Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/c931fc-df1e-4bb1-9de9-d74a12959ad7/1/W9bL2qeUqXp9gmZwLLBU8bJJ1L8.mft
File: W9bL2qeUqXp9gmZwLLBU8bJJ1L8.mft (raw, json)
Hash identifier: SCOs5TcZ5oisrrbpRDkdijHzVR/Mbc7ejcLuHn7wSDw=
Subject key identifier: BE:CA:B7:9C:45:CB:1E:8C:BA:83:FD:08:63:B4:EC:44:45:6D:95:00
Authority key identifier: 5B:D6:CB:DA:A7:94:A9:7A:7D:82:66:70:2C:B0:54:F1:B2:49:D4:BF
Certificate issuer: /CN=5bd6cbdaa794a97a7d8266702cb054f1b249d4bf
Certificate serial: 0194BD8525CBB17450E80F8E9C305607CCED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W9bL2qeUqXp9gmZwLLBU8bJJ1L8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/c931fc-df1e-4bb1-9de9-d74a12959ad7/1/W9bL2qeUqXp9gmZwLLBU8bJJ1L8.mft
Manifest number: 13BC
Signing time: Fri 31 Jan 2025 18:00:07 +0000
Manifest this update: Fri 31 Jan 2025 18:00:07 +0000
Manifest next update: Sat 01 Feb 2025 18:00:07 +0000
Files and hashes: 1: W9bL2qeUqXp9gmZwLLBU8bJJ1L8.crl (hash: RQ3Qr0zLWXHn8z2fHVzewiehGzYYewRsZp6zvjVU/zw=)
2: cwNcFibEiknBhjZUsu5CDMCAHjU.roa (hash: uRGOj4tJKaLxVK1NmQ/cajMQwRP5s1agqok1B0mO3Is=)
3: ocfaSphrJL3xu-4-94X1BAg_eco.roa (hash: CMK1dG+CtJembHP9+sAk12iQiNKdSn83yhz9BkvkSQ4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:25:cb:b1:74:50:e8:0f:8e:9c:30:56:07:cc:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5bd6cbdaa794a97a7d8266702cb054f1b249d4bf
Validity
Not Before: Jan 31 18:00:07 2025 GMT
Not After : Feb 1 18:00:07 2025 GMT
Subject: CN=becab79c45cb1e8cba83fd0863b4ec44456d9500
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:a7:35:04:d0:1f:72:02:02:ec:3d:db:ea:92:
8d:de:10:4d:38:20:06:65:ad:e5:4b:64:e3:ec:c2:
76:1f:84:c6:22:c1:29:4c:b1:f8:4c:79:94:dc:9d:
b9:a8:63:52:ec:0d:03:36:3c:ed:61:fb:6d:d4:19:
b0:f0:21:ea:cc:b1:9b:f2:20:65:99:66:1c:6b:df:
3b:99:bd:98:71:d6:72:ad:66:37:c5:e4:d7:5b:c6:
82:83:17:49:fd:65:12:7e:fd:83:15:e3:2a:4c:c4:
7d:84:82:77:6d:fe:db:64:18:39:6a:30:db:8e:48:
5c:2f:ad:d6:94:86:8c:f0:e8:3b:f4:59:88:79:e2:
24:bd:ed:c9:77:87:2d:06:dd:4b:9e:e5:e0:f4:7d:
82:c3:15:d3:ac:91:1b:c5:0f:13:b5:d3:99:c9:4f:
54:90:eb:6a:4a:51:78:2e:7d:7d:39:33:fb:37:43:
b6:23:d5:05:8b:8f:d7:77:5a:4b:20:79:f6:5b:4c:
1b:47:13:be:b4:af:37:0d:c3:a9:c7:99:07:34:01:
54:b4:21:ce:8f:35:1e:bb:9a:d5:92:5d:88:6f:9f:
9b:82:9b:2f:e9:21:bd:68:9c:0e:ef:52:a1:a1:24:
3d:40:a0:17:b4:58:b0:8c:a9:7d:03:66:42:91:30:
7e:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:CA:B7:9C:45:CB:1E:8C:BA:83:FD:08:63:B4:EC:44:45:6D:95:00
X509v3 Authority Key Identifier:
keyid:5B:D6:CB:DA:A7:94:A9:7A:7D:82:66:70:2C:B0:54:F1:B2:49:D4:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W9bL2qeUqXp9gmZwLLBU8bJJ1L8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/c931fc-df1e-4bb1-9de9-d74a12959ad7/1/W9bL2qeUqXp9gmZwLLBU8bJJ1L8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/c931fc-df1e-4bb1-9de9-d74a12959ad7/1/W9bL2qeUqXp9gmZwLLBU8bJJ1L8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:5f:39:32:e2:ae:f4:8c:03:fb:06:31:3c:8d:63:68:85:4e:
1a:d0:e8:18:d1:b8:99:16:ac:65:80:6b:cc:3d:f7:d7:f7:7e:
58:f1:2d:8c:ac:fc:f5:dc:cf:32:3f:34:1a:d3:f8:cb:68:ed:
51:5f:d9:21:14:a6:81:41:bd:96:a7:73:74:0c:f5:b3:11:41:
51:64:d3:65:c5:46:e6:c2:ba:fb:f6:b9:fa:fb:0d:81:cc:57:
02:1e:bd:b4:22:d2:7d:20:f8:37:cb:34:f3:c5:ba:4f:9a:97:
11:cb:01:5a:73:fa:da:ca:d8:12:c6:f5:96:6c:99:f3:4e:27:
aa:98:99:4c:34:28:87:88:eb:53:ae:90:a5:da:01:b3:57:09:
20:76:93:62:63:12:89:a4:ab:5c:41:87:84:f9:35:42:51:31:
7a:92:3b:8d:19:c3:45:6f:c2:37:1f:01:c0:65:a1:33:89:e2:
dd:e8:36:a3:49:ed:6f:ab:a7:be:2d:40:85:0f:7c:b1:77:03:
84:12:6a:9f:04:62:26:4a:c8:d0:db:b6:93:21:d3:1c:4d:14:
3b:ae:96:ba:3d:b8:c9:de:ee:29:cb:d8:94:a5:c6:98:8d:25:
b1:cc:63:ba:0f:aa:61:d8:15:04:43:fa:71:0c:b3:6c:e2:4e:
3e:40:08:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:29:27 2025 by rpki-client