Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/ae2f85-8770-4123-a21f-eaefb99fcbf8/1/worLje2_B47DylnoBxAwlovIFww.mft
File: worLje2_B47DylnoBxAwlovIFww.mft (raw, json)
Hash identifier: FFFkpVKrfo4OOwzvqIF+QmMInEb0rtI4noxcQdLWg18=
Subject key identifier: 8C:CA:3F:ED:2E:76:26:2D:BB:2D:96:2E:3E:05:C2:3C:66:0B:85:42
Authority key identifier: C2:8A:CB:8D:ED:BF:07:8E:C3:CA:59:E8:07:10:30:96:8B:C8:17:0C
Certificate issuer: /CN=c28acb8dedbf078ec3ca59e8071030968bc8170c
Certificate serial: 0185386DF95EA91EAE76F886A9161060531C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/worLje2_B47DylnoBxAwlovIFww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/ae2f85-8770-4123-a21f-eaefb99fcbf8/1/worLje2_B47DylnoBxAwlovIFww.mft
Manifest number: 0BDC
Signing time: Thu 22 Dec 2022 06:03:29 +0000
Manifest this update: Thu 22 Dec 2022 06:03:29 +0000
Manifest next update: Fri 23 Dec 2022 06:03:29 +0000
Files and hashes: 1: WPoRXgr-myCA8i_JnH8HUvVxzGg.roa (hash: JkUelAV3aNH9RkZaUXXHm7hsH70OKHYvi5vZYqGFyo4=)
2: worLje2_B47DylnoBxAwlovIFww.crl (hash: oVImHjqoc0ZNElm2DlZanvNYxgwnry6VA9J/epsmGtg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:38:6d:f9:5e:a9:1e:ae:76:f8:86:a9:16:10:60:53:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c28acb8dedbf078ec3ca59e8071030968bc8170c
Validity
Not Before: Dec 22 06:03:29 2022 GMT
Not After : Dec 23 06:03:29 2022 GMT
Subject: CN=8cca3fed2e76262dbb2d962e3e05c23c660b8542
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:a4:7b:74:e1:b1:07:7e:c4:d5:e9:8d:03:95:
00:a1:f9:5a:d1:23:e5:52:11:df:d1:40:4f:ae:50:
bc:40:15:6c:c6:69:5b:6f:40:9e:f2:82:34:ed:67:
9f:00:49:f0:82:66:c6:9f:9d:f1:9f:98:d6:38:57:
e0:9e:d1:9f:c9:51:fd:54:ea:89:e3:78:01:a2:28:
a1:f6:b4:b8:96:88:63:2c:f6:05:95:0e:a2:24:00:
7c:dd:9c:b6:c1:0c:d4:e6:c7:e6:7c:7b:8b:7b:99:
1b:14:b5:d7:98:74:99:1f:52:ae:31:32:b5:53:17:
1a:74:a2:50:b7:e2:0f:59:88:d7:9a:15:12:6e:49:
95:58:c7:dd:5a:92:a2:be:3f:84:83:f2:9a:e6:4c:
c7:8a:d1:37:73:74:8e:ef:3f:cf:de:41:80:6c:00:
f7:0e:0a:67:04:d3:48:1c:5a:a3:8b:b3:df:59:f9:
81:33:61:b5:ff:66:05:6f:9d:30:7d:e7:e1:74:a0:
82:d0:66:c3:73:e5:b7:5f:63:ef:55:fb:6a:46:40:
7f:4a:16:71:2b:45:10:df:fa:d5:c3:b1:bc:87:c5:
60:5b:d5:48:d1:53:a0:9a:db:b0:db:9c:08:11:28:
ed:62:55:00:23:fa:07:d0:a6:20:4f:94:d8:35:67:
31:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:CA:3F:ED:2E:76:26:2D:BB:2D:96:2E:3E:05:C2:3C:66:0B:85:42
X509v3 Authority Key Identifier:
keyid:C2:8A:CB:8D:ED:BF:07:8E:C3:CA:59:E8:07:10:30:96:8B:C8:17:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/worLje2_B47DylnoBxAwlovIFww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/ae2f85-8770-4123-a21f-eaefb99fcbf8/1/worLje2_B47DylnoBxAwlovIFww.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/ae2f85-8770-4123-a21f-eaefb99fcbf8/1/worLje2_B47DylnoBxAwlovIFww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:46:33:b1:a4:98:1d:09:a5:10:27:4d:b1:cb:b5:2b:9a:db:
1f:3d:33:07:10:1b:78:ff:8c:05:34:7c:c5:3e:cd:67:b8:77:
9b:c3:a8:8d:6f:8c:98:d5:8a:9d:df:ca:88:61:8d:67:bb:86:
b6:74:ab:ab:30:ec:a5:44:75:19:5f:4f:27:cd:d3:72:6e:ef:
07:58:dc:22:50:d9:91:a5:57:cd:ef:18:de:17:5e:c5:e2:f6:
4a:cd:90:0b:5e:11:83:44:6f:74:36:87:44:12:f5:5f:65:8c:
66:46:4e:19:00:75:28:d6:ba:fa:44:24:ec:59:a7:c3:3a:eb:
dc:bd:be:e9:6d:ac:7d:ae:b0:21:f0:bb:ad:c8:36:91:bb:70:
18:82:43:b3:d5:bd:63:87:64:55:30:b7:a1:8d:7a:70:00:66:
f5:27:f2:cf:44:57:8b:2b:2a:48:c2:cb:e6:da:61:db:b9:a7:
95:33:9f:39:b9:cf:55:f1:33:17:df:2a:c9:bf:cf:ce:fb:8c:
56:9e:c2:f7:86:34:50:52:b1:72:bc:47:9c:43:15:63:84:f3:
52:f9:bd:34:8b:36:c6:05:c0:70:54:20:7d:18:57:9c:1c:8e:
43:d9:c7:95:cc:34:db:37:38:2d:53:7d:3e:f3:23:54:65:5e:
02:6a:34:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:40:18 2025 by rpki-client