Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/7b369f-b06e-4af0-9acb-a4cccef8c4a8/1/WLKy9hE7pDD3LlVEW1x4Sdx8-u0.mft
File: WLKy9hE7pDD3LlVEW1x4Sdx8-u0.mft (raw, json)
Hash identifier: pMYcGELrmsf21OryubMfZt2cH2canCUgn9I43Q1PAlU=
Subject key identifier: A8:2A:A0:6D:76:12:53:47:A0:05:6A:D8:0E:0B:DE:CC:89:04:B5:36
Authority key identifier: 58:B2:B2:F6:11:3B:A4:30:F7:2E:55:44:5B:5C:78:49:DC:7C:FA:ED
Certificate issuer: /CN=58b2b2f6113ba430f72e55445b5c7849dc7cfaed
Certificate serial: 0194BD857764301FFCC850B3BB318FDA1FF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WLKy9hE7pDD3LlVEW1x4Sdx8-u0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/7b369f-b06e-4af0-9acb-a4cccef8c4a8/1/WLKy9hE7pDD3LlVEW1x4Sdx8-u0.mft
Manifest number: C4
Signing time: Fri 31 Jan 2025 18:00:28 +0000
Manifest this update: Fri 31 Jan 2025 18:00:28 +0000
Manifest next update: Sat 01 Feb 2025 18:00:28 +0000
Files and hashes: 1: CqZAFiIzp-k21bzGsuj1395ZHTc.roa (hash: gXssHvpvQonpjegaCBTMeVVsQnPbWqrgEQgoKWzts44=)
2: WLKy9hE7pDD3LlVEW1x4Sdx8-u0.crl (hash: B6le2pGBBrwC2VzzPg+GKY0SBRW11Wt0XPMJTLtCWHU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:77:64:30:1f:fc:c8:50:b3:bb:31:8f:da:1f:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58b2b2f6113ba430f72e55445b5c7849dc7cfaed
Validity
Not Before: Jan 31 18:00:28 2025 GMT
Not After : Feb 1 18:00:28 2025 GMT
Subject: CN=a82aa06d76125347a0056ad80e0bdecc8904b536
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:2c:2a:d6:5f:a3:3a:6a:ca:e3:72:6c:d1:ae:
92:8a:02:c9:40:7c:77:9f:49:d9:2a:0e:b9:7d:10:
02:98:23:6d:df:35:ff:db:ac:bd:af:9c:95:1d:14:
d6:74:ca:02:29:42:f7:f1:16:f2:76:0b:ba:7a:bd:
33:0c:7e:a7:e9:40:19:ff:10:dd:20:4b:0a:cc:46:
fb:34:b1:65:ad:5b:08:00:b5:57:e3:98:ef:e4:b5:
11:2e:ae:78:da:4e:54:51:03:cd:87:47:2c:fe:20:
5c:ce:d4:5e:6e:05:89:a5:b1:1b:c3:bc:7b:fa:eb:
c2:cf:f2:c4:d4:63:c7:f3:06:53:46:02:f7:18:a5:
90:ce:5a:06:58:37:dd:9b:2c:a9:cc:1d:87:e2:b0:
58:00:b8:52:14:40:ff:ac:0a:40:f4:90:6d:2c:b1:
ee:41:a6:eb:23:1d:ab:82:bc:9c:d3:d8:e7:28:9e:
11:5b:85:51:d8:6c:cd:19:4b:31:5f:e4:65:99:1c:
28:56:a5:15:e5:5d:62:ec:87:1b:2b:50:cb:91:29:
47:94:4f:85:1f:7b:81:3e:6c:b7:83:cd:e2:e8:02:
76:50:20:f7:12:78:04:1e:11:03:34:c8:12:1d:4f:
d7:05:52:b3:9e:4a:bd:e8:b9:5f:22:c9:f6:65:2a:
5c:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:2A:A0:6D:76:12:53:47:A0:05:6A:D8:0E:0B:DE:CC:89:04:B5:36
X509v3 Authority Key Identifier:
keyid:58:B2:B2:F6:11:3B:A4:30:F7:2E:55:44:5B:5C:78:49:DC:7C:FA:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WLKy9hE7pDD3LlVEW1x4Sdx8-u0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/7b369f-b06e-4af0-9acb-a4cccef8c4a8/1/WLKy9hE7pDD3LlVEW1x4Sdx8-u0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/7b369f-b06e-4af0-9acb-a4cccef8c4a8/1/WLKy9hE7pDD3LlVEW1x4Sdx8-u0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:c0:e3:e0:ef:69:0b:b9:c0:a9:c1:2c:65:c6:c4:7a:10:06:
00:e2:e7:ad:a7:a8:4a:a0:31:a4:12:78:b1:3b:7a:bb:b8:05:
31:bd:bb:50:91:7d:8c:88:10:d8:d0:27:2a:be:30:7a:9a:76:
10:b5:7a:91:af:cd:25:25:bf:7a:b6:04:aa:3d:58:bd:f7:ee:
49:f3:99:c5:cf:e1:c2:f0:d4:a0:a2:ee:99:21:ec:9d:bb:39:
9b:37:14:23:c9:9d:1c:b2:b3:47:9a:a7:9d:66:a2:bc:b5:17:
39:45:92:23:0f:fe:f5:54:bb:05:cb:d2:a6:ea:7d:ca:b5:cb:
7c:f0:19:71:fc:ab:67:21:3d:2a:4a:bd:c2:3e:41:a7:96:b9:
3f:cc:21:89:54:72:b2:72:00:a8:ac:de:ea:22:2b:dd:ab:a4:
ef:c0:0c:d2:ae:34:ef:4f:bd:44:58:65:86:2e:1e:9f:15:2b:
d8:e7:82:5d:d4:47:6d:9b:04:0b:c5:d4:61:29:42:48:78:bf:
90:65:2c:b3:40:19:59:11:a3:9c:67:d5:5b:f3:24:ef:ee:76:
a0:b7:bc:fe:b8:00:56:d4:89:96:42:c9:c7:98:ba:72:aa:67:
1b:22:a1:6c:f2:7f:58:29:6b:c7:31:45:82:2a:f7:25:b4:f4:
35:ac:fa:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:17:16 2025 by rpki-client