Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/2603bd-815c-4fb0-9b9c-553458c90899/1/W5YiHahfbIqAcDV2aDrSw5PyO8w.mft
File: W5YiHahfbIqAcDV2aDrSw5PyO8w.mft (raw, json)
Hash identifier: 424wXL6Keei3BvdAvhKFEca111yfLnXS5y5F7lhfnXE=
Subject key identifier: 6D:56:39:01:3E:0E:13:85:F7:55:9B:FA:20:87:84:57:15:F5:3C:B2
Authority key identifier: 5B:96:22:1D:A8:5F:6C:8A:80:70:35:76:68:3A:D2:C3:93:F2:3B:CC
Certificate issuer: /CN=5b96221da85f6c8a80703576683ad2c393f23bcc
Certificate serial: 0194BCA9CCB7EA21B2DD1B45F4E3FA0EFDEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W5YiHahfbIqAcDV2aDrSw5PyO8w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/2603bd-815c-4fb0-9b9c-553458c90899/1/W5YiHahfbIqAcDV2aDrSw5PyO8w.mft
Manifest number: 03D5
Signing time: Fri 31 Jan 2025 14:00:31 +0000
Manifest this update: Fri 31 Jan 2025 14:00:31 +0000
Manifest next update: Sat 01 Feb 2025 14:00:31 +0000
Files and hashes: 1: W5YiHahfbIqAcDV2aDrSw5PyO8w.crl (hash: hX2u1bCNin8DKVSNpSA3tK9+zavPs+0xroHDx2fL3yc=)
2: aC3k6Pc-VbYaZAExCYMf-r0FJik.roa (hash: sjHut+jtNlmiU2BIEntfi+uVsFkRaMGa8qqarc0jF00=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:cc:b7:ea:21:b2:dd:1b:45:f4:e3:fa:0e:fd:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b96221da85f6c8a80703576683ad2c393f23bcc
Validity
Not Before: Jan 31 14:00:31 2025 GMT
Not After : Feb 1 14:00:31 2025 GMT
Subject: CN=6d5639013e0e1385f7559bfa2087845715f53cb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:90:7c:9a:b0:96:ff:1d:58:17:00:f8:a4:de:
f3:43:a6:f3:71:ab:d4:53:11:e3:0b:0d:2d:23:e0:
e1:6e:70:0c:27:74:a6:17:6c:53:50:76:35:25:09:
a8:b2:53:49:1f:a8:8e:3b:2c:4c:62:41:01:87:08:
64:39:79:74:84:16:11:95:fa:51:5e:27:92:ae:8d:
80:b5:8e:aa:96:22:f3:31:92:f3:5d:28:a9:74:fe:
48:33:ad:0c:5a:5c:cd:50:99:15:06:9b:f9:70:98:
ba:ac:65:99:14:1c:fb:fe:0a:49:1d:22:f6:23:c4:
d4:86:7e:19:f9:1a:47:98:06:b4:a9:17:9d:be:7d:
93:44:c6:e4:3a:c5:32:6e:c2:d1:70:67:aa:bf:96:
4a:a7:47:6a:9b:1a:65:78:07:d9:8f:e7:5d:38:d2:
a0:28:43:0b:30:ab:a8:47:8e:6e:30:56:21:a6:ff:
b3:8a:b0:db:8d:b1:13:37:da:f8:21:47:5f:af:af:
3a:3f:67:bd:f6:fb:b1:56:2f:6e:2c:0a:21:ad:b4:
b2:10:43:e0:e6:59:91:96:67:f3:f0:f9:2f:d6:43:
f1:36:72:ea:93:49:e2:a2:f7:3f:67:69:cb:a2:e7:
7f:4f:93:a0:66:dd:c9:4d:11:4e:c0:06:24:a5:8f:
b0:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:56:39:01:3E:0E:13:85:F7:55:9B:FA:20:87:84:57:15:F5:3C:B2
X509v3 Authority Key Identifier:
keyid:5B:96:22:1D:A8:5F:6C:8A:80:70:35:76:68:3A:D2:C3:93:F2:3B:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W5YiHahfbIqAcDV2aDrSw5PyO8w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/2603bd-815c-4fb0-9b9c-553458c90899/1/W5YiHahfbIqAcDV2aDrSw5PyO8w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/2603bd-815c-4fb0-9b9c-553458c90899/1/W5YiHahfbIqAcDV2aDrSw5PyO8w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:ca:5f:f2:c8:eb:4b:3e:f6:7e:11:76:a4:ce:ab:e2:48:4a:
e7:89:5a:04:c9:90:e2:19:65:e2:11:a0:44:f6:d9:2b:cf:3b:
18:8f:e3:9c:9e:43:57:d1:63:1d:0d:62:12:10:15:cd:44:d8:
80:47:87:ef:18:7d:28:6d:83:2a:d4:fe:c7:85:34:ff:d7:52:
8e:81:35:a3:ff:73:44:86:e7:b0:02:b4:53:be:d2:0d:9e:65:
b4:e5:02:cc:35:7f:15:f8:f4:1f:87:65:21:88:d0:e9:79:e2:
0d:c3:eb:4a:14:f3:0f:48:4a:19:ab:d6:b7:30:5a:8f:c2:9e:
ea:5d:60:93:1e:d7:d5:e6:8a:d6:33:eb:4e:4e:da:db:4e:1d:
35:de:53:54:c8:d3:a1:c1:f4:65:56:d4:8d:17:39:92:44:d5:
6f:d0:20:c8:2e:af:50:a4:d9:ca:62:6a:4a:ed:ab:7d:5d:5d:
aa:f3:d1:02:7f:ec:c5:b2:87:6c:07:ab:b5:3f:d6:bb:80:56:
42:3e:ed:14:f2:af:df:ad:6f:85:f2:af:a7:b7:c1:fb:1c:8f:
9f:1d:ac:ad:46:12:e9:89:7b:fa:81:f5:7a:c1:44:cf:a5:c8:
db:74:34:fd:f2:a3:b0:dc:87:e8:29:dd:a1:e6:59:b1:92:f3:
c0:6d:36:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:37:49 2025 by rpki-client