Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d0fea6-22a1-4aa5-b50d-a114939cdaa5/1/WvHVJdnhyP7n9RySmYQyGRL_80w.mft
File: WvHVJdnhyP7n9RySmYQyGRL_80w.mft (raw, json)
Hash identifier: riZLhIdH2wr9pAIFC7JbgJe2uXSjiNL1l/xwt/vKTJM=
Subject key identifier: 05:DF:5E:4D:02:C5:5C:54:4B:9F:58:D8:2D:9E:82:C1:88:33:22:4E
Authority key identifier: 5A:F1:D5:25:D9:E1:C8:FE:E7:F5:1C:92:99:84:32:19:12:FF:F3:4C
Certificate issuer: /CN=5af1d525d9e1c8fee7f51c929984321912fff34c
Certificate serial: 0194BCE092E097D78F22F4CD6AA1B291F983
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WvHVJdnhyP7n9RySmYQyGRL_80w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d0fea6-22a1-4aa5-b50d-a114939cdaa5/1/WvHVJdnhyP7n9RySmYQyGRL_80w.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 15:00:21 +0000
Manifest this update: Fri 31 Jan 2025 15:00:21 +0000
Manifest next update: Sat 01 Feb 2025 15:00:21 +0000
Files and hashes: 1: QHN1mo-chw8woBmyHxpHaobOHVY.roa (hash: xauKLlFs3GtWKAmak4uwPaBujz4eKBRABiwipmCaZzM=)
2: WvHVJdnhyP7n9RySmYQyGRL_80w.crl (hash: wbQ7iUSh8aDAIV4S2yiGeEulbTZM1yZdQcLEDguqvCQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:92:e0:97:d7:8f:22:f4:cd:6a:a1:b2:91:f9:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5af1d525d9e1c8fee7f51c929984321912fff34c
Validity
Not Before: Jan 31 15:00:21 2025 GMT
Not After : Feb 1 15:00:21 2025 GMT
Subject: CN=05df5e4d02c55c544b9f58d82d9e82c18833224e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:b4:41:df:eb:7c:e4:9b:30:30:80:25:f7:9b:
c9:7c:89:ed:95:83:7d:f5:cb:e4:3b:3a:27:9a:cc:
38:77:dd:ca:ec:52:15:98:01:f0:c5:57:ee:2a:aa:
6d:82:ae:da:ff:07:24:c7:74:74:15:d4:58:e7:0b:
28:c0:14:a8:b9:03:16:80:e2:f2:1f:27:69:1d:7c:
24:98:68:b8:e4:ac:a8:9b:73:07:79:ee:75:11:04:
ee:eb:d5:5f:ab:9f:5f:bb:d2:a5:0c:af:b0:fa:1d:
80:9b:9b:37:36:c2:31:de:31:7d:89:b7:1d:35:c4:
2c:07:d5:ef:af:ca:66:e2:d6:ce:7f:5a:0e:0f:b8:
c4:27:3e:da:21:d6:c7:b7:55:03:38:f5:79:ae:f5:
93:0d:2e:a7:7f:d8:1b:86:86:33:2a:b6:fb:77:79:
d6:6a:01:dd:b7:86:37:69:ae:6f:5d:dc:ec:ed:a8:
32:3b:33:00:3e:b8:a8:6e:7a:2d:75:63:b6:fa:bd:
d3:66:cb:7f:3d:68:ed:b7:83:5b:b0:b5:f2:ce:53:
36:eb:34:6d:10:96:a2:d5:9f:be:28:10:90:e4:04:
58:37:83:55:41:9d:7d:69:71:05:f0:b6:1b:53:c9:
70:80:04:80:7c:65:0f:cd:cf:9c:23:6b:c3:19:b1:
62:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:DF:5E:4D:02:C5:5C:54:4B:9F:58:D8:2D:9E:82:C1:88:33:22:4E
X509v3 Authority Key Identifier:
keyid:5A:F1:D5:25:D9:E1:C8:FE:E7:F5:1C:92:99:84:32:19:12:FF:F3:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WvHVJdnhyP7n9RySmYQyGRL_80w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d0fea6-22a1-4aa5-b50d-a114939cdaa5/1/WvHVJdnhyP7n9RySmYQyGRL_80w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d0fea6-22a1-4aa5-b50d-a114939cdaa5/1/WvHVJdnhyP7n9RySmYQyGRL_80w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:b1:aa:a0:d7:34:51:5f:16:fd:3b:2e:cc:0c:ec:ca:59:83:
92:82:62:d9:bf:c2:83:62:b6:54:a2:42:f7:41:27:09:e2:37:
8a:8c:3b:d6:50:62:df:f6:ca:31:b5:57:59:4f:c7:f0:12:5b:
f1:a4:ef:33:36:b6:8f:cc:37:b8:22:1b:03:d5:24:ef:9a:4c:
b6:24:ab:7f:5b:0e:3c:6f:79:e4:98:11:02:9d:18:e8:63:44:
7a:3f:02:81:e8:1c:e1:2a:eb:cd:1d:80:79:d2:52:4b:2a:2a:
03:13:22:7a:27:cb:d8:4b:b4:00:b3:b5:66:a2:2c:09:e3:47:
6c:50:93:de:bb:c3:dc:ef:9a:63:10:c9:73:81:71:73:0a:92:
ea:1f:73:d1:d6:b8:6b:0f:6c:93:7b:89:fd:bc:60:c8:30:01:
24:52:d8:5c:2e:1a:cf:31:e2:37:f4:10:d2:46:b3:17:ca:c4:
a2:55:4f:e0:69:06:cd:b8:dd:4d:ed:65:3e:ad:db:bf:9a:0b:
39:10:09:ed:44:da:6f:09:16:68:f9:ca:55:cc:23:77:8d:72:
c6:e3:4d:7c:f0:b5:d0:90:15:22:de:8d:6a:db:90:6c:59:6f:
29:b7:98:59:e8:9b:ab:55:2d:c2:bd:57:11:bb:b4:4e:05:1f:
2c:0c:2c:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:25:58 2025 by rpki-client