:a0:d7:7c:36:28:6a:b4:25:ea:67:00:c9:
d2:8f:69:e1:c1:56:b0:ea:a9:8a:f2:94:ca:51:c0:
c5:62:a7:85:da:b5:39:6e:4a:55:a8:be:dc:51:26:
79:2f:e9:3d:e8:2b:ec:b0:4a:84:27:88:54:e6:f2:
20:1f:d1:b9:c8:f3:a9:c3:50:60:01:58:69:fb:c4:
d5:c9:c3:53:3b:42:e5:3e:c4:47:b8:58:a0:16:d3:
f8:de:e4:93:76:2a:d3:17:e3:18:9e:eb:b7:3d:e1:
3f:8c:8a:1e:8d:e5:00:0c:f7:5f:68:53:37:3e:a0:
a4:c6:7e:40:44:a0:20:6f:f8:92:26:2d:79:00:29:
e2:7c:2a:63:a9:bd:35:1f:14:69:2c:2a:ef:5a:08:
8c:3c:63:c7:ce:75:a1:89:aa:5d:f7:03:c7:ec:c4:
61:0c:02:be:50:54:95:d5:35:97:53:1d:ea:91:63:
ef:9f:a8:0a:9e:13:cb:8b:61:05:f8:63:51:cf:dd:
ba:00:f1:31:3d:cf:54:c3:c1:f2:fb:c6:0a:cb:68:
84:36:9f:d8:66:a4:79:54:c1:40:a7:dc:99:1f:20:
4f:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:1D:94:4A:77:80:52:C4:E7:A0:12:CC:E7:29:BC:59:AC:D8:7D:03
X509v3 Authority Key Identifier:
keyid:D1:62:CA:A6:A9:84:F0:88:5B:FE:8A:7E:5E:09:1F:93:23:77:44:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0WLKpqmE8Ihb_op-XgkfkyN3RCs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/3c9e24-7e5a-48b6-b75f-d1b36841dee1/1/0WLKpqmE8Ihb_op-XgkfkyN3RCs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/3c9e24-7e5a-48b6-b75f-d1b36841dee1/1/0WLKpqmE8Ihb_op-XgkfkyN3RCs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:c8:46:2a:42:fe:0f:84:93:fa:89:aa:7b:db:3b:51:40:23:
49:8e:81:06:1b:53:8c:c4:90:42:f4:c0:35:99:08:92:cb:70:
f5:59:c2:18:7e:f1:a7:26:3e:c0:2b:f5:a0:ad:d0:bf:a3:e3:
61:d2:fd:91:7f:d4:45:d3:4c:76:16:a3:af:ae:01:dd:1b:23:
77:de:62:ba:1c:78:65:5e:84:1e:bd:1d:9f:45:6c:b5:bb:f6:
19:f8:62:fb:c8:b2:c6:82:2a:82:c9:bf:e7:0c:4d:80:02:7a:
a9:07:db:10:85:3e:9c:fe:bf:12:54:28:f3:bc:6a:82:ee:8d:
a6:d1:db:44:ab:d1:f4:12:d1:90:89:8a:ab:9b:b5:65:91:b0:
ce:57:d6:12:2a:ff:a1:11:b3:ec:ef:71:1e:ea:13:63:3c:7e:
5c:52:40:e2:08:cd:b9:1f:33:21:e6:28:a3:b5:1e:95:5e:27:
4a:8a:e7:93:71:dc:4d:c1:22:13:e3:4e:d8:bf:44:7d:26:f4:
8d:4e:a4:ba:46:26:7e:a5:48:72:96:91:4e:2c:56:8b:d2:9f:
10:97:91:d9:3a:47:38:df:57:01:11:df:02:e3:92:7c:3b:e8:
f2:03:c0:7e:cd:84:6d:f0:88:41:d5:3c:8b:83:c1:30:44:04:
91:fa:b3:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:58:51 2025 by rpki-client