Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/b92213-5c34-4fc6-92cc-5be96860afc4/1/WhVoGZ0pI5onRa1Dtpb73C4GcG0.mft
File: WhVoGZ0pI5onRa1Dtpb73C4GcG0.mft (raw, json)
Hash identifier: /a7zMvwWALIFScuy9oZBOGJal0fcmPDQSSv4ILI9mi0=
Subject key identifier: 69:AF:9C:65:A0:9E:A3:17:29:93:D7:59:DA:A3:CF:80:12:0E:0F:BC
Authority key identifier: 5A:15:68:19:9D:29:23:9A:27:45:AD:43:B6:96:FB:DC:2E:06:70:6D
Certificate issuer: /CN=5a1568199d29239a2745ad43b696fbdc2e06706d
Certificate serial: 0194BBCE08103D6A457270EC0E396D7A63F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WhVoGZ0pI5onRa1Dtpb73C4GcG0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/b92213-5c34-4fc6-92cc-5be96860afc4/1/WhVoGZ0pI5onRa1Dtpb73C4GcG0.mft
Manifest number: 13F2
Signing time: Fri 31 Jan 2025 10:00:29 +0000
Manifest this update: Fri 31 Jan 2025 10:00:29 +0000
Manifest next update: Sat 01 Feb 2025 10:00:29 +0000
Files and hashes: 1: WhVoGZ0pI5onRa1Dtpb73C4GcG0.crl (hash: HmwrOYea62XCDlhGH1P2Z/WATMcmMKv2n5dvD6lUS7g=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:08:10:3d:6a:45:72:70:ec:0e:39:6d:7a:63:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a1568199d29239a2745ad43b696fbdc2e06706d
Validity
Not Before: Jan 31 10:00:29 2025 GMT
Not After : Feb 1 10:00:29 2025 GMT
Subject: CN=69af9c65a09ea3172993d759daa3cf80120e0fbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:56:c8:fa:2e:46:03:2b:bf:e2:8b:e8:e3:69:
60:fb:0d:be:e0:c0:ad:fb:d1:57:c8:e6:e7:76:64:
21:97:b4:c9:fe:37:f7:24:7e:d7:e3:99:1a:b5:dc:
ed:9f:48:92:9b:f6:50:bd:31:08:5f:a9:08:76:29:
19:d3:e5:72:0e:de:d8:58:8b:d4:46:01:12:28:89:
ba:d8:e3:47:da:37:6b:b7:f0:42:89:ab:9c:1a:e5:
95:46:14:4f:27:2f:1a:84:23:b3:01:ca:e7:87:78:
5c:16:3f:59:b1:e6:35:4a:d0:46:3a:28:07:79:4c:
f1:35:db:57:11:43:2b:3e:00:12:e3:b3:f7:40:fd:
45:b5:7d:ed:e2:78:5f:a4:e3:32:42:e5:c1:a2:b7:
73:1c:c2:c8:c2:ec:b1:b0:2b:0f:6c:58:77:f9:fa:
de:30:99:bc:4b:22:d7:1b:06:df:98:0f:81:0e:dc:
45:03:81:03:bb:0d:f0:a8:6b:3c:aa:45:40:cf:49:
3f:e2:48:1c:15:e4:b9:d5:92:2b:3a:a3:1c:ab:a1:
2d:56:a8:c5:74:10:41:8d:a6:43:8a:3e:64:17:6b:
89:70:ad:b4:46:36:6d:7f:1e:68:fc:64:77:1c:fe:
8f:b3:e7:1e:73:b1:18:7d:cd:dd:5e:93:73:f9:d6:
c7:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:AF:9C:65:A0:9E:A3:17:29:93:D7:59:DA:A3:CF:80:12:0E:0F:BC
X509v3 Authority Key Identifier:
keyid:5A:15:68:19:9D:29:23:9A:27:45:AD:43:B6:96:FB:DC:2E:06:70:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WhVoGZ0pI5onRa1Dtpb73C4GcG0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/b92213-5c34-4fc6-92cc-5be96860afc4/1/WhVoGZ0pI5onRa1Dtpb73C4GcG0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/b92213-5c34-4fc6-92cc-5be96860afc4/1/WhVoGZ0pI5onRa1Dtpb73C4GcG0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:23:a6:83:11:d4:74:15:71:9f:7b:59:52:a0:29:48:ff:76:
26:6e:d5:14:70:3c:ed:c9:3e:87:db:db:47:73:4b:fb:e3:29:
2b:c9:00:25:65:54:9e:a6:d8:66:7f:e0:94:e7:b6:85:b4:c8:
cd:38:ec:dd:46:dc:d0:be:84:35:42:e3:f9:41:af:0f:be:af:
64:3d:23:72:e1:ce:a7:48:f8:b5:7b:53:ab:13:8c:ae:f4:17:
95:51:61:35:5a:9e:70:7f:5d:09:f2:a8:74:9c:0a:ec:8e:ac:
b2:ad:c4:2c:77:e2:49:46:08:9e:5b:5f:7e:87:22:8c:1c:dc:
fb:73:6a:66:f3:b3:33:fa:1b:ce:d8:75:c5:34:08:e6:9a:da:
81:bf:24:e2:a0:7e:3a:21:fa:b7:cd:67:3e:d0:f6:b3:ea:df:
ed:28:9c:f0:18:79:e5:69:b1:f0:62:9c:1d:2c:10:d2:fe:f7:
ee:68:1d:75:29:08:15:6b:cc:db:85:87:77:ba:c9:ad:e9:cd:
f5:1d:f4:e8:23:f5:c2:85:51:0f:d9:46:a9:e9:3a:64:87:06:
36:c5:d5:8c:6f:7a:00:d0:b9:30:7e:6f:88:2f:c8:bf:72:ee:
58:fb:ca:7a:34:a0:a4:63:65:4d:bf:92:e8:d5:d4:d5:39:e0:
c7:e5:87:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 10:37:08 2025 by rpki-client