Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/27a748-884d-4f19-b285-59199331ee09/1/WqWNXycSzMAES1nvp8vD6Yxfwlw.mft
File: WqWNXycSzMAES1nvp8vD6Yxfwlw.mft (raw, json)
Hash identifier: /b7+6NCMqrBPSXYgwh8Bx4Bfpq1df1LIY2XJHsfK6FA=
Subject key identifier: D3:91:33:DA:8D:7B:37:A9:40:FC:B0:F5:B6:2D:8E:E2:89:0A:72:D3
Authority key identifier: 5A:A5:8D:5F:27:12:CC:C0:04:4B:59:EF:A7:CB:C3:E9:8C:5F:C2:5C
Certificate issuer: /CN=5aa58d5f2712ccc0044b59efa7cbc3e98c5fc25c
Certificate serial: 0194BC0528AEF54384E8A997C89EE14EA8BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WqWNXycSzMAES1nvp8vD6Yxfwlw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/27a748-884d-4f19-b285-59199331ee09/1/WqWNXycSzMAES1nvp8vD6Yxfwlw.mft
Manifest number: 0740
Signing time: Fri 31 Jan 2025 11:00:42 +0000
Manifest this update: Fri 31 Jan 2025 11:00:42 +0000
Manifest next update: Sat 01 Feb 2025 11:00:42 +0000
Files and hashes: 1: OXwNzP8LjbH6TWcdoNaukflgQIw.roa (hash: 7FOkQ2B0o6NyuacIE5IJomlXcGtJ1C+uqMpIt2z5/74=)
2: WqWNXycSzMAES1nvp8vD6Yxfwlw.crl (hash: 9IZ5WACiEwGWLRCxnA3IZQUm8akg2/20aypY3Lvbyns=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:28:ae:f5:43:84:e8:a9:97:c8:9e:e1:4e:a8:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5aa58d5f2712ccc0044b59efa7cbc3e98c5fc25c
Validity
Not Before: Jan 31 11:00:42 2025 GMT
Not After : Feb 1 11:00:42 2025 GMT
Subject: CN=d39133da8d7b37a940fcb0f5b62d8ee2890a72d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:7f:34:c3:38:cd:d4:6a:fd:66:52:cd:72:3d:
88:4f:a5:27:27:ad:38:5c:21:bb:df:85:55:3d:1b:
d0:ae:29:26:81:7f:6c:ba:04:21:a0:b6:8c:2e:88:
04:e7:0b:6d:f4:52:c8:e9:4d:45:ec:16:a2:e1:c6:
9f:c1:87:72:3e:05:01:0b:f4:9e:e8:61:72:46:79:
6a:ad:3d:54:13:b6:ca:94:6c:d4:28:00:73:b7:57:
d2:7f:f0:ff:48:e9:ed:72:a1:6b:3a:44:25:90:0e:
84:9b:7d:aa:c9:0d:9b:66:89:4e:20:5c:c7:2d:95:
86:93:e1:71:41:df:ce:c7:ac:70:3e:00:35:30:89:
ae:9f:01:d8:d0:6d:a2:df:eb:ca:e5:b8:8e:f7:b2:
bf:5d:ed:24:fc:b9:25:07:95:cb:e8:8a:7a:b4:9d:
03:c7:68:65:e6:f9:84:1e:e8:ca:6f:8c:3c:88:85:
1e:29:c4:8d:cf:1a:78:c9:ce:b6:eb:29:fb:e8:cc:
e2:28:ea:a0:ff:24:32:60:01:a5:48:6a:d4:71:86:
7b:0b:33:9f:64:ef:a7:69:4d:a0:97:fc:bd:9d:6d:
81:d7:b2:0e:12:09:d5:dc:80:c7:d4:c2:cc:b7:90:
1a:a2:ed:4e:95:a9:86:c5:81:2f:48:ce:42:ec:e9:
8b:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:91:33:DA:8D:7B:37:A9:40:FC:B0:F5:B6:2D:8E:E2:89:0A:72:D3
X509v3 Authority Key Identifier:
keyid:5A:A5:8D:5F:27:12:CC:C0:04:4B:59:EF:A7:CB:C3:E9:8C:5F:C2:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WqWNXycSzMAES1nvp8vD6Yxfwlw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/27a748-884d-4f19-b285-59199331ee09/1/WqWNXycSzMAES1nvp8vD6Yxfwlw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/27a748-884d-4f19-b285-59199331ee09/1/WqWNXycSzMAES1nvp8vD6Yxfwlw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:c0:f7:d2:f6:bb:95:6f:da:a2:60:86:f7:53:d4:d9:2c:8e:
ed:d5:ec:b7:f5:e1:70:62:e0:ab:0c:08:ee:d6:35:1b:a7:78:
34:f2:55:54:03:1b:63:84:93:41:49:09:77:aa:ee:24:ce:7d:
9c:0c:f6:d7:1b:ef:06:10:0d:16:a8:2a:c9:2d:4d:43:f3:a2:
c7:0e:76:05:b5:92:0c:7f:4a:86:7d:89:f0:a7:cb:48:f9:20:
32:b3:b0:ef:9b:09:1f:bf:a7:7d:c3:ca:31:ea:0b:8b:5d:a3:
67:db:75:e4:e5:61:b8:15:4b:c6:57:a5:8d:e3:17:92:4b:a9:
ec:d3:a7:3e:8a:ce:4e:31:9f:89:6e:a7:a8:14:04:89:b5:be:
3a:b9:57:59:23:06:55:88:08:f0:30:d7:3f:c5:cf:e2:7b:b7:
e6:34:bf:24:d2:76:d1:3b:be:91:85:8f:68:f6:15:48:77:6f:
02:f8:00:0a:02:08:e6:39:b9:5c:dc:cd:24:29:7e:60:8b:ff:
62:69:16:b5:57:7f:19:4e:57:80:9d:e8:e5:91:75:70:03:fc:
f5:d9:07:55:bb:90:ee:30:6a:f0:20:0a:8b:a0:fa:f2:8e:b9:
85:a8:62:81:7f:91:85:3a:f8:f2:3e:30:6f:76:91:0b:74:40:
8d:60:ca:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:54:10 2025 by rpki-client