Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/08d1cc-6373-4840-b48f-0aa08edb9063/1/Wddq-QkdoVgbul7BPl29tzYtnQ8.mft
File: Wddq-QkdoVgbul7BPl29tzYtnQ8.mft (raw, json)
Hash identifier: E0DJuVnHnV84mo8Twj1Td0tSs3tCLGnt9YeOyw/xigw=
Subject key identifier: F0:FF:FE:29:95:23:90:65:CA:6B:D6:90:A2:51:75:F4:C0:D9:5E:56
Authority key identifier: 59:D7:6A:F9:09:1D:A1:58:1B:BA:5E:C1:3E:5D:BD:B7:36:2D:9D:0F
Certificate issuer: /CN=59d76af9091da1581bba5ec13e5dbdb7362d9d0f
Certificate serial: 0194BC3C86E8BD257B5E404FBF49CC9CE472
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wddq-QkdoVgbul7BPl29tzYtnQ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/08d1cc-6373-4840-b48f-0aa08edb9063/1/Wddq-QkdoVgbul7BPl29tzYtnQ8.mft
Manifest number: 0EB7
Signing time: Fri 31 Jan 2025 12:01:10 +0000
Manifest this update: Fri 31 Jan 2025 12:01:10 +0000
Manifest next update: Sat 01 Feb 2025 12:01:10 +0000
Files and hashes: 1: Wddq-QkdoVgbul7BPl29tzYtnQ8.crl (hash: WyeX63MQQ2y9kOksunmEJ2ZSas057CL33ZuQNONlWpU=)
2: WxX1Hu2E5PBSUGmsXjK9hC9MNwk.roa (hash: yTqA3ZGTODQnxMnTADEBGt1VqhX3aMRxsME8/St0wzk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:86:e8:bd:25:7b:5e:40:4f:bf:49:cc:9c:e4:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59d76af9091da1581bba5ec13e5dbdb7362d9d0f
Validity
Not Before: Jan 31 12:01:10 2025 GMT
Not After : Feb 1 12:01:10 2025 GMT
Subject: CN=f0fffe2995239065ca6bd690a25175f4c0d95e56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:e4:0d:26:42:c9:1b:a4:9e:c7:82:3b:d1:81:
46:39:ae:50:1a:79:a3:fe:78:3e:05:84:b4:1b:4d:
88:ab:5c:e7:f7:9e:4e:c1:2e:99:c2:d7:c6:28:89:
e7:b4:8f:67:e3:b1:0e:83:36:7f:ca:6c:a0:50:c6:
22:22:b6:2f:02:54:12:b2:f8:7d:78:bc:d1:40:f8:
93:8d:d3:d6:61:73:5b:90:b1:b8:42:83:df:56:98:
5d:9e:61:34:30:a4:99:ba:9c:ce:46:e4:fc:4d:76:
a2:66:08:9c:89:46:8b:e1:4e:a6:40:34:25:20:ea:
22:bf:2d:c9:79:e3:69:c1:ca:50:2e:72:65:b8:24:
f6:95:bc:3e:d9:50:9f:97:f9:54:a9:6e:bf:0a:c4:
7b:8b:29:6d:3e:35:3e:ae:3e:90:29:02:e2:b4:6b:
01:36:8a:62:42:07:d4:33:e7:db:aa:c1:24:60:e1:
cb:06:be:9a:7d:e3:1d:aa:48:b8:40:2c:22:65:26:
93:50:cf:62:4d:2f:89:1e:a7:e4:ab:7c:22:8b:66:
14:a0:44:12:f5:3f:64:f3:30:51:6d:32:6d:26:14:
8f:5d:82:8f:bf:d3:c9:0e:3e:63:d3:65:62:9f:46:
c7:ba:98:4d:2c:fa:2e:33:fa:13:d7:47:0f:46:e6:
65:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:FF:FE:29:95:23:90:65:CA:6B:D6:90:A2:51:75:F4:C0:D9:5E:56
X509v3 Authority Key Identifier:
keyid:59:D7:6A:F9:09:1D:A1:58:1B:BA:5E:C1:3E:5D:BD:B7:36:2D:9D:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wddq-QkdoVgbul7BPl29tzYtnQ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/08d1cc-6373-4840-b48f-0aa08edb9063/1/Wddq-QkdoVgbul7BPl29tzYtnQ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/08d1cc-6373-4840-b48f-0aa08edb9063/1/Wddq-QkdoVgbul7BPl29tzYtnQ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:66:03:27:16:f4:0d:73:a5:dc:d3:39:6e:71:dd:4d:e2:57:
43:64:09:6b:6e:1d:a7:90:63:0b:ed:3e:2d:a9:cb:81:67:8d:
29:ec:fc:b5:6c:a3:8b:db:21:dc:1d:db:2d:1d:bf:8d:03:fd:
e4:0e:e6:85:3b:4e:4f:c5:0e:39:a1:e2:93:50:e0:60:1c:fe:
ad:e5:47:f7:d7:15:82:04:b2:6b:1b:14:c0:12:ea:60:e3:29:
5f:82:d1:49:51:4b:ec:17:34:bd:02:a1:32:e5:62:b9:bf:a6:
40:a2:a1:db:48:e7:e0:66:73:af:05:82:00:a0:8e:5b:64:e4:
df:78:18:c9:89:7e:f8:f8:d4:00:49:d9:62:5f:5f:19:91:a5:
11:69:04:5e:30:15:7f:1d:a5:22:6e:e3:d9:6e:99:27:26:07:
92:22:d6:49:54:59:c9:a1:fb:00:fa:81:21:46:a7:0b:82:f2:
a3:3f:40:fa:b5:dd:5f:8e:45:4a:2c:16:6b:c8:a8:91:45:70:
f0:13:d6:fc:3f:de:fd:53:55:ec:88:80:83:1c:ac:56:53:db:
98:c0:a5:10:36:06:98:04:f8:1f:22:eb:d6:46:50:ef:65:ab:
d9:2b:b0:f3:39:49:1b:71:e0:c5:c1:1c:b5:0a:a7:9b:55:7c:
2a:e9:2d:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:43:12 2025 by rpki-client