Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/4c66cc-fa9a-4f58-ad21-7da183eff115/1/WGk2Jm6YDdIDssvrHJxFcGBLkRs.mft
File: WGk2Jm6YDdIDssvrHJxFcGBLkRs.mft (raw, json)
Hash identifier: GxVxup/JwTWmRkslZbXUW+tXk9c5CVP/7ym3cvngFTY=
Subject key identifier: 16:E8:1F:66:89:6B:2B:6D:7A:C6:3B:65:68:4D:C3:5A:3D:7A:55:0E
Authority key identifier: 58:69:36:26:6E:98:0D:D2:03:B2:CB:EB:1C:9C:45:70:60:4B:91:1B
Certificate issuer: /CN=586936266e980dd203b2cbeb1c9c4570604b911b
Certificate serial: 0194BD85366281F56DA654907B5E275D1C71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WGk2Jm6YDdIDssvrHJxFcGBLkRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/4c66cc-fa9a-4f58-ad21-7da183eff115/1/WGk2Jm6YDdIDssvrHJxFcGBLkRs.mft
Manifest number: 1227
Signing time: Fri 31 Jan 2025 18:00:11 +0000
Manifest this update: Fri 31 Jan 2025 18:00:11 +0000
Manifest next update: Sat 01 Feb 2025 18:00:11 +0000
Files and hashes: 1: 1-NHXjtqrvVrRCtlhC4QnYQDdZPQ.roa (hash: 5tQ4LpDD9EcQQczJTsl4dpwzoP4ak/HQs6biLiGOV3E=)
2: 2UCbDoS3ycyYJJre1asZT-TvgMA.roa (hash: DT/mBjBdX0oTgiUzQgQuXZrljdo+CoIj0mpOVzjBOfI=)
3: WGk2Jm6YDdIDssvrHJxFcGBLkRs.crl (hash: h7OpNfXavBKRSHVtAJP5k97uMCJqjqXnx0a5pfPVesQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:36:62:81:f5:6d:a6:54:90:7b:5e:27:5d:1c:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=586936266e980dd203b2cbeb1c9c4570604b911b
Validity
Not Before: Jan 31 18:00:11 2025 GMT
Not After : Feb 1 18:00:11 2025 GMT
Subject: CN=16e81f66896b2b6d7ac63b65684dc35a3d7a550e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:2a:8a:c5:6a:9c:37:6b:f9:9a:f0:be:ac:2b:
d3:1a:25:ac:c1:53:69:17:20:8c:dc:57:cf:b6:d0:
d0:30:0a:79:ad:2b:24:6c:52:ae:cc:52:28:51:4f:
5f:ac:da:5f:eb:b8:98:16:e3:94:c6:f0:07:70:98:
bd:b9:09:94:4c:3c:5d:19:49:61:a4:03:1c:f8:f1:
01:66:7b:71:92:09:08:b5:0e:44:b1:62:4a:9e:30:
5d:95:0c:c0:eb:ab:bc:5a:c5:ba:86:50:3b:e1:03:
fd:5c:04:60:7f:57:1d:ac:b9:af:80:12:c0:85:87:
57:a1:b0:1d:bc:ab:8f:2e:93:3f:db:2a:88:6f:51:
7f:da:33:2d:ab:29:a5:27:0d:c4:91:60:7f:10:3b:
19:01:f3:59:53:02:ad:af:3a:e3:87:7f:5b:c9:32:
16:6e:58:1a:e8:4f:6a:ab:81:78:c4:c8:24:4b:df:
13:28:f0:3c:74:77:46:29:91:2a:5b:57:52:58:77:
b3:74:7e:6e:94:66:85:05:e9:c3:aa:3e:78:96:6d:
33:b0:b7:7c:9b:c8:21:46:a4:c4:ec:8d:0d:ec:39:
32:d0:e9:79:71:12:7d:eb:ff:8c:43:c5:9e:45:db:
09:72:b6:43:65:02:bd:db:cb:71:1c:0f:67:05:d2:
f4:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:E8:1F:66:89:6B:2B:6D:7A:C6:3B:65:68:4D:C3:5A:3D:7A:55:0E
X509v3 Authority Key Identifier:
keyid:58:69:36:26:6E:98:0D:D2:03:B2:CB:EB:1C:9C:45:70:60:4B:91:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WGk2Jm6YDdIDssvrHJxFcGBLkRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/4c66cc-fa9a-4f58-ad21-7da183eff115/1/WGk2Jm6YDdIDssvrHJxFcGBLkRs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/4c66cc-fa9a-4f58-ad21-7da183eff115/1/WGk2Jm6YDdIDssvrHJxFcGBLkRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:d0:4e:0c:55:90:f9:09:66:04:31:6f:f5:a6:61:03:18:fe:
d0:60:69:e9:d0:89:da:a3:3c:80:4c:e0:a1:ac:91:9b:d0:c8:
1d:39:04:fd:81:0d:90:33:07:4a:99:2c:4f:3e:31:a6:1e:78:
5e:75:7c:17:2d:79:94:b8:52:d9:55:07:c5:ce:8a:f1:b9:03:
81:4f:d5:d3:7e:29:44:6f:e8:38:d9:82:d0:d2:53:c4:1a:ac:
9d:83:0d:69:52:e3:76:46:54:16:c3:82:fc:70:06:b1:fc:cc:
bf:5c:2c:e9:2f:07:7d:5d:ea:e0:6e:c9:80:aa:53:fc:bc:a9:
71:7e:db:4d:80:dd:30:16:4d:b2:ab:30:80:a9:f9:b1:7d:be:
e1:75:11:dc:52:54:89:64:a2:f5:63:6c:e1:be:57:68:3c:3c:
67:e5:fd:e1:da:0f:1c:ff:b7:c2:f2:ec:3d:9d:b1:25:b0:e3:
d9:91:7f:55:46:8e:cc:e7:2d:3d:ee:30:d4:9e:5f:ea:0a:78:
82:60:73:b0:e7:6f:f4:1b:a1:fc:dc:6a:e1:1b:3f:2e:d8:d7:
88:0b:3a:7e:98:c0:2e:f2:57:50:9c:3b:60:30:08:73:06:77:
12:9a:ab:77:59:a1:e9:0a:6f:c4:02:f7:ff:2d:aa:16:8d:9c:
b1:78:7e:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:45:05 2025 by rpki-client