Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/715e1c-5512-4eb4-9ba3-3a003135aad1/1/WsRdmhoiQWgz3lml5hnRIJbQlp4.mft
File: WsRdmhoiQWgz3lml5hnRIJbQlp4.mft (raw, json)
Hash identifier: BLq8MDlqCmz8zyDm97+/wikvx1twqS7BuRt8RsNJqiM=
Subject key identifier: D9:A6:49:25:E1:B4:A6:44:83:A1:77:BE:5B:5A:02:0A:B4:1D:9A:40
Authority key identifier: 5A:C4:5D:9A:1A:22:41:68:33:DE:59:A5:E6:19:D1:20:96:D0:96:9E
Certificate issuer: /CN=5ac45d9a1a22416833de59a5e619d12096d0969e
Certificate serial: 0194BCE0EA6EEADFF7795CA661EC9D20D919
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WsRdmhoiQWgz3lml5hnRIJbQlp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/715e1c-5512-4eb4-9ba3-3a003135aad1/1/WsRdmhoiQWgz3lml5hnRIJbQlp4.mft
Manifest number: 0D7E
Signing time: Fri 31 Jan 2025 15:00:44 +0000
Manifest this update: Fri 31 Jan 2025 15:00:44 +0000
Manifest next update: Sat 01 Feb 2025 15:00:44 +0000
Files and hashes: 1: WsRdmhoiQWgz3lml5hnRIJbQlp4.crl (hash: 1TkLj6iTctgBe3jZHtx16Bt2iRuFlODkbzKzgZqBXhw=)
2: X2K16vfCCw5yGYZ35G284aX5j-w.roa (hash: 1LbHM2S0fWzRZr7mNPkcXGUnRUmoTc3QJQmvi/4U+L4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:ea:6e:ea:df:f7:79:5c:a6:61:ec:9d:20:d9:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ac45d9a1a22416833de59a5e619d12096d0969e
Validity
Not Before: Jan 31 15:00:44 2025 GMT
Not After : Feb 1 15:00:44 2025 GMT
Subject: CN=d9a64925e1b4a64483a177be5b5a020ab41d9a40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ef:de:5f:12:f5:fd:42:f3:2f:d8:54:65:b2:
a6:65:7c:95:67:8c:ed:8a:33:55:21:6d:c9:aa:82:
4c:6e:78:f4:3a:09:51:fd:98:be:34:c9:0c:2b:a4:
f8:79:d7:a0:6f:00:39:4b:7c:bf:7d:07:48:c5:01:
28:b5:e8:bc:23:42:c2:d2:b5:b1:99:8a:3e:86:69:
ce:0c:ed:a2:02:85:eb:67:22:3e:a5:f0:79:f3:63:
11:60:a0:a0:a5:e8:15:7e:9a:76:26:ca:a7:62:f6:
2b:2f:fd:7c:e0:b7:d3:31:70:6c:f4:bc:61:c8:15:
8c:f5:fd:b6:e3:05:9f:d5:de:b4:aa:ce:a1:f9:c6:
98:3c:9b:ef:6e:16:76:9b:e5:48:21:c4:45:8c:1e:
58:19:f6:e8:94:28:21:e3:66:a8:70:f8:af:82:a1:
bd:a8:7c:71:63:c9:7a:82:62:f8:49:88:e5:e2:4e:
08:29:46:d1:71:e1:51:64:c1:41:4f:93:bb:00:a9:
11:c6:b1:04:a6:c0:58:f4:48:92:47:ed:77:18:11:
e2:83:4f:af:0f:78:4c:04:c8:df:44:d1:68:23:51:
4d:e2:7f:97:01:2b:23:1b:4e:a6:67:b3:6a:68:8d:
da:2e:4b:dc:db:8c:0f:25:35:71:fc:17:77:e8:ff:
50:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:A6:49:25:E1:B4:A6:44:83:A1:77:BE:5B:5A:02:0A:B4:1D:9A:40
X509v3 Authority Key Identifier:
keyid:5A:C4:5D:9A:1A:22:41:68:33:DE:59:A5:E6:19:D1:20:96:D0:96:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WsRdmhoiQWgz3lml5hnRIJbQlp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/715e1c-5512-4eb4-9ba3-3a003135aad1/1/WsRdmhoiQWgz3lml5hnRIJbQlp4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/715e1c-5512-4eb4-9ba3-3a003135aad1/1/WsRdmhoiQWgz3lml5hnRIJbQlp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:cb:14:b7:da:72:85:05:2e:63:2a:c2:ef:7a:fe:14:fe:db:
dc:da:8a:d6:b9:4a:11:9f:ed:3f:25:99:0a:e9:04:a4:a0:9c:
a1:b5:9c:45:b3:5e:69:66:25:66:c9:c8:63:4f:4d:1c:4e:ad:
07:4e:78:a5:3b:21:08:01:24:e6:02:64:39:99:66:25:a8:15:
35:9c:ce:da:2e:8c:ca:e0:05:63:ee:cc:45:48:cf:49:ea:77:
59:56:72:6e:bc:81:fd:11:3d:ca:24:96:e6:89:24:1c:81:9f:
25:00:95:0f:fc:26:ca:47:a4:b0:ee:e3:2b:38:bb:30:30:42:
a1:d4:67:cd:28:64:7c:74:5f:be:97:45:e8:e7:88:5a:bb:02:
1b:65:23:35:e2:ff:03:b5:92:89:dd:4c:72:2a:05:25:6b:9c:
f2:ef:c9:4c:03:62:a4:8b:19:5a:c9:56:85:8a:7c:65:73:56:
05:2e:f5:77:5d:f2:c0:65:42:e0:78:36:82:01:64:bd:9b:5c:
ef:fe:57:b4:bd:84:3e:d3:c7:2d:64:a1:97:71:49:83:c8:74:
72:d8:d3:ef:a0:9c:6e:90:df:4f:8a:56:bc:8b:98:7b:31:86:
13:16:e0:c8:a3:bd:de:85:56:e5:83:1d:4e:a2:d7:a8:fa:66:
c7:c7:56:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:40:28 2025 by rpki-client