Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1defca-e125-4b00-9252-9fe86dea862a/1/W0Vsn395uYcZbEaEAjlqGHwVbXw.mft
File: W0Vsn395uYcZbEaEAjlqGHwVbXw.mft (raw, json)
Hash identifier: bYb0cgM3Q2gNh8kYt6f6APJckMkkw1FjLVP+2TTIgHE=
Subject key identifier: 3E:F0:67:31:A2:CB:C6:E1:4E:08:BC:B0:CB:25:74:B7:77:10:DF:24
Authority key identifier: 5B:45:6C:9F:7F:79:B9:87:19:6C:46:84:02:39:6A:18:7C:15:6D:7C
Certificate issuer: /CN=5b456c9f7f79b987196c468402396a187c156d7c
Certificate serial: 0194BD17782C20860584FEB2F93B412CE46A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W0Vsn395uYcZbEaEAjlqGHwVbXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1defca-e125-4b00-9252-9fe86dea862a/1/W0Vsn395uYcZbEaEAjlqGHwVbXw.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 16:00:19 +0000
Manifest this update: Fri 31 Jan 2025 16:00:19 +0000
Manifest next update: Sat 01 Feb 2025 16:00:19 +0000
Files and hashes: 1: 1-FQBZTT5afKyG6FIAOC0DP_Gyes.roa (hash: QUXwHR9U/j2PM2tc+oqu+jlOONy/4+OVBz6LYmOZ3uc=)
2: W0Vsn395uYcZbEaEAjlqGHwVbXw.crl (hash: 18XZq9ZvQU8FNUzj8j5Z+ekx7kooF+JREAB06lPdwko=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:78:2c:20:86:05:84:fe:b2:f9:3b:41:2c:e4:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b456c9f7f79b987196c468402396a187c156d7c
Validity
Not Before: Jan 31 16:00:19 2025 GMT
Not After : Feb 1 16:00:19 2025 GMT
Subject: CN=3ef06731a2cbc6e14e08bcb0cb2574b77710df24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:41:af:6f:97:0f:a0:d7:de:0b:44:e8:51:c1:
fb:d7:27:fe:7e:90:77:fa:9f:02:42:4a:8e:6e:02:
53:4d:2a:09:33:a5:88:15:72:9e:1c:22:2e:1f:9b:
47:93:4c:d7:32:13:32:d8:b5:69:dd:9c:11:7c:cf:
32:3e:42:2b:b9:7b:7b:a8:b7:9a:c1:23:86:1b:41:
61:94:c2:5c:81:08:09:c9:37:28:38:2b:4f:51:56:
a2:a4:cd:9a:d4:97:05:58:f0:69:73:5f:c4:7a:67:
87:f3:3f:e3:ee:44:58:06:11:51:ae:f3:65:b0:1c:
19:b9:49:a9:7b:e5:7d:2b:70:be:d9:f8:cb:09:d2:
7d:b3:98:52:cf:ea:66:f8:f8:24:cd:da:f9:ed:8d:
05:20:35:ad:cd:d6:0e:04:01:81:90:76:95:0c:93:
9b:fe:bb:37:23:ac:22:32:0e:36:f1:cc:63:61:a1:
91:94:76:33:45:97:ee:3c:9e:6f:e3:6a:b8:32:1a:
e7:35:1e:d9:ac:90:67:55:2f:2b:8c:64:2a:26:5c:
8d:fa:87:82:c0:87:be:06:28:66:68:6d:77:7f:a5:
54:b4:20:e1:64:57:1d:7b:6b:ff:03:40:ef:20:0a:
8d:b7:0e:eb:16:47:7a:25:6b:e3:50:0a:d7:38:29:
6e:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:F0:67:31:A2:CB:C6:E1:4E:08:BC:B0:CB:25:74:B7:77:10:DF:24
X509v3 Authority Key Identifier:
keyid:5B:45:6C:9F:7F:79:B9:87:19:6C:46:84:02:39:6A:18:7C:15:6D:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W0Vsn395uYcZbEaEAjlqGHwVbXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1defca-e125-4b00-9252-9fe86dea862a/1/W0Vsn395uYcZbEaEAjlqGHwVbXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1defca-e125-4b00-9252-9fe86dea862a/1/W0Vsn395uYcZbEaEAjlqGHwVbXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:38:68:19:ab:87:ca:70:54:24:bf:d6:76:d5:61:c2:13:4d:
ff:a6:e7:fb:62:ff:5f:f2:58:19:ac:39:65:a3:d2:a6:db:d5:
79:fb:7f:44:4b:ba:09:34:e2:c1:b8:c9:ea:ca:32:3d:a2:fb:
bd:e8:5b:1a:8d:53:9c:f4:a7:2d:8c:c3:d2:d6:06:c9:71:aa:
08:12:2a:fc:87:09:a0:29:1e:00:14:d2:5d:05:99:24:a9:40:
81:91:18:d1:a5:30:81:b2:2c:1e:dc:cd:57:8b:b3:bb:a3:db:
3e:20:40:68:d1:69:c0:6c:bc:7a:8f:43:75:cb:ce:bc:39:4c:
d0:fb:72:f2:38:49:c8:5a:e0:b0:6a:22:2e:2d:ee:34:5d:f1:
89:0a:38:67:c1:c4:6a:8a:73:56:66:3a:ce:3a:46:f0:71:1a:
bd:d8:0d:09:7b:a0:c1:69:1e:7f:44:db:50:b8:d3:99:ca:6f:
41:a0:7e:7d:7d:bf:3b:a2:ae:bb:56:dc:54:81:91:0e:db:96:
48:08:ee:9e:7c:aa:4a:d6:0d:88:49:ae:c3:c0:cb:e8:bf:04:
c4:0d:82:1d:c9:93:ca:3e:e7:26:cc:5e:71:ed:18:f2:03:1f:
60:62:82:d9:ea:0b:82:12:33:d4:7f:a7:31:cc:eb:77:88:0d:
b3:3d:de:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:35 2025 by rpki-client