Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/e2fbfd-05f9-48ec-835b-70c770b1087b/1/WM7bpnpFtzfYrQ96eEw1DYbWcRg.mft
File: WM7bpnpFtzfYrQ96eEw1DYbWcRg.mft (raw, json)
Hash identifier: wrfdjSc+FdFUU7DhWhjFlj3CyaHFZhZXmUQpGjsJvd4=
Subject key identifier: F5:0D:5D:A8:F1:E8:A6:39:79:73:8C:81:6E:77:CA:F1:8B:30:44:7E
Authority key identifier: 58:CE:DB:A6:7A:45:B7:37:D8:AD:0F:7A:78:4C:35:0D:86:D6:71:18
Certificate issuer: /CN=58cedba67a45b737d8ad0f7a784c350d86d67118
Certificate serial: 0194BD177AF12EEDBF7245F92C16B7290E82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WM7bpnpFtzfYrQ96eEw1DYbWcRg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/e2fbfd-05f9-48ec-835b-70c770b1087b/1/WM7bpnpFtzfYrQ96eEw1DYbWcRg.mft
Manifest number: 2D
Signing time: Fri 31 Jan 2025 16:00:20 +0000
Manifest this update: Fri 31 Jan 2025 16:00:20 +0000
Manifest next update: Sat 01 Feb 2025 16:00:20 +0000
Files and hashes: 1: MzdQsDB1AACOG2EyiBlrqIPuVdY.roa (hash: nb+ptkiMxODpHnRgVbj2TaDnZ7JIdyQXT5CZFak+Qnc=)
2: WM7bpnpFtzfYrQ96eEw1DYbWcRg.crl (hash: 8uCWfIV+g5DSKSxrIjeYnwP9NWx5YIZ3GQWUAeOA2Es=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:7a:f1:2e:ed:bf:72:45:f9:2c:16:b7:29:0e:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58cedba67a45b737d8ad0f7a784c350d86d67118
Validity
Not Before: Jan 31 16:00:20 2025 GMT
Not After : Feb 1 16:00:20 2025 GMT
Subject: CN=f50d5da8f1e8a63979738c816e77caf18b30447e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:4c:58:b2:0d:42:09:57:ed:32:c9:22:e2:62:
4b:61:34:4c:ce:1c:06:52:ac:6e:7a:a6:f2:ff:ee:
3b:48:80:54:73:f4:43:d0:ed:4f:5d:96:25:09:7a:
a3:cf:3e:15:51:3a:71:c4:9f:b7:f6:ef:1e:ee:44:
99:bf:0e:c4:42:6f:70:9f:cc:82:64:aa:9a:14:1c:
40:59:bf:9b:91:0f:90:98:2a:0d:9b:d8:79:83:b4:
ab:f5:4d:2e:d8:6b:f3:96:86:65:e1:89:ad:a9:b3:
bd:18:9a:5f:e3:be:6e:1c:0b:d3:1f:a7:3f:b0:40:
da:85:0d:0b:e1:f6:f0:a5:c6:05:b6:d6:f8:87:3c:
c7:b6:39:5e:43:6d:3b:79:49:c3:79:88:8e:58:a6:
c8:9d:65:d4:15:5b:5c:c5:5c:fc:b7:86:6d:f6:33:
39:ab:3c:da:2c:b6:bc:01:99:e8:34:fb:6c:e7:58:
e0:60:6d:6d:5b:d7:58:85:ec:f7:b7:2e:bc:bb:b7:
d2:31:fd:21:7d:f8:2d:c5:d6:4d:d2:b1:aa:ab:bf:
1c:6b:61:08:1e:8c:b8:8f:06:e1:01:3e:5d:1c:e1:
ac:37:58:f5:3b:10:42:72:f8:b6:37:e9:7d:03:66:
01:f6:6f:96:13:eb:00:7e:2c:7b:59:45:0b:0e:db:
40:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:0D:5D:A8:F1:E8:A6:39:79:73:8C:81:6E:77:CA:F1:8B:30:44:7E
X509v3 Authority Key Identifier:
keyid:58:CE:DB:A6:7A:45:B7:37:D8:AD:0F:7A:78:4C:35:0D:86:D6:71:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WM7bpnpFtzfYrQ96eEw1DYbWcRg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/e2fbfd-05f9-48ec-835b-70c770b1087b/1/WM7bpnpFtzfYrQ96eEw1DYbWcRg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/e2fbfd-05f9-48ec-835b-70c770b1087b/1/WM7bpnpFtzfYrQ96eEw1DYbWcRg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:ec:5d:75:d8:f8:ad:16:b8:e0:eb:ce:2d:dc:02:c3:5e:5a:
ab:0d:93:03:07:a8:c9:d3:e6:e9:fe:81:aa:a3:3c:0d:a7:ac:
c5:0c:97:68:c4:41:11:7e:52:a9:a6:e7:c0:17:da:34:83:40:
00:cf:15:4b:3e:15:d7:74:64:a9:00:f1:15:1a:5d:85:d0:b5:
9d:73:a0:cf:52:3a:a4:62:5f:7b:3f:05:4f:b3:b0:fa:40:59:
d1:7f:b4:21:5d:ae:a5:92:6b:2b:ce:cc:1b:fe:50:b1:37:49:
fa:f4:c6:3f:66:1d:c9:66:07:e9:a7:d6:a1:88:19:aa:cc:23:
b3:07:e2:cb:3a:48:c6:e6:00:b6:e4:6c:39:73:cd:6f:3a:f1:
62:77:e2:f6:e4:b3:61:13:4f:8d:8a:5d:b2:89:9e:ab:2e:e6:
e9:d0:1f:e9:57:60:a1:e8:78:54:fb:51:ff:10:49:2b:95:04:
28:90:8a:1e:7d:3f:ba:63:e7:f0:da:71:1f:bd:dd:37:9c:7e:
ef:cb:89:26:c7:5e:d5:90:ea:47:e2:6b:00:2e:72:b5:10:18:
f0:1a:55:a3:1d:71:73:8d:48:7e:b8:05:ae:37:c2:0f:af:36:
ac:63:82:db:50:d8:d0:6f:71:6c:97:95:09:01:dc:83:1b:bf:
c1:73:af:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:40:20 2025 by rpki-client