Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/8a90d9-948a-46c2-977a-643f02daeb9e/1/Wq4ZZ4qjdSVRIimpTniQFHGDJzw.mft
File: Wq4ZZ4qjdSVRIimpTniQFHGDJzw.mft (raw, json)
Hash identifier: tJD2hxGGYKNF1oUQrJMszonj2wR3oMpm8Frjl+ugiPs=
Subject key identifier: 6F:3A:1E:96:91:6F:84:B7:91:B3:0E:0F:36:E6:77:2C:E4:53:D9:4C
Authority key identifier: 5A:AE:19:67:8A:A3:75:25:51:22:29:A9:4E:78:90:14:71:83:27:3C
Certificate issuer: /CN=5aae19678aa37525512229a94e7890147183273c
Certificate serial: 0194BCA96C6B2DFD209B477D652513E882BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wq4ZZ4qjdSVRIimpTniQFHGDJzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/8a90d9-948a-46c2-977a-643f02daeb9e/1/Wq4ZZ4qjdSVRIimpTniQFHGDJzw.mft
Manifest number: 13FF
Signing time: Fri 31 Jan 2025 14:00:07 +0000
Manifest this update: Fri 31 Jan 2025 14:00:07 +0000
Manifest next update: Sat 01 Feb 2025 14:00:07 +0000
Files and hashes: 1: 0ehbELwlxIROAJUXnHI7q0hHZvU.roa (hash: I3OhyXjmUaPoDinsu8stBnr83W6cuJYkPeqcRDRwksw=)
2: Wq4ZZ4qjdSVRIimpTniQFHGDJzw.crl (hash: h8ajIWj6O+0Cf2/Lvmoq+x7bbl6fgc418iNXrG1C8oE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:6c:6b:2d:fd:20:9b:47:7d:65:25:13:e8:82:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5aae19678aa37525512229a94e7890147183273c
Validity
Not Before: Jan 31 14:00:07 2025 GMT
Not After : Feb 1 14:00:07 2025 GMT
Subject: CN=6f3a1e96916f84b791b30e0f36e6772ce453d94c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:d4:da:3d:1f:5e:46:c2:41:26:bf:0d:68:45:
61:e0:1f:61:76:9f:56:74:9c:b3:6c:78:43:de:91:
2b:81:ae:ea:83:d5:15:0c:6d:dd:b3:da:bf:21:45:
17:62:5f:7f:4b:18:b1:18:de:0b:3b:d8:a2:05:af:
4c:28:a6:32:4d:3f:99:a6:1f:39:10:1e:88:5d:ff:
0f:bd:63:f1:02:dc:5a:9f:a7:8f:d4:38:60:f1:73:
8f:34:fb:5c:47:0f:95:01:3f:17:88:42:73:81:cf:
c1:07:cf:55:2b:6d:7e:ab:a5:c8:11:79:89:bf:75:
05:c6:7c:5b:ac:18:da:86:88:66:34:57:ed:8b:ab:
98:6d:78:9b:e5:b7:a6:99:7e:d5:0d:a1:4c:47:19:
fd:33:dc:e0:c1:b8:20:a2:10:70:6d:c3:75:9c:22:
b6:82:6e:77:a2:90:fc:e0:63:fd:c6:31:12:34:df:
96:eb:b2:fa:f9:c1:9c:3e:7b:b0:9f:56:ab:ca:74:
10:44:58:52:86:28:3d:94:98:2c:64:31:16:5d:1f:
04:69:98:59:d1:cc:f0:3c:64:b3:f2:bf:2d:d5:da:
7a:30:fe:1b:91:4f:37:f0:0c:1b:9c:6b:84:a6:ab:
69:ff:cb:08:84:49:58:b8:dc:56:24:66:0b:c9:b6:
a1:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:3A:1E:96:91:6F:84:B7:91:B3:0E:0F:36:E6:77:2C:E4:53:D9:4C
X509v3 Authority Key Identifier:
keyid:5A:AE:19:67:8A:A3:75:25:51:22:29:A9:4E:78:90:14:71:83:27:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wq4ZZ4qjdSVRIimpTniQFHGDJzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/8a90d9-948a-46c2-977a-643f02daeb9e/1/Wq4ZZ4qjdSVRIimpTniQFHGDJzw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/8a90d9-948a-46c2-977a-643f02daeb9e/1/Wq4ZZ4qjdSVRIimpTniQFHGDJzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:9d:aa:5c:ae:82:de:4a:bb:2e:48:f0:3f:df:6a:d0:86:f3:
88:03:d6:df:40:04:42:51:b0:40:17:36:4b:40:05:f0:7d:c5:
af:de:f4:ea:72:f6:62:67:34:48:5f:92:37:ef:71:ae:fe:fb:
e1:47:39:43:2a:28:1b:ef:30:57:8a:a3:70:a3:fa:75:22:e6:
e2:5d:1a:4e:07:b2:69:56:66:d7:5d:57:d8:54:52:18:87:ad:
91:64:5c:21:42:93:fd:93:5c:2d:a8:eb:13:52:39:65:1c:1d:
68:77:a6:ca:d1:dc:15:c1:32:06:89:0f:3c:7e:4d:9a:96:f2:
8f:58:d7:a3:ab:bb:74:9f:07:a4:ed:3a:c2:ff:11:c7:a8:fb:
83:00:1f:75:2c:ca:c7:28:09:de:57:2c:3f:bc:87:97:38:e5:
0a:74:3c:53:6e:e5:fb:33:2d:27:e3:0a:bf:e4:4c:62:a7:66:
f0:7e:b2:fe:58:66:0f:6a:ea:3a:b2:3a:62:d7:4e:fb:29:ad:
65:ea:a6:b5:af:8e:67:a6:b9:57:7a:7f:b6:b5:5f:d1:e4:3e:
a4:36:e5:c6:01:c5:03:98:24:fe:be:94:2e:c8:e7:2c:7b:9d:
53:a6:33:3e:14:b3:d3:d6:3d:18:20:b8:58:a4:58:eb:45:48:
9b:ca:b7:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:29 2025 by rpki-client