Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/376e1f-96b1-4fe1-8b7a-13ff6a0ad441/1/1-WpqIDL5bXAjciI5yfpe3VWW-GM.mft
File: 1-WpqIDL5bXAjciI5yfpe3VWW-GM.mft (raw, json)
Hash identifier: BuZx+T/GahTs69SlMiHyJoL7Vgg06MOiDnKbz/flmpU=
Subject key identifier: 37:DB:E8:AA:86:8C:1F:AA:17:50:02:21:36:97:90:E1:C5:36:19:65
Authority key identifier: F9:6A:6A:20:32:F9:6D:70:23:72:22:39:C9:FA:5E:DD:55:96:F8:63
Certificate issuer: /CN=f96a6a2032f96d7023722239c9fa5edd5596f863
Certificate serial: 0194BD8570EB6C05A12559EABA74FFF9DE1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-WpqIDL5bXAjciI5yfpe3VWW-GM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/376e1f-96b1-4fe1-8b7a-13ff6a0ad441/1/1-WpqIDL5bXAjciI5yfpe3VWW-GM.mft
Manifest number: 13FF
Signing time: Fri 31 Jan 2025 18:00:26 +0000
Manifest this update: Fri 31 Jan 2025 18:00:26 +0000
Manifest next update: Sat 01 Feb 2025 18:00:26 +0000
Files and hashes: 1: 1-WpqIDL5bXAjciI5yfpe3VWW-GM.crl (hash: Cg/Iyu0LDNI5IUAtaj9S/A1dLnCT6UZmTuzq7xqb+gw=)
2: RE9prd7FLL4SwOjjJYHPgR-KjRA.roa (hash: Sw7bEXCnPMRdQGTTvTVklNLKC4QRIicMav6wH2FfRDI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:70:eb:6c:05:a1:25:59:ea:ba:74:ff:f9:de:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f96a6a2032f96d7023722239c9fa5edd5596f863
Validity
Not Before: Jan 31 18:00:26 2025 GMT
Not After : Feb 1 18:00:26 2025 GMT
Subject: CN=37dbe8aa868c1faa17500221369790e1c5361965
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:39:22:48:dc:b7:22:15:bd:f9:8c:4d:7a:f3:
0b:74:b5:53:d1:00:99:1a:a6:e7:17:d1:f5:00:7d:
9d:dd:c3:3b:d0:35:ad:36:aa:e3:a7:d0:66:9d:fa:
47:99:ad:cb:6e:34:e7:b7:93:93:01:31:a5:40:7a:
36:f3:9c:52:97:f9:bb:ac:8a:2f:3b:69:b8:27:da:
56:cc:92:0a:47:4e:d0:44:9b:c7:c3:35:07:36:18:
59:90:4a:5a:8e:19:e8:f0:df:15:51:d2:a4:91:78:
55:39:5f:35:9c:92:5b:54:b6:69:c7:c9:b7:b2:b8:
3e:53:2f:4e:67:f7:6c:00:90:6b:7b:77:b5:2d:7e:
38:8d:23:03:8c:9a:9f:f5:23:05:03:2e:38:2d:b4:
be:80:59:8c:90:be:37:39:7a:4f:48:4d:1b:7f:87:
b9:58:5d:c3:fd:12:f7:9d:ef:ab:36:38:81:6d:e1:
4c:5e:ad:98:43:47:24:af:ce:09:32:57:cf:62:74:
40:fd:7b:98:c7:c0:d4:e6:e6:9d:df:e2:a3:94:f1:
b1:e9:8a:c5:4c:6a:6b:62:9b:ef:77:a4:62:f0:ac:
16:8b:60:58:9e:c7:f1:b8:22:eb:f8:0f:c9:b8:88:
ee:f8:2e:35:1a:68:ad:40:b3:6c:8c:97:e1:1d:27:
de:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:DB:E8:AA:86:8C:1F:AA:17:50:02:21:36:97:90:E1:C5:36:19:65
X509v3 Authority Key Identifier:
keyid:F9:6A:6A:20:32:F9:6D:70:23:72:22:39:C9:FA:5E:DD:55:96:F8:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-WpqIDL5bXAjciI5yfpe3VWW-GM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/376e1f-96b1-4fe1-8b7a-13ff6a0ad441/1/1-WpqIDL5bXAjciI5yfpe3VWW-GM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/376e1f-96b1-4fe1-8b7a-13ff6a0ad441/1/1-WpqIDL5bXAjciI5yfpe3VWW-GM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:d5:ed:92:5c:b9:52:21:fa:7a:60:02:93:a0:96:74:eb:f5:
a9:60:de:56:8f:a2:4a:0d:16:84:77:15:b6:aa:63:7a:23:2c:
e7:1f:13:6a:c3:67:4b:e0:58:14:4b:57:06:93:85:fa:a0:33:
15:1a:49:c3:9c:d9:fe:83:38:44:e8:04:e6:e7:be:dc:71:05:
d7:5b:ff:44:5b:d4:50:16:25:c6:c8:4d:c5:7e:ab:80:15:5d:
aa:ae:91:0b:6c:ad:cf:4c:6b:18:84:f2:dd:62:ed:70:6e:b5:
cd:73:a9:27:47:bb:45:f2:7f:a8:2d:5b:70:63:e8:63:1e:03:
a2:47:a0:87:50:f4:90:33:d2:87:22:3f:fc:4f:0f:68:13:b2:
f9:6a:93:34:16:ec:f8:b5:8d:6a:37:38:af:ca:7c:13:c6:6d:
94:ad:70:2e:c3:56:37:a8:17:7a:b4:95:fd:7f:71:c9:7b:d1:
63:21:ef:86:46:d9:fc:d1:89:31:2e:22:15:97:36:b0:50:c9:
fc:78:94:14:3c:85:88:9c:de:7c:c7:17:a2:a4:9d:d9:6a:49:
4a:53:b6:10:42:e3:51:b1:d7:e2:c0:d0:89:3d:93:a7:0f:21:
2c:ea:74:48:b1:d0:e8:17:5c:90:94:fb:4a:1f:2d:7c:14:56:
f5:0a:f8:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:50:26 2025 by rpki-client