Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/f73cdb-8273-4f43-9f61-8aa7c4cb719f/1/1wnJAh5Ar5KiCN41AkynBmPXNOQ.mft
File: 1wnJAh5Ar5KiCN41AkynBmPXNOQ.mft (raw, json)
Hash identifier: CgchIYWPzy5JRaUQM9rzSqXGzXusjscCE2i/bqBH6eI=
Subject key identifier: 02:60:40:5D:9E:B8:1E:EF:62:A3:CF:4A:53:D7:AD:85:D1:86:48:85
Authority key identifier: D7:09:C9:02:1E:40:AF:92:A2:08:DE:35:02:4C:A7:06:63:D7:34:E4
Certificate issuer: /CN=d709c9021e40af92a208de35024ca70663d734e4
Certificate serial: 0193B90730DFF8D9AC8CF93FCFE9BC80BC7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1wnJAh5Ar5KiCN41AkynBmPXNOQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/f73cdb-8273-4f43-9f61-8aa7c4cb719f/1/1wnJAh5Ar5KiCN41AkynBmPXNOQ.mft
Manifest number: 13A7
Signing time: Thu 12 Dec 2024 04:01:16 +0000
Manifest this update: Thu 12 Dec 2024 04:01:16 +0000
Manifest next update: Fri 13 Dec 2024 04:01:16 +0000
Files and hashes: 1: 1wnJAh5Ar5KiCN41AkynBmPXNOQ.crl (hash: 6BCIYBOWmgGk8Ze68pSyolxD5Fz9IeHQ6jul6mw/75I=)
2: s1WBsZmCvpxfAJ1vJJDtQuy-bt0.roa (hash: 37rRFx3/Lv4ZcyFAYCNrObPBAqt1uY6LJHANmBRt9VQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:b9:07:30:df:f8:d9:ac:8c:f9:3f:cf:e9:bc:80:bc:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d709c9021e40af92a208de35024ca70663d734e4
Validity
Not Before: Dec 12 04:01:16 2024 GMT
Not After : Dec 13 04:01:16 2024 GMT
Subject: CN=0260405d9eb81eef62a3cf4a53d7ad85d1864885
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:9d:90:bd:bf:18:8a:c6:74:4d:c1:9e:a7:7d:
26:9c:49:84:b2:ce:85:81:82:5f:8d:4e:5f:df:39:
8b:98:ef:2d:42:89:a0:37:99:41:49:c0:2c:79:44:
1e:8c:ac:3e:56:84:c8:f6:bb:4d:aa:c5:de:85:bc:
e2:85:b7:b4:0d:82:7b:d3:fd:ce:9b:e6:39:98:b0:
f4:6e:2b:74:00:f2:16:76:d9:29:47:35:4f:46:29:
23:f0:68:72:74:15:25:4e:fe:d8:76:47:1c:8e:94:
b0:2a:12:7e:cf:b3:e5:46:a1:69:84:e1:a6:5a:b5:
df:66:cf:26:dc:02:4b:a5:bf:bc:f0:62:af:9b:55:
ce:67:ee:01:75:cc:db:a9:94:39:82:55:49:3c:ee:
d9:90:75:80:39:9a:d4:71:17:e9:bd:0f:03:9a:86:
fa:0f:26:0c:70:1f:87:19:d6:2e:4f:99:00:fb:e7:
72:59:10:ac:c9:15:41:f9:c7:24:bf:06:8c:eb:a3:
62:9a:e7:5b:2e:16:18:1a:c1:12:c7:77:2b:db:51:
61:d1:eb:fd:33:f0:67:05:8e:67:db:38:32:c4:4e:
0f:20:26:f5:24:56:7d:07:ca:84:6b:65:da:ac:38:
e9:9d:61:93:0e:72:3d:87:59:dc:22:0d:3b:1c:52:
d5:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:60:40:5D:9E:B8:1E:EF:62:A3:CF:4A:53:D7:AD:85:D1:86:48:85
X509v3 Authority Key Identifier:
keyid:D7:09:C9:02:1E:40:AF:92:A2:08:DE:35:02:4C:A7:06:63:D7:34:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1wnJAh5Ar5KiCN41AkynBmPXNOQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/f73cdb-8273-4f43-9f61-8aa7c4cb719f/1/1wnJAh5Ar5KiCN41AkynBmPXNOQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/f73cdb-8273-4f43-9f61-8aa7c4cb719f/1/1wnJAh5Ar5KiCN41AkynBmPXNOQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:63:6d:d9:e3:64:8a:19:c0:e8:db:85:b9:87:ae:46:a1:86:
45:3d:3b:e0:07:e0:91:d0:90:95:7e:4b:f0:f8:99:ad:3b:35:
f7:e5:2c:fb:32:ae:d2:87:50:5b:c8:e6:b9:d3:91:71:93:45:
cf:d2:97:08:d6:4d:d0:17:f3:e6:98:66:65:a9:b8:d3:5e:c1:
7b:f5:92:52:50:04:64:7d:13:fb:85:b5:28:68:5c:a1:82:32:
fa:c2:06:71:9f:cf:8e:ef:c8:8e:fc:a8:84:ed:10:7a:13:d2:
af:07:f7:a5:47:5c:28:f9:d6:f5:c6:ae:46:d3:3e:e6:81:65:
63:85:ae:80:a9:1c:d7:f2:fd:9e:5f:3f:3e:2a:9f:22:c7:d1:
ea:80:f0:74:4d:0e:38:c5:07:f5:f3:eb:7d:c4:e3:c6:2e:5d:
31:ff:1e:32:9b:24:09:1f:4f:8d:72:59:1c:13:20:af:e7:27:
d5:30:6b:e9:01:5f:90:77:f3:d7:df:e9:5f:1c:33:ca:14:40:
f1:ba:2e:92:d5:49:99:e1:b2:0f:40:83:63:1a:d7:87:8b:68:
ac:68:10:ae:87:88:63:1b:03:06:87:61:d7:d1:b5:25:6b:5e:
de:b8:4e:da:77:f6:2e:bf:c4:14:e9:ed:40:9e:0f:c6:d4:d4:
6c:d3:66:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 13:43:28 2025 by rpki-client