Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/a4fe8e-4b4d-4ac7-9a92-7a3b31be7b38/1/WPJnqqyZvwydHo5CneAczTzJDsA.mft
File: WPJnqqyZvwydHo5CneAczTzJDsA.mft (raw, json)
Hash identifier: S90hX73Qvv8HOtqD8yp3TwfN5VBRbaOtr5WsUk4XYiE=
Subject key identifier: CA:7E:BC:BF:41:AF:78:47:99:9F:5B:F4:D4:88:F1:D4:88:0D:A9:54
Authority key identifier: 58:F2:67:AA:AC:99:BF:0C:9D:1E:8E:42:9D:E0:1C:CD:3C:C9:0E:C0
Certificate issuer: /CN=58f267aaac99bf0c9d1e8e429de01ccd3cc90ec0
Certificate serial: 0194BD17ECE623EA884CB49EEB05C90A4A62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WPJnqqyZvwydHo5CneAczTzJDsA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/a4fe8e-4b4d-4ac7-9a92-7a3b31be7b38/1/WPJnqqyZvwydHo5CneAczTzJDsA.mft
Manifest number: 142E
Signing time: Fri 31 Jan 2025 16:00:49 +0000
Manifest this update: Fri 31 Jan 2025 16:00:49 +0000
Manifest next update: Sat 01 Feb 2025 16:00:49 +0000
Files and hashes: 1: VxmO12w306gaXQmH0gdTcOIKrpc.roa (hash: yL/doTnHVquXpnwAcQ1RYhbKS8XdZRYVklJVmjcOaeU=)
2: WPJnqqyZvwydHo5CneAczTzJDsA.crl (hash: dz1tB5kSsM6Es4lBSzct4/gOGudzh33eK3mbo37/exc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:ec:e6:23:ea:88:4c:b4:9e:eb:05:c9:0a:4a:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58f267aaac99bf0c9d1e8e429de01ccd3cc90ec0
Validity
Not Before: Jan 31 16:00:49 2025 GMT
Not After : Feb 1 16:00:49 2025 GMT
Subject: CN=ca7ebcbf41af7847999f5bf4d488f1d4880da954
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:b5:95:13:8f:25:b0:b8:86:07:d3:1d:ab:4b:
f5:6b:ca:02:3d:49:98:d4:3b:00:e1:91:5f:33:66:
d5:9f:a0:30:42:3d:fb:1f:74:6b:a5:0e:56:34:2f:
84:4b:2a:52:e2:c3:7b:c9:64:fe:79:41:86:27:eb:
22:0b:88:58:d8:7b:20:4a:b0:e7:c6:5a:35:7d:76:
92:41:56:f9:70:72:fb:16:62:eb:71:ca:12:ac:df:
e7:16:07:b0:b6:9d:0a:50:d1:9d:48:94:a0:57:f2:
9e:97:1c:69:47:06:be:73:e8:b9:65:64:5b:2b:2b:
2b:9f:39:5d:dd:68:e4:32:c5:95:3e:cf:3e:c1:2a:
ca:84:6e:fe:91:4a:44:06:e0:d2:31:45:d7:d8:1c:
7d:d9:3d:c7:5a:59:88:1e:34:bb:36:06:58:58:59:
c0:39:aa:fb:9e:ed:43:ef:47:8b:f6:9a:c1:97:66:
a3:cc:d1:c2:29:ba:bd:aa:1a:4f:fc:64:a7:2e:9f:
85:a5:68:0c:06:c0:68:e0:d2:ad:de:e8:be:4c:66:
4a:7e:9f:c9:4a:aa:a2:33:65:8b:ee:7b:8f:56:06:
a7:d4:6b:f2:1e:f2:6e:fa:55:8e:a7:59:13:29:e1:
5c:25:fb:6b:a2:7a:a6:c1:5a:86:77:41:47:2f:2c:
08:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:7E:BC:BF:41:AF:78:47:99:9F:5B:F4:D4:88:F1:D4:88:0D:A9:54
X509v3 Authority Key Identifier:
keyid:58:F2:67:AA:AC:99:BF:0C:9D:1E:8E:42:9D:E0:1C:CD:3C:C9:0E:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WPJnqqyZvwydHo5CneAczTzJDsA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/a4fe8e-4b4d-4ac7-9a92-7a3b31be7b38/1/WPJnqqyZvwydHo5CneAczTzJDsA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/a4fe8e-4b4d-4ac7-9a92-7a3b31be7b38/1/WPJnqqyZvwydHo5CneAczTzJDsA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:24:68:1f:09:46:30:4a:29:81:da:68:eb:70:5c:25:4f:e8:
b9:27:9c:12:11:05:c1:84:b2:bc:6e:94:a6:bd:33:58:da:62:
42:ab:d7:ec:34:2f:19:ab:08:e1:fc:f5:ba:ca:bd:b9:d4:c5:
d0:27:a5:a7:d8:78:39:60:e6:fc:74:ea:9b:d1:d9:b8:32:a6:
74:83:3d:b5:5e:8c:96:51:a5:c5:57:70:49:56:21:27:81:cf:
75:e8:b8:11:89:45:e2:7b:23:1f:6a:4a:68:3b:67:55:97:fe:
3b:47:20:b5:4e:12:52:e1:7e:80:0e:f6:ff:a7:b3:a5:d6:67:
56:b0:3a:54:5e:d0:7c:91:ee:f8:8f:7a:c8:11:02:1b:5f:e1:
26:a7:cd:8e:06:26:ff:cd:df:9b:76:f3:62:f3:dc:48:3b:74:
bf:da:09:be:93:e0:8f:8c:b6:36:48:f5:e8:dc:da:7b:f8:36:
f3:9a:ca:17:c1:a7:db:d2:80:6d:02:1f:93:86:b0:7e:77:cc:
57:c2:3c:a0:4d:65:a0:16:71:79:e5:85:5a:d9:7e:39:2a:fe:
b5:ed:18:6c:43:85:84:54:22:02:c0:4f:10:cc:bb:92:e7:dc:
dc:dd:ab:99:bd:e3:22:3c:e6:32:4d:d6:ee:9a:d7:d9:a3:ac:
82:0c:5f:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:04:24 2025 by rpki-client