Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/c71daf-dd66-41d8-b04f-da88b6bdb316/1/WB7MGnTPkqthnF9xASOTfOUNnEM.mft
File: WB7MGnTPkqthnF9xASOTfOUNnEM.mft (raw, json)
Hash identifier: XBzU1zqAMfTDAYNIWOeTk2A2BT3Y3GOdKUp0bCjzfXE=
Subject key identifier: 54:74:EC:32:27:B2:03:B2:92:6E:49:6A:36:7A:6B:97:18:0C:88:8E
Authority key identifier: 58:1E:CC:1A:74:CF:92:AB:61:9C:5F:71:01:23:93:7C:E5:0D:9C:43
Certificate issuer: /CN=581ecc1a74cf92ab619c5f710123937ce50d9c43
Certificate serial: 0194BC3CAC5ED07C28CF14F75A63EBE65F4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WB7MGnTPkqthnF9xASOTfOUNnEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/c71daf-dd66-41d8-b04f-da88b6bdb316/1/WB7MGnTPkqthnF9xASOTfOUNnEM.mft
Manifest number: 1434
Signing time: Fri 31 Jan 2025 12:01:20 +0000
Manifest this update: Fri 31 Jan 2025 12:01:20 +0000
Manifest next update: Sat 01 Feb 2025 12:01:20 +0000
Files and hashes: 1: FRO4uwByqKxauyS9gXAIPw-fjUY.roa (hash: S7+hb35+hDpVRPSEr/9Dyjjwa4OmuFnKDBhwrckl+dA=)
2: WB7MGnTPkqthnF9xASOTfOUNnEM.crl (hash: dMLcWjO8B5HkGl+wHrmrMyC7A2irtdDTdKWSzbvzlfo=)
3: kRJQb1l8os5CIqMOU8LBEruOTx4.roa (hash: TdXs2Jpp+ognrukNFJlpBqk3DPNKW0kibHKNgBtL5tg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:ac:5e:d0:7c:28:cf:14:f7:5a:63:eb:e6:5f:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=581ecc1a74cf92ab619c5f710123937ce50d9c43
Validity
Not Before: Jan 31 12:01:20 2025 GMT
Not After : Feb 1 12:01:20 2025 GMT
Subject: CN=5474ec3227b203b2926e496a367a6b97180c888e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:04:fd:09:ea:d4:19:a5:dc:ec:98:33:e1:00:
f1:2a:e0:0c:35:6d:6d:5e:87:f5:9d:61:98:2a:33:
79:3b:e2:2c:0e:6b:7f:c9:65:4b:ea:f5:b0:ac:a3:
57:6f:b1:05:db:e7:50:40:69:4c:70:ca:cf:af:73:
ae:f8:d5:c1:a8:27:bc:66:d8:96:2c:3e:7d:75:6e:
3f:34:1a:06:6f:5d:a5:83:29:f7:9e:ea:0a:a1:68:
2a:14:58:70:ad:0d:b1:db:52:4a:a1:51:81:21:d2:
d3:2b:6a:8a:87:0e:85:d6:96:1d:da:d7:2e:47:35:
81:b5:da:34:55:05:fd:fd:7d:2a:55:9c:22:f0:67:
3e:1b:47:b6:14:22:8f:d6:00:c1:6d:5d:ce:3d:6b:
11:82:1a:78:78:6a:30:fe:f7:54:c8:a2:d3:f5:36:
6c:09:d7:45:02:5f:95:5e:b7:be:1d:d4:ab:1b:e8:
d7:38:82:72:e0:dc:bc:69:b7:69:ed:cc:69:16:79:
18:95:14:3e:7a:b7:d4:f5:8f:33:6c:73:5c:3d:da:
3c:32:49:5b:5e:76:1c:5b:ab:65:a7:36:84:be:a9:
31:8a:6d:11:25:30:5e:f1:d4:e9:c9:66:76:bc:96:
cb:ae:a3:79:7e:d7:87:13:7f:fa:9c:2f:74:b7:f6:
d1:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:74:EC:32:27:B2:03:B2:92:6E:49:6A:36:7A:6B:97:18:0C:88:8E
X509v3 Authority Key Identifier:
keyid:58:1E:CC:1A:74:CF:92:AB:61:9C:5F:71:01:23:93:7C:E5:0D:9C:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WB7MGnTPkqthnF9xASOTfOUNnEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/c71daf-dd66-41d8-b04f-da88b6bdb316/1/WB7MGnTPkqthnF9xASOTfOUNnEM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/c71daf-dd66-41d8-b04f-da88b6bdb316/1/WB7MGnTPkqthnF9xASOTfOUNnEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:35:34:6a:e1:e0:c5:bf:58:b7:00:c5:fa:cf:16:f1:d4:3e:
0c:33:70:3b:26:e7:34:a6:0a:d4:80:b3:17:f3:e8:26:23:f2:
5c:64:ad:49:86:2f:27:c0:54:4c:6e:75:61:5a:cb:4f:9c:fb:
70:3d:c7:89:43:a9:76:39:c6:16:87:ae:e8:28:3c:81:bc:5f:
c6:1e:9b:92:0b:0b:d0:ba:8c:5e:f7:81:23:d0:e2:44:a8:93:
af:08:9f:e3:3f:08:1c:c4:7d:92:68:dc:69:a5:77:14:53:6c:
ae:76:4f:d9:5d:f0:2f:b5:16:99:70:d5:33:e4:4d:f9:b1:53:
36:8a:6f:98:88:27:18:62:c7:84:3b:0f:0a:f7:c7:36:89:00:
fe:52:d1:85:22:c5:de:0b:03:d5:09:6d:02:6c:77:41:cb:04:
75:07:0e:26:5f:b0:0e:45:b0:27:0a:8a:9c:4a:99:2d:05:b7:
53:6b:28:e2:ea:f0:f4:85:1d:e0:5f:dc:72:9b:cb:29:b7:8a:
f5:a5:5d:ca:4b:f9:27:90:a9:f5:7b:98:c7:ce:66:5a:fd:b6:
ef:85:2a:e6:9f:15:b6:35:f8:a8:a5:29:cd:2d:95:56:8c:2c:
2f:a9:9c:3b:e6:0f:04:cb:bc:e6:a1:32:44:e4:f2:4f:32:a7:
82:6f:45:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:17:16 2025 by rpki-client