Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/98d41e-234e-45e7-82eb-3d1e0ee4b651/1/W8qreqGscUP4vII8c0sWc6CbuIA.mft
File: W8qreqGscUP4vII8c0sWc6CbuIA.mft (raw, json)
Hash identifier: UgcQsthjmxxcKbUOB45Nne0qs/Y/XLsloQH5ct7OwKI=
Subject key identifier: 5A:D3:74:81:CF:F2:4F:A6:34:5B:CF:F4:60:98:12:15:1D:CE:07:F8
Authority key identifier: 5B:CA:AB:7A:A1:AC:71:43:F8:BC:82:3C:73:4B:16:73:A0:9B:B8:80
Certificate issuer: /CN=5bcaab7aa1ac7143f8bc823c734b1673a09bb880
Certificate serial: 0194BCE0DF440BFED99DB0159F0AFB25F46B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W8qreqGscUP4vII8c0sWc6CbuIA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/98d41e-234e-45e7-82eb-3d1e0ee4b651/1/W8qreqGscUP4vII8c0sWc6CbuIA.mft
Manifest number: 1166
Signing time: Fri 31 Jan 2025 15:00:41 +0000
Manifest this update: Fri 31 Jan 2025 15:00:41 +0000
Manifest next update: Sat 01 Feb 2025 15:00:41 +0000
Files and hashes: 1: MAQmOa8DCOFnP1AvP10tvRzxgoU.roa (hash: js//CnDRXGCUWJu0u0iMvymBvRN/ZDLpajOTcw67kv0=)
2: W8qreqGscUP4vII8c0sWc6CbuIA.crl (hash: sqGZFvn/fyUmsFqQFJ5Ou5I3ESW+Ah1yYLSmmiSjreA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:df:44:0b:fe:d9:9d:b0:15:9f:0a:fb:25:f4:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5bcaab7aa1ac7143f8bc823c734b1673a09bb880
Validity
Not Before: Jan 31 15:00:41 2025 GMT
Not After : Feb 1 15:00:41 2025 GMT
Subject: CN=5ad37481cff24fa6345bcff4609812151dce07f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:61:6a:2e:9d:30:62:63:57:f6:78:3e:33:6c:
1c:e2:d4:ae:5a:1a:ae:b1:75:f1:d0:cb:e4:fc:9a:
4b:ad:cc:7a:4d:61:27:b4:89:d0:0f:da:31:d9:d1:
29:06:ec:c0:59:6e:b7:39:91:97:51:d4:bd:a4:79:
55:0f:f2:4c:b4:fb:5f:e2:78:0d:43:54:ff:8a:31:
43:ff:75:9c:bf:8b:82:43:d9:cf:17:b0:9f:ca:12:
e4:8a:5e:6c:4b:d4:24:83:bb:99:72:fe:3a:24:eb:
2b:0d:67:ac:b6:71:e0:ff:86:25:82:48:dd:8b:5c:
9d:cf:7e:61:c4:79:56:e5:71:22:cb:04:d0:af:98:
e4:c5:44:2e:30:cd:a4:b3:98:a8:ae:e7:03:cf:12:
b0:f2:ef:66:cb:f7:89:32:41:da:c1:7c:09:6e:fd:
05:41:0e:07:9c:08:69:6a:ad:e4:5b:a6:93:3c:ea:
d4:e3:27:6f:b1:4a:53:80:74:4d:93:aa:53:0f:9c:
ff:ab:9e:d0:a9:26:ac:b9:f0:99:b2:b3:69:ca:f1:
21:fc:70:05:65:75:b3:c8:bf:73:37:3d:44:b3:38:
06:5c:91:5e:fd:cf:b0:bf:1c:f7:b0:30:75:9b:24:
68:57:d1:36:b2:4d:4d:c7:cb:ef:50:19:d9:08:c5:
76:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:D3:74:81:CF:F2:4F:A6:34:5B:CF:F4:60:98:12:15:1D:CE:07:F8
X509v3 Authority Key Identifier:
keyid:5B:CA:AB:7A:A1:AC:71:43:F8:BC:82:3C:73:4B:16:73:A0:9B:B8:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W8qreqGscUP4vII8c0sWc6CbuIA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/98d41e-234e-45e7-82eb-3d1e0ee4b651/1/W8qreqGscUP4vII8c0sWc6CbuIA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/98d41e-234e-45e7-82eb-3d1e0ee4b651/1/W8qreqGscUP4vII8c0sWc6CbuIA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:4d:7a:b8:06:60:d0:93:81:9c:5d:94:93:ea:ee:7c:19:bc:
44:63:39:ed:06:5c:9a:48:13:43:08:32:03:7d:37:26:5f:33:
53:03:79:aa:4f:e4:18:95:ca:cc:f9:c1:4f:f1:c9:e0:5c:3e:
b6:7f:8d:21:8c:41:de:63:5b:cb:89:81:e2:77:21:b8:e9:40:
ca:57:18:78:b6:c6:98:a2:0c:06:03:e8:c5:18:c6:43:ff:82:
69:34:85:5a:75:29:68:b2:cc:2f:08:6f:2e:ff:7a:39:1d:db:
bc:7a:3a:c7:49:b4:cd:f0:b9:61:a3:70:c8:93:7c:c8:e1:f7:
37:63:57:53:d3:b9:6e:4d:89:dd:30:22:cc:75:2f:ef:6c:ab:
29:df:d8:72:89:46:73:cb:f9:c7:15:e8:92:ad:be:bb:14:b6:
b1:98:73:e8:bc:b7:b5:01:45:17:b4:25:76:8e:fb:14:3c:b8:
47:3d:d7:4e:80:06:d6:c1:e2:b5:9b:28:a6:9e:dc:76:90:f5:
2b:5c:a6:c2:5f:4b:49:37:51:34:0c:87:c5:43:e9:b6:67:e8:
20:9a:0b:a2:53:78:27:95:0f:b7:59:92:46:d6:c3:5c:69:45:
f1:b0:fa:7d:a7:53:a0:43:f8:60:1e:3e:61:f5:61:ac:e9:a1:
a0:bb:d1:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:49:00 2025 by rpki-client