Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2cb73b-de66-4b41-bf83-f21f7e8ead5c/1/W4DJ0JJEcOHB4wvE7v8ZkJCnA1w.mft
File: W4DJ0JJEcOHB4wvE7v8ZkJCnA1w.mft (raw, json)
Hash identifier: xTaEGtA3UScNRQKEtoHMU9xZiMl18ZrM+SApbI9zK+I=
Subject key identifier: F4:BF:97:34:8B:0D:F7:C5:15:7D:BD:A5:B9:FF:D4:6D:A2:30:AD:0A
Authority key identifier: 5B:80:C9:D0:92:44:70:E1:C1:E3:0B:C4:EE:FF:19:90:90:A7:03:5C
Certificate issuer: /CN=5b80c9d0924470e1c1e30bc4eeff199090a7035c
Certificate serial: 0194BBCE142E7A42F3ACA2FB4A2FEAB92F49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W4DJ0JJEcOHB4wvE7v8ZkJCnA1w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2cb73b-de66-4b41-bf83-f21f7e8ead5c/1/W4DJ0JJEcOHB4wvE7v8ZkJCnA1w.mft
Manifest number: 76
Signing time: Fri 31 Jan 2025 10:00:32 +0000
Manifest this update: Fri 31 Jan 2025 10:00:32 +0000
Manifest next update: Sat 01 Feb 2025 10:00:32 +0000
Files and hashes: 1: W4DJ0JJEcOHB4wvE7v8ZkJCnA1w.crl (hash: x2d8lyuhkHiY4VdzvJ00OPr8agwS6kba1318+nUa6DU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:14:2e:7a:42:f3:ac:a2:fb:4a:2f:ea:b9:2f:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b80c9d0924470e1c1e30bc4eeff199090a7035c
Validity
Not Before: Jan 31 10:00:32 2025 GMT
Not After : Feb 1 10:00:32 2025 GMT
Subject: CN=f4bf97348b0df7c5157dbda5b9ffd46da230ad0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:fc:c4:99:07:6f:3d:65:36:ca:91:d5:f8:37:
57:05:59:fb:09:55:59:60:97:14:10:bc:9d:bf:81:
58:51:17:b8:6f:67:ff:ff:6c:a2:8d:23:0a:b3:fc:
40:51:9a:d3:0e:c3:7f:87:28:8c:ff:07:e7:51:20:
f0:a4:b0:1c:3c:13:a6:e0:94:bb:71:0d:e0:b0:57:
0b:0e:2d:da:b5:28:d6:0d:a6:1c:8d:34:fe:eb:2b:
d5:7f:87:04:05:d7:9a:4f:16:ad:79:20:8f:32:7d:
ab:02:bb:5c:ae:60:eb:cd:0d:26:37:d3:08:8c:a2:
27:eb:4c:71:e5:96:0a:7b:7e:22:9c:12:ec:40:ed:
a6:08:d4:e3:e2:78:a4:9d:c6:62:1a:41:24:8c:1d:
5e:c4:4e:83:06:f6:de:86:9a:8a:b6:a5:ce:71:ce:
eb:39:98:fa:1d:b7:64:5a:e3:a0:f2:4e:d1:00:5b:
79:64:54:75:2a:c1:9f:5f:a0:40:46:8c:e0:94:da:
fd:13:00:7e:37:d9:b6:91:31:c3:e8:0d:d2:74:cd:
13:ad:31:d0:ab:0a:77:a5:06:fc:ac:2e:53:dc:95:
0c:b9:a6:6a:2c:33:bb:cf:e8:b3:85:3e:aa:bc:72:
5e:b9:73:ac:e8:9c:28:ef:f9:a8:a0:5c:84:fc:cb:
d6:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:BF:97:34:8B:0D:F7:C5:15:7D:BD:A5:B9:FF:D4:6D:A2:30:AD:0A
X509v3 Authority Key Identifier:
keyid:5B:80:C9:D0:92:44:70:E1:C1:E3:0B:C4:EE:FF:19:90:90:A7:03:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W4DJ0JJEcOHB4wvE7v8ZkJCnA1w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2cb73b-de66-4b41-bf83-f21f7e8ead5c/1/W4DJ0JJEcOHB4wvE7v8ZkJCnA1w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2cb73b-de66-4b41-bf83-f21f7e8ead5c/1/W4DJ0JJEcOHB4wvE7v8ZkJCnA1w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:ed:39:fa:64:50:a9:a3:9d:b5:d9:03:c4:98:b7:a6:4e:00:
1c:83:cc:b8:af:ac:16:ba:a4:d0:15:bd:82:58:64:d7:b1:c5:
f1:ea:d4:9d:1a:f8:8d:12:26:e9:b1:c8:2d:5b:46:f2:1a:9d:
67:93:12:a3:13:e9:b8:01:bf:f8:ce:8a:86:d3:bb:20:8e:49:
c3:9a:94:32:cf:88:2e:c5:7c:48:e7:d5:1a:b5:87:80:8e:5e:
a2:0f:ff:c2:89:9d:44:f8:8b:2f:74:3c:ee:2a:1b:56:00:37:
2a:11:c7:f1:f6:c4:83:ea:14:4b:2b:4c:93:d0:4d:e6:58:0a:
e3:b5:f4:ee:51:07:12:9b:69:c4:85:11:c3:67:c9:de:8d:6d:
7f:65:ac:f2:ca:1f:88:15:61:40:32:27:b0:94:c0:25:06:b3:
81:1b:08:1d:8e:59:21:fd:20:0f:f7:4a:9a:12:14:6d:a5:47:
b9:6e:f8:e5:a1:03:aa:f0:86:6a:b6:bd:9a:57:27:c4:a2:fb:
77:1a:46:eb:98:5f:67:ca:1d:ac:a4:ea:95:b0:64:40:c9:cf:
b1:4b:f3:de:22:25:bc:d1:bd:1a:ae:d6:b1:11:b4:9a:4c:86:
45:51:b7:bf:c3:82:47:d9:38:d4:c6:bf:04:30:a1:b0:55:de:
01:8f:6b:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:39:48 2025 by rpki-client