Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/2b8e6d-a2c8-4e7d-96ca-ac764c952357/1/WSDWcGSaSkqcsuZnchcHQa33xRo.mft
File: WSDWcGSaSkqcsuZnchcHQa33xRo.mft (raw, json)
Hash identifier: lD+wh2VoTD/iN77hmVeLDys9Pe4wja3P2qaNISwOpQw=
Subject key identifier: 6C:AE:5B:58:FF:26:F5:37:4F:17:DD:A9:3C:C1:1F:6A:C2:13:4B:69
Authority key identifier: 59:20:D6:70:64:9A:4A:4A:9C:B2:E6:67:72:17:07:41:AD:F7:C5:1A
Certificate issuer: /CN=5920d670649a4a4a9cb2e66772170741adf7c51a
Certificate serial: 0194BD8549A2B0A4D3F1DAC7105DB02DDF75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WSDWcGSaSkqcsuZnchcHQa33xRo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/2b8e6d-a2c8-4e7d-96ca-ac764c952357/1/WSDWcGSaSkqcsuZnchcHQa33xRo.mft
Manifest number: 0B0B
Signing time: Fri 31 Jan 2025 18:00:16 +0000
Manifest this update: Fri 31 Jan 2025 18:00:16 +0000
Manifest next update: Sat 01 Feb 2025 18:00:16 +0000
Files and hashes: 1: PrK_NQRYp13y-DfvxtWGnq4X0dE.roa (hash: ZI/puUUas0tVvfAZ0vd46exqVsLLctxI+01KKUrwu2o=)
2: WSDWcGSaSkqcsuZnchcHQa33xRo.crl (hash: susX3nhDwivbG0UFW6ilFvNJc6/Q/06SdIxoPeqWJpw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:49:a2:b0:a4:d3:f1:da:c7:10:5d:b0:2d:df:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5920d670649a4a4a9cb2e66772170741adf7c51a
Validity
Not Before: Jan 31 18:00:16 2025 GMT
Not After : Feb 1 18:00:16 2025 GMT
Subject: CN=6cae5b58ff26f5374f17dda93cc11f6ac2134b69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:bc:fb:f8:0b:d2:44:3f:6f:0e:9e:fa:94:7c:
43:28:49:23:35:2c:53:45:0e:33:aa:63:5f:87:ce:
59:de:33:54:49:da:37:d4:1c:f2:06:cb:01:f3:6e:
3d:22:a9:41:78:21:8d:08:39:59:cd:c2:5d:25:cc:
c4:20:ff:6b:65:96:d1:fc:6e:28:d9:25:93:a0:0c:
e0:54:45:db:05:eb:52:3e:93:fb:7d:e2:1b:0d:22:
51:ae:ef:f9:b9:c8:08:f9:8d:71:46:cd:25:55:e5:
25:fa:64:1d:43:87:91:24:99:81:10:71:18:34:66:
7a:3c:7f:7c:ff:5d:87:1b:12:48:2e:be:af:85:8f:
88:c9:a4:1a:df:70:bd:4f:54:69:13:92:fd:cd:53:
46:71:c0:71:1a:c0:5e:29:a1:72:10:17:c6:1d:a7:
4c:ed:58:06:44:6e:24:cf:67:7a:58:69:51:7f:d4:
e5:7e:1c:73:7d:a2:0e:bd:67:f1:f1:d3:5e:63:ed:
31:0d:cd:06:74:fe:cf:a4:c4:8c:f1:1d:d8:50:a9:
bd:9d:36:79:69:fe:6f:e6:af:8e:69:07:de:8c:e4:
b1:9e:6c:3f:98:5d:d4:57:67:a5:b9:d1:2e:af:1d:
1b:12:74:8b:92:e7:c7:f2:4a:67:88:55:f6:38:73:
36:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:AE:5B:58:FF:26:F5:37:4F:17:DD:A9:3C:C1:1F:6A:C2:13:4B:69
X509v3 Authority Key Identifier:
keyid:59:20:D6:70:64:9A:4A:4A:9C:B2:E6:67:72:17:07:41:AD:F7:C5:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WSDWcGSaSkqcsuZnchcHQa33xRo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/2b8e6d-a2c8-4e7d-96ca-ac764c952357/1/WSDWcGSaSkqcsuZnchcHQa33xRo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/2b8e6d-a2c8-4e7d-96ca-ac764c952357/1/WSDWcGSaSkqcsuZnchcHQa33xRo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:9c:68:ec:90:86:8f:22:f1:a6:09:7a:c0:dc:f0:41:92:8e:
da:55:8e:7b:9c:e0:9e:ba:a3:63:e6:81:26:2e:54:f6:8c:63:
79:23:9a:02:80:80:14:73:f1:f2:88:8d:0c:7b:52:d8:7b:89:
ab:0e:5a:74:dd:81:e8:7b:a1:49:f6:07:9a:b8:43:a9:09:9a:
75:92:b5:2a:ff:3c:b9:47:67:6d:0e:b0:3f:a9:1f:0d:7d:6b:
43:8e:75:28:44:ed:b5:84:db:4f:8f:2e:80:11:88:36:b5:bd:
5b:24:9f:22:17:e6:56:a1:6d:3e:1a:c4:15:d2:c7:57:62:74:
bc:68:22:19:f4:90:00:4f:60:17:79:b3:3d:ed:2e:56:8d:9f:
62:44:f8:aa:64:21:63:25:5f:e2:32:21:9e:3a:a1:1f:d3:5c:
3d:fa:ea:db:7a:30:5d:05:34:3a:c5:01:98:3f:c6:5e:74:03:
34:1b:30:0f:96:33:c8:d4:49:ce:6c:ec:a3:66:e5:e3:96:4a:
e4:c3:5c:dc:34:da:5c:91:bf:19:76:10:6c:33:98:1b:fa:37:
26:1b:d8:84:cd:a9:5c:24:98:10:b6:ca:b4:42:11:21:4f:22:
a9:46:e6:d5:f8:85:50:39:5f:28:f5:23:96:bf:ff:e8:96:17:
56:14:a1:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:32 2025 by rpki-client