Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/4f76b4-7d56-47a0-ac5b-653f239fe9a0/1/Wl5msnWeULtpuwpECe6zukjEbFY.mft
File: Wl5msnWeULtpuwpECe6zukjEbFY.mft (raw, json)
Hash identifier: GEO0XLXSPvb1GpQXkto5TkEfKmnAU32nT+7fjCRoe2A=
Subject key identifier: A3:73:7C:11:F1:CE:EB:E8:0C:33:55:96:84:48:BA:7E:B6:84:25:21
Authority key identifier: 5A:5E:66:B2:75:9E:50:BB:69:BB:0A:44:09:EE:B3:BA:48:C4:6C:56
Certificate issuer: /CN=5a5e66b2759e50bb69bb0a4409eeb3ba48c46c56
Certificate serial: 0194BCAA11CAC34DBDC1663E93B2EBA6FB46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wl5msnWeULtpuwpECe6zukjEbFY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/4f76b4-7d56-47a0-ac5b-653f239fe9a0/1/Wl5msnWeULtpuwpECe6zukjEbFY.mft
Manifest number: 080E
Signing time: Fri 31 Jan 2025 14:00:49 +0000
Manifest this update: Fri 31 Jan 2025 14:00:49 +0000
Manifest next update: Sat 01 Feb 2025 14:00:49 +0000
Files and hashes: 1: R7X9FBaUDr9NUkE0p28Z2uUQ4Bw.roa (hash: E7dIm66l+y4gYXL38eisZbYqWRT0m1OnoffeOxlaIMw=)
2: Wl5msnWeULtpuwpECe6zukjEbFY.crl (hash: B7poN6QTkD+hPP3eOKm+5loTyR5Y20pZ25JLV4f3K5I=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:11:ca:c3:4d:bd:c1:66:3e:93:b2:eb:a6:fb:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a5e66b2759e50bb69bb0a4409eeb3ba48c46c56
Validity
Not Before: Jan 31 14:00:49 2025 GMT
Not After : Feb 1 14:00:49 2025 GMT
Subject: CN=a3737c11f1ceebe80c3355968448ba7eb6842521
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:9f:91:99:b3:66:74:2f:3e:a3:29:61:5d:69:
4e:b0:ca:55:e3:80:0c:bc:7a:a0:78:35:cd:4d:15:
be:6c:55:c9:29:bd:8c:7d:8a:ea:dd:ca:a7:bb:7c:
44:8a:12:fa:aa:fc:ae:e1:2e:11:bc:41:42:d2:0b:
12:0b:43:e5:77:dc:0b:13:95:ac:e1:cb:a2:20:3e:
4a:40:a8:67:e7:62:e9:6a:40:93:9b:1f:c4:99:c4:
b4:91:35:72:0c:15:e7:36:e3:5e:b9:f4:15:da:1d:
52:8f:20:67:3b:4c:dd:f4:58:57:c7:a0:c1:f8:91:
f1:07:45:71:23:08:27:a7:f6:f7:51:e9:ba:f4:a2:
f0:11:22:48:37:72:a7:f6:ac:ab:7c:c0:a4:7c:e2:
a4:b8:a2:a8:01:ad:39:56:c7:a5:07:3c:cb:bf:2f:
24:b9:ef:5c:92:3c:c1:e9:b1:07:d2:0d:73:7e:e9:
78:07:0f:96:37:cd:6a:c6:94:67:bd:ad:3d:23:11:
56:5a:8b:93:2b:ef:33:ad:e4:23:b7:59:29:3c:bf:
e5:c6:bf:db:74:46:c7:36:e1:b7:ff:26:29:60:8e:
4c:22:5c:a0:b3:51:c5:9a:56:03:a0:31:32:a8:80:
55:92:2f:25:2b:64:5d:f9:b4:3c:cb:aa:13:a4:fe:
91:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:73:7C:11:F1:CE:EB:E8:0C:33:55:96:84:48:BA:7E:B6:84:25:21
X509v3 Authority Key Identifier:
keyid:5A:5E:66:B2:75:9E:50:BB:69:BB:0A:44:09:EE:B3:BA:48:C4:6C:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wl5msnWeULtpuwpECe6zukjEbFY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/4f76b4-7d56-47a0-ac5b-653f239fe9a0/1/Wl5msnWeULtpuwpECe6zukjEbFY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/4f76b4-7d56-47a0-ac5b-653f239fe9a0/1/Wl5msnWeULtpuwpECe6zukjEbFY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:9e:79:b7:60:7b:f8:04:24:ba:c7:b5:87:3d:e1:17:a5:48:
39:63:8f:36:c2:75:95:45:d0:a0:97:74:cb:f4:66:f5:64:97:
9b:6a:20:44:ab:10:76:22:44:af:ea:3f:91:a7:84:ee:40:eb:
72:28:f2:a0:12:ce:67:5a:5a:74:e2:a9:0c:9d:81:43:f7:3f:
7a:a4:80:c7:8b:26:8e:bb:07:ad:87:b4:93:b6:95:f9:4e:1e:
3c:ce:2a:18:81:fa:45:6a:8f:c9:df:a9:7f:2a:d5:b0:89:4d:
a8:ee:06:55:16:e6:df:fa:df:e4:0f:81:78:85:0c:e4:56:46:
80:b4:b8:cd:ea:58:d3:39:75:22:c9:e7:28:36:81:74:8f:f4:
7b:59:a0:57:9e:53:cb:b1:2f:db:99:1e:c6:ee:b6:55:a7:23:
0a:d7:d1:1d:3d:51:95:24:4d:a5:03:86:76:ad:24:47:83:72:
cb:cb:c9:91:bb:0b:9a:7c:31:ab:1f:34:cf:bc:da:59:c2:60:
f6:4b:7d:9c:b3:cd:04:5f:2d:8e:b6:3f:78:75:7f:d7:cb:b5:
1f:7b:72:91:05:ff:db:36:42:e6:c6:3b:09:81:7f:de:11:67:
a9:ee:c5:2d:62:0d:16:ed:2f:15:30:06:00:67:9f:cd:ba:57:
f4:de:bf:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:06:44 2025 by rpki-client