Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/147ae4-775b-4c48-b0da-c379f8c23fc1/1/WyxHDbJENILhlSOVOnjB7woWlHk.mft
File: WyxHDbJENILhlSOVOnjB7woWlHk.mft (raw, json)
Hash identifier: 6MfIBxizUtZY9ctC0ZGhrljU74XlD1nXmzBV5mYzpJo=
Subject key identifier: BF:88:F3:F4:A5:78:8D:27:24:D6:3A:83:D5:5A:D1:88:43:24:BA:FF
Authority key identifier: 5B:2C:47:0D:B2:44:34:82:E1:95:23:95:3A:78:C1:EF:0A:16:94:79
Certificate issuer: /CN=5b2c470db2443482e19523953a78c1ef0a169479
Certificate serial: 0194BBCEBA8173F6CBD3227F902CFCCFABA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WyxHDbJENILhlSOVOnjB7woWlHk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/147ae4-775b-4c48-b0da-c379f8c23fc1/1/WyxHDbJENILhlSOVOnjB7woWlHk.mft
Manifest number: 0BC9
Signing time: Fri 31 Jan 2025 10:01:14 +0000
Manifest this update: Fri 31 Jan 2025 10:01:14 +0000
Manifest next update: Sat 01 Feb 2025 10:01:14 +0000
Files and hashes: 1: 0AdevnLlsxFU0_MXijL2HLDuliU.roa (hash: Oq6mu5Hbl5chx/r3WVWbX/YQvEZQoJ2rWVh4OUcVSO0=)
2: WyxHDbJENILhlSOVOnjB7woWlHk.crl (hash: AgKZ+5XN7iWsBtwH/M2kiHrVtY6O30SbAlGbXD2x4B8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:ba:81:73:f6:cb:d3:22:7f:90:2c:fc:cf:ab:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b2c470db2443482e19523953a78c1ef0a169479
Validity
Not Before: Jan 31 10:01:14 2025 GMT
Not After : Feb 1 10:01:14 2025 GMT
Subject: CN=bf88f3f4a5788d2724d63a83d55ad1884324baff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:7e:cd:00:52:87:79:76:2c:1f:c6:b8:02:fd:
01:07:0e:28:fc:76:3d:d0:0e:d5:ff:62:9d:0f:0b:
43:40:79:18:d1:ec:bb:fb:5c:5e:a2:62:0c:86:6b:
13:fa:a3:1e:ee:70:7e:86:53:da:d4:9f:07:96:be:
f7:46:04:de:cb:59:43:c0:e5:2c:d1:3c:47:ec:8a:
1d:ac:e2:32:10:5c:b5:38:36:90:fd:4e:64:27:80:
34:f5:11:c9:14:ee:56:c4:ab:a7:af:5a:a8:f5:fe:
04:86:4c:13:e2:de:d1:aa:a6:e0:ce:a2:da:a6:b2:
dd:61:e9:f6:c8:ed:c9:ac:f5:ce:43:4b:5f:f9:34:
00:f8:73:85:70:73:5c:5c:94:16:c7:8d:4d:f3:12:
97:68:82:ba:b3:a3:cc:a6:1c:4f:08:0d:cf:47:75:
60:55:4f:64:fb:5b:cf:b2:0d:f1:5f:5a:01:da:d5:
c8:87:1f:16:7f:2a:7f:ae:c8:6c:b2:60:59:1d:ef:
e5:ca:32:e4:7e:6b:84:39:8f:55:16:0e:a4:e0:f1:
dd:df:3b:24:63:fa:c1:e8:0b:4d:9b:4e:7b:63:5e:
b0:60:d4:66:47:b5:52:b8:07:b6:fe:8a:72:46:56:
06:5e:95:a3:3b:ee:83:59:24:00:92:2c:44:ea:68:
a7:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:88:F3:F4:A5:78:8D:27:24:D6:3A:83:D5:5A:D1:88:43:24:BA:FF
X509v3 Authority Key Identifier:
keyid:5B:2C:47:0D:B2:44:34:82:E1:95:23:95:3A:78:C1:EF:0A:16:94:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WyxHDbJENILhlSOVOnjB7woWlHk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/147ae4-775b-4c48-b0da-c379f8c23fc1/1/WyxHDbJENILhlSOVOnjB7woWlHk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/147ae4-775b-4c48-b0da-c379f8c23fc1/1/WyxHDbJENILhlSOVOnjB7woWlHk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:43:cf:dd:5b:c0:33:fa:75:3b:e8:2c:56:a9:75:ec:d9:68:
59:4d:9d:1e:0c:cd:d7:07:e1:5f:f9:4c:a7:2f:ef:c9:81:29:
f4:7e:c4:be:55:07:e1:5a:c0:ac:89:b2:74:3c:80:4c:8d:3d:
4a:07:2d:b2:40:6a:65:2b:d5:00:e4:6e:66:b3:71:9d:79:ad:
b1:a3:38:78:3f:ed:e0:54:9c:52:28:c8:4a:be:01:50:1b:7d:
cf:4c:84:b8:ab:3e:c5:86:62:b0:e3:cb:f3:88:da:83:88:02:
0d:c6:35:b0:c5:d3:ac:7f:3f:08:21:fb:ee:6f:db:0e:29:4e:
0f:37:40:0d:f1:8d:f5:ad:07:7b:fe:72:f7:5e:7f:b7:7c:3a:
01:01:b4:04:d9:9c:29:77:02:16:83:ec:f6:14:33:78:46:b8:
a7:e3:f2:95:72:4a:19:f9:78:a1:4f:2f:36:63:43:1f:24:90:
ba:84:82:32:a7:59:47:c3:07:fc:9d:46:1c:47:24:57:98:6a:
92:43:75:e4:e9:62:20:40:bc:fb:a5:f3:fb:01:db:5d:7a:e3:
42:13:b3:81:02:5b:84:aa:34:85:3c:86:1d:08:46:92:c7:a2:
16:dc:ae:2c:71:79:d9:31:fa:fc:cc:d5:3a:74:7f:2f:f0:0f:
7c:90:52:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:43:16 2025 by rpki-client