Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/cdc024-ea9c-4508-b936-80b9120738ca/1/WE1ErVXCYthO_UQtyHZ7BBPhsWI.mft
File: WE1ErVXCYthO_UQtyHZ7BBPhsWI.mft (raw, json)
Hash identifier: K7pvb+UhTZk7mPmWnY3GMrUXxOTlTGWy1Qkc2O+jusc=
Subject key identifier: DC:DF:B1:EB:CE:64:98:20:A8:B2:64:7F:20:0E:8A:A2:6D:31:B2:E0
Authority key identifier: 58:4D:44:AD:55:C2:62:D8:4E:FD:44:2D:C8:76:7B:04:13:E1:B1:62
Certificate issuer: /CN=584d44ad55c262d84efd442dc8767b0413e1b162
Certificate serial: 0194BCE0C501994B0758E214C53DD46EB2F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WE1ErVXCYthO_UQtyHZ7BBPhsWI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/cdc024-ea9c-4508-b936-80b9120738ca/1/WE1ErVXCYthO_UQtyHZ7BBPhsWI.mft
Manifest number: 4D
Signing time: Fri 31 Jan 2025 15:00:34 +0000
Manifest this update: Fri 31 Jan 2025 15:00:34 +0000
Manifest next update: Sat 01 Feb 2025 15:00:34 +0000
Files and hashes: 1: NlmDLH5wWMGr_vzUkJAwntWEnjQ.roa (hash: 1/yiZpsUjLuoNGo0Ku/rpHLpaDxTkI6zMzawihAJCgI=)
2: WE1ErVXCYthO_UQtyHZ7BBPhsWI.crl (hash: cbZRjohAgHsSBnuVRJy0DD2KFUAZBx0h+c9+pSQKgaA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:c5:01:99:4b:07:58:e2:14:c5:3d:d4:6e:b2:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=584d44ad55c262d84efd442dc8767b0413e1b162
Validity
Not Before: Jan 31 15:00:34 2025 GMT
Not After : Feb 1 15:00:34 2025 GMT
Subject: CN=dcdfb1ebce649820a8b2647f200e8aa26d31b2e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:a5:72:5c:67:8f:68:be:d4:4d:49:d5:a3:74:
ea:e3:57:a9:de:4e:29:50:6e:cb:38:68:16:5f:7e:
16:3c:1e:2f:c2:70:5a:40:fa:c9:6e:3f:0b:4b:30:
d6:f2:65:c8:75:d6:3a:6a:25:5c:84:9a:12:97:a1:
08:39:be:b3:62:31:9d:06:9c:de:be:67:63:ee:45:
de:ab:3b:0b:41:c5:ec:eb:5c:02:8d:7d:67:76:8d:
b5:fe:68:8a:34:78:93:69:b9:2a:72:5b:19:81:6f:
1d:70:19:5d:36:f5:70:ca:1c:a7:2c:86:0b:e8:4b:
8a:c5:00:9e:30:bf:cd:89:e6:16:bc:3a:55:66:d9:
96:a0:b8:26:d3:07:ea:aa:61:b7:15:54:d3:8f:ff:
cd:3c:74:30:d3:8b:03:f2:cf:a2:f1:46:e3:48:67:
ff:f1:bc:ec:95:f8:a3:38:a1:92:b6:ca:08:15:a6:
9f:e5:e4:3a:59:6f:2f:db:c0:80:90:de:46:99:9c:
02:4e:14:97:79:58:d5:46:a3:12:24:96:10:f1:06:
0e:86:27:3e:c4:88:10:99:83:8f:95:c0:51:0f:54:
06:39:f2:d2:3e:95:71:fa:c1:f0:45:bd:c0:fe:be:
ce:9d:c7:a8:1a:c9:fd:cc:8c:03:34:5f:8d:b8:31:
d2:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:DF:B1:EB:CE:64:98:20:A8:B2:64:7F:20:0E:8A:A2:6D:31:B2:E0
X509v3 Authority Key Identifier:
keyid:58:4D:44:AD:55:C2:62:D8:4E:FD:44:2D:C8:76:7B:04:13:E1:B1:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WE1ErVXCYthO_UQtyHZ7BBPhsWI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/cdc024-ea9c-4508-b936-80b9120738ca/1/WE1ErVXCYthO_UQtyHZ7BBPhsWI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/cdc024-ea9c-4508-b936-80b9120738ca/1/WE1ErVXCYthO_UQtyHZ7BBPhsWI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:e4:14:90:ec:2f:e3:ca:b2:23:1b:4c:ac:ec:9c:0b:65:73:
b4:97:6f:7c:b7:be:f9:52:09:46:d2:4f:5b:1c:f2:5c:db:8b:
17:15:95:d0:5d:1f:3c:66:21:a0:06:25:c4:d1:d9:e0:7b:c6:
fb:20:ca:50:d3:6f:30:26:60:bc:b5:2b:e9:d8:d6:b2:a9:fb:
c8:91:ac:05:d8:fc:03:37:75:5c:c3:0c:b9:16:82:8e:ab:d4:
98:d3:9c:0f:80:24:92:08:c6:7d:e2:30:9e:41:bd:3e:b4:db:
70:74:b2:af:a0:2f:dc:57:71:d5:1d:36:dd:fc:d8:3b:59:05:
bd:b6:1e:b2:44:18:56:f8:1c:ca:79:24:1d:88:29:0b:3d:bc:
00:53:80:4f:9f:2f:72:3f:07:73:07:02:01:e4:0a:c6:09:30:
7c:da:a6:60:b3:ee:a8:22:58:e8:cb:2b:81:fe:92:49:82:df:
0a:fc:48:9f:ca:1d:4a:aa:84:7f:92:8f:7e:9b:61:49:8d:5e:
8c:0b:d6:64:46:03:b9:0a:a3:28:90:50:3e:ed:cf:6f:6d:f4:
5a:62:f4:30:50:8e:bb:90:9e:8a:d2:bf:02:1e:1b:b6:81:8c:
71:4b:1f:f8:7f:be:a5:a3:95:66:9b:9f:b6:15:8d:cf:75:01:
68:2f:54:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:57:02 2025 by rpki-client