Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/5fdc69-64c2-4b47-a4f8-ab39be656057/1/WAFhHoC63kAvvWDnhvNPtxctIlo.mft
File: WAFhHoC63kAvvWDnhvNPtxctIlo.mft (raw, json)
Hash identifier: 7OpfV7zoM5o8uazoKATpe0Kj3zbORbl92Ec/SnaVIG8=
Subject key identifier: 3C:4B:C1:F3:EB:DA:CC:07:9E:86:45:18:56:C2:B3:BE:48:8A:9C:B7
Authority key identifier: 58:01:61:1E:80:BA:DE:40:2F:BD:60:E7:86:F3:4F:B7:17:2D:22:5A
Certificate issuer: /CN=5801611e80bade402fbd60e786f34fb7172d225a
Certificate serial: 0194BCAA0B9E1D729ECF5A2D3DC305AF0B74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WAFhHoC63kAvvWDnhvNPtxctIlo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/5fdc69-64c2-4b47-a4f8-ab39be656057/1/WAFhHoC63kAvvWDnhvNPtxctIlo.mft
Manifest number: 118A
Signing time: Fri 31 Jan 2025 14:00:48 +0000
Manifest this update: Fri 31 Jan 2025 14:00:48 +0000
Manifest next update: Sat 01 Feb 2025 14:00:48 +0000
Files and hashes: 1: WAFhHoC63kAvvWDnhvNPtxctIlo.crl (hash: UXYp9qniiidbF5CWVcyd3CdGH+XG8n/yx9wq6PBNHTE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:0b:9e:1d:72:9e:cf:5a:2d:3d:c3:05:af:0b:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5801611e80bade402fbd60e786f34fb7172d225a
Validity
Not Before: Jan 31 14:00:48 2025 GMT
Not After : Feb 1 14:00:48 2025 GMT
Subject: CN=3c4bc1f3ebdacc079e86451856c2b3be488a9cb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d6:32:02:45:6d:96:b9:06:27:31:5d:41:a8:
f7:36:04:42:76:63:60:a7:0a:12:48:6e:b5:d5:aa:
28:1a:a1:52:35:9c:bf:07:c4:80:56:b0:fa:1e:b8:
7f:05:79:a5:2a:59:3e:f0:72:83:30:1d:36:6a:07:
37:4a:1e:20:2b:2f:f3:49:e0:37:74:e5:73:e2:a1:
ce:0a:4b:e9:69:2d:6f:2a:eb:93:4b:eb:ea:78:14:
74:65:68:1c:94:2d:d9:79:b2:02:bb:fc:d3:d5:69:
86:03:3f:85:2a:a7:04:94:d8:fc:bc:59:83:61:ec:
6d:3b:b1:1b:e7:c2:63:a6:e7:18:e8:95:c8:c4:48:
08:fd:bb:84:91:e4:4c:eb:f0:7f:57:cf:7d:08:37:
81:24:30:73:01:c6:29:6f:9c:3d:aa:75:48:ca:40:
40:e9:73:ad:a5:3f:53:3f:0b:ba:f7:dd:ba:5c:b9:
0e:ef:26:3f:1c:b7:af:b7:f8:3a:6c:ac:51:d1:e1:
a8:9a:d6:44:eb:d7:a7:b5:78:0d:94:3d:f0:f0:cb:
b2:be:aa:f5:27:18:b1:6e:7e:43:6e:2f:87:93:82:
a7:ed:0e:5a:a6:42:b0:d8:86:05:d9:2c:2a:77:c8:
7f:03:fc:b4:d1:d2:8a:c7:ac:82:7e:ce:58:b4:77:
73:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:4B:C1:F3:EB:DA:CC:07:9E:86:45:18:56:C2:B3:BE:48:8A:9C:B7
X509v3 Authority Key Identifier:
keyid:58:01:61:1E:80:BA:DE:40:2F:BD:60:E7:86:F3:4F:B7:17:2D:22:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WAFhHoC63kAvvWDnhvNPtxctIlo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/5fdc69-64c2-4b47-a4f8-ab39be656057/1/WAFhHoC63kAvvWDnhvNPtxctIlo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/5fdc69-64c2-4b47-a4f8-ab39be656057/1/WAFhHoC63kAvvWDnhvNPtxctIlo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:99:12:d5:8e:ed:de:db:e1:8a:1a:34:96:c8:67:6f:2b:e3:
ca:d7:fa:c4:63:1a:0a:b8:9a:81:8e:f3:b9:2d:10:99:9a:64:
07:86:ee:f2:82:76:a6:d0:eb:a5:b6:f1:9a:63:38:c8:94:bd:
b1:eb:e2:b4:ac:b7:67:6b:1e:70:3b:13:de:bf:10:4a:68:b6:
47:9f:9d:45:8e:92:38:a1:d5:4c:dc:65:32:13:50:cd:8d:ef:
b8:82:17:ba:02:d0:aa:eb:1a:6d:8d:0e:05:5f:d1:b0:4e:ca:
55:7a:17:a4:54:fe:bc:a0:27:9a:eb:8b:a6:6c:f7:66:15:de:
6b:4f:10:80:52:2f:aa:8d:ec:34:13:1d:15:9d:9a:84:8e:75:
bc:f5:fe:a7:c0:78:c4:49:77:59:c6:97:1d:06:15:42:78:bb:
8c:fa:7c:2d:b4:51:6d:08:7f:3f:f3:83:17:64:bc:7d:2f:50:
62:47:ca:7a:3d:5d:74:cb:30:d2:fc:3f:49:4a:1e:b7:13:f2:
a2:de:75:66:c9:cb:0c:ec:95:0f:69:47:77:d1:66:e1:a7:1d:
8f:98:73:7b:65:bb:7b:36:00:2b:a1:8d:71:f6:97:d2:cc:5d:
b9:4a:6c:c9:e8:69:da:3a:84:95:f0:24:6d:1a:d1:85:72:72:
8a:f1:60:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 17:43:15 2025 by rpki-client