Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/3d3b27-f786-41e0-ac54-bfc0ff97a190/1/WHiPOEJuA2KzTdVnND_oRhpYur4.mft
File: WHiPOEJuA2KzTdVnND_oRhpYur4.mft (raw, json)
Hash identifier: HN0OgsTCxQ5FI5m/LOgO/16/xWx15ZAKTtB5Y7IF7zg=
Subject key identifier: B1:40:02:A2:53:8C:25:E6:CD:FF:59:0E:0F:02:21:82:9D:5A:8B:F3
Authority key identifier: 58:78:8F:38:42:6E:03:62:B3:4D:D5:67:34:3F:E8:46:1A:58:BA:BE
Certificate issuer: /CN=58788f38426e0362b34dd567343fe8461a58babe
Certificate serial: 0194BC3C31B783FC9EEC5B37C961CDD3AB4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WHiPOEJuA2KzTdVnND_oRhpYur4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/3d3b27-f786-41e0-ac54-bfc0ff97a190/1/WHiPOEJuA2KzTdVnND_oRhpYur4.mft
Manifest number: 116F
Signing time: Fri 31 Jan 2025 12:00:48 +0000
Manifest this update: Fri 31 Jan 2025 12:00:48 +0000
Manifest next update: Sat 01 Feb 2025 12:00:48 +0000
Files and hashes: 1: WHiPOEJuA2KzTdVnND_oRhpYur4.crl (hash: b3FVF8bqo3PYce/ofef2I6BApO8xWA5LXTh6yr1P9n8=)
2: za5pr_RdRVQCTgLd3W2Y-u8ZZIo.roa (hash: HsG6G2W0gO0SbTM6V5Eodd4DUw2y9g6vatwqlX3nzOM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:31:b7:83:fc:9e:ec:5b:37:c9:61:cd:d3:ab:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58788f38426e0362b34dd567343fe8461a58babe
Validity
Not Before: Jan 31 12:00:48 2025 GMT
Not After : Feb 1 12:00:48 2025 GMT
Subject: CN=b14002a2538c25e6cdff590e0f0221829d5a8bf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:f4:bf:89:07:83:ac:2e:7b:2f:e2:60:c6:cb:
dd:91:d0:fe:a7:d9:ba:a6:cc:c9:1a:6a:7b:46:f2:
57:55:fc:87:4d:da:e6:a2:5f:27:b0:27:09:fa:84:
ae:69:2b:85:2f:ff:a8:19:5f:6c:a9:62:d6:0d:f9:
d3:d9:63:35:a6:1a:11:e1:6e:88:60:e8:4f:c1:13:
1e:4d:41:17:48:4b:5a:cb:27:97:27:1e:8b:e8:fb:
85:d3:89:1c:fb:86:db:fa:e1:1d:01:b5:40:67:84:
f1:1c:1a:5d:96:a9:99:7d:07:78:5f:a7:31:97:96:
67:ad:f9:45:76:d2:2d:f1:6e:b6:1c:a8:85:77:fe:
70:39:06:c6:27:cc:87:0f:09:c3:d5:98:3c:69:76:
b0:51:80:12:9c:3d:ef:f8:25:b6:59:ef:77:34:e9:
5a:37:ed:94:ff:f0:3d:9a:86:be:03:70:ff:75:7f:
08:eb:d4:22:52:cf:f2:d7:94:4e:66:b7:ec:ae:3d:
94:61:b0:e3:0c:f5:e8:1d:68:9c:bc:f7:64:cb:ed:
b4:52:ba:b7:8e:b4:eb:db:9b:7e:58:67:09:f3:48:
1e:10:df:a0:b0:e4:13:49:2e:98:c9:32:06:d7:7d:
af:92:b8:14:da:65:79:f4:a8:f2:52:a8:d6:a9:18:
91:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:40:02:A2:53:8C:25:E6:CD:FF:59:0E:0F:02:21:82:9D:5A:8B:F3
X509v3 Authority Key Identifier:
keyid:58:78:8F:38:42:6E:03:62:B3:4D:D5:67:34:3F:E8:46:1A:58:BA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WHiPOEJuA2KzTdVnND_oRhpYur4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/3d3b27-f786-41e0-ac54-bfc0ff97a190/1/WHiPOEJuA2KzTdVnND_oRhpYur4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/3d3b27-f786-41e0-ac54-bfc0ff97a190/1/WHiPOEJuA2KzTdVnND_oRhpYur4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:c1:2d:32:84:17:8e:80:99:ec:5e:27:e8:4d:42:5b:80:04:
d1:bd:a5:bd:53:6f:08:79:76:e9:77:db:39:1e:4d:e3:eb:74:
5e:8a:0f:ff:25:d0:f7:35:f9:22:f7:c1:c8:f3:e3:2b:1c:c7:
d8:1c:f0:99:27:6c:0e:97:64:09:4d:7c:45:64:22:4d:32:6f:
f4:04:4b:41:aa:46:87:d2:e8:1d:e5:4e:19:60:c4:36:dc:66:
dc:31:e1:a1:7c:2a:07:d5:c6:4d:f9:08:66:b7:39:90:ea:d0:
8c:dd:ee:dc:2e:13:36:d7:38:27:16:82:e9:89:2f:f5:1b:a0:
10:a7:1f:5d:19:dc:56:c0:85:31:ca:f2:35:ac:6f:bf:db:35:
74:ef:41:a1:ad:dd:cf:31:83:b7:0b:ee:c0:38:54:e0:6f:cb:
2d:be:8c:e7:ab:85:0a:b5:47:3b:c1:cc:bd:8f:03:94:49:0c:
7d:54:87:cf:12:c5:fb:e2:9b:fd:4d:e5:39:b7:f8:e1:7e:da:
2d:8a:8e:da:12:a1:e5:fa:d1:e4:f0:c8:0e:34:26:c7:e6:45:
03:00:b7:58:c1:04:4e:50:b9:91:18:85:10:a5:a2:39:db:b0:
74:fc:8f:6d:53:32:38:9b:b4:73:95:32:60:4b:88:d0:61:3e:
c1:09:d7:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:06:56 2025 by rpki-client