Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/f1dfe3-2609-46b8-b03f-da96019d4c20/1/WKEnRT37oX4Qw0f6NLvrqxSQWlc.mft
File: WKEnRT37oX4Qw0f6NLvrqxSQWlc.mft (raw, json)
Hash identifier: gGShVmQzvv3z7ySKM4FI6AwKrNf40r4bUF4Zb4PdhVQ=
Subject key identifier: F1:99:99:CC:31:48:8D:32:D7:99:90:07:7B:68:BF:50:B8:17:FE:67
Authority key identifier: 58:A1:27:45:3D:FB:A1:7E:10:C3:47:FA:34:BB:EB:AB:14:90:5A:57
Certificate issuer: /CN=58a127453dfba17e10c347fa34bbebab14905a57
Certificate serial: 0194BC72A334ECF648BEAFC8A8B56E7FD0A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WKEnRT37oX4Qw0f6NLvrqxSQWlc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/f1dfe3-2609-46b8-b03f-da96019d4c20/1/WKEnRT37oX4Qw0f6NLvrqxSQWlc.mft
Manifest number: 0538
Signing time: Fri 31 Jan 2025 13:00:16 +0000
Manifest this update: Fri 31 Jan 2025 13:00:16 +0000
Manifest next update: Sat 01 Feb 2025 13:00:16 +0000
Files and hashes: 1: 2symQxt9tiTp5JPRu9SVrhpHnoI.roa (hash: ETxwfWEk5Ji119X6QNRzmnwtDjfSz5qCO5WUq2I4qpI=)
2: WKEnRT37oX4Qw0f6NLvrqxSQWlc.crl (hash: OQ7TLiiL9n1ylwt2KSRrcV+Vif1rNOoX89ZNIob+apw=)
3: aiepDcInSC7XQM1NAo38Ltggcos.roa (hash: 6COc/WNOkQasZPkjRm4nKC/vd3bNAbojTsGDQ+J1+tY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:a3:34:ec:f6:48:be:af:c8:a8:b5:6e:7f:d0:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58a127453dfba17e10c347fa34bbebab14905a57
Validity
Not Before: Jan 31 13:00:16 2025 GMT
Not After : Feb 1 13:00:16 2025 GMT
Subject: CN=f19999cc31488d32d79990077b68bf50b817fe67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:ff:5a:5c:c7:56:bc:63:d8:87:db:f3:7a:b3:
14:64:10:41:95:57:4c:cd:51:f3:7c:9e:20:a1:73:
bc:a7:88:d4:ab:0e:08:70:31:84:ce:a0:5e:3c:17:
54:8a:1e:88:02:83:4b:7c:15:a3:74:08:a2:f9:b4:
8a:b0:ce:22:35:68:5f:df:0e:39:2c:db:06:5a:1c:
24:ae:8f:75:b6:31:d3:f6:91:f2:11:f9:ff:ab:ba:
89:6a:77:88:15:81:8b:ef:b5:24:84:86:72:c6:8d:
2e:cd:e2:0d:a1:82:be:32:51:ef:2f:2b:b9:b7:04:
23:15:16:12:37:29:09:12:44:ab:c8:1d:9c:60:10:
6b:bb:82:c5:08:7b:3f:c8:7e:7c:f7:b0:e0:82:f7:
97:8c:85:74:cf:a1:e6:05:4b:71:05:b7:ee:aa:af:
3a:73:ce:dc:27:4b:a5:af:39:4a:ec:a0:a5:71:7d:
22:30:16:73:56:ca:55:dc:3e:9b:36:07:27:4d:89:
f7:0b:dc:7d:ae:11:1f:93:6b:41:85:75:8b:7c:62:
f5:f8:50:12:cf:74:8b:cc:53:d5:c1:0a:14:59:8f:
31:aa:34:a5:08:26:10:c0:c5:7c:d4:06:d8:5d:d8:
bf:e4:7a:5c:b4:ab:da:69:2f:0e:08:cf:bc:dd:3d:
05:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:99:99:CC:31:48:8D:32:D7:99:90:07:7B:68:BF:50:B8:17:FE:67
X509v3 Authority Key Identifier:
keyid:58:A1:27:45:3D:FB:A1:7E:10:C3:47:FA:34:BB:EB:AB:14:90:5A:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WKEnRT37oX4Qw0f6NLvrqxSQWlc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/f1dfe3-2609-46b8-b03f-da96019d4c20/1/WKEnRT37oX4Qw0f6NLvrqxSQWlc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/f1dfe3-2609-46b8-b03f-da96019d4c20/1/WKEnRT37oX4Qw0f6NLvrqxSQWlc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:74:11:b7:59:a3:53:6a:43:e1:48:a4:d9:42:ef:0d:f0:40:
ce:fb:4e:be:71:41:ae:ac:ab:ae:a8:8a:06:43:f3:9a:e7:1f:
1c:65:68:46:92:8b:8e:d7:df:b1:b0:c0:9b:83:bb:d2:80:68:
10:e3:b6:b2:cb:af:82:87:85:0c:48:a5:3c:2f:4e:91:4c:83:
a0:a1:62:22:e9:db:ed:8f:75:25:c1:f4:7d:b3:96:ea:6e:4f:
d6:3b:7f:a4:ca:49:8e:bf:d5:17:2a:51:b0:25:4d:75:e5:2a:
3c:91:fe:a0:28:75:ed:56:e9:92:eb:55:72:ea:9b:58:64:8b:
aa:2d:21:be:0b:13:5f:05:82:84:61:f0:6c:ea:e3:b7:d8:12:
0e:3d:7c:04:50:f3:3c:e1:f5:62:13:7a:96:d5:5c:4c:5b:da:
aa:bb:11:b7:90:a3:7d:46:30:66:47:38:66:da:08:99:d4:2e:
b4:7c:87:c5:88:45:c7:13:a9:53:51:ef:23:74:3d:4e:a5:51:
15:de:c7:0f:b5:56:0c:65:23:65:4a:f4:92:4d:ec:1c:15:84:
68:eb:f5:5a:95:06:a1:7c:71:f8:62:d4:15:95:bf:5a:14:29:
2a:0a:f1:37:b9:93:ef:32:5d:19:96:f0:63:cf:7e:5f:f2:8a:
11:72:9c:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:08:34 2025 by rpki-client