
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/af2dd5-3f6e-45d5-b10e-b55f70fb1142/1/WZypahnO8ifMM7NFhZaqRV0rePg.mft
File: WZypahnO8ifMM7NFhZaqRV0rePg.mft (raw, json)
Hash identifier: zPGvuA/ZQxtXZ9q5oCmJcE5fuliJ78N+3dONHbnCMa4=
Subject key identifier: 25:E5:90:5F:6F:89:04:EE:B7:4F:E4:C4:19:15:F2:73:64:3F:E9:2E
Authority key identifier: 59:9C:A9:6A:19:CE:F2:27:CC:33:B3:45:85:96:AA:45:5D:2B:78:F8
Certificate issuer: /CN=599ca96a19cef227cc33b3458596aa455d2b78f8
Certificate serial: 0194BC04F8239F0C3C7E9F3B1ADF29E6148F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WZypahnO8ifMM7NFhZaqRV0rePg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/af2dd5-3f6e-45d5-b10e-b55f70fb1142/1/WZypahnO8ifMM7NFhZaqRV0rePg.mft
Manifest number: 0388
Signing time: Fri 31 Jan 2025 11:00:29 +0000
Manifest this update: Fri 31 Jan 2025 11:00:29 +0000
Manifest next update: Sat 01 Feb 2025 11:00:29 +0000
Files and hashes: 1: WZypahnO8ifMM7NFhZaqRV0rePg.crl (hash: JIGWetle2Dbw8kaTxhS5LH8jxEwC661U6drFCBf2Jsk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:f8:23:9f:0c:3c:7e:9f:3b:1a:df:29:e6:14:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=599ca96a19cef227cc33b3458596aa455d2b78f8
Validity
Not Before: Jan 31 11:00:29 2025 GMT
Not After : Feb 1 11:00:29 2025 GMT
Subject: CN=25e5905f6f8904eeb74fe4c41915f273643fe92e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:52:b5:08:49:ef:fe:77:49:89:65:e1:74:b4:
b3:77:4f:9f:43:d6:53:b8:d1:cb:e4:eb:8b:2c:c2:
a6:ba:9e:e6:d8:4e:28:f5:e7:d0:2e:94:d8:62:31:
ba:da:ba:96:81:d1:10:b7:f1:ea:a9:bf:04:10:95:
8f:c6:13:3e:45:7b:d4:d2:a7:87:70:9b:49:81:f8:
8f:64:5b:06:bf:7f:a1:fe:59:a7:8f:e1:ee:98:5f:
12:fe:cc:e9:2e:49:54:ea:ce:93:57:3f:1d:be:3c:
69:5a:72:26:46:2b:ad:05:04:41:6b:d1:df:0f:94:
0c:da:af:3d:09:a1:94:a1:01:be:52:38:87:0c:cb:
8e:60:18:f1:60:44:8e:ee:ba:9b:30:6b:65:2b:4a:
fd:e6:f5:cf:be:13:ff:e2:6f:f1:25:68:1b:8f:80:
8b:45:c2:58:7c:fb:22:84:cd:d8:0f:eb:4b:26:46:
52:e3:a1:f3:38:c1:e5:77:e0:69:88:bc:5a:c0:aa:
c8:95:48:8d:ca:41:c3:2b:c9:cc:a4:3b:e6:32:83:
4b:bf:b6:3c:e4:b5:d4:e6:4b:1a:3e:cb:68:56:3e:
52:44:0c:f0:f7:e8:3e:8e:ff:36:87:87:3d:87:9b:
b9:f5:9f:55:65:7a:f0:40:cf:73:74:82:d6:4a:8a:
af:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:E5:90:5F:6F:89:04:EE:B7:4F:E4:C4:19:15:F2:73:64:3F:E9:2E
X509v3 Authority Key Identifier:
keyid:59:9C:A9:6A:19:CE:F2:27:CC:33:B3:45:85:96:AA:45:5D:2B:78:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WZypahnO8ifMM7NFhZaqRV0rePg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/af2dd5-3f6e-45d5-b10e-b55f70fb1142/1/WZypahnO8ifMM7NFhZaqRV0rePg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/af2dd5-3f6e-45d5-b10e-b55f70fb1142/1/WZypahnO8ifMM7NFhZaqRV0rePg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:a1:89:34:73:50:b3:27:2f:bb:84:26:71:9b:a7:be:7b:5b:
a8:2f:07:77:fa:89:14:7e:6f:89:c8:08:31:c8:e0:cb:c2:db:
99:78:ec:59:d2:4f:78:0e:df:65:e4:c8:31:92:6e:9f:cc:20:
7c:fa:43:4b:ea:a2:31:a2:ae:57:5f:fd:35:ba:e9:a2:d8:57:
36:72:d4:70:7d:26:f5:41:f9:2e:f5:71:12:79:0c:c3:aa:95:
aa:50:ba:e6:d9:f2:1a:5a:5a:52:22:7f:08:43:7a:f4:fd:ec:
08:04:0f:53:da:4b:53:52:2b:3f:af:b5:fd:61:3a:83:50:09:
5b:a2:66:62:2c:ba:8d:20:a4:89:54:66:94:25:8d:c6:0e:31:
ca:15:f4:04:5d:5c:b2:69:ae:b5:fd:d8:fc:82:15:3c:ec:7b:
5d:2d:b2:cc:1c:8c:b9:36:63:91:42:8c:4a:ec:e2:39:3d:76:
65:b4:f7:81:a5:58:11:64:86:27:7a:3c:bd:53:82:25:e2:eb:
75:41:67:bf:49:32:92:b9:bf:d3:a9:f3:c9:70:39:16:5e:0e:
1c:66:26:c6:4f:9a:86:62:7f:0a:f3:5c:7c:f3:a4:df:4e:74:
dd:89:24:a0:8c:89:34:99:d6:50:39:a3:7e:94:d2:b3:13:0d:
ac:fc:8f:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 16:24:40 2025 by rpki-client