Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/81f76f-d878-44a1-82c7-2ccb5f0c5f6b/1/WrJabDkrjmejrSH2D9MxHWt_Hlw.mft
File: WrJabDkrjmejrSH2D9MxHWt_Hlw.mft (raw, json)
Hash identifier: DsKUuE471wBxC39v0vGEx6Zt8cMPnjjcETfMl5UTUII=
Subject key identifier: 5A:95:AD:38:92:75:C6:FC:F4:1C:BD:59:38:E2:BD:BC:2D:9B:8A:7F
Authority key identifier: 5A:B2:5A:6C:39:2B:8E:67:A3:AD:21:F6:0F:D3:31:1D:6B:7F:1E:5C
Certificate issuer: /CN=5ab25a6c392b8e67a3ad21f60fd3311d6b7f1e5c
Certificate serial: 0194BD857D42078DE6E486EE1420337F0F03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WrJabDkrjmejrSH2D9MxHWt_Hlw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/81f76f-d878-44a1-82c7-2ccb5f0c5f6b/1/WrJabDkrjmejrSH2D9MxHWt_Hlw.mft
Manifest number: 0CC6
Signing time: Fri 31 Jan 2025 18:00:29 +0000
Manifest this update: Fri 31 Jan 2025 18:00:29 +0000
Manifest next update: Sat 01 Feb 2025 18:00:29 +0000
Files and hashes: 1: WrJabDkrjmejrSH2D9MxHWt_Hlw.crl (hash: NunJtgvbdiqOYCU/pEK7zVTYjcGF/2WKtbV5IYSJFQQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:7d:42:07:8d:e6:e4:86:ee:14:20:33:7f:0f:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ab25a6c392b8e67a3ad21f60fd3311d6b7f1e5c
Validity
Not Before: Jan 31 18:00:29 2025 GMT
Not After : Feb 1 18:00:29 2025 GMT
Subject: CN=5a95ad389275c6fcf41cbd5938e2bdbc2d9b8a7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:b4:1c:3e:89:fd:c3:60:5e:aa:b4:cf:0e:05:
3e:62:00:2a:f3:38:f0:22:90:0a:57:f1:04:da:2f:
fd:7f:7b:09:80:6b:54:eb:84:e4:27:8a:26:f3:05:
d3:86:19:0d:6d:9c:ad:b7:08:f7:80:35:0d:f9:82:
ee:13:96:44:9e:24:8d:7c:6a:e4:9a:12:c0:a1:e6:
c7:ee:12:ff:98:27:e1:3c:5f:06:a8:e6:c5:71:17:
c0:7d:93:4f:91:e9:ea:99:7a:b6:2e:e7:5d:18:a4:
57:5b:73:4d:6e:44:56:18:a5:ab:8f:a7:da:a1:34:
5d:d2:64:c5:db:fb:e4:15:dc:b0:1f:c6:de:3a:07:
f1:46:fb:dd:94:dc:86:9f:b1:a3:56:de:37:32:f5:
4a:17:80:32:2a:30:f3:2a:87:0c:a5:1c:78:03:1a:
fd:38:4e:cd:53:f9:39:b4:53:65:7c:79:d3:11:be:
ef:fd:4a:01:49:e5:f5:4f:b1:97:01:c7:c1:8e:48:
ca:3f:b8:f4:63:03:8b:61:bf:25:dd:9f:57:a8:e6:
bd:b7:c3:f7:4b:07:04:f4:17:24:d7:12:af:bb:b1:
65:56:72:be:dc:98:d1:14:a8:79:f7:e8:63:17:3d:
58:bd:f8:f7:8d:52:e3:63:f4:29:86:81:37:0d:60:
f9:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:95:AD:38:92:75:C6:FC:F4:1C:BD:59:38:E2:BD:BC:2D:9B:8A:7F
X509v3 Authority Key Identifier:
keyid:5A:B2:5A:6C:39:2B:8E:67:A3:AD:21:F6:0F:D3:31:1D:6B:7F:1E:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WrJabDkrjmejrSH2D9MxHWt_Hlw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/81f76f-d878-44a1-82c7-2ccb5f0c5f6b/1/WrJabDkrjmejrSH2D9MxHWt_Hlw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/81f76f-d878-44a1-82c7-2ccb5f0c5f6b/1/WrJabDkrjmejrSH2D9MxHWt_Hlw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:aa:10:ae:00:94:15:37:b9:b6:1b:79:6f:15:30:1c:a0:d5:
8a:27:2c:d5:a0:21:70:09:38:47:f3:35:af:3e:93:7d:21:60:
65:e7:f1:85:56:5f:2e:5f:ef:49:b8:ba:b4:f8:f9:1c:b9:6c:
2a:c6:64:f9:d9:8c:07:18:f9:96:df:9d:81:cc:19:7f:4e:87:
12:f6:8e:85:4f:db:5f:38:31:90:a5:5c:be:d8:e5:4f:14:bb:
95:86:17:37:72:ce:6b:e6:61:c2:28:35:91:74:14:a3:62:75:
ef:cd:2c:0c:b9:de:91:ab:46:a5:5d:9d:bc:c7:64:7c:7c:27:
b8:28:12:17:cb:52:35:82:f8:81:b6:ca:66:58:f8:83:d7:b2:
75:cc:fd:44:e7:9a:1c:68:c9:61:c2:65:c0:34:ae:de:d1:c3:
ef:de:b3:03:fb:09:de:76:97:f8:61:f9:3c:5f:36:99:a9:67:
e5:61:71:57:6b:a3:c3:3f:0a:06:19:d1:fd:10:3d:12:55:7f:
20:6f:2e:d9:a3:d2:5f:64:b8:63:52:e9:b3:c2:b5:ca:8f:3e:
c6:43:1d:99:bd:e6:b1:9f:e9:82:25:a9:d1:c8:8c:cd:48:cb:
3d:7d:f4:19:c2:dc:3d:eb:0f:f0:30:d6:56:f3:ea:57:e7:f2:
bb:d8:d6:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:37:46 2025 by rpki-client