Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/34536a-771a-4775-b2bd-cac8ed76a844/1/W4oWUi7DSxxbxHCCBswZY6FbvbE.mft
File: W4oWUi7DSxxbxHCCBswZY6FbvbE.mft (raw, json)
Hash identifier: 6o1vKhvpgyBzWiZUCMz/N8dUA/zzwp7FHncxwjBDbrQ=
Subject key identifier: E9:1C:B4:A8:EA:62:7E:27:88:86:65:81:0E:EB:0E:30:8B:1C:A7:E9
Authority key identifier: 5B:8A:16:52:2E:C3:4B:1C:5B:C4:70:82:06:CC:19:63:A1:5B:BD:B1
Certificate issuer: /CN=5b8a16522ec34b1c5bc4708206cc1963a15bbdb1
Certificate serial: 0194BBCED92F48C27E67BFFBCA0895A34980
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W4oWUi7DSxxbxHCCBswZY6FbvbE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/34536a-771a-4775-b2bd-cac8ed76a844/1/W4oWUi7DSxxbxHCCBswZY6FbvbE.mft
Manifest number: 1275
Signing time: Fri 31 Jan 2025 10:01:22 +0000
Manifest this update: Fri 31 Jan 2025 10:01:22 +0000
Manifest next update: Sat 01 Feb 2025 10:01:22 +0000
Files and hashes: 1: MFMIui6m_VAgNwJXoFmjzhgjkd4.roa (hash: sGrw2YLX0YcDM2ukpHiB5+csfltQ5EBKIutK5Tcnjdw=)
2: W4oWUi7DSxxbxHCCBswZY6FbvbE.crl (hash: vH07qGeT/jzAb1EyqCcHZAf2RapdsbNNXtIQgUG/Fws=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:d9:2f:48:c2:7e:67:bf:fb:ca:08:95:a3:49:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b8a16522ec34b1c5bc4708206cc1963a15bbdb1
Validity
Not Before: Jan 31 10:01:22 2025 GMT
Not After : Feb 1 10:01:22 2025 GMT
Subject: CN=e91cb4a8ea627e27888665810eeb0e308b1ca7e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:46:23:ce:9f:86:93:23:0a:f6:ef:78:9f:6f:
41:76:9c:b1:6a:8d:59:a6:51:d8:be:ad:02:61:d6:
89:06:40:49:77:98:5b:73:3d:c4:b9:ad:53:f5:b7:
98:ad:2a:d4:9e:76:27:52:bd:ff:a5:32:0d:dd:44:
50:29:44:bd:bd:09:c2:11:b5:3e:37:75:b9:95:be:
f2:47:75:ef:39:bf:e8:6f:8f:cc:51:e7:ea:92:ca:
60:67:fb:b0:84:b4:81:53:0b:e5:78:6f:3a:89:d3:
08:81:f3:e8:93:35:9e:0c:d1:29:b8:45:36:a5:3a:
03:32:23:c5:f7:44:80:bf:a4:ed:c1:fe:24:3f:4f:
28:63:66:1c:2b:73:48:ab:e5:b9:b4:bd:39:bf:18:
b6:3b:a2:e9:26:62:f6:2e:8f:2f:10:3a:b8:00:7d:
71:94:2f:88:24:25:de:71:d2:12:7e:b4:8d:0d:4b:
08:30:43:67:a4:96:f9:94:d3:a8:54:b3:6d:ae:45:
e0:63:8f:4a:3c:d1:ba:b4:2f:63:f0:dc:26:47:a3:
08:d4:c1:9b:22:dc:b5:0f:a7:0b:61:aa:00:f4:83:
45:7f:42:1a:23:15:78:59:fb:38:4f:40:59:4e:2a:
55:e0:e2:e3:12:e2:53:b0:0f:33:b5:a6:dd:99:23:
a5:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:1C:B4:A8:EA:62:7E:27:88:86:65:81:0E:EB:0E:30:8B:1C:A7:E9
X509v3 Authority Key Identifier:
keyid:5B:8A:16:52:2E:C3:4B:1C:5B:C4:70:82:06:CC:19:63:A1:5B:BD:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W4oWUi7DSxxbxHCCBswZY6FbvbE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/34536a-771a-4775-b2bd-cac8ed76a844/1/W4oWUi7DSxxbxHCCBswZY6FbvbE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/34536a-771a-4775-b2bd-cac8ed76a844/1/W4oWUi7DSxxbxHCCBswZY6FbvbE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:2f:7b:b5:13:02:a7:a1:41:98:f1:9b:1b:56:9f:34:e8:e5:
9b:3f:02:58:c7:36:e6:ab:a7:85:ff:5e:2c:2f:c0:ee:0d:a7:
cd:c9:e9:fc:a0:c7:d8:fe:7b:ab:1b:48:5d:f3:6f:f3:43:29:
0d:7d:b1:e3:cc:ac:3b:d1:e8:10:0f:3d:36:58:9e:f6:c5:bd:
a0:ec:6d:ef:a8:2b:03:a3:e8:9c:99:a4:11:b7:6e:d6:1c:d6:
73:30:55:8b:2c:3f:52:b4:08:96:d3:20:a7:6b:15:c3:76:7d:
63:ea:29:80:9c:cc:43:6b:a2:bd:58:da:9b:5d:9d:5c:60:39:
48:ed:b7:52:22:96:ed:ae:64:90:d1:f8:b7:4e:c2:aa:f1:f5:
06:a6:84:43:c4:31:a7:2e:c6:86:4b:55:05:7b:ac:81:1a:46:
15:23:87:5d:b4:28:92:be:87:09:8d:c0:5b:bf:a2:72:04:77:
10:45:3a:f0:e8:d6:85:84:17:c0:5f:00:9e:75:2b:e3:7a:df:
f0:66:0a:0f:20:e0:4a:ff:70:75:1c:09:bd:62:81:a8:18:b3:
69:6e:fd:04:24:0d:db:93:98:2e:69:26:82:a5:bf:22:42:4a:
57:0a:15:6f:6e:03:cd:8b:d4:31:d6:08:0a:9e:eb:ec:d5:66:
0b:28:25:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:10:49 2025 by rpki-client