Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/fc96a4-36d1-4c3d-850b-3cd417aee9ce/1/WA3dtRFgPkHCt6u6PSSdXvXtTRE.mft
File: WA3dtRFgPkHCt6u6PSSdXvXtTRE.mft (raw, json)
Hash identifier: /SEAhj3vqAb6lAzxfuKc2xOE9mmivGO75b9J2JNct/o=
Subject key identifier: B7:64:9B:C7:AC:75:9F:54:D8:E7:DE:14:C0:FF:05:B8:03:C4:BD:05
Authority key identifier: 58:0D:DD:B5:11:60:3E:41:C2:B7:AB:BA:3D:24:9D:5E:F5:ED:4D:11
Certificate issuer: /CN=580dddb511603e41c2b7abba3d249d5ef5ed4d11
Certificate serial: 0194BD856F2C5D56A43DF8765880F1621952
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WA3dtRFgPkHCt6u6PSSdXvXtTRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/fc96a4-36d1-4c3d-850b-3cd417aee9ce/1/WA3dtRFgPkHCt6u6PSSdXvXtTRE.mft
Manifest number: 0191
Signing time: Fri 31 Jan 2025 18:00:25 +0000
Manifest this update: Fri 31 Jan 2025 18:00:25 +0000
Manifest next update: Sat 01 Feb 2025 18:00:25 +0000
Files and hashes: 1: WA3dtRFgPkHCt6u6PSSdXvXtTRE.crl (hash: mSvG8GJ05Z5yOLGUnqZklIHBCYzARTOeug1ElK2wtzA=)
2: e0MNfuXlfvKgRvC9CopzDlR6QJs.roa (hash: EP4IKQWQkDtxiqLTMMk/RcDKJIiLy3Rh0R6YqC1qh6A=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:6f:2c:5d:56:a4:3d:f8:76:58:80:f1:62:19:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=580dddb511603e41c2b7abba3d249d5ef5ed4d11
Validity
Not Before: Jan 31 18:00:25 2025 GMT
Not After : Feb 1 18:00:25 2025 GMT
Subject: CN=b7649bc7ac759f54d8e7de14c0ff05b803c4bd05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:12:8f:d7:07:3e:26:33:31:ef:e8:b9:71:94:
61:aa:d3:b4:53:7b:6e:40:26:19:87:75:02:1a:61:
e0:be:61:af:a3:f4:a2:4b:a0:34:c4:ed:59:37:d0:
e0:8b:2e:e8:8e:bf:3b:a5:de:ed:5b:e2:c4:2b:d4:
1d:4d:a9:3d:95:e1:5d:ea:79:bc:0c:0d:97:cb:af:
5f:c8:a9:03:08:41:10:d5:f5:a9:6b:f4:a9:b9:04:
0b:e1:ef:08:8b:47:f3:b9:6e:83:38:86:fc:2e:e6:
cd:ca:44:a9:dc:d6:7e:ca:d0:14:c5:d9:ee:f8:3a:
40:84:d6:f7:65:c1:5d:38:f3:52:0c:06:89:9b:75:
e9:67:27:c5:56:16:3f:83:da:93:fc:a8:98:81:d2:
e8:6f:a3:85:a7:b6:31:a7:40:e6:d2:91:c4:42:e2:
a2:0f:ec:b1:37:4f:02:00:d0:b2:65:ad:a1:01:35:
2b:10:a1:e0:a1:26:69:51:a7:e2:f7:74:2b:9f:9d:
6c:57:1f:92:10:8e:6f:fa:06:f8:66:c1:3e:23:07:
29:41:57:bf:2c:cc:ed:6c:b5:09:87:8c:77:73:de:
4a:ee:99:3d:ec:27:a4:29:ee:80:a5:c4:48:b9:10:
f0:39:2c:5f:88:71:db:39:e2:95:e5:95:a9:2c:67:
df:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:64:9B:C7:AC:75:9F:54:D8:E7:DE:14:C0:FF:05:B8:03:C4:BD:05
X509v3 Authority Key Identifier:
keyid:58:0D:DD:B5:11:60:3E:41:C2:B7:AB:BA:3D:24:9D:5E:F5:ED:4D:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WA3dtRFgPkHCt6u6PSSdXvXtTRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/fc96a4-36d1-4c3d-850b-3cd417aee9ce/1/WA3dtRFgPkHCt6u6PSSdXvXtTRE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/fc96a4-36d1-4c3d-850b-3cd417aee9ce/1/WA3dtRFgPkHCt6u6PSSdXvXtTRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:43:61:ca:a4:76:68:e8:ac:29:1c:b9:50:dc:2f:f4:d9:13:
06:3e:9b:ac:86:c6:2d:b4:7a:ce:86:34:7c:16:d3:40:9d:86:
f9:fe:33:a6:77:d2:1e:a2:8f:63:5c:39:59:cb:df:4e:25:7a:
57:b9:2c:dd:66:bd:6c:59:c3:0d:30:88:d5:4f:21:20:ca:78:
8e:62:ca:b1:ec:f1:90:1e:ef:cb:ff:2b:f0:3a:d8:8c:43:aa:
d9:85:00:0f:a3:f2:fd:1e:96:70:02:36:f0:96:ca:d8:14:66:
fa:42:29:59:80:7e:da:6a:40:05:7e:68:4d:46:8f:f0:39:53:
1e:9c:92:06:e0:a2:75:20:52:ff:17:90:7b:98:7c:67:36:05:
0d:20:01:92:70:fd:13:05:65:a3:63:f9:7f:a6:01:97:ad:0d:
1a:55:c4:2b:27:a3:5e:f8:63:2f:a2:00:ee:8c:3c:2c:61:31:
cc:9c:e4:26:e3:14:a5:70:6d:1d:73:ca:79:4d:a7:46:85:3f:
0a:7b:55:e6:41:bd:40:f0:43:43:89:0a:c5:d3:fb:74:a9:5e:
97:bb:bf:6a:80:6c:71:43:b2:2a:b8:2d:cc:93:7e:ea:19:11:
25:19:6a:57:28:03:00:af:58:36:25:71:15:be:e8:1e:a6:99:
21:1f:17:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:17:55 2025 by rpki-client