Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/6aef9e-fe4d-43e7-a1cb-10a485c0b0f2/1/WiMq44qSM6t_wbQppQKSIK-nsog.mft
File: WiMq44qSM6t_wbQppQKSIK-nsog.mft (raw, json)
Hash identifier: 7+XGHOGxSDOIyUaNDlorPpIvZGmA3qmWluh6JgdUPRQ=
Subject key identifier: D6:92:0F:72:C9:48:ED:40:A7:58:A5:D3:0E:EE:3A:FA:C1:92:27:4F
Authority key identifier: 5A:23:2A:E3:8A:92:33:AB:7F:C1:B4:29:A5:02:92:20:AF:A7:B2:88
Certificate issuer: /CN=5a232ae38a9233ab7fc1b429a5029220afa7b288
Certificate serial: 0194BC72AF71B39CB1FE7632B9C611B06D57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WiMq44qSM6t_wbQppQKSIK-nsog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/6aef9e-fe4d-43e7-a1cb-10a485c0b0f2/1/WiMq44qSM6t_wbQppQKSIK-nsog.mft
Manifest number: 01FC
Signing time: Fri 31 Jan 2025 13:00:20 +0000
Manifest this update: Fri 31 Jan 2025 13:00:20 +0000
Manifest next update: Sat 01 Feb 2025 13:00:20 +0000
Files and hashes: 1: 84jYv05HnlXjbNLOmoRHkF8n8LQ.roa (hash: /X9ewNFlsp/9ZFMAjrGm5l3SwfH8c42hlaaVDkUgEww=)
2: WiMq44qSM6t_wbQppQKSIK-nsog.crl (hash: djon1nMrRzWKO8bW58ZX1yLTBLi9Xt1BUDxDX21MvNA=)
3: y8uNxN4Qz-KJWpwgdJjEk856rFg.roa (hash: gCH8Gmi7LtX/qDiok3OTFvIkgdYcX5Le/2ybuhXBvN0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:af:71:b3:9c:b1:fe:76:32:b9:c6:11:b0:6d:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a232ae38a9233ab7fc1b429a5029220afa7b288
Validity
Not Before: Jan 31 13:00:20 2025 GMT
Not After : Feb 1 13:00:20 2025 GMT
Subject: CN=d6920f72c948ed40a758a5d30eee3afac192274f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:04:b3:2d:6a:7a:44:35:0e:b8:82:f6:2c:2d:
fc:83:71:d4:4a:fa:4d:79:dc:04:02:4b:06:57:72:
4e:75:82:bf:45:f7:09:8a:e3:df:92:87:8e:c2:6b:
da:6d:c1:a2:c0:89:5b:d6:14:d5:4c:7f:9b:d8:b4:
ae:08:28:30:8d:83:b2:9e:e4:b1:0e:ff:a1:d1:c1:
94:74:8f:55:af:b1:fa:04:59:f2:76:2d:c6:a9:c4:
0b:00:84:f5:a3:5b:87:87:9e:b0:f6:0c:bc:e9:ae:
5a:d7:1f:cd:2e:a2:54:f9:8b:36:15:b8:26:e7:e1:
22:e2:e1:9c:5e:48:fa:48:01:d2:41:ad:02:aa:8a:
a7:f0:72:b3:84:07:ee:a5:1c:d2:51:65:a0:b4:92:
21:a2:70:86:70:18:dc:71:b3:e1:92:80:56:2b:b9:
dd:7d:45:e8:d0:5b:93:b4:cf:de:85:6c:25:f5:3a:
00:e1:e0:4a:1e:47:aa:ad:e6:41:14:76:22:f4:eb:
c7:7d:c1:7e:44:74:3e:1b:e2:9a:d7:9c:ef:1d:00:
bb:eb:c9:81:e5:7c:1b:9c:2b:b3:39:d3:cc:93:47:
cc:6e:a1:6b:d3:bc:39:c5:25:86:ef:d1:f6:7c:f3:
71:8b:e0:be:db:47:9b:4e:55:cb:9b:dc:6f:74:7d:
44:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:92:0F:72:C9:48:ED:40:A7:58:A5:D3:0E:EE:3A:FA:C1:92:27:4F
X509v3 Authority Key Identifier:
keyid:5A:23:2A:E3:8A:92:33:AB:7F:C1:B4:29:A5:02:92:20:AF:A7:B2:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WiMq44qSM6t_wbQppQKSIK-nsog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/6aef9e-fe4d-43e7-a1cb-10a485c0b0f2/1/WiMq44qSM6t_wbQppQKSIK-nsog.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/6aef9e-fe4d-43e7-a1cb-10a485c0b0f2/1/WiMq44qSM6t_wbQppQKSIK-nsog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:42:24:12:61:08:24:06:aa:1b:ef:f8:a1:84:85:2a:a9:5a:
10:6a:49:be:7e:92:b2:57:b6:66:c7:d6:ef:ad:c8:21:7c:c0:
f6:5e:00:7c:f2:e6:e8:42:4b:14:f8:08:50:77:c4:cd:bf:6c:
92:d1:47:63:45:22:86:c8:23:35:b7:94:67:7f:04:9f:45:69:
2b:25:7c:3e:df:2c:30:53:0b:46:12:d8:9b:96:39:3a:79:b2:
8d:ea:1a:1a:05:db:61:83:bf:cd:b1:e3:ee:32:6d:e2:93:24:
16:99:8f:8f:96:e1:fe:2f:28:21:8e:51:4f:fa:2d:a0:73:10:
67:92:8b:61:88:41:88:46:4e:59:ae:e4:7e:80:c9:39:2f:ec:
1d:d3:9e:7a:52:bf:8f:c8:8f:2e:39:e0:10:37:8e:7d:f1:eb:
1b:f2:a6:94:96:3a:d6:75:01:84:cb:27:61:7a:f6:6b:95:e3:
b1:c4:f3:4e:75:db:fd:08:1e:5c:64:d2:db:62:b1:ec:93:e8:
4d:e6:7e:8c:b0:a3:fb:c8:d0:0d:b5:cf:06:94:35:c9:24:cc:
da:c0:ea:40:e6:1f:53:98:7b:f1:a6:9f:2b:09:cc:22:7a:fa:
67:83:39:53:d9:bd:5d:d5:68:52:60:cb:46:00:18:30:72:7c:
5f:7e:c4:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:11 2025 by rpki-client