Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9c0278-542c-4467-ac7c-24aee2b0e82b/1/W-cZ-YXfOUpCrBHly8j4K0t67F0.mft
File: W-cZ-YXfOUpCrBHly8j4K0t67F0.mft (raw, json)
Hash identifier: 3Y596NCZf8Q2CzxmJ79tH+UfFXo6abWe0KKoG6ekF4I=
Subject key identifier: 6D:39:0A:E6:38:EC:0E:4C:17:8E:7D:38:F3:53:E2:93:26:82:4E:D1
Authority key identifier: 5B:E7:19:F9:85:DF:39:4A:42:AC:11:E5:CB:C8:F8:2B:4B:7A:EC:5D
Certificate issuer: /CN=5be719f985df394a42ac11e5cbc8f82b4b7aec5d
Certificate serial: 0194BD8565ECAB84A422C8E81BCA06EE1955
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W-cZ-YXfOUpCrBHly8j4K0t67F0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9c0278-542c-4467-ac7c-24aee2b0e82b/1/W-cZ-YXfOUpCrBHly8j4K0t67F0.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 18:00:23 +0000
Manifest this update: Fri 31 Jan 2025 18:00:23 +0000
Manifest next update: Sat 01 Feb 2025 18:00:23 +0000
Files and hashes: 1: W-cZ-YXfOUpCrBHly8j4K0t67F0.crl (hash: ABHQjIooscy+J59ZlRD4l2r8R5CW7DwN2ClbWPJyQdY=)
2: qfFhbPzEEV7-3fOF8iI3mosl_gc.roa (hash: eNrgqVa+1D+OMy3T6aNIQjkftemLm7/l9HKfq0aM6Lw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:65:ec:ab:84:a4:22:c8:e8:1b:ca:06:ee:19:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5be719f985df394a42ac11e5cbc8f82b4b7aec5d
Validity
Not Before: Jan 31 18:00:23 2025 GMT
Not After : Feb 1 18:00:23 2025 GMT
Subject: CN=6d390ae638ec0e4c178e7d38f353e29326824ed1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:66:9f:09:b3:8d:f0:db:81:a3:ea:ca:0b:e2:
e6:4f:fe:7f:d1:6a:be:86:eb:a7:1f:48:0a:78:6c:
16:93:8b:ea:79:c9:b9:dc:88:70:d6:de:43:99:b1:
20:0a:30:bc:01:71:06:b8:79:16:6f:b2:5f:9e:1a:
f8:19:aa:d7:94:94:eb:8a:79:85:17:32:9e:2f:76:
2f:92:58:06:2d:95:0e:24:1a:1a:3e:f8:93:97:89:
0e:ee:cc:57:0f:de:de:bd:a0:68:e0:5e:f2:cf:e4:
b8:58:76:2d:82:e4:ca:68:d1:2a:16:0d:1e:df:91:
76:cf:fe:69:3b:77:48:d2:24:d0:33:a1:e8:de:c3:
d9:9e:4c:61:59:3a:c0:e2:9a:d2:43:df:52:a6:08:
ed:8b:07:34:be:24:8d:96:ad:67:fa:5e:60:46:5b:
4b:17:1e:a6:7a:0b:10:20:65:a2:b6:21:07:3b:f0:
2b:96:18:9f:79:52:c9:a4:2c:81:7a:b4:cd:58:22:
a7:2c:eb:80:86:76:2c:bf:4d:1f:00:7e:54:b2:e2:
4d:99:8a:11:69:ab:9b:bd:2e:93:f0:35:7c:a8:cb:
f4:29:1a:8d:3b:46:37:9a:6b:03:2e:0e:75:36:ca:
92:c4:3c:25:1a:a2:c9:76:17:99:99:10:03:d3:4b:
6f:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:39:0A:E6:38:EC:0E:4C:17:8E:7D:38:F3:53:E2:93:26:82:4E:D1
X509v3 Authority Key Identifier:
keyid:5B:E7:19:F9:85:DF:39:4A:42:AC:11:E5:CB:C8:F8:2B:4B:7A:EC:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W-cZ-YXfOUpCrBHly8j4K0t67F0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9c0278-542c-4467-ac7c-24aee2b0e82b/1/W-cZ-YXfOUpCrBHly8j4K0t67F0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9c0278-542c-4467-ac7c-24aee2b0e82b/1/W-cZ-YXfOUpCrBHly8j4K0t67F0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:cb:94:8b:b4:ff:35:90:ed:60:53:be:20:a4:34:2c:4c:68:
e5:0c:5a:68:97:73:d6:69:4b:3b:73:45:b8:3a:03:d6:70:79:
c4:f1:0b:41:9a:b5:30:42:07:75:46:8b:8a:a5:3f:32:7b:53:
21:be:c6:98:ca:7f:26:90:00:c1:20:55:3a:38:84:c7:73:55:
20:be:ee:52:95:89:72:0c:14:cc:22:7a:4b:7a:5c:3b:3b:ed:
0d:8d:ef:60:d4:2c:f8:3d:60:4b:b1:49:97:db:04:34:2b:40:
6f:17:cb:0d:18:a7:17:2d:87:99:de:c4:c2:08:85:c8:1d:30:
8d:d1:90:bf:c4:65:bb:0f:26:cd:c5:5c:c9:68:af:99:67:f7:
79:62:ba:70:17:a3:af:55:1b:80:be:c8:c9:0d:30:9d:c6:06:
94:69:22:a3:c2:3b:98:38:85:fb:a2:93:f1:e6:b3:50:57:e0:
49:96:a1:c2:5f:b6:fd:c1:56:b6:bd:be:b4:f1:d2:db:0c:c9:
e6:f7:fc:a1:b4:65:d3:52:da:a5:32:ee:dd:b9:46:b4:23:e6:
bd:a0:8d:27:67:f1:25:d0:21:e3:35:07:49:c8:12:3f:27:12:
66:4d:a4:b3:b2:c9:ea:53:f9:39:b0:7b:84:ba:f9:58:a7:73:
95:3c:90:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:53 2025 by rpki-client