Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/34bd6e-79a7-4126-8a32-2fd280e0d54a/1/WPde8NYw4dCGeQygt45-744qz7s.mft
File: WPde8NYw4dCGeQygt45-744qz7s.mft (raw, json)
Hash identifier: JkNoNfi/N7Wy9dBzy63Sat25WrjIsPfj6kbMw7p9T+I=
Subject key identifier: 66:52:3C:1C:29:12:20:F9:CE:B8:53:8C:39:BC:68:08:C2:7E:BC:78
Authority key identifier: 58:F7:5E:F0:D6:30:E1:D0:86:79:0C:A0:B7:8E:7E:EF:8E:2A:CF:BB
Certificate issuer: /CN=58f75ef0d630e1d086790ca0b78e7eef8e2acfbb
Certificate serial: 0194BCE0B5D572A89B59FE865AA712897E3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WPde8NYw4dCGeQygt45-744qz7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/34bd6e-79a7-4126-8a32-2fd280e0d54a/1/WPde8NYw4dCGeQygt45-744qz7s.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 15:00:30 +0000
Manifest this update: Fri 31 Jan 2025 15:00:30 +0000
Manifest next update: Sat 01 Feb 2025 15:00:30 +0000
Files and hashes: 1: WPde8NYw4dCGeQygt45-744qz7s.crl (hash: v+WHmtkvRBgbmyYRbM51jxTrt9AA13QVrj2jUOxw+WA=)
2: x5rquIVhJ13GXmSiEvGgLAga1-w.roa (hash: 89X00FnyaHqizMTzCA2kNKHXqUvFiwqZlo80Pxfjk08=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:b5:d5:72:a8:9b:59:fe:86:5a:a7:12:89:7e:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58f75ef0d630e1d086790ca0b78e7eef8e2acfbb
Validity
Not Before: Jan 31 15:00:30 2025 GMT
Not After : Feb 1 15:00:30 2025 GMT
Subject: CN=66523c1c291220f9ceb8538c39bc6808c27ebc78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:4c:e2:56:16:26:ad:dc:5d:9a:13:ee:0c:56:
a6:0a:c9:49:cd:9b:57:e0:44:bc:c2:18:8d:fb:2d:
2b:38:36:49:d8:6a:da:79:e9:77:4e:2e:97:c0:5b:
63:58:ba:b6:4f:7e:b9:db:10:89:56:e3:be:64:68:
73:15:ff:58:72:ad:26:a3:1f:c9:8f:33:58:d8:70:
22:5d:67:32:e2:d7:ac:1a:a4:f9:1a:5f:6a:4d:53:
96:56:e3:e1:52:dd:09:47:60:c5:44:16:b5:df:40:
a0:2c:81:bb:73:97:04:69:64:20:7e:40:6c:fa:87:
5d:8d:55:b6:f3:ee:34:f8:cb:5c:f9:ff:98:5c:3e:
1d:ff:d4:b0:e4:a1:41:19:9b:52:ff:25:95:0a:7c:
e6:f9:d1:20:34:59:2b:0c:52:c4:90:cb:f2:bd:e0:
5f:ea:21:48:60:98:dd:6c:ac:ec:22:53:14:95:88:
0a:46:08:9a:b5:f4:04:a0:24:2b:23:b4:10:59:2a:
eb:0f:d2:52:72:7f:28:86:e9:1a:ad:b7:54:f6:9d:
a7:65:f7:82:09:19:b4:55:f1:47:0b:db:27:66:d7:
21:af:8d:f5:fa:97:67:36:0c:0d:b7:90:53:6d:8f:
1d:f4:4e:2a:70:36:00:b6:6c:4f:ba:84:15:c8:ea:
d2:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:52:3C:1C:29:12:20:F9:CE:B8:53:8C:39:BC:68:08:C2:7E:BC:78
X509v3 Authority Key Identifier:
keyid:58:F7:5E:F0:D6:30:E1:D0:86:79:0C:A0:B7:8E:7E:EF:8E:2A:CF:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WPde8NYw4dCGeQygt45-744qz7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/34bd6e-79a7-4126-8a32-2fd280e0d54a/1/WPde8NYw4dCGeQygt45-744qz7s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/34bd6e-79a7-4126-8a32-2fd280e0d54a/1/WPde8NYw4dCGeQygt45-744qz7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:cd:76:b7:7a:f6:fa:2a:01:a6:7c:59:62:43:97:37:0e:76:
54:77:0e:30:99:fd:bf:ac:86:70:d1:61:df:b3:50:13:09:69:
ba:cd:de:3b:7c:98:1c:4b:69:05:15:ec:86:07:42:c6:b8:69:
98:c8:0d:e4:cb:20:25:8b:40:f7:c3:8a:b2:fa:be:32:72:40:
d6:cd:bd:d9:d8:cc:2d:05:00:f4:43:45:83:78:1e:8c:bf:68:
28:43:86:91:b6:6c:97:1e:f5:4e:46:f7:16:58:b0:32:db:72:
33:46:91:16:36:6c:94:df:89:14:12:2e:3a:91:ec:29:c2:1e:
24:f2:f4:5a:8c:31:a4:4a:1f:bd:57:e3:0c:24:59:b2:1a:35:
ee:ab:33:92:26:52:60:47:d9:54:65:27:c0:d4:ad:83:37:c0:
a4:d2:d1:fa:78:c2:ae:d3:d6:ce:c0:2d:29:09:97:ee:82:74:
06:72:3a:26:c2:db:4a:41:b8:b4:d0:2b:57:05:95:cf:01:a0:
50:ce:e1:53:da:a0:63:36:84:39:0d:41:ea:36:14:e0:a1:7a:
26:c7:49:a1:b5:39:d1:1e:ff:a8:a4:f4:d4:a7:52:0a:95:a3:
9a:62:b5:0d:ce:f8:77:ba:1b:86:bc:31:5f:49:6c:ba:27:1c:
37:5e:97:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:44:38 2025 by rpki-client