Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/094c50-2c86-4a55-8eb0-1cf722517baf/1/W_fQ5HEirv77Ys6iFnSoECVVmxo.mft
File: W_fQ5HEirv77Ys6iFnSoECVVmxo.mft (raw, json)
Hash identifier: QyTZ8JzmJBiEwqCZwrAjtztScE4qkCY7mta4hr2pHdQ=
Subject key identifier: 34:84:26:7A:F1:EC:BF:9A:53:34:9D:6D:F2:A6:BC:26:2F:4F:1A:3D
Authority key identifier: 5B:F7:D0:E4:71:22:AE:FE:FB:62:CE:A2:16:74:A8:10:25:55:9B:1A
Certificate issuer: /CN=5bf7d0e47122aefefb62cea21674a81025559b1a
Certificate serial: 0194BCA9C79BAC750E0AF25729BC5249CE0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W_fQ5HEirv77Ys6iFnSoECVVmxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/094c50-2c86-4a55-8eb0-1cf722517baf/1/W_fQ5HEirv77Ys6iFnSoECVVmxo.mft
Manifest number: 03E6
Signing time: Fri 31 Jan 2025 14:00:30 +0000
Manifest this update: Fri 31 Jan 2025 14:00:30 +0000
Manifest next update: Sat 01 Feb 2025 14:00:30 +0000
Files and hashes: 1: W_fQ5HEirv77Ys6iFnSoECVVmxo.crl (hash: E4Kt80DfQXpStaScMwX1N1/+JyiQqDIzGLHgY+m3alM=)
2: asNSq8lkmS1XdMPBwyGi7exxYUQ.roa (hash: IeZFlfU/tf7kNLd1ueG9wWhJ27KVNelvhJ00kXOKzso=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:c7:9b:ac:75:0e:0a:f2:57:29:bc:52:49:ce:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5bf7d0e47122aefefb62cea21674a81025559b1a
Validity
Not Before: Jan 31 14:00:30 2025 GMT
Not After : Feb 1 14:00:30 2025 GMT
Subject: CN=3484267af1ecbf9a53349d6df2a6bc262f4f1a3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:f0:19:c6:6d:2d:79:0d:4a:2c:a2:9a:06:34:
ce:1d:07:be:a9:fa:83:32:ad:ce:19:ea:01:1e:0d:
e2:2f:60:a6:60:1c:0e:08:63:62:9d:9b:3e:3c:c0:
9c:7a:36:78:d2:8d:d1:db:ec:ce:16:08:fd:d0:4e:
0a:47:0c:49:cf:9a:87:63:75:86:6d:91:f0:4c:dd:
80:08:3c:a8:2d:08:57:e5:b7:97:c1:77:ea:a6:28:
2c:d2:a6:0e:f1:2b:cb:77:48:c5:c8:d7:09:8e:8e:
b1:1f:97:cd:17:12:a7:6f:a8:bd:57:94:72:14:d0:
60:a7:7c:2c:47:2a:ae:86:13:ff:3f:37:72:53:c3:
8a:9c:c2:11:e3:1b:e6:d6:28:85:14:95:24:31:f6:
6f:9a:67:2a:fd:27:74:61:38:a2:f5:7d:34:3f:2e:
b9:89:ea:0b:27:79:e6:2d:87:79:cd:a4:e6:67:f1:
ea:c9:cb:2b:0d:8e:68:bc:a6:74:27:8c:41:cd:f9:
26:6c:97:62:75:d0:41:8c:91:13:bd:6e:94:5e:9e:
f1:d8:49:6d:9d:6c:e4:35:06:69:a5:1f:16:a0:3b:
5e:f1:e2:9c:36:69:95:b4:ae:ed:b3:9e:12:7d:9d:
20:9b:c0:de:3e:69:75:9d:20:8a:be:8b:cc:f4:a9:
3b:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:84:26:7A:F1:EC:BF:9A:53:34:9D:6D:F2:A6:BC:26:2F:4F:1A:3D
X509v3 Authority Key Identifier:
keyid:5B:F7:D0:E4:71:22:AE:FE:FB:62:CE:A2:16:74:A8:10:25:55:9B:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W_fQ5HEirv77Ys6iFnSoECVVmxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/094c50-2c86-4a55-8eb0-1cf722517baf/1/W_fQ5HEirv77Ys6iFnSoECVVmxo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/094c50-2c86-4a55-8eb0-1cf722517baf/1/W_fQ5HEirv77Ys6iFnSoECVVmxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:d1:8b:c2:3b:7b:d6:c9:36:fd:d3:b9:5a:81:29:3b:86:fd:
86:f7:da:53:5a:23:5b:53:b4:53:f7:14:77:15:71:fd:1b:60:
3f:62:89:7b:de:56:4a:b7:61:e7:cb:d7:e5:cc:29:29:f6:f3:
9e:0e:78:bc:5b:b4:a9:e7:8a:ab:c2:6e:72:c6:1b:30:2a:d5:
fc:98:70:bd:e4:55:ba:e1:24:13:da:5b:87:a0:bb:a0:55:f1:
24:fb:1f:48:80:f2:55:c8:35:3f:83:6b:d4:76:2a:6a:00:40:
a5:08:f9:b9:03:8a:4c:10:f0:08:e0:0d:5a:30:54:42:11:39:
70:dc:cb:d0:b5:92:48:5c:1a:2e:56:cc:10:51:69:bf:03:6b:
d1:be:0d:45:ef:5e:4a:d2:dd:57:5a:40:c1:4e:ea:83:7b:83:
8d:f1:fa:0e:29:67:41:fa:fd:a7:91:d7:d9:27:7c:ef:5d:b8:
4e:9c:35:ce:6c:65:ac:ad:20:68:3b:27:05:42:dd:fc:70:86:
c1:87:d9:c6:af:fe:7f:ad:ad:e5:01:be:ae:ba:56:cc:85:46:
e2:3e:dd:9d:ec:2d:55:2b:1c:63:6f:cc:ab:86:a9:b8:71:5e:
df:d1:fd:b7:8d:4e:53:8a:be:33:9b:e6:3f:a7:a9:f3:0d:f1:
af:b1:7c:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:48:01 2025 by rpki-client