Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/c12395-c0f8-4e05-8cb1-73a3d07d2c31/1/W3qQXiWk1czLLuvk4tXDkggZdY4.mft
File: W3qQXiWk1czLLuvk4tXDkggZdY4.mft (raw, json)
Hash identifier: IPkRYmEuuGa9BI89ewUI/6gPqDTGyecs98aiM5HZuhI=
Subject key identifier: 2C:C0:67:CF:AA:6E:B2:6D:9B:8B:C9:FE:81:E7:36:0D:F8:43:4D:7E
Authority key identifier: 5B:7A:90:5E:25:A4:D5:CC:CB:2E:EB:E4:E2:D5:C3:92:08:19:75:8E
Certificate issuer: /CN=5b7a905e25a4d5cccb2eebe4e2d5c3920819758e
Certificate serial: 0194BD85B3BE1E5D4864F6160B0D43FEDBC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W3qQXiWk1czLLuvk4tXDkggZdY4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/c12395-c0f8-4e05-8cb1-73a3d07d2c31/1/W3qQXiWk1czLLuvk4tXDkggZdY4.mft
Manifest number: 132A
Signing time: Fri 31 Jan 2025 18:00:43 +0000
Manifest this update: Fri 31 Jan 2025 18:00:43 +0000
Manifest next update: Sat 01 Feb 2025 18:00:43 +0000
Files and hashes: 1: 4wGntNc85Yvx0ypR88J1OukuDr4.roa (hash: pBVnEWBMMIGiHwfDW8kLnJrA2UUG/riqaCBWB/OBtY4=)
2: W3qQXiWk1czLLuvk4tXDkggZdY4.crl (hash: sqN65hiMy3m5j0Hjqp27MZOkCyUuaglGN+iKgQMopM0=)
3: e7uWgt7T0lZJq9oaz7pgmz5YCU0.roa (hash: vlPlcyroUG1L25J38Irl5ZjN6BImmzz1Gl5tGlK8/3M=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:b3:be:1e:5d:48:64:f6:16:0b:0d:43:fe:db:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b7a905e25a4d5cccb2eebe4e2d5c3920819758e
Validity
Not Before: Jan 31 18:00:43 2025 GMT
Not After : Feb 1 18:00:43 2025 GMT
Subject: CN=2cc067cfaa6eb26d9b8bc9fe81e7360df8434d7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:66:23:13:cb:80:93:77:af:6f:04:a2:b0:b0:
78:9f:5f:b9:c9:8f:b9:44:f5:1f:d7:94:1c:78:b7:
12:01:58:f0:ee:3d:11:1a:4c:81:fb:92:24:3a:d1:
6e:69:c4:c0:52:39:0f:e8:9c:ad:8d:b0:b8:66:8f:
ee:e8:1e:c0:f0:66:63:ad:c5:15:9c:31:db:48:98:
70:69:c3:6e:11:8d:0a:a7:7c:7f:2e:85:b4:6b:65:
24:21:1c:2b:bf:02:fe:48:27:7f:68:df:9a:70:25:
5e:f9:c3:e9:80:62:b8:46:97:6c:0f:d1:1c:c3:e4:
ab:a2:87:48:a2:3f:18:71:01:74:df:81:39:a3:c1:
7e:91:d9:66:88:38:d6:58:aa:7a:5f:2c:39:79:68:
32:2c:14:4e:ee:3f:df:e5:6e:b5:bf:8a:20:28:29:
e6:6d:36:8e:7c:00:36:78:e7:4a:57:48:f7:b4:ba:
75:27:bd:62:eb:97:d5:41:46:b0:50:c3:9e:20:ad:
45:14:6e:02:2e:54:16:aa:76:e1:50:9d:e9:5b:4e:
cb:34:75:f2:d9:bf:7d:39:7a:c2:84:cd:88:0b:1c:
c3:81:d4:10:33:e0:3c:a8:9d:48:83:f5:7f:59:f2:
a2:10:52:a0:b5:d4:8b:1f:48:ec:07:d6:ae:9e:e9:
f3:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:C0:67:CF:AA:6E:B2:6D:9B:8B:C9:FE:81:E7:36:0D:F8:43:4D:7E
X509v3 Authority Key Identifier:
keyid:5B:7A:90:5E:25:A4:D5:CC:CB:2E:EB:E4:E2:D5:C3:92:08:19:75:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W3qQXiWk1czLLuvk4tXDkggZdY4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/c12395-c0f8-4e05-8cb1-73a3d07d2c31/1/W3qQXiWk1czLLuvk4tXDkggZdY4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/c12395-c0f8-4e05-8cb1-73a3d07d2c31/1/W3qQXiWk1czLLuvk4tXDkggZdY4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:dc:57:e2:08:f3:5c:3a:9b:0e:e1:3f:7e:a1:06:74:14:78:
16:10:29:d5:d8:6f:b2:15:b8:57:4e:bd:04:a1:76:1c:24:b1:
92:99:65:f9:21:73:4b:77:ec:3c:18:42:bd:82:3a:6c:e1:05:
02:46:6d:4a:e0:42:17:27:f9:62:4f:c6:bd:09:08:f4:d4:67:
67:c5:a6:ac:63:28:db:87:f5:fc:cc:0c:c1:8e:65:e6:ae:f1:
88:53:05:be:ad:b6:10:74:f8:86:86:2c:93:9b:61:d0:e4:16:
68:a3:30:da:84:9d:fb:c5:28:4e:1e:87:b1:17:85:b2:c4:b8:
73:13:fc:74:cb:32:df:c8:e7:81:6b:41:0e:bd:31:3a:77:5a:
c5:1b:9c:93:91:3f:d0:fd:5b:f1:23:80:db:53:7c:25:c4:00:
8f:d5:66:7e:6c:c7:11:9f:4e:f5:a8:60:f5:41:7f:32:b9:01:
40:e5:8b:99:b6:4c:35:e6:25:39:40:97:20:4a:28:29:b1:84:
48:a4:16:af:a7:4b:dc:48:d0:25:ee:9b:28:91:6a:90:dc:49:
b8:6e:86:36:17:25:68:07:83:03:a0:78:ca:8d:21:57:21:8b:
5f:84:47:1d:73:50:46:22:30:45:fe:e4:59:45:e6:55:58:ba:
1f:9b:37:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 14:00:36 2025 by rpki-client