Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/606dde-fc51-456e-b5f1-dcaf7ef7ae3a/1/WN0QF8U0V6ipIUGWh73oqLjrVhE.mft
File: WN0QF8U0V6ipIUGWh73oqLjrVhE.mft (raw, json)
Hash identifier: mIKY6mXYaj+J0leQB0s0GYjaI9UDTDc+9HV7KztsVtA=
Subject key identifier: BC:FF:71:7C:45:94:CB:E4:57:92:E2:10:76:97:83:17:60:72:B6:29
Authority key identifier: 58:DD:10:17:C5:34:57:A8:A9:21:41:96:87:BD:E8:A8:B8:EB:56:11
Certificate issuer: /CN=58dd1017c53457a8a921419687bde8a8b8eb5611
Certificate serial: 0194BC04C412D967233BC8916F73094C83B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WN0QF8U0V6ipIUGWh73oqLjrVhE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/606dde-fc51-456e-b5f1-dcaf7ef7ae3a/1/WN0QF8U0V6ipIUGWh73oqLjrVhE.mft
Manifest number: 0ACD
Signing time: Fri 31 Jan 2025 11:00:16 +0000
Manifest this update: Fri 31 Jan 2025 11:00:16 +0000
Manifest next update: Sat 01 Feb 2025 11:00:16 +0000
Files and hashes: 1: WN0QF8U0V6ipIUGWh73oqLjrVhE.crl (hash: TdeO3vSdJXibCIiX52NV5PPvrk92r29SPfDXJSkD7L8=)
2: jywZ9UYkMiz97kwCY4FM3q95-aY.roa (hash: u66se+BAVSb1YHlBvMoU6Y/uC6cRzOafh9TsvAog2jw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:c4:12:d9:67:23:3b:c8:91:6f:73:09:4c:83:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58dd1017c53457a8a921419687bde8a8b8eb5611
Validity
Not Before: Jan 31 11:00:16 2025 GMT
Not After : Feb 1 11:00:16 2025 GMT
Subject: CN=bcff717c4594cbe45792e210769783176072b629
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:73:d7:dc:80:32:31:31:b3:ee:9f:93:f5:c4:
64:2c:da:59:52:67:30:8e:3f:66:07:70:cd:a2:eb:
18:70:79:04:5b:af:4f:01:f9:c7:89:6a:c1:20:8b:
c2:7f:c8:c4:0f:09:e4:2d:cc:9f:20:63:b2:49:a0:
1d:03:72:6d:c7:a4:31:c0:ba:42:4a:78:08:d5:a5:
f7:dc:36:5e:b6:b9:17:ce:99:8a:aa:0e:8e:1c:de:
e8:36:21:56:69:78:ca:9c:63:e2:b5:e3:43:11:82:
84:57:c4:77:18:23:8c:af:ae:75:46:a2:6b:58:f7:
05:71:5b:eb:f0:92:ea:4e:1e:c4:d9:f2:96:1f:05:
50:9d:bb:ef:33:6e:6c:84:5b:ba:20:27:34:f8:b6:
69:b9:29:1c:fe:d8:df:26:94:1a:9d:24:a6:5f:82:
27:97:5d:06:f2:01:29:03:c1:c1:a3:5e:03:c7:fa:
41:7e:ae:1b:7e:e4:63:24:62:b2:d4:82:41:07:fa:
7a:da:4d:5c:12:e6:24:d5:e0:bd:d2:cc:12:df:c4:
66:09:0b:24:f0:00:5a:57:2d:7c:c3:08:6b:98:71:
4e:fc:7b:1a:41:b8:97:7f:05:21:47:c1:68:a7:27:
32:76:56:14:5d:b8:25:91:d0:7a:d4:88:98:4a:50:
17:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:FF:71:7C:45:94:CB:E4:57:92:E2:10:76:97:83:17:60:72:B6:29
X509v3 Authority Key Identifier:
keyid:58:DD:10:17:C5:34:57:A8:A9:21:41:96:87:BD:E8:A8:B8:EB:56:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WN0QF8U0V6ipIUGWh73oqLjrVhE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/606dde-fc51-456e-b5f1-dcaf7ef7ae3a/1/WN0QF8U0V6ipIUGWh73oqLjrVhE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/606dde-fc51-456e-b5f1-dcaf7ef7ae3a/1/WN0QF8U0V6ipIUGWh73oqLjrVhE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:d4:5e:42:19:bc:8e:0b:b0:70:44:b3:d4:18:74:80:0c:49:
f2:2b:d7:05:b5:49:79:b0:c9:d0:66:a3:96:4c:cb:26:2e:f8:
8d:a4:d3:fd:76:5d:2d:25:02:ce:41:fc:13:ec:de:b9:75:5c:
b9:33:d8:70:10:3a:73:59:fc:af:d5:38:23:a5:fa:2b:b2:ad:
da:33:60:7d:4d:1b:e1:33:74:25:4e:1b:cc:3c:79:61:b2:d8:
80:16:45:64:64:64:78:7f:eb:46:f0:4c:53:8a:c0:cb:93:48:
dd:0e:93:31:89:8d:a1:3f:6f:07:c9:7f:0b:a2:1e:f9:ba:55:
fe:69:55:55:72:cb:9f:5a:4a:92:d5:83:3f:3d:f4:63:c3:b2:
d8:1a:f3:0e:ee:f9:92:de:e6:60:ed:d0:1f:56:28:4e:44:42:
d4:1d:0f:39:54:6b:91:90:40:17:bb:11:f5:ff:cb:42:3f:c6:
b0:fe:b8:4c:33:e5:53:d2:c7:f7:cb:6a:19:00:1e:c5:a1:2a:
fe:f3:51:4a:6f:ee:43:23:7a:d9:65:3f:47:93:b0:af:e0:39:
90:0c:6f:98:c8:57:92:e6:19:bf:d3:c7:36:ca:cf:0e:25:39:
42:f6:36:86:32:5e:41:ae:db:2f:cf:d0:52:c6:44:5b:10:30:
30:4e:cb:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:17:31 2025 by rpki-client