Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/d296a8-a5b1-4a34-8128-89359e783224/1/W9jXKxy_xnw3mtmpLGb6xsjTIzo.mft
File: W9jXKxy_xnw3mtmpLGb6xsjTIzo.mft (raw, json)
Hash identifier: Iy04nss3xIVxoWkO0OxZnXfoUhkA2oKt60DCRF0+IPY=
Subject key identifier: 58:9E:10:82:CA:3E:AD:C8:76:5F:EF:A3:76:A2:F6:8D:5F:38:AB:6C
Authority key identifier: 5B:D8:D7:2B:1C:BF:C6:7C:37:9A:D9:A9:2C:66:FA:C6:C8:D3:23:3A
Certificate issuer: /CN=5bd8d72b1cbfc67c379ad9a92c66fac6c8d3233a
Certificate serial: 0194BBCE42EE926F057EB58E2AACCD228A5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W9jXKxy_xnw3mtmpLGb6xsjTIzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/d296a8-a5b1-4a34-8128-89359e783224/1/W9jXKxy_xnw3mtmpLGb6xsjTIzo.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 10:00:44 +0000
Manifest this update: Fri 31 Jan 2025 10:00:44 +0000
Manifest next update: Sat 01 Feb 2025 10:00:44 +0000
Files and hashes: 1: Dojs8PEQnvulcYqgM4rdKOxunu0.roa (hash: dLJI4qVjVKlBypD5DT2hbIXIp/KqABCIFpos5VZ0K94=)
2: W9jXKxy_xnw3mtmpLGb6xsjTIzo.crl (hash: gEfj0UFhTYISquYJJUtLUxQuxtZmUHb713MATbPfB28=)
3: ZHpRRkh9oiRLBNkKdSMUtdYZ7o4.roa (hash: G5aCOLk/4QhatU9joqPbjeRwSGccuFt7GUatcEniztQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:42:ee:92:6f:05:7e:b5:8e:2a:ac:cd:22:8a:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5bd8d72b1cbfc67c379ad9a92c66fac6c8d3233a
Validity
Not Before: Jan 31 10:00:44 2025 GMT
Not After : Feb 1 10:00:44 2025 GMT
Subject: CN=589e1082ca3eadc8765fefa376a2f68d5f38ab6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:d5:4e:12:13:ea:b6:bc:68:5b:d2:ce:cb:1d:
4c:c3:10:18:8e:1f:ea:11:07:75:2d:db:a7:e0:aa:
58:d4:3b:40:3a:ed:02:c1:fd:15:3e:e9:16:2f:76:
ff:49:ff:61:c5:a4:00:e6:b8:7c:c4:82:33:18:08:
ff:36:04:95:88:9d:8d:5a:e4:68:6c:9a:b1:53:a4:
a5:56:8d:a6:95:dc:78:f5:d3:a1:6e:61:fa:44:52:
53:13:1c:1e:42:e9:7c:c6:6c:32:76:ff:c9:48:a5:
02:4d:79:50:a7:70:0b:d3:c9:b7:c6:2f:d9:66:39:
33:dd:66:c2:5f:41:62:bf:ad:b9:16:61:bd:cc:81:
85:ce:b8:a7:71:c2:fa:d6:e7:fe:7b:ab:3f:57:17:
a8:91:8b:85:1f:73:64:8c:45:aa:50:a5:09:9f:60:
b8:58:ff:f4:72:2a:49:03:ed:76:b2:cc:cd:3b:dc:
2c:38:82:7a:67:87:77:6b:6f:95:eb:2a:3b:a3:ce:
9d:7c:ab:9e:89:6c:28:89:1a:60:a2:cd:d6:bb:11:
03:60:8c:0c:4e:12:2a:ec:26:e8:c8:ae:ee:f2:9f:
ca:44:95:f8:9a:1c:3c:ce:5b:f0:21:01:a1:17:91:
a2:d1:27:5d:16:a5:04:af:f1:f7:69:c1:6a:f1:52:
be:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:9E:10:82:CA:3E:AD:C8:76:5F:EF:A3:76:A2:F6:8D:5F:38:AB:6C
X509v3 Authority Key Identifier:
keyid:5B:D8:D7:2B:1C:BF:C6:7C:37:9A:D9:A9:2C:66:FA:C6:C8:D3:23:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W9jXKxy_xnw3mtmpLGb6xsjTIzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/d296a8-a5b1-4a34-8128-89359e783224/1/W9jXKxy_xnw3mtmpLGb6xsjTIzo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/d296a8-a5b1-4a34-8128-89359e783224/1/W9jXKxy_xnw3mtmpLGb6xsjTIzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:d9:53:df:bc:5c:f0:85:8c:b1:63:30:32:01:cd:e7:0b:39:
3d:66:ca:23:26:26:24:0a:85:da:28:d3:61:8a:8d:0f:6a:4a:
a6:d6:04:2f:6f:72:73:c6:49:af:84:db:db:0c:b2:f0:94:3b:
01:07:46:12:24:e9:4a:a1:99:da:14:7e:33:99:be:2a:64:cd:
5b:be:aa:8e:43:59:84:b9:ed:0a:90:f2:b8:c5:25:20:d2:c2:
64:f3:dd:8f:72:76:1e:06:6a:d5:ec:fc:32:fb:c9:73:7e:ba:
f9:9f:36:eb:03:f5:a8:df:6d:a3:c4:89:4f:94:d6:eb:86:64:
70:1b:18:aa:89:a7:a8:da:50:55:54:c7:63:4d:2f:3e:f3:af:
7d:e5:e6:a3:cb:8b:63:eb:e5:12:3a:15:cb:51:11:1f:cc:b3:
3e:f0:af:1a:15:e8:50:a2:ae:82:c4:af:37:6d:9a:2d:f8:e6:
a1:ea:c5:30:19:0d:76:52:8d:7d:2f:32:30:32:f9:c3:4b:c2:
b3:90:ee:15:9b:d0:f0:e1:fc:6b:c6:1f:bc:71:90:10:c0:6a:
5b:74:96:2b:b7:e5:07:87:c1:67:6a:89:7a:6b:ab:9d:a5:05:
9a:2a:0b:74:eb:d9:f7:5d:41:86:10:31:b2:05:c7:e3:ae:ac:
1f:c4:24:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:48:16 2025 by rpki-client