Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/ea27f3-db74-4963-a18c-035281289bb0/1/WXSHRy03y9cmGB-fOiA4bwObO6g.mft
File: WXSHRy03y9cmGB-fOiA4bwObO6g.mft (raw, json)
Hash identifier: Z2BKPKEE06XS+Je4GcVbh6KRJGSqc8+5Zb3Dy3Yw4zM=
Subject key identifier: 52:1B:D8:9D:21:B2:B6:52:98:3B:CC:04:35:81:21:DE:D4:C3:19:ED
Authority key identifier: 59:74:87:47:2D:37:CB:D7:26:18:1F:9F:3A:20:38:6F:03:9B:3B:A8
Certificate issuer: /CN=597487472d37cbd726181f9f3a20386f039b3ba8
Certificate serial: 0194BC72FA430F97C791FBFD0E5B1D7582D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WXSHRy03y9cmGB-fOiA4bwObO6g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/ea27f3-db74-4963-a18c-035281289bb0/1/WXSHRy03y9cmGB-fOiA4bwObO6g.mft
Manifest number: 11FB
Signing time: Fri 31 Jan 2025 13:00:39 +0000
Manifest this update: Fri 31 Jan 2025 13:00:39 +0000
Manifest next update: Sat 01 Feb 2025 13:00:39 +0000
Files and hashes: 1: 36vP2RZocex6kBCMTbzrkEU173I.roa (hash: aEiOZj8YmAwZwpDXXxUuOkmJFeM2AJc91e5CxmnRxTk=)
2: Orz1byvi4W2gEs0XQxLqSRV1Cd0.roa (hash: uqVz+HdI8skKqSoIO5b4CKUGzxdeiewseboy6iVD14g=)
3: WXSHRy03y9cmGB-fOiA4bwObO6g.crl (hash: CmkqXOw6sn6geLKXeN3q6YkCzV+gbW8hzVVVTV0ak1U=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:fa:43:0f:97:c7:91:fb:fd:0e:5b:1d:75:82:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=597487472d37cbd726181f9f3a20386f039b3ba8
Validity
Not Before: Jan 31 13:00:39 2025 GMT
Not After : Feb 1 13:00:39 2025 GMT
Subject: CN=521bd89d21b2b652983bcc04358121ded4c319ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:44:77:b6:03:6a:f8:3a:87:13:00:da:53:61:
66:4d:76:f3:0a:ee:8c:36:ef:aa:a6:42:d8:f5:dd:
db:b9:28:c3:10:f6:b4:7d:b7:40:f9:9f:91:89:32:
23:79:32:92:dd:de:88:6e:ce:75:a8:bb:69:d3:4d:
36:96:f4:45:92:c5:83:a1:f7:0f:af:8a:2e:e8:1d:
41:67:56:d5:f6:e0:0e:cd:f5:e3:04:bf:4d:56:81:
bb:b4:51:c7:04:1f:89:dc:6d:72:34:e5:9b:06:80:
a6:f6:ef:01:bd:5a:38:cc:a2:3d:4a:fd:1d:1b:e4:
2c:c0:62:bd:07:e4:7b:ea:df:c5:50:fb:43:55:f6:
e3:a8:01:1c:ae:c1:fe:6f:49:02:35:c4:5d:14:5d:
6c:e9:d4:74:33:b3:6b:2e:f9:0b:bf:b9:90:a8:98:
15:aa:0d:b1:f2:5c:c2:2e:be:f5:f8:e6:23:bf:52:
2f:da:e4:7d:67:88:50:f1:8b:5a:03:4f:8a:9d:6c:
97:5a:22:95:15:3d:c7:99:e4:5a:6d:0f:88:04:76:
e6:6e:0c:10:59:f8:01:da:de:b4:7b:dc:bd:12:9d:
69:34:39:f2:dd:fb:93:4f:bc:7b:31:48:35:94:ab:
9a:c5:2f:9d:97:d5:16:ee:26:2e:bd:00:c9:31:43:
11:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:1B:D8:9D:21:B2:B6:52:98:3B:CC:04:35:81:21:DE:D4:C3:19:ED
X509v3 Authority Key Identifier:
keyid:59:74:87:47:2D:37:CB:D7:26:18:1F:9F:3A:20:38:6F:03:9B:3B:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WXSHRy03y9cmGB-fOiA4bwObO6g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/ea27f3-db74-4963-a18c-035281289bb0/1/WXSHRy03y9cmGB-fOiA4bwObO6g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/ea27f3-db74-4963-a18c-035281289bb0/1/WXSHRy03y9cmGB-fOiA4bwObO6g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:b0:45:38:74:18:0d:21:1b:79:99:fd:46:f2:2e:e1:e6:79:
e7:2e:46:c7:c6:68:84:4a:6d:35:2e:12:5b:71:ae:1c:50:6e:
69:87:91:b8:7a:da:4c:8e:00:aa:5c:13:c9:79:b5:f9:7f:57:
ae:2b:40:c3:ad:dd:69:1d:ec:b7:27:a1:44:fc:39:ab:74:a1:
b9:4f:b5:bf:ae:33:e2:c4:e4:98:4a:ab:22:01:04:34:79:c0:
a5:81:b5:f5:26:d1:d8:86:c9:79:62:49:8b:c5:04:95:1a:0d:
ea:80:ea:94:d1:d4:7a:c9:6a:8a:6a:04:f1:38:af:63:6e:b9:
76:ce:82:78:0e:14:70:6d:60:08:e8:e9:c9:d3:58:17:19:02:
26:7e:51:b6:ee:7b:00:01:bd:7c:cf:01:db:74:2e:10:5d:da:
5c:d7:d8:14:e7:52:64:3d:01:b9:f1:27:e5:a3:11:43:7a:25:
93:85:78:a7:96:81:8e:59:90:6b:68:9d:f9:cf:77:1c:9f:00:
5b:4d:18:52:5e:81:38:c2:1c:73:0b:a0:f7:14:68:55:3b:07:
c8:71:b7:1c:7a:10:0a:0c:11:b8:e0:ed:4f:dc:36:b3:43:8f:
dd:92:cc:43:29:2a:31:08:3e:9e:3a:56:d4:8f:17:0c:df:d8:
8a:fa:cc:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:21:32 2025 by rpki-client