Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/85ec1c-e97e-422e-975c-1f54b80ce020/1/WI2zDIB4OcxTTdbRGrkEIPhz1jk.mft
File: WI2zDIB4OcxTTdbRGrkEIPhz1jk.mft (raw, json)
Hash identifier: gb13j3Gsy8TB7DxYLKhXYYNUF3HqBJqMQpVtsfQ83xM=
Subject key identifier: 79:26:C7:25:0B:68:2C:76:FF:59:FF:ED:E2:DB:FA:9A:E2:25:25:F6
Authority key identifier: 58:8D:B3:0C:80:78:39:CC:53:4D:D6:D1:1A:B9:04:20:F8:73:D6:39
Certificate issuer: /CN=588db30c807839cc534dd6d11ab90420f873d639
Certificate serial: 0194BC3BEC1674AEAB6862E6C2F90597D52E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WI2zDIB4OcxTTdbRGrkEIPhz1jk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/85ec1c-e97e-422e-975c-1f54b80ce020/1/WI2zDIB4OcxTTdbRGrkEIPhz1jk.mft
Manifest number: 04C5
Signing time: Fri 31 Jan 2025 12:00:31 +0000
Manifest this update: Fri 31 Jan 2025 12:00:31 +0000
Manifest next update: Sat 01 Feb 2025 12:00:31 +0000
Files and hashes: 1: M1JMBMjlsJbVljDt2PzSy5MjCBw.roa (hash: sQKzTWvI6Di9zG+70fZhGo8ykxUqEGqnJHybbUE2olY=)
2: WI2zDIB4OcxTTdbRGrkEIPhz1jk.crl (hash: hcxM46DGyXfooN3Y9FHac89CWZTFn2c47muGos/pWT4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:ec:16:74:ae:ab:68:62:e6:c2:f9:05:97:d5:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=588db30c807839cc534dd6d11ab90420f873d639
Validity
Not Before: Jan 31 12:00:31 2025 GMT
Not After : Feb 1 12:00:31 2025 GMT
Subject: CN=7926c7250b682c76ff59ffede2dbfa9ae22525f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:13:d9:d4:b0:73:4e:a6:aa:34:ab:dc:02:01:
5f:34:67:d2:01:f6:c5:6d:9c:bc:13:ba:36:0c:18:
31:16:3d:1d:8b:92:64:42:96:a7:4a:c8:92:36:70:
6b:b3:fd:ab:0a:43:4a:e4:f8:a3:e7:cf:87:d1:b5:
66:d0:16:b5:ea:2a:37:af:a8:15:31:e7:95:9e:8f:
02:81:d5:33:73:67:99:65:0d:cc:77:58:d0:ec:5d:
68:98:ff:87:24:be:c7:66:21:c3:45:a2:8d:3d:60:
d8:1a:8a:d2:c2:57:84:2b:d5:cd:ce:bc:a8:30:df:
ad:7a:d7:e5:49:af:aa:9a:53:1b:0d:58:53:c8:37:
e5:1e:74:74:f1:ec:b1:16:e0:4c:ed:6a:ee:7b:9e:
65:72:42:b0:58:65:ca:71:5c:ae:b4:a0:f4:62:6d:
16:f2:6a:ed:44:ea:d2:c6:93:c8:a9:37:a9:39:fb:
38:9b:0c:47:63:f7:5d:4c:d1:82:a0:09:f9:74:d6:
92:dc:bf:a5:1e:53:2b:ab:02:b7:5d:f6:0d:5b:43:
50:41:f1:9e:d4:19:7d:ec:03:af:3a:d6:f7:d4:94:
06:a0:06:d5:94:18:37:a3:77:f9:d7:0b:fe:de:71:
bb:2f:79:7e:37:4b:17:63:9e:d4:94:f4:af:0a:8b:
a6:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:26:C7:25:0B:68:2C:76:FF:59:FF:ED:E2:DB:FA:9A:E2:25:25:F6
X509v3 Authority Key Identifier:
keyid:58:8D:B3:0C:80:78:39:CC:53:4D:D6:D1:1A:B9:04:20:F8:73:D6:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WI2zDIB4OcxTTdbRGrkEIPhz1jk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/85ec1c-e97e-422e-975c-1f54b80ce020/1/WI2zDIB4OcxTTdbRGrkEIPhz1jk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/85ec1c-e97e-422e-975c-1f54b80ce020/1/WI2zDIB4OcxTTdbRGrkEIPhz1jk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:3d:ff:f9:00:11:ec:8b:7a:e5:a1:ec:55:04:7e:38:25:bd:
b4:d4:af:2a:dd:08:2b:48:b1:8a:e9:aa:af:bf:3f:30:dd:8e:
55:79:16:a5:64:5a:21:3f:a6:04:d7:aa:ff:9e:cb:ac:12:b0:
36:ff:22:46:b6:07:7d:c8:07:b3:52:65:38:e1:6a:eb:08:8c:
44:f2:41:2a:64:da:30:ad:69:8b:81:b1:72:f3:1f:42:e7:93:
15:fd:92:35:ba:94:d1:6e:ec:dc:10:06:8b:63:ca:56:e0:aa:
4e:a1:0a:18:ab:78:b9:8e:2d:e4:6f:6f:b0:dd:a3:3d:36:a1:
79:7b:08:17:69:f4:62:d5:25:7e:9b:fe:33:22:77:30:3c:b1:
d4:8a:5c:0a:f2:c3:06:82:c8:4f:0e:8f:a5:db:5e:5b:21:8d:
8d:01:7f:0c:00:3b:78:6b:d6:9c:14:89:72:1a:b8:40:f4:b2:
10:14:86:4e:57:4c:35:67:3c:1d:c2:f9:e7:87:31:ad:7d:36:
a7:c4:d7:77:19:d8:33:4c:ac:1f:df:ee:ea:c1:eb:33:21:a8:
97:8d:f7:23:2f:83:54:b5:76:ad:1f:b0:e7:6b:8f:2f:06:89:
14:80:6d:27:dc:a1:47:fc:6e:a9:35:fc:59:03:af:3a:85:af:
f5:28:b1:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:54:53 2025 by rpki-client