
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/2eed24-0dff-4400-a57c-459ddc631bcc/1/WgLKgbnwqXE7CZaH3IFVHEXj-Pw.mft
File: WgLKgbnwqXE7CZaH3IFVHEXj-Pw.mft (raw, json)
Hash identifier: tYF4EuDT/bY8uNZDEUnDz0mdsI4XBEurHfQYJzh81DQ=
Subject key identifier: EC:A9:3D:07:EF:AB:E5:09:24:3B:37:B5:24:0E:67:FE:75:14:BC:DD
Authority key identifier: 5A:02:CA:81:B9:F0:A9:71:3B:09:96:87:DC:81:55:1C:45:E3:F8:FC
Certificate issuer: /CN=5a02ca81b9f0a9713b099687dc81551c45e3f8fc
Certificate serial: 0194BCA971DBE10DB3E7A002E775F8D23964
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WgLKgbnwqXE7CZaH3IFVHEXj-Pw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/2eed24-0dff-4400-a57c-459ddc631bcc/1/WgLKgbnwqXE7CZaH3IFVHEXj-Pw.mft
Manifest number: 06FB
Signing time: Fri 31 Jan 2025 14:00:08 +0000
Manifest this update: Fri 31 Jan 2025 14:00:08 +0000
Manifest next update: Sat 01 Feb 2025 14:00:08 +0000
Files and hashes: 1: WgLKgbnwqXE7CZaH3IFVHEXj-Pw.crl (hash: tCRIDrkchbKP0HkSwW4ADXutkmKzQ/VC1I8/wW9tA9g=)
2: fPdaDi8Q6kMa2if35eGudsLEQ8o.roa (hash: vc9oGx1t9ju95rv1gQobwnbtC4KxraULnnXmJJ4pSRU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:71:db:e1:0d:b3:e7:a0:02:e7:75:f8:d2:39:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a02ca81b9f0a9713b099687dc81551c45e3f8fc
Validity
Not Before: Jan 31 14:00:08 2025 GMT
Not After : Feb 1 14:00:08 2025 GMT
Subject: CN=eca93d07efabe509243b37b5240e67fe7514bcdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:a9:2d:a9:c9:dd:3b:b9:72:25:7e:b1:e3:cd:
3d:d8:02:d7:26:31:b3:db:a2:b7:53:0d:d0:fb:90:
bf:d6:a8:b9:6e:64:af:9e:b1:57:af:90:cd:34:81:
0d:c2:bb:d3:77:99:72:fb:7e:33:46:dc:63:4e:13:
ce:f5:3d:33:49:f7:ec:1b:9b:cb:6a:ba:b4:e3:1b:
2d:0c:b6:8b:3f:05:01:6d:c8:10:41:b1:0c:c9:97:
c6:75:f2:9a:91:d8:d8:f7:ca:1d:ca:ef:3f:24:b1:
31:6a:a8:f8:77:18:72:99:b9:e9:92:c5:5f:59:f5:
e5:fd:b3:dd:f3:6b:02:cb:64:aa:82:7b:6c:03:2c:
d0:0c:ba:40:82:a0:ec:32:7d:7c:5d:f7:a9:5a:26:
1e:66:3c:73:89:b0:39:c6:6f:98:3e:cd:1e:fd:9d:
8a:be:d5:41:e9:9e:a2:c9:c1:5c:ed:74:32:01:24:
e7:0f:00:49:ef:4b:7f:ce:01:3e:6c:0a:00:13:fa:
72:38:a7:77:e2:87:c5:c6:b0:0c:fe:84:3f:af:f7:
e3:6d:80:91:44:d4:ee:ac:72:89:a7:5f:e4:87:20:
4a:51:ba:69:86:c8:60:c2:cb:a4:28:ad:3d:4a:82:
93:b7:53:99:a3:ef:56:e9:85:91:d8:f3:11:fb:db:
1a:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:A9:3D:07:EF:AB:E5:09:24:3B:37:B5:24:0E:67:FE:75:14:BC:DD
X509v3 Authority Key Identifier:
keyid:5A:02:CA:81:B9:F0:A9:71:3B:09:96:87:DC:81:55:1C:45:E3:F8:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WgLKgbnwqXE7CZaH3IFVHEXj-Pw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/2eed24-0dff-4400-a57c-459ddc631bcc/1/WgLKgbnwqXE7CZaH3IFVHEXj-Pw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/2eed24-0dff-4400-a57c-459ddc631bcc/1/WgLKgbnwqXE7CZaH3IFVHEXj-Pw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:c7:c9:ad:c3:15:58:67:70:f1:c5:dd:a3:54:be:fb:05:a2:
e1:24:dc:fa:94:fc:eb:8c:5a:90:e0:c4:70:5e:9d:46:35:f1:
53:49:3c:85:19:e4:19:f7:e3:4c:3c:8b:3f:70:51:c3:81:14:
dd:8d:52:98:1d:1c:26:d2:cb:25:06:6b:b7:e5:44:bb:0d:45:
05:ea:c6:c5:db:2e:43:96:ef:ed:fd:2d:60:ec:a6:ee:1c:d6:
70:46:62:0a:bc:98:43:17:9b:cc:ec:9f:2d:57:0c:bb:05:f5:
8f:a8:52:ce:d3:d1:4e:08:f2:f3:ce:3c:f0:61:cd:37:0c:61:
ba:46:85:f0:fd:d6:13:c2:6b:88:78:3c:7c:46:be:ef:cf:e1:
37:90:2e:f9:59:69:49:43:ec:f3:74:5f:18:26:d5:37:ff:d7:
10:ae:d0:7f:10:aa:25:8c:2d:67:1a:6d:17:87:f2:12:c7:d6:
6a:67:e5:22:3e:ad:25:d3:eb:25:80:89:f8:51:1d:12:b1:60:
8a:1b:a7:c8:e5:1b:57:71:76:54:55:bd:9f:28:53:f8:8c:e0:
06:75:3b:09:8d:fb:96:06:94:9d:32:ee:b7:d4:4a:2d:98:77:
0f:26:b6:4c:3a:74:a6:12:a5:4f:c9:28:6a:88:9b:6b:89:3e:
82:10:09:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 06:25:03 2025 by rpki-client