Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/2a0808-7e97-47e0-afbb-74ccd8240bad/1/WYd3IMAUaISU6mkQyDR03hPpmAI.mft
File: WYd3IMAUaISU6mkQyDR03hPpmAI.mft (raw, json)
Hash identifier: Qux9y19xajdQUDwFvjoHN4uSsy5oMnPl9wLTuM8azPM=
Subject key identifier: 8D:94:27:8F:E7:B6:3F:6F:DE:23:A8:2F:20:8F:7B:51:07:63:B4:20
Authority key identifier: 59:87:77:20:C0:14:68:84:94:EA:69:10:C8:34:74:DE:13:E9:98:02
Certificate issuer: /CN=59877720c014688494ea6910c83474de13e99802
Certificate serial: 0194BC3C2C4B5223026DEA7FC511B773A5D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WYd3IMAUaISU6mkQyDR03hPpmAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/2a0808-7e97-47e0-afbb-74ccd8240bad/1/WYd3IMAUaISU6mkQyDR03hPpmAI.mft
Manifest number: 0E8A
Signing time: Fri 31 Jan 2025 12:00:47 +0000
Manifest this update: Fri 31 Jan 2025 12:00:47 +0000
Manifest next update: Sat 01 Feb 2025 12:00:47 +0000
Files and hashes: 1: 9c0rgR7sx5b0INcSJYu5W29d3Lc.roa (hash: y70EM6GErQtflpK0nFkjr6koXzt1x9WLonWw/bb44FI=)
2: GGiu1L5lhvZ8MzbHc6hTc-r37u4.roa (hash: rDG83BQh2P4hrlgqRkJ2V5CxzCdFANpJED+WOO84WlU=)
3: WYd3IMAUaISU6mkQyDR03hPpmAI.crl (hash: dZJfogjpNbKUyMeRs+HT7DDySuFOmWLWMv5CvPFZ410=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:2c:4b:52:23:02:6d:ea:7f:c5:11:b7:73:a5:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59877720c014688494ea6910c83474de13e99802
Validity
Not Before: Jan 31 12:00:47 2025 GMT
Not After : Feb 1 12:00:47 2025 GMT
Subject: CN=8d94278fe7b63f6fde23a82f208f7b510763b420
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:4e:0a:8f:c7:22:d7:b8:9f:b7:ca:55:84:5a:
d1:b8:7e:03:28:e4:b9:33:19:a6:de:d9:54:6f:06:
d7:ea:70:5a:dd:94:8f:32:27:c3:1e:ea:20:98:6a:
1e:ff:a7:23:9e:f8:e6:20:df:d8:97:b6:18:17:9a:
a7:5e:10:3e:42:fd:b5:5d:bc:24:6a:45:a3:88:e8:
6c:0c:88:f6:02:f5:9d:e1:04:8c:b1:96:8b:73:1f:
c7:cb:04:cd:df:57:11:93:da:e1:5c:73:63:ee:12:
83:49:13:b6:0c:26:ff:23:83:cf:f1:ba:71:72:c8:
56:17:14:00:e0:95:6e:61:52:b8:eb:94:9f:95:f1:
c6:0c:25:5a:5d:17:0c:36:38:40:da:a9:08:4b:8f:
a8:8b:3d:74:e4:b7:2c:b6:18:17:3a:19:24:b8:95:
0d:21:2d:78:10:42:ff:a6:41:f3:b1:46:bd:04:ff:
9f:78:f0:4a:55:5d:a2:73:55:50:a0:95:41:45:70:
22:81:49:48:38:b6:4e:92:bf:ac:e9:f1:6e:62:95:
36:e6:81:d7:aa:7d:e5:43:63:e3:e5:a3:38:41:9b:
1f:43:a8:56:10:0c:32:9b:e1:6b:1d:6c:f8:3c:9e:
0c:14:17:e7:5d:0f:f2:41:f5:9e:75:64:3f:1b:47:
00:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:94:27:8F:E7:B6:3F:6F:DE:23:A8:2F:20:8F:7B:51:07:63:B4:20
X509v3 Authority Key Identifier:
keyid:59:87:77:20:C0:14:68:84:94:EA:69:10:C8:34:74:DE:13:E9:98:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WYd3IMAUaISU6mkQyDR03hPpmAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2a0808-7e97-47e0-afbb-74ccd8240bad/1/WYd3IMAUaISU6mkQyDR03hPpmAI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2a0808-7e97-47e0-afbb-74ccd8240bad/1/WYd3IMAUaISU6mkQyDR03hPpmAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:6e:e2:42:b4:3b:95:14:ca:64:23:df:61:bf:1f:43:95:20:
f9:29:42:97:98:a1:30:33:d6:55:d9:0e:97:18:46:fc:9e:ab:
11:56:95:a0:d8:d8:7c:fa:1e:3f:c9:48:6a:98:b4:8e:d2:41:
71:1b:c4:9b:d6:51:a6:60:41:30:3b:98:69:33:88:e0:ee:78:
b4:c9:b1:c3:cd:26:ab:1a:2c:d1:b5:13:a4:5c:21:7d:37:2e:
0a:ec:8d:72:f5:47:58:a9:37:e8:04:08:06:52:13:60:ba:a5:
3b:af:1c:36:be:10:21:e5:68:2b:a7:2b:03:74:e6:9a:35:cd:
60:95:fe:d1:30:3f:55:b0:20:3e:3e:06:fc:7c:aa:9d:ad:be:
7a:25:c3:25:fe:02:82:ef:c3:4f:ac:cf:66:78:47:57:52:4d:
26:e8:52:58:d3:3c:cd:c5:70:4a:fb:e7:c7:5e:db:b2:8b:d6:
29:fd:53:af:29:e2:c2:c8:93:04:53:1f:00:79:f2:7c:f2:33:
ab:f6:33:16:2b:f6:99:fb:58:94:9b:ae:44:2b:78:bc:f0:75:
eb:14:3d:18:a9:21:5c:43:5c:a2:7a:fb:0b:72:48:30:af:c1:
32:c0:b9:2f:9d:58:33:b6:ed:a9:c3:8b:42:ce:4a:b1:de:36:
69:2f:64:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 14:42:59 2025 by rpki-client