Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/ae40f1-4afd-439d-86c2-e87c9f4ba97d/1/wbsILYb1B7_635GSqmdqt9onDUI.mft
File: wbsILYb1B7_635GSqmdqt9onDUI.mft (raw, json)
Hash identifier: wgm4osKCFTnWw/T/tYn7PYDj2w2of4uxgupBkSdoQlM=
Subject key identifier: 9E:CF:59:7C:30:B7:D0:9E:80:53:8F:D6:7D:27:86:89:1F:0C:59:54
Authority key identifier: C1:BB:08:2D:86:F5:07:BF:FA:DF:91:92:AA:67:6A:B7:DA:27:0D:42
Certificate issuer: /CN=c1bb082d86f507bffadf9192aa676ab7da270d42
Certificate serial: 0194BD4EAAD30B9BE76A5F643850827BB919
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wbsILYb1B7_635GSqmdqt9onDUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/ae40f1-4afd-439d-86c2-e87c9f4ba97d/1/wbsILYb1B7_635GSqmdqt9onDUI.mft
Manifest number: 1428
Signing time: Fri 31 Jan 2025 17:00:36 +0000
Manifest this update: Fri 31 Jan 2025 17:00:36 +0000
Manifest next update: Sat 01 Feb 2025 17:00:36 +0000
Files and hashes: 1: oQclDl8_JxNhzqNyrIJDWCORZJA.roa (hash: JcEUx0LCrdDEqt2JdZzmeRRb5CPjlWwu7xHPm1S7f5w=)
2: wbsILYb1B7_635GSqmdqt9onDUI.crl (hash: EoUIeWKCIaHl9xffJ0rOFPHTQcZJFMSkwF5RcA2kGPE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:aa:d3:0b:9b:e7:6a:5f:64:38:50:82:7b:b9:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1bb082d86f507bffadf9192aa676ab7da270d42
Validity
Not Before: Jan 31 17:00:36 2025 GMT
Not After : Feb 1 17:00:36 2025 GMT
Subject: CN=9ecf597c30b7d09e80538fd67d2786891f0c5954
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:19:2b:96:df:05:57:72:32:f0:fb:22:a2:ab:
7e:63:09:3e:1d:6f:d7:dc:16:34:1d:e8:9c:04:4b:
41:9b:89:e9:94:49:aa:3c:0b:25:d7:db:35:43:24:
fd:a1:4c:cb:68:b2:68:26:85:6b:2c:58:2f:2b:9e:
3c:c2:0f:7f:d4:5e:7b:3d:63:61:f3:2e:87:e2:7f:
bf:c0:94:e4:03:55:65:d2:6a:1a:68:29:3a:7e:5b:
75:e0:12:81:25:14:ce:b5:e0:b4:19:08:22:92:8f:
01:ca:6e:33:27:c9:bb:ca:a5:f2:f3:b8:e4:75:06:
e6:00:0f:99:21:10:88:61:d1:68:76:96:17:01:5b:
79:6f:de:6d:f8:cc:59:e0:d3:c5:f5:d3:15:eb:9c:
ac:e4:3d:ef:89:4c:2b:9c:92:2c:ca:3f:cb:43:c5:
d0:90:c5:3b:45:84:9d:a1:5c:27:da:bc:33:6d:fd:
72:80:1f:47:dd:cf:70:5b:1f:ed:57:02:f4:66:fd:
11:d1:3c:f9:58:21:3e:7a:9f:b1:69:55:bc:f5:5b:
61:c0:03:eb:b2:c7:c0:68:c8:c7:75:86:aa:94:76:
13:98:87:7a:51:4d:fb:85:60:df:fa:ba:72:1a:b6:
94:21:01:bc:b0:5d:4c:16:4c:5d:0b:fe:a4:07:c7:
59:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:CF:59:7C:30:B7:D0:9E:80:53:8F:D6:7D:27:86:89:1F:0C:59:54
X509v3 Authority Key Identifier:
keyid:C1:BB:08:2D:86:F5:07:BF:FA:DF:91:92:AA:67:6A:B7:DA:27:0D:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wbsILYb1B7_635GSqmdqt9onDUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/ae40f1-4afd-439d-86c2-e87c9f4ba97d/1/wbsILYb1B7_635GSqmdqt9onDUI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/ae40f1-4afd-439d-86c2-e87c9f4ba97d/1/wbsILYb1B7_635GSqmdqt9onDUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:6a:05:fc:50:ab:db:3a:07:cd:65:17:f0:8f:f0:98:dd:5a:
d7:e6:f3:e8:f0:3e:94:90:c5:db:03:75:06:e5:39:2d:ee:b7:
be:4e:93:94:59:1d:1e:a0:3b:30:c2:1b:d0:4e:10:e6:3c:3b:
71:e9:2a:bd:85:04:34:3a:89:b2:d6:f1:9d:2e:7d:c8:f1:53:
4f:d2:aa:29:54:46:4b:54:ee:ed:1e:97:a0:f5:8c:2b:bd:77:
2a:c7:39:ce:4e:d6:ce:73:b4:9f:7d:ee:2e:e3:b8:3a:00:d2:
16:dc:04:59:96:2f:8e:1a:5d:cf:24:9a:04:87:57:fe:a0:5f:
b2:14:1e:c8:3c:9d:80:88:23:dd:37:09:a8:a3:f9:a6:6a:e0:
d2:ae:89:33:aa:09:7e:c8:41:42:b5:84:22:a3:f5:b8:31:3d:
1f:e2:0f:1a:27:1c:55:95:11:f8:69:41:69:0f:b6:5f:ac:38:
a8:06:5e:53:17:14:53:90:2d:91:63:3d:62:da:85:50:c3:50:
da:d5:82:1d:c4:b0:b1:79:ac:ab:af:76:d1:53:0e:c9:85:36:
b8:21:2d:9e:a9:a8:36:09:db:63:1a:9f:ef:b6:b6:16:f0:b4:
17:ef:9f:cb:13:63:e6:10:18:a8:a6:68:7d:79:ee:0f:34:9d:
94:cc:10:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:19 2025 by rpki-client