Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/1073e6-c487-478f-b9d9-3c1e0518f9e5/1/W8PKDWOo_M3A6SqIprrO_ydecEY.mft
File: W8PKDWOo_M3A6SqIprrO_ydecEY.mft (raw, json)
Hash identifier: lOxkURUT1Pdtp3TQdoI//8OcGm/U7h1wbWiiFg/07Mk=
Subject key identifier: 96:38:B2:24:4D:81:A7:B1:A6:E9:4D:44:A5:1D:CB:6F:F4:19:02:D6
Authority key identifier: 5B:C3:CA:0D:63:A8:FC:CD:C0:E9:2A:88:A6:BA:CE:FF:27:5E:70:46
Certificate issuer: /CN=5bc3ca0d63a8fccdc0e92a88a6baceff275e7046
Certificate serial: 0194BD17DAAF3014AA9F65CE5A81FDD1A177
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W8PKDWOo_M3A6SqIprrO_ydecEY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/1073e6-c487-478f-b9d9-3c1e0518f9e5/1/W8PKDWOo_M3A6SqIprrO_ydecEY.mft
Manifest number: 1426
Signing time: Fri 31 Jan 2025 16:00:44 +0000
Manifest this update: Fri 31 Jan 2025 16:00:44 +0000
Manifest next update: Sat 01 Feb 2025 16:00:44 +0000
Files and hashes: 1: W8PKDWOo_M3A6SqIprrO_ydecEY.crl (hash: GOHsz47Of9zc7i0iCcnG9U7P+gq/ST5yWsw4x8ruqu8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:da:af:30:14:aa:9f:65:ce:5a:81:fd:d1:a1:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5bc3ca0d63a8fccdc0e92a88a6baceff275e7046
Validity
Not Before: Jan 31 16:00:44 2025 GMT
Not After : Feb 1 16:00:44 2025 GMT
Subject: CN=9638b2244d81a7b1a6e94d44a51dcb6ff41902d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ea:39:ea:4c:71:78:28:f6:a3:6a:5c:c6:5c:
d8:4f:a8:cb:85:7d:ee:b3:f4:b8:b0:a6:cb:6d:73:
d8:70:5c:d8:e4:26:90:be:5c:1b:e9:bd:6c:d5:a2:
aa:20:d4:80:4e:79:f5:90:90:e8:c6:6c:2e:8c:1b:
9f:15:33:4e:e6:a4:e3:2f:98:d1:e5:c4:d6:9b:d1:
93:02:31:dc:0b:6d:d0:13:dc:34:73:ca:f7:41:3b:
95:98:0e:0f:24:cb:95:86:e3:f5:30:bc:0a:48:ba:
26:c6:43:69:bf:6b:da:b7:10:9f:c3:bb:73:78:a9:
7f:b9:58:17:76:aa:7d:ac:fb:40:d3:aa:82:8d:3e:
22:7f:1a:77:26:69:45:c1:e8:2a:5c:dc:e8:f6:11:
bc:54:74:2b:b0:05:97:8f:70:29:57:ef:3f:dc:dc:
7e:7f:44:3e:63:ab:5b:15:3b:cd:3e:a3:27:f9:cd:
47:e9:43:e4:7b:96:67:5f:b6:4e:e6:6b:66:81:7a:
34:20:b7:e8:27:c5:57:7f:5e:f6:54:ac:4f:89:fb:
3f:3e:bb:54:e8:7d:94:5e:6c:a6:82:19:79:9b:31:
99:91:b3:b7:36:0c:27:7c:33:61:3a:df:c3:55:47:
74:e6:ff:9f:cd:8b:5f:56:c8:53:a8:9b:39:93:bd:
b7:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:38:B2:24:4D:81:A7:B1:A6:E9:4D:44:A5:1D:CB:6F:F4:19:02:D6
X509v3 Authority Key Identifier:
keyid:5B:C3:CA:0D:63:A8:FC:CD:C0:E9:2A:88:A6:BA:CE:FF:27:5E:70:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W8PKDWOo_M3A6SqIprrO_ydecEY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/1073e6-c487-478f-b9d9-3c1e0518f9e5/1/W8PKDWOo_M3A6SqIprrO_ydecEY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/1073e6-c487-478f-b9d9-3c1e0518f9e5/1/W8PKDWOo_M3A6SqIprrO_ydecEY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:75:2b:c2:e7:d8:66:31:97:ee:6d:e8:e9:74:d3:a7:7d:d0:
fe:d8:e8:42:e6:cf:93:dd:d7:78:20:1f:2d:4d:87:37:af:c2:
65:7a:e6:93:37:6b:39:d2:7b:b7:cc:65:b9:f7:32:81:33:78:
82:21:c0:09:99:b1:2d:1b:a5:e3:fa:02:7b:69:c9:9f:c3:3d:
60:40:65:c5:de:e9:aa:46:43:47:e5:52:1c:9c:38:03:00:58:
02:52:9b:8b:be:1b:7f:67:e4:64:fa:8b:28:e0:04:e4:7f:9f:
6a:5a:62:8c:f7:88:2a:cd:db:3e:da:bc:6b:22:f7:39:9e:b8:
52:08:27:06:a1:4f:90:41:33:70:79:db:15:08:97:1c:36:df:
74:68:7f:7d:05:e6:77:30:44:e4:36:fd:d9:1c:0b:d6:47:e0:
13:8a:44:c7:ca:c0:ca:7c:9a:eb:a8:c7:9e:8c:2a:49:67:ef:
ea:31:af:9d:b1:f6:3c:5c:9e:6b:3a:2a:eb:e5:6e:a1:29:60:
91:52:46:0a:88:57:ae:80:65:0c:7a:52:96:a4:47:24:9d:69:
fe:61:8b:6a:00:fb:91:86:a7:6d:b7:ba:0e:f1:cc:45:7b:de:
e3:9a:a3:be:64:01:58:cd:d9:c8:d2:5f:73:d7:e7:16:89:0f:
b4:e5:5c:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:25:36 2025 by rpki-client