Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/31cbc8-3c23-4bdf-83a4-bcd3302810e3/1/WkrNIRI_nnWpKg5tSyb56cljZ18.mft
File: WkrNIRI_nnWpKg5tSyb56cljZ18.mft (raw, json)
Hash identifier: apXIz1YXFwHUFn1gMGxuCk8iYSFqEbyWn38UJuggXGs=
Subject key identifier: DE:79:00:AC:63:C0:9A:B1:AC:51:35:23:28:28:90:0F:77:7A:7E:C5
Authority key identifier: 5A:4A:CD:21:12:3F:9E:75:A9:2A:0E:6D:4B:26:F9:E9:C9:63:67:5F
Certificate issuer: /CN=5a4acd21123f9e75a92a0e6d4b26f9e9c963675f
Certificate serial: 0194BCAA112E497E9D32A5D03E2A008A4A3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WkrNIRI_nnWpKg5tSyb56cljZ18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/31cbc8-3c23-4bdf-83a4-bcd3302810e3/1/WkrNIRI_nnWpKg5tSyb56cljZ18.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 14:00:49 +0000
Manifest this update: Fri 31 Jan 2025 14:00:49 +0000
Manifest next update: Sat 01 Feb 2025 14:00:49 +0000
Files and hashes: 1: WkrNIRI_nnWpKg5tSyb56cljZ18.crl (hash: hWYsaCN27ZxwDZohEWlarP5ffGaI4gXEAuWWsgkCh/w=)
2: sQw9W7aILGy9Pa9_58J_ycedqSY.roa (hash: 3h6rvOsq/U2tYyEzeXc8KFTE7Z25JXJxvFL7/RbG7Wg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:11:2e:49:7e:9d:32:a5:d0:3e:2a:00:8a:4a:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a4acd21123f9e75a92a0e6d4b26f9e9c963675f
Validity
Not Before: Jan 31 14:00:49 2025 GMT
Not After : Feb 1 14:00:49 2025 GMT
Subject: CN=de7900ac63c09ab1ac5135232828900f777a7ec5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:be:7e:4e:a2:ec:25:47:92:e4:71:e7:32:ae:
95:78:16:54:e2:56:fb:3d:dd:ed:c5:58:60:da:46:
53:ec:f0:b2:41:ca:75:60:d2:9a:eb:8a:e2:dd:77:
c9:27:ee:93:b5:76:a6:84:c3:7c:3e:95:cf:bd:fe:
b0:f5:38:96:38:fe:c2:42:91:97:87:ed:4b:dc:ae:
39:af:ac:51:3e:bd:23:05:08:ee:ad:98:15:3e:40:
46:19:14:06:69:4a:45:b3:04:28:62:da:0d:f2:5d:
80:01:fc:29:6b:e5:df:bc:c8:4d:38:11:1f:e9:40:
90:18:e1:d8:b8:5f:e1:2c:4b:85:c1:84:9f:cb:b6:
26:c1:cc:96:66:b8:1e:45:92:38:9b:48:64:dc:14:
2d:42:ae:92:8f:cf:50:c5:bd:78:80:4c:3a:d5:54:
3e:4c:01:b8:9e:9b:3f:9e:60:12:ad:6b:36:40:f3:
07:93:d5:07:3c:c6:d6:ec:d0:17:c2:53:27:40:9b:
a1:93:34:c7:8d:cc:47:ba:bd:c5:aa:59:d9:8f:6e:
25:5d:a4:80:c0:94:8b:35:79:b8:8d:7b:ca:ec:32:
2f:ff:c8:db:f9:46:dc:88:7e:d4:d3:ce:d3:39:13:
83:e5:4d:b5:93:1b:73:cf:fe:19:fc:08:1a:02:45:
96:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:79:00:AC:63:C0:9A:B1:AC:51:35:23:28:28:90:0F:77:7A:7E:C5
X509v3 Authority Key Identifier:
keyid:5A:4A:CD:21:12:3F:9E:75:A9:2A:0E:6D:4B:26:F9:E9:C9:63:67:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WkrNIRI_nnWpKg5tSyb56cljZ18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/31cbc8-3c23-4bdf-83a4-bcd3302810e3/1/WkrNIRI_nnWpKg5tSyb56cljZ18.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/31cbc8-3c23-4bdf-83a4-bcd3302810e3/1/WkrNIRI_nnWpKg5tSyb56cljZ18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:24:eb:a6:65:3f:00:85:ca:dc:04:55:6e:4f:d1:ad:20:f7:
f0:b7:5f:dc:6c:db:41:c8:25:c2:71:74:fa:e7:5f:87:ce:88:
19:fb:39:53:7e:cc:fe:3d:f0:4e:99:65:25:63:21:c5:90:b4:
8f:7f:78:20:ed:21:a2:0f:38:ac:79:19:bb:25:2b:1d:fa:bc:
e4:b5:81:1f:a7:53:ed:e7:a9:77:22:21:80:b8:26:aa:87:43:
ce:9e:40:62:b8:ee:76:d6:e8:2a:b6:c9:84:c3:e7:2a:bb:a7:
9e:88:58:20:f2:78:78:25:bc:81:e6:47:23:43:cf:c2:e8:77:
1a:a2:91:f0:91:46:da:0c:aa:75:0c:2d:0e:14:07:28:39:b4:
cb:9f:92:ca:8a:17:91:ba:99:af:25:ff:cf:c6:4e:af:9f:85:
47:f2:d1:1d:82:17:f5:34:9f:3d:f8:2e:83:d8:37:41:1a:79:
26:0b:b1:dc:24:f9:de:98:82:fc:99:fb:15:d5:6d:6a:cb:2e:
9f:62:48:bf:95:cf:c6:eb:d1:41:a1:09:6b:4e:53:0e:94:d0:
18:22:fc:f7:83:4c:05:df:ee:ab:d5:67:79:6f:84:fc:22:99:
b4:2f:22:61:98:bd:ae:a5:62:a8:5c:90:84:07:93:df:4b:21:
d3:03:e6:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:15:02 2025 by rpki-client