Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/c7d22b-2147-4336-9009-f9355fd98b6b/1/W2c0Iu_35BxeBteOUp9JH1kVD_k.mft
File: W2c0Iu_35BxeBteOUp9JH1kVD_k.mft (raw, json)
Hash identifier: CbbpPYs0q7w403NXal5ofrNN/gdRKMwZus/nBh4J/A0=
Subject key identifier: DE:A4:2B:8C:41:96:64:22:2D:89:EF:9C:8E:FB:4E:8F:D3:D2:DC:8A
Authority key identifier: 5B:67:34:22:EF:F7:E4:1C:5E:06:D7:8E:52:9F:49:1F:59:15:0F:F9
Certificate issuer: /CN=5b673422eff7e41c5e06d78e529f491f59150ff9
Certificate serial: 0194BC3C973C2CCCBF1483D978FD674F716C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W2c0Iu_35BxeBteOUp9JH1kVD_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/c7d22b-2147-4336-9009-f9355fd98b6b/1/W2c0Iu_35BxeBteOUp9JH1kVD_k.mft
Manifest number: 116B
Signing time: Fri 31 Jan 2025 12:01:14 +0000
Manifest this update: Fri 31 Jan 2025 12:01:14 +0000
Manifest next update: Sat 01 Feb 2025 12:01:14 +0000
Files and hashes: 1: W2c0Iu_35BxeBteOUp9JH1kVD_k.crl (hash: OGQ9ZqEojtTwFj4fFsnHS6lnqvujtuH1J8LZK3Dv88U=)
2: f2eeaIi_NtiLs6nRUcClmpkBy5k.roa (hash: 8pw5kFZ35WiQs2DDHCW04FDgssajvxmkQJ4ITw5fsyA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:97:3c:2c:cc:bf:14:83:d9:78:fd:67:4f:71:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b673422eff7e41c5e06d78e529f491f59150ff9
Validity
Not Before: Jan 31 12:01:14 2025 GMT
Not After : Feb 1 12:01:14 2025 GMT
Subject: CN=dea42b8c419664222d89ef9c8efb4e8fd3d2dc8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:b0:5a:a2:c9:a0:61:15:c2:28:82:6e:04:5e:
41:a9:9c:71:51:70:ec:24:df:b5:b6:72:09:cc:70:
43:0b:40:4b:0e:ee:60:b5:b8:4b:89:a5:a0:53:90:
c0:6c:10:62:d5:a8:6e:9e:12:46:bc:3d:c6:28:85:
33:d6:66:83:b9:8b:20:8a:77:d0:21:5b:69:d0:6f:
eb:fa:8a:2d:66:9a:67:4c:43:bc:3a:2e:f9:3d:a1:
27:e4:04:92:94:bf:7e:da:aa:bf:0e:2f:53:9c:01:
2b:87:ee:18:66:c2:80:8f:04:bc:e0:e1:10:5b:39:
b7:ce:94:c6:0b:95:67:06:e6:74:75:5b:75:ce:ff:
c7:d9:38:54:c1:78:6d:13:66:a7:68:d6:16:18:64:
1b:56:ce:2a:60:dd:34:bc:a5:4d:64:5d:44:f3:5e:
af:c3:d3:1b:cb:70:67:5f:94:cc:4e:62:0c:d3:95:
ef:3f:c3:d3:83:b7:1d:70:f9:0a:b2:72:9a:9c:8b:
c0:c7:ca:79:60:c8:3d:a3:17:60:be:90:3f:57:69:
95:fb:4b:16:e9:5d:8e:9f:4f:6b:e3:2d:13:30:cd:
00:21:24:30:3c:56:f8:de:98:42:a1:c6:d2:9c:55:
a0:46:17:96:d9:52:5f:81:0b:e0:f8:ac:19:05:fe:
91:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:A4:2B:8C:41:96:64:22:2D:89:EF:9C:8E:FB:4E:8F:D3:D2:DC:8A
X509v3 Authority Key Identifier:
keyid:5B:67:34:22:EF:F7:E4:1C:5E:06:D7:8E:52:9F:49:1F:59:15:0F:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W2c0Iu_35BxeBteOUp9JH1kVD_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/c7d22b-2147-4336-9009-f9355fd98b6b/1/W2c0Iu_35BxeBteOUp9JH1kVD_k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/c7d22b-2147-4336-9009-f9355fd98b6b/1/W2c0Iu_35BxeBteOUp9JH1kVD_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:85:a0:87:47:aa:a4:8a:ff:fd:6b:69:d2:66:4b:64:09:1d:
4e:ee:f1:ca:49:e2:7e:61:6b:9d:fb:d5:85:a2:2d:45:4f:54:
26:8a:30:6a:9a:3a:0c:1c:95:e3:f4:09:d3:c4:7c:37:ad:16:
c8:0f:cd:56:3a:53:ef:5d:7d:00:b5:95:91:bc:09:3a:61:12:
4e:e0:71:e6:7e:9d:88:32:e5:61:11:56:22:2b:94:d0:fa:7f:
f3:d5:98:2b:4e:a9:72:1d:33:4d:96:1c:aa:d1:1d:96:b0:d5:
05:f2:96:d4:0a:58:23:5e:8d:63:25:15:91:dc:f1:ff:d8:ce:
75:24:8b:29:9e:31:dc:23:02:36:a2:83:e1:f5:51:a8:f7:cc:
5d:90:5b:31:61:9b:89:e4:3b:37:b5:42:53:9a:5b:5c:7d:1c:
2c:97:d0:08:c9:76:97:56:fb:35:f9:4a:06:60:1c:86:dc:7a:
bc:09:dc:50:ec:ab:2b:b2:0c:e3:ba:06:5f:10:40:7f:7b:29:
4b:a2:3b:a8:71:a6:f2:30:6d:23:f0:0a:c1:58:23:27:0a:9c:
a2:5a:c7:8c:f1:cc:cd:7b:dc:67:61:02:e2:61:3c:08:e6:03:
ea:a7:ea:eb:ae:51:90:ea:65:24:e1:23:01:1a:bb:c9:33:80:
7e:1e:a6:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:49:36 2025 by rpki-client