Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/e10057-99bb-44f9-9774-2752b3759066/1/WhoxkJeA6Bc0r2YHJy0YUl23ZX0.mft
File: WhoxkJeA6Bc0r2YHJy0YUl23ZX0.mft (raw, json)
Hash identifier: YH564koFTv9w3LwpoH5UleCErVALb+Lxj3BQM7VvmiU=
Subject key identifier: EE:08:24:74:3A:29:F6:5B:52:17:A3:CA:1A:E2:D8:B1:D1:B3:65:64
Authority key identifier: 5A:1A:31:90:97:80:E8:17:34:AF:66:07:27:2D:18:52:5D:B7:65:7D
Certificate issuer: /CN=5a1a31909780e81734af6607272d18525db7657d
Certificate serial: 0194BC72CF5E19D7ED277858C9592A37D3F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WhoxkJeA6Bc0r2YHJy0YUl23ZX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/e10057-99bb-44f9-9774-2752b3759066/1/WhoxkJeA6Bc0r2YHJy0YUl23ZX0.mft
Manifest number: 08FD
Signing time: Fri 31 Jan 2025 13:00:28 +0000
Manifest this update: Fri 31 Jan 2025 13:00:28 +0000
Manifest next update: Sat 01 Feb 2025 13:00:28 +0000
Files and hashes: 1: 05We7KAwOd8ZrvHSdSmKgB3AkYs.roa (hash: /6T/kf5A77qhojsVT6JQ5gSyGwEMhPcCMY7KI031bSc=)
2: WhoxkJeA6Bc0r2YHJy0YUl23ZX0.crl (hash: +dUHKCTyATruWlmR5jRVNZPc1FMsVSW1JYWJ9aOXx/Q=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:cf:5e:19:d7:ed:27:78:58:c9:59:2a:37:d3:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a1a31909780e81734af6607272d18525db7657d
Validity
Not Before: Jan 31 13:00:28 2025 GMT
Not After : Feb 1 13:00:28 2025 GMT
Subject: CN=ee0824743a29f65b5217a3ca1ae2d8b1d1b36564
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:f3:80:9c:26:05:6e:bd:a8:8e:96:de:89:2e:
6d:09:b9:e3:39:b9:5d:82:4d:95:83:6e:df:c7:26:
3c:87:39:69:9f:d3:d4:1e:38:65:31:d0:4d:4f:a3:
4e:14:88:0e:c8:a8:9d:42:f5:49:9e:7c:38:62:5b:
7c:00:90:24:1e:b5:7f:1b:dc:0f:79:85:f6:eb:f8:
6d:eb:33:28:6d:ab:b6:93:1f:0c:d6:ff:b9:b9:34:
f2:76:1d:a8:0d:8a:39:19:d8:89:ea:b8:6c:ea:8d:
41:3d:ee:e3:b7:3d:37:dc:ce:13:49:0c:b5:0e:f6:
40:6f:f5:08:1f:bd:27:70:01:f1:a3:20:57:64:53:
4a:cc:67:3c:6a:f0:a6:32:52:a7:66:33:69:0c:13:
e9:74:82:7e:8d:dc:e8:96:8c:c4:f1:a6:80:c5:d4:
05:48:5f:fc:ef:9f:b9:79:a3:ca:28:08:40:2f:1f:
4b:14:29:82:6e:b6:c2:c8:64:ab:5e:c2:43:42:46:
f8:99:7f:a1:f9:4d:30:b6:8d:c0:63:d2:69:96:39:
19:4b:aa:9c:3c:12:76:90:07:ba:0f:aa:f3:64:f0:
08:7c:e4:60:b1:41:88:2a:9a:33:be:8f:7a:4c:3a:
4e:50:21:82:56:aa:28:e9:1f:ca:e8:f6:59:43:04:
9c:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:08:24:74:3A:29:F6:5B:52:17:A3:CA:1A:E2:D8:B1:D1:B3:65:64
X509v3 Authority Key Identifier:
keyid:5A:1A:31:90:97:80:E8:17:34:AF:66:07:27:2D:18:52:5D:B7:65:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WhoxkJeA6Bc0r2YHJy0YUl23ZX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/e10057-99bb-44f9-9774-2752b3759066/1/WhoxkJeA6Bc0r2YHJy0YUl23ZX0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/e10057-99bb-44f9-9774-2752b3759066/1/WhoxkJeA6Bc0r2YHJy0YUl23ZX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:7e:a1:c9:0e:8a:b6:f1:14:72:f6:c5:15:f8:c1:5b:b4:b9:
fc:96:8b:db:f9:f2:8e:e2:af:3f:60:fa:21:7f:52:bc:88:88:
05:54:7d:ef:39:e3:be:ab:a9:2b:25:63:39:94:ec:c4:bf:ae:
47:e2:24:05:f9:8d:93:26:39:ef:ab:4d:1f:e5:b7:88:af:ec:
3c:7a:7d:55:f4:33:d0:1d:43:a0:7b:12:f3:e9:9b:96:8a:c1:
c8:7f:82:8e:64:0a:a7:9e:8e:d7:6f:ae:64:4d:7b:40:d4:61:
53:11:d7:14:ca:cd:f5:e6:da:08:52:06:2c:55:25:cf:2a:4b:
e7:e0:ad:ed:ca:a8:32:ed:67:a8:5a:c7:4e:31:ad:4e:ab:57:
48:c6:69:bb:5c:1d:80:c0:43:01:f7:ae:b5:16:d5:bc:75:65:
9f:e7:99:b7:f3:07:8e:f7:60:4c:02:10:47:56:09:ee:d3:1e:
6a:71:88:ce:b6:1e:0e:4c:0b:3c:ee:06:73:e8:10:e6:60:9c:
f6:bd:55:36:30:c1:54:56:d9:20:99:c7:39:0f:17:6a:2b:d0:
0b:31:d5:e6:67:1b:54:6d:58:a1:89:a2:f5:a2:94:18:8e:f0:
9a:72:ce:2a:59:d3:75:de:6b:2a:1c:58:5a:f4:ac:36:64:ee:
5a:36:2f:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:18:01 2025 by rpki-client