Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/d5dc90-f0ef-4729-8456-aab422df21e2/1/wt32Kq13dDFn7k9BSWlkLIsSjG0.mft
File: wt32Kq13dDFn7k9BSWlkLIsSjG0.mft (raw, json)
Hash identifier: KpSIgZK+H8cuC23XwWlyfM7Ov7hyWhHOWZRsKcJQs5c=
Subject key identifier: FD:2F:00:33:24:4A:20:F5:DE:BA:76:92:63:C3:61:7B:68:17:4C:84
Authority key identifier: C2:DD:F6:2A:AD:77:74:31:67:EE:4F:41:49:69:64:2C:8B:12:8C:6D
Certificate issuer: /CN=c2ddf62aad77743167ee4f414969642c8b128c6d
Certificate serial: 018C3936254BCFAD14A16A3422E1F533013C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wt32Kq13dDFn7k9BSWlkLIsSjG0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/d5dc90-f0ef-4729-8456-aab422df21e2/1/wt32Kq13dDFn7k9BSWlkLIsSjG0.mft
Manifest number: 0723
Signing time: Tue 05 Dec 2023 09:01:38 +0000
Manifest this update: Tue 05 Dec 2023 09:01:38 +0000
Manifest next update: Wed 06 Dec 2023 09:01:38 +0000
Files and hashes: 1: NO6TDqKYvUL65jCvrwluu37OpOw.roa (hash: TcltT4zQpm5gap8wBR9uo5U+XzZYTMz1yEtA31qEMO4=)
2: wt32Kq13dDFn7k9BSWlkLIsSjG0.crl (hash: Zd8UpIJIqqVHU7l+8xHWQED1vKOmkSx0R+6a5EmMu5U=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:39:36:25:4b:cf:ad:14:a1:6a:34:22:e1:f5:33:01:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2ddf62aad77743167ee4f414969642c8b128c6d
Validity
Not Before: Dec 5 09:01:38 2023 GMT
Not After : Dec 6 09:01:38 2023 GMT
Subject: CN=fd2f0033244a20f5deba769263c3617b68174c84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:6d:0e:bb:ab:ae:5a:e0:9b:13:45:99:d8:27:
c4:12:a9:be:54:54:ea:8c:12:44:3b:9a:ca:7a:1f:
9a:e1:26:69:56:fe:81:8c:1e:9f:94:28:ad:0d:7b:
b6:1b:c6:87:b4:e6:fe:ca:e9:d5:10:34:6e:23:c1:
d4:53:f4:86:b1:0f:f1:e7:1b:df:55:86:c3:19:c7:
69:d2:17:f4:c3:c7:12:7e:55:77:92:9d:16:ff:bf:
66:5e:aa:14:91:e4:cb:59:cb:07:6d:dd:59:7f:75:
37:4b:33:e6:f3:ed:fc:a8:dc:b4:16:52:90:b4:9b:
1d:89:0b:82:4b:03:93:37:0b:e7:87:e2:96:0a:34:
98:4f:4b:e2:97:8f:9a:79:04:54:2d:dc:e8:ee:eb:
d1:a5:7a:1d:c6:ee:9d:5f:69:7d:ee:a7:47:43:11:
3d:72:42:9c:aa:06:ea:79:5e:84:01:90:72:bd:c0:
45:0b:ad:13:97:02:a0:88:15:08:38:b7:a6:63:4e:
a9:78:25:63:f3:99:1a:9e:ff:b5:c6:b7:0f:b6:9c:
22:90:66:71:51:9a:d1:1c:f9:8e:6a:c5:f1:4e:b2:
36:74:1a:11:b7:ae:39:0f:06:62:aa:93:63:38:a0:
c8:36:fe:bd:59:e6:53:17:56:89:d2:ce:7d:e2:76:
10:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:2F:00:33:24:4A:20:F5:DE:BA:76:92:63:C3:61:7B:68:17:4C:84
X509v3 Authority Key Identifier:
keyid:C2:DD:F6:2A:AD:77:74:31:67:EE:4F:41:49:69:64:2C:8B:12:8C:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wt32Kq13dDFn7k9BSWlkLIsSjG0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/d5dc90-f0ef-4729-8456-aab422df21e2/1/wt32Kq13dDFn7k9BSWlkLIsSjG0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/d5dc90-f0ef-4729-8456-aab422df21e2/1/wt32Kq13dDFn7k9BSWlkLIsSjG0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:df:df:2d:5f:bb:29:bd:a7:c5:e7:c3:e8:1b:48:4e:a4:a3:
66:4c:91:82:6b:29:3c:cd:89:ff:25:4a:46:35:6d:e4:aa:85:
48:a9:75:a0:fa:97:71:94:bd:fe:e5:40:89:bc:f3:ed:c3:3e:
4b:34:c9:ed:5a:12:bc:50:02:8f:13:8f:3b:f0:f0:ab:12:d1:
d5:ab:1a:ff:0b:96:d7:45:cc:72:f4:cf:c7:06:1b:64:57:1e:
c4:4e:5e:6c:00:d4:93:32:f3:a1:bd:8d:e4:18:b4:3d:f9:3e:
f5:b3:57:cc:9b:94:8f:6a:7b:34:88:96:30:98:89:74:d7:0b:
ab:ea:bc:fd:b1:29:10:f9:1b:77:01:e0:4b:2d:af:99:de:c3:
a0:ff:03:98:63:20:6b:bd:38:4a:0c:51:61:14:0b:96:d4:5b:
df:67:c3:33:96:1f:c1:e7:fb:84:36:f7:87:6e:1d:69:a3:44:
c5:27:b2:68:3e:67:79:d8:66:cb:7a:10:f4:3f:ad:ad:c0:a7:
a3:e3:31:a1:42:91:c1:a7:a9:87:9a:af:b8:5f:94:53:54:d4:
bd:4f:9a:37:45:3f:11:b5:ac:ac:99:63:29:34:1e:2a:41:bd:
58:0a:6a:31:c4:43:50:07:3b:66:cc:5b:34:78:7d:c5:1c:78:
11:fc:81:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 03:09:51 2025 by rpki-client