Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/373eca-ca43-4d62-a10f-bc7fc719d31b/1/Wh1F7dft3pqLhipzmtqOeLfcgrk.mft
File: Wh1F7dft3pqLhipzmtqOeLfcgrk.mft (raw, json)
Hash identifier: hRd3AvNrfM1Q1aAz7UM+yGu3H9Dj0x+fncTX7UrBaGU=
Subject key identifier: BF:E9:81:E8:2D:DC:6E:DE:CE:30:9B:9E:B7:26:8D:EA:68:A4:7C:A5
Authority key identifier: 5A:1D:45:ED:D7:ED:DE:9A:8B:86:2A:73:9A:DA:8E:78:B7:DC:82:B9
Certificate issuer: /CN=5a1d45edd7edde9a8b862a739ada8e78b7dc82b9
Certificate serial: 0194BD17D834DEAA00C70DAA081209EA1866
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wh1F7dft3pqLhipzmtqOeLfcgrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/373eca-ca43-4d62-a10f-bc7fc719d31b/1/Wh1F7dft3pqLhipzmtqOeLfcgrk.mft
Manifest number: 048A
Signing time: Fri 31 Jan 2025 16:00:43 +0000
Manifest this update: Fri 31 Jan 2025 16:00:43 +0000
Manifest next update: Sat 01 Feb 2025 16:00:43 +0000
Files and hashes: 1: Wh1F7dft3pqLhipzmtqOeLfcgrk.crl (hash: JaqYkTqiFzucRXgaFW09sxinKjEBRS6PTfkoxpPHRTo=)
2: zfiw5E-qnyxqvOsxLYX9MrFyy84.roa (hash: 1/skm9ZEWKwE055qHT9FApOuyUCgE73YdLdPkqaA0Cg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:d8:34:de:aa:00:c7:0d:aa:08:12:09:ea:18:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a1d45edd7edde9a8b862a739ada8e78b7dc82b9
Validity
Not Before: Jan 31 16:00:43 2025 GMT
Not After : Feb 1 16:00:43 2025 GMT
Subject: CN=bfe981e82ddc6edece309b9eb7268dea68a47ca5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a3:95:4c:14:86:35:58:ef:d3:ba:d8:ed:35:
e4:36:e5:58:9d:5d:87:25:1f:38:78:0e:77:4a:07:
c2:ac:c2:59:9d:5d:d0:ed:94:bd:da:57:03:c3:0a:
52:af:a3:fe:36:33:dc:94:ae:cb:52:80:62:2d:31:
15:ca:6c:c9:d2:4e:ae:f2:cf:19:dd:a7:e4:16:0b:
96:f5:24:f7:54:80:d6:d3:c3:d1:98:e2:ad:27:ff:
79:49:bd:4e:04:c6:d7:08:c8:a0:36:41:f8:c6:c8:
73:2e:cd:bd:b4:94:8e:62:7b:56:84:da:7f:71:da:
cf:a7:14:c7:61:7f:e3:aa:db:a1:8b:44:35:5b:43:
a5:ed:89:2b:16:c2:fc:54:6e:9d:2f:35:e1:06:6a:
1a:c1:60:9a:f6:cd:59:2b:c3:74:4a:5a:f7:7a:80:
d0:de:0d:a5:d3:8c:7a:d6:a8:5e:cd:82:20:2d:62:
be:87:7b:67:ae:9d:57:86:94:c1:14:1f:80:91:36:
64:77:73:02:fd:06:61:98:92:a0:02:4b:10:cd:28:
f1:9e:ec:25:38:15:c2:0a:72:a5:18:36:a5:d6:61:
f5:e1:6b:3d:27:43:04:0b:1c:e2:fc:e1:e4:d1:c9:
af:9e:66:42:91:87:d8:6c:61:a3:16:5d:db:e4:ea:
91:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:E9:81:E8:2D:DC:6E:DE:CE:30:9B:9E:B7:26:8D:EA:68:A4:7C:A5
X509v3 Authority Key Identifier:
keyid:5A:1D:45:ED:D7:ED:DE:9A:8B:86:2A:73:9A:DA:8E:78:B7:DC:82:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wh1F7dft3pqLhipzmtqOeLfcgrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/373eca-ca43-4d62-a10f-bc7fc719d31b/1/Wh1F7dft3pqLhipzmtqOeLfcgrk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/373eca-ca43-4d62-a10f-bc7fc719d31b/1/Wh1F7dft3pqLhipzmtqOeLfcgrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:04:51:4f:fb:c1:6f:be:b5:e9:8f:b8:22:29:aa:78:89:6a:
25:01:0a:43:0c:f1:e1:f7:10:27:19:3f:4c:95:b7:86:51:7d:
a0:99:0d:8d:00:1a:04:1a:6c:21:ab:8c:7c:34:46:77:1d:ce:
55:b8:c1:91:30:53:bd:e0:d1:24:54:d4:57:a3:12:40:21:b8:
9f:93:84:74:67:e8:0c:27:4a:6b:04:9b:d6:0b:59:c0:b3:74:
18:82:12:c4:57:96:99:9b:c6:01:6b:de:54:9e:9e:c0:df:05:
9b:6d:a3:c8:47:21:c0:47:aa:39:e2:1f:b1:5a:14:c4:bf:32:
db:fc:4a:a7:7f:49:2b:ef:2b:ee:d2:5f:84:87:15:8e:a1:94:
59:27:87:38:12:6a:1c:01:b4:ea:22:ae:ec:b5:ef:7d:75:53:
61:a3:4a:2f:15:7f:22:49:70:78:9a:6e:96:f1:fa:6c:c2:24:
f3:55:31:67:f6:6e:09:96:cb:0a:9d:4d:dc:80:52:d2:8c:d1:
b0:a3:2c:5a:08:80:8e:f1:c2:93:bc:7b:2f:cf:42:2a:0d:3f:
cc:67:11:cb:9e:9b:0e:11:d0:e6:46:88:cd:2b:37:d4:45:6a:
32:f5:41:d0:0f:42:61:be:8b:0a:7d:d2:f1:65:a0:f5:98:8c:
50:87:35:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:52:18 2025 by rpki-client