Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/32f3bb-2594-4b37-94aa-941244f5dded/1/wnz1VgIH7OhILDL8tplfd9f3MMs.mft
File: wnz1VgIH7OhILDL8tplfd9f3MMs.mft (raw, json)
Hash identifier: 55N04Zyu3/zMp8+sbKkLvlAL/DL6qnw02L7HxiFih+o=
Subject key identifier: 25:89:EB:48:3E:E6:47:C7:9F:A2:EF:E5:02:EC:CC:D4:6D:32:97:0D
Authority key identifier: C2:7C:F5:56:02:07:EC:E8:48:2C:32:FC:B6:99:5F:77:D7:F7:30:CB
Certificate issuer: /CN=c27cf5560207ece8482c32fcb6995f77d7f730cb
Certificate serial: 0195E15939D3E9C17F121870B1DAEE4AE249
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wnz1VgIH7OhILDL8tplfd9f3MMs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/32f3bb-2594-4b37-94aa-941244f5dded/1/wnz1VgIH7OhILDL8tplfd9f3MMs.mft
Manifest number: 01A8
Signing time: Sat 29 Mar 2025 10:01:15 +0000
Manifest this update: Sat 29 Mar 2025 10:01:15 +0000
Manifest next update: Sun 30 Mar 2025 10:01:15 +0000
Files and hashes: 1: f45K-_tztLGikN2V1uWSCFuY_68.roa (hash: xJe3gW2GTPkOmGgSxCeDd1gAbtFU96D/eKs9HOKj+Eo=)
2: wnz1VgIH7OhILDL8tplfd9f3MMs.crl (hash: 2R3JjQWKdTKNrrLuVNKYiSL5sjS7c45/l3OjgAaLqpI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e1:59:39:d3:e9:c1:7f:12:18:70:b1:da:ee:4a:e2:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c27cf5560207ece8482c32fcb6995f77d7f730cb
Validity
Not Before: Mar 29 10:01:15 2025 GMT
Not After : Mar 30 10:01:15 2025 GMT
Subject: CN=2589eb483ee647c79fa2efe502ecccd46d32970d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:d6:18:97:62:19:5f:15:ff:72:4c:58:bb:45:
57:37:ca:d2:0f:0b:e2:c4:38:af:e0:1c:cb:ac:26:
1d:ae:2d:f6:6f:aa:8d:2e:ba:c3:4a:bf:41:95:aa:
bf:4e:3e:00:27:37:1f:68:34:98:c0:c5:d0:51:aa:
9c:c8:b6:60:43:8d:49:7e:76:ba:73:de:64:1d:f1:
8d:9d:82:b0:d8:12:ff:20:35:44:22:a3:e0:d4:2f:
cd:56:38:86:d7:1b:d7:cf:3b:b8:01:a6:ef:fd:c2:
ef:72:c5:37:d3:46:eb:9f:c6:d1:f6:0e:22:5b:ba:
e5:af:f3:1a:8d:57:b7:67:6d:a3:c0:cc:31:fc:bd:
37:2f:70:c3:50:98:2c:f9:c7:60:21:b2:72:f6:11:
78:69:1e:ca:a9:7e:5d:18:6a:ad:b0:14:1b:5b:95:
e8:8f:ea:7d:c4:ae:55:51:5a:fd:81:4e:16:aa:7f:
59:e5:e1:bf:75:01:8c:79:94:a0:95:e7:cc:b7:3f:
5d:ea:30:6b:3d:8b:9e:84:3f:66:94:c2:6b:6f:08:
73:8a:3d:59:70:5d:f3:8f:f0:4f:37:21:17:06:07:
28:85:40:c7:a4:ff:7a:4f:d9:5d:0c:af:71:51:66:
46:ac:68:81:b0:32:86:85:bd:0e:ab:13:4d:79:ba:
18:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:89:EB:48:3E:E6:47:C7:9F:A2:EF:E5:02:EC:CC:D4:6D:32:97:0D
X509v3 Authority Key Identifier:
keyid:C2:7C:F5:56:02:07:EC:E8:48:2C:32:FC:B6:99:5F:77:D7:F7:30:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wnz1VgIH7OhILDL8tplfd9f3MMs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/32f3bb-2594-4b37-94aa-941244f5dded/1/wnz1VgIH7OhILDL8tplfd9f3MMs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/32f3bb-2594-4b37-94aa-941244f5dded/1/wnz1VgIH7OhILDL8tplfd9f3MMs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:90:64:fe:23:4a:5e:73:cc:4f:73:30:d5:91:96:f1:c9:fc:
d7:2f:cc:59:7e:74:e4:4b:8a:9b:58:ff:1c:1a:47:6e:b3:8d:
23:d1:fa:c5:43:96:56:26:9a:3c:bf:c7:eb:05:58:eb:1f:d5:
50:a8:c5:9f:4b:a6:aa:d3:8d:e3:d9:14:49:ca:62:33:28:aa:
01:a9:1a:b2:07:65:0b:53:85:15:3b:73:fd:e9:4c:36:06:da:
e4:13:b6:a1:10:74:98:3a:cc:77:99:eb:61:59:a8:b5:a6:d4:
0d:c9:1c:f8:3c:13:1c:a4:e5:c3:d4:81:d5:b8:75:7e:70:7b:
75:ec:29:49:1a:a1:5a:a6:8e:6a:84:ea:58:39:e0:5b:11:d4:
7d:44:1e:3e:66:8e:7b:ed:d0:fc:37:28:4f:fc:5a:d2:97:6a:
f4:03:2f:d7:00:ff:d5:be:fb:0d:bf:a9:42:ab:df:6e:3e:89:
90:35:e7:28:fc:65:4f:d2:9c:e9:8e:9b:87:a0:5b:19:9b:61:
28:6f:ac:39:54:c6:db:93:4b:7d:0e:a7:a0:59:8e:dd:a9:38:
b7:33:30:ce:56:17:f2:c3:d1:4c:8b:3f:a4:3e:e4:df:90:83:
de:21:ad:01:97:c9:76:2f:45:fa:d0:8b:b9:16:e0:62:38:da:
a2:5a:60:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 03:55:55 2025 by rpki-client