Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/203cd1-594c-4e64-9331-05d08cea02a9/1/WduoTN3qQ_y-QemGsfx4E33P79c.mft
File: WduoTN3qQ_y-QemGsfx4E33P79c.mft (raw, json)
Hash identifier: txpsAjHjXvM0iHfG8dOmuhJ707jfb1meCUF/3E9IWY8=
Subject key identifier: 7E:64:A9:E6:EA:6F:D8:19:D8:50:8B:4D:D9:41:97:CF:29:B9:0C:30
Authority key identifier: 59:DB:A8:4C:DD:EA:43:FC:BE:41:E9:86:B1:FC:78:13:7D:CF:EF:D7
Certificate issuer: /CN=59dba84cddea43fcbe41e986b1fc78137dcfefd7
Certificate serial: 0194BD4E78A728AA43B9582FF3D7CC77E33A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WduoTN3qQ_y-QemGsfx4E33P79c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/203cd1-594c-4e64-9331-05d08cea02a9/1/WduoTN3qQ_y-QemGsfx4E33P79c.mft
Manifest number: 020E
Signing time: Fri 31 Jan 2025 17:00:23 +0000
Manifest this update: Fri 31 Jan 2025 17:00:23 +0000
Manifest next update: Sat 01 Feb 2025 17:00:23 +0000
Files and hashes: 1: RhPTeugmZDfkfUBJoLhRret8XmI.roa (hash: H4OyvWIew7LAcqrSk19ToeJf4eN45LOuyTBAz8MK5+Q=)
2: WduoTN3qQ_y-QemGsfx4E33P79c.crl (hash: XwebbGIQvnJzjZM6SK4axDi85hAuyb+nW4ZQGksiX5Y=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:78:a7:28:aa:43:b9:58:2f:f3:d7:cc:77:e3:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59dba84cddea43fcbe41e986b1fc78137dcfefd7
Validity
Not Before: Jan 31 17:00:23 2025 GMT
Not After : Feb 1 17:00:23 2025 GMT
Subject: CN=7e64a9e6ea6fd819d8508b4dd94197cf29b90c30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:6c:72:c2:e7:97:af:6c:6b:d8:29:26:ae:a9:
8f:42:1b:9a:6f:7f:99:60:6b:f8:80:92:1f:67:6b:
15:8c:43:fe:75:67:07:21:d6:93:bd:6f:91:e3:4a:
8f:49:3b:cc:47:f2:ec:bc:50:35:27:ff:8e:e4:62:
f7:5f:e2:e5:81:8a:79:b8:79:c7:99:e5:37:dd:6e:
97:0b:f9:12:68:dd:4c:da:7c:1f:84:a5:74:27:f8:
2b:4c:f1:cd:92:f0:3d:87:7f:e9:a6:06:bb:54:99:
f6:d7:d9:84:e7:2b:7a:c0:24:08:70:26:6c:94:a1:
1f:07:b3:dc:86:f2:ec:37:f7:61:f3:6c:f8:81:89:
72:54:ea:0a:cf:33:85:64:76:f1:b6:1a:25:fb:37:
b5:6a:22:79:54:c3:ca:c3:0c:aa:f5:57:9a:02:02:
ab:ad:30:57:a5:6b:c1:27:bd:02:e8:5d:2e:39:83:
57:90:2c:60:b2:15:e3:69:f0:35:6e:af:0b:66:03:
49:c7:a8:2e:05:34:77:3c:28:91:7f:fa:0d:d6:cb:
b8:b8:cf:72:4f:7f:07:63:ce:1d:9a:41:f2:5c:bc:
31:90:ae:1a:75:e8:74:ad:de:09:a9:df:c0:83:da:
a0:2e:6d:1e:35:56:ea:57:4e:02:82:19:bd:bd:7c:
79:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:64:A9:E6:EA:6F:D8:19:D8:50:8B:4D:D9:41:97:CF:29:B9:0C:30
X509v3 Authority Key Identifier:
keyid:59:DB:A8:4C:DD:EA:43:FC:BE:41:E9:86:B1:FC:78:13:7D:CF:EF:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WduoTN3qQ_y-QemGsfx4E33P79c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/203cd1-594c-4e64-9331-05d08cea02a9/1/WduoTN3qQ_y-QemGsfx4E33P79c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/203cd1-594c-4e64-9331-05d08cea02a9/1/WduoTN3qQ_y-QemGsfx4E33P79c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:5d:0b:d0:f5:c2:c5:2f:66:3a:49:5e:44:21:25:0f:64:77:
b4:33:0c:7c:03:c9:1d:b4:de:b2:d2:68:f1:a4:39:b2:76:9c:
94:b5:ff:2c:8b:4f:12:7b:29:b7:94:9e:89:0c:fe:9a:08:25:
d4:7d:02:18:98:43:a0:0a:d9:ca:2f:47:6c:39:83:72:98:3e:
72:d6:cf:fb:82:d8:85:44:9e:36:d8:03:f9:c6:6d:2c:0e:39:
ca:44:f1:de:67:1b:0c:35:37:6e:6e:4e:8b:22:43:31:da:db:
54:57:22:44:fe:24:c8:62:7a:fa:fa:bf:7c:4a:f4:69:2a:61:
f2:11:f6:4f:9d:bf:d6:1c:86:58:e1:86:ad:96:47:8b:76:23:
55:5d:49:2c:bb:a9:d8:70:8b:56:68:67:81:2f:4d:a7:74:24:
9a:0a:e6:4b:25:81:a0:ca:c9:3f:aa:ef:57:3b:40:59:63:9e:
20:a4:a2:cb:21:f0:fa:4c:e2:e6:9a:7e:46:d7:e7:3d:57:69:
ed:eb:66:80:df:33:1a:0f:d2:b5:9d:1b:b3:dc:ee:56:a2:78:
ce:e9:42:86:f9:97:14:4e:c6:22:fa:dc:1d:79:1c:ad:f6:25:
72:8c:45:bc:c5:f6:ee:b8:68:04:96:5a:22:96:8f:69:8f:df:
5b:dc:7e:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:47:16 2025 by rpki-client