Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/c58189-d57e-415d-b977-0067bcaf3770/1/WKXtjj7MkqLejICr6agZXV_5l-Y.mft
File: WKXtjj7MkqLejICr6agZXV_5l-Y.mft (raw, json)
Hash identifier: XHKRKCDF22fHsSLt9/ACL1IdCwYqdvtNI/MWPh8Z5NU=
Subject key identifier: A6:E0:E9:72:FF:C6:53:38:0B:63:A9:49:46:BA:A9:8E:AA:69:C3:6B
Authority key identifier: 58:A5:ED:8E:3E:CC:92:A2:DE:8C:80:AB:E9:A8:19:5D:5F:F9:97:E6
Certificate issuer: /CN=58a5ed8e3ecc92a2de8c80abe9a8195d5ff997e6
Certificate serial: 0194BC04B816E36976C57F036460A788A1CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WKXtjj7MkqLejICr6agZXV_5l-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/c58189-d57e-415d-b977-0067bcaf3770/1/WKXtjj7MkqLejICr6agZXV_5l-Y.mft
Manifest number: 0B91
Signing time: Fri 31 Jan 2025 11:00:13 +0000
Manifest this update: Fri 31 Jan 2025 11:00:13 +0000
Manifest next update: Sat 01 Feb 2025 11:00:13 +0000
Files and hashes: 1: WKXtjj7MkqLejICr6agZXV_5l-Y.crl (hash: s1axDzWxwdRoAnYfQrPkyMKen992lCFxRNpptIGXJfE=)
2: yaeOkPk5PAc3CyptDZFnR-9_TDc.roa (hash: U7LQZWfNIcJS/maFkqunUXfknCM0Oqd5HXcK5KxayII=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:b8:16:e3:69:76:c5:7f:03:64:60:a7:88:a1:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58a5ed8e3ecc92a2de8c80abe9a8195d5ff997e6
Validity
Not Before: Jan 31 11:00:13 2025 GMT
Not After : Feb 1 11:00:13 2025 GMT
Subject: CN=a6e0e972ffc653380b63a94946baa98eaa69c36b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:de:70:9a:ff:08:11:b0:d9:81:c1:10:6b:c1:
2b:8d:b2:8c:21:65:8e:50:3b:4c:56:7b:a7:6d:b1:
cb:f7:a9:db:f7:c8:8d:0e:86:5c:ee:cf:b0:81:4a:
71:81:a9:a4:ef:a5:11:39:ad:03:ee:a0:ed:e2:fe:
96:c6:21:fa:d9:5c:9f:93:c9:ed:72:46:f7:4e:7f:
94:d1:c9:23:53:e7:ee:ae:8a:54:18:81:c1:86:ee:
0f:2f:4c:14:f7:37:35:7e:0f:c7:5d:38:1b:92:39:
7c:d6:04:6b:1f:4d:a4:43:d9:66:87:a7:bc:77:33:
37:3f:8e:15:ea:e9:88:1a:19:13:14:d2:85:97:31:
2d:75:5e:8e:68:5c:bf:a7:d7:35:46:f9:ef:f2:2e:
c4:c8:39:a0:b0:2f:2f:a8:53:c5:c4:da:d3:30:d5:
16:26:13:29:42:1d:f5:bb:f6:a2:a4:72:aa:6e:99:
b4:0b:50:9b:71:e8:81:c6:5c:1f:ef:2c:90:e4:ad:
4a:0e:71:c4:bf:78:f7:da:9d:f1:80:bf:4b:79:d8:
ec:48:44:63:5a:e4:40:9f:b0:93:17:0d:ec:d9:7a:
8d:a1:87:9e:57:fa:a7:3b:92:9d:06:9b:aa:de:5c:
a1:50:c2:f4:2a:d0:5e:ae:37:85:36:c6:72:a9:2e:
a1:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:E0:E9:72:FF:C6:53:38:0B:63:A9:49:46:BA:A9:8E:AA:69:C3:6B
X509v3 Authority Key Identifier:
keyid:58:A5:ED:8E:3E:CC:92:A2:DE:8C:80:AB:E9:A8:19:5D:5F:F9:97:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WKXtjj7MkqLejICr6agZXV_5l-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/c58189-d57e-415d-b977-0067bcaf3770/1/WKXtjj7MkqLejICr6agZXV_5l-Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/c58189-d57e-415d-b977-0067bcaf3770/1/WKXtjj7MkqLejICr6agZXV_5l-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:48:ef:42:d3:c6:27:19:67:a5:64:64:54:23:4c:73:94:1d:
86:09:e1:59:4c:63:69:b3:4c:af:b4:8a:13:b4:4f:e0:f3:48:
1b:ba:f8:ac:a8:d7:53:68:e0:12:25:a1:d0:e5:1d:41:bf:73:
8f:0a:6e:74:c3:4e:57:f4:33:6f:1b:16:64:73:60:4d:bd:54:
bc:bc:18:88:67:b4:dd:18:ce:bf:79:31:47:cc:fe:13:21:2d:
d0:f7:8e:2d:51:e4:cb:17:55:3c:0a:43:fa:85:ee:e3:a4:7b:
94:29:c5:38:ef:64:9d:1a:4f:47:46:ac:35:bf:5b:b9:d8:d9:
85:e4:bd:2f:9a:d6:c2:d5:10:2e:4d:87:bc:7e:4f:b3:31:e2:
ce:61:46:0e:6c:9f:0f:59:02:53:c6:c8:24:d9:97:72:99:87:
0f:26:43:8c:12:cd:5a:e1:4b:cb:d5:a9:31:18:42:6f:00:44:
21:aa:e4:78:00:dc:a9:bf:b5:58:a9:ff:b6:f0:61:2d:78:17:
e2:99:8b:62:03:71:d6:8c:a0:4c:29:15:9d:d8:8e:92:66:1b:
1a:c0:e4:e5:a4:9e:b3:8c:7e:3e:5a:11:09:13:e2:66:f7:a5:
38:63:68:7a:25:08:c1:1b:0e:50:b2:7d:30:de:ec:09:89:2a:
4f:37:8b:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:37:01 2025 by rpki-client