Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/30a309-b18e-4f27-8e7e-e7b372e4c7c5/1/W8FQNhC_gthoe3rvuHmmV4cE8yo.mft
File: W8FQNhC_gthoe3rvuHmmV4cE8yo.mft (raw, json)
Hash identifier: egmGr2felgrkYXVISWljwg/AHI6l8ry+FE+thTEev2w=
Subject key identifier: 47:71:F9:58:F9:52:EF:FA:EF:94:F2:3C:BF:59:51:DD:98:81:CA:67
Authority key identifier: 5B:C1:50:36:10:BF:82:D8:68:7B:7A:EF:B8:79:A6:57:87:04:F3:2A
Certificate issuer: /CN=5bc1503610bf82d8687b7aefb879a6578704f32a
Certificate serial: 0194BD178D1DC72107C920A1F44B05B9E111
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W8FQNhC_gthoe3rvuHmmV4cE8yo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/30a309-b18e-4f27-8e7e-e7b372e4c7c5/1/W8FQNhC_gthoe3rvuHmmV4cE8yo.mft
Manifest number: 0ACE
Signing time: Fri 31 Jan 2025 16:00:24 +0000
Manifest this update: Fri 31 Jan 2025 16:00:24 +0000
Manifest next update: Sat 01 Feb 2025 16:00:24 +0000
Files and hashes: 1: W8FQNhC_gthoe3rvuHmmV4cE8yo.crl (hash: Hf0OAEVAJbLoAoC4QM7WFT5/4zoTWQqK9YWdX4baD8E=)
2: rzLK9K7U47FPPeK7ERJASBVVtlU.roa (hash: X91g9n8reIlS29Iuv4BYArQQP2cYDZgj7Nwx0mw9YJw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:8d:1d:c7:21:07:c9:20:a1:f4:4b:05:b9:e1:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5bc1503610bf82d8687b7aefb879a6578704f32a
Validity
Not Before: Jan 31 16:00:24 2025 GMT
Not After : Feb 1 16:00:24 2025 GMT
Subject: CN=4771f958f952effaef94f23cbf5951dd9881ca67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:47:d2:c8:22:39:4e:94:14:93:45:5b:8f:04:
ea:77:db:71:0a:68:e1:9e:70:8e:29:00:bc:3d:03:
b7:87:25:5e:83:ea:76:d7:4c:cf:80:2f:c5:7a:bf:
5c:56:e0:6c:33:28:07:4c:21:6a:24:bf:0a:96:34:
db:2f:18:a6:52:26:28:53:b6:0c:85:49:24:be:44:
94:1e:9b:e9:aa:66:93:7e:fa:40:53:9c:a3:b7:74:
ff:ce:4c:e0:ef:ff:72:22:03:3f:ee:a1:f5:95:bf:
46:78:b7:bd:26:01:40:c0:52:90:93:a6:7f:cb:21:
2e:00:5b:16:36:e1:da:91:81:76:4c:54:74:97:9e:
59:12:f2:04:a7:cf:71:c9:7e:dc:8d:20:81:0e:fe:
f7:1e:ac:74:76:60:7d:aa:0d:cc:f2:33:bf:9f:b8:
6f:35:53:94:91:2a:8b:32:37:7c:39:6b:97:cf:bf:
bb:8e:2d:9a:f0:0b:49:91:70:42:33:ba:48:5f:81:
e3:7b:44:3d:d4:82:90:20:67:21:b0:3c:5d:fa:4b:
9b:07:05:18:95:30:d4:60:81:6b:83:42:68:df:46:
d7:f4:bd:2f:a4:b2:aa:53:55:74:a6:37:73:1f:e6:
f2:94:f4:c3:88:4d:4d:32:9d:d2:07:fe:db:30:2d:
58:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:71:F9:58:F9:52:EF:FA:EF:94:F2:3C:BF:59:51:DD:98:81:CA:67
X509v3 Authority Key Identifier:
keyid:5B:C1:50:36:10:BF:82:D8:68:7B:7A:EF:B8:79:A6:57:87:04:F3:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W8FQNhC_gthoe3rvuHmmV4cE8yo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/30a309-b18e-4f27-8e7e-e7b372e4c7c5/1/W8FQNhC_gthoe3rvuHmmV4cE8yo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/30a309-b18e-4f27-8e7e-e7b372e4c7c5/1/W8FQNhC_gthoe3rvuHmmV4cE8yo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:4c:a8:74:d8:9e:fd:d5:30:83:f0:3e:03:47:fa:d2:d9:2f:
50:6b:4c:42:cf:bf:7f:93:0e:c6:2a:08:f0:c7:1e:cd:2c:70:
9d:7e:ff:35:1d:08:3b:d7:28:97:a8:26:c8:13:d5:f2:f7:e2:
b3:c3:02:a5:b2:af:a4:4e:94:ee:4e:a5:b6:e3:48:43:8f:3e:
bd:0c:db:31:30:23:78:cf:fb:fe:0d:20:3c:b9:4d:2d:46:f2:
a0:d7:59:a8:8d:69:82:20:77:07:c3:fc:55:de:66:9d:38:d4:
e3:61:2b:84:d8:1e:d2:58:38:bd:e1:fe:8f:be:ea:4e:f4:67:
4e:b4:5a:24:e3:89:7c:3d:06:84:a0:a1:81:0a:c2:f8:0d:97:
c9:b3:6a:d4:e2:d2:95:ab:d9:1a:24:1d:07:3b:73:8d:bb:7d:
6f:d5:d5:bd:25:3d:ea:e5:90:a5:9b:a7:23:1c:ce:92:18:43:
4b:0f:a0:b3:18:98:33:92:c4:fc:d0:05:4f:6c:88:24:43:1c:
6b:0a:88:c0:12:a5:38:b3:a8:25:c5:08:67:dd:26:20:75:47:
7f:0d:4b:1d:71:df:fe:d5:8a:03:8f:18:11:96:2c:cc:9d:19:
d3:79:64:62:29:58:4b:0d:40:04:76:f9:fd:09:4f:5a:47:a2:
58:92:4c:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:27:08 2025 by rpki-client