Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/abb3ad-5805-42c2-af2f-c576c5e717c8/1/WM9XZktBa-WySLcdBD7xt4RT4F4.mft
File: WM9XZktBa-WySLcdBD7xt4RT4F4.mft (raw, json)
Hash identifier: PZC+PajbbtJCBQg8tZtMgdSwUZeymoOl+g//fkTO4pI=
Subject key identifier: E7:A9:12:24:F5:78:0C:C8:1D:36:3D:70:62:97:79:ED:2F:B5:28:5E
Authority key identifier: 58:CF:57:66:4B:41:6B:E5:B2:48:B7:1D:04:3E:F1:B7:84:53:E0:5E
Certificate issuer: /CN=58cf57664b416be5b248b71d043ef1b78453e05e
Certificate serial: 0194BD857FFB802873DDFD5E235269F7498F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WM9XZktBa-WySLcdBD7xt4RT4F4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/abb3ad-5805-42c2-af2f-c576c5e717c8/1/WM9XZktBa-WySLcdBD7xt4RT4F4.mft
Manifest number: 025F
Signing time: Fri 31 Jan 2025 18:00:30 +0000
Manifest this update: Fri 31 Jan 2025 18:00:30 +0000
Manifest next update: Sat 01 Feb 2025 18:00:30 +0000
Files and hashes: 1: WM9XZktBa-WySLcdBD7xt4RT4F4.crl (hash: erbch1anLhnJLXEFDpA20N8r7m9VbjUjRzkujHMT4+Q=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:7f:fb:80:28:73:dd:fd:5e:23:52:69:f7:49:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58cf57664b416be5b248b71d043ef1b78453e05e
Validity
Not Before: Jan 31 18:00:30 2025 GMT
Not After : Feb 1 18:00:30 2025 GMT
Subject: CN=e7a91224f5780cc81d363d70629779ed2fb5285e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:78:1e:36:eb:ec:e3:1d:e7:8e:6c:e2:ac:bd:
76:f4:91:10:03:65:9c:b5:1b:3d:eb:52:59:30:31:
59:50:cc:df:4d:fa:7a:c8:90:cd:ce:d4:0e:4e:e7:
57:28:87:88:22:40:b6:7b:a1:b0:5b:d9:5b:16:8a:
fc:97:2c:01:50:56:93:3b:12:2c:48:80:b7:c6:62:
4b:70:11:bd:f1:cf:fb:d5:3d:e8:71:3a:78:3c:d2:
21:9c:e7:0b:ab:09:ab:6f:86:09:d0:37:a8:01:d7:
f8:bb:61:39:c7:a3:78:63:b3:0a:5a:5f:f7:17:80:
dc:90:c2:fd:71:ba:77:2a:be:ba:77:7f:8f:31:e8:
6c:c3:f7:06:db:1f:53:78:37:36:50:b0:d8:eb:fa:
ea:64:e9:bc:2d:7a:02:12:42:8f:86:59:08:e4:5f:
ee:29:6e:3a:90:79:d6:a2:ea:ee:45:05:93:65:eb:
10:ef:b3:d1:02:66:81:df:45:69:66:af:22:19:06:
21:2b:1a:d7:15:9b:fd:8e:5c:b0:29:81:d0:1c:a5:
c0:6c:e0:95:1a:db:c4:7f:94:85:df:04:a5:ab:f1:
5e:e4:22:e4:92:5e:4b:aa:7d:1f:a6:c7:e8:28:b8:
14:d2:80:6c:61:ec:f9:2d:1d:aa:16:c7:79:eb:fb:
b4:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:A9:12:24:F5:78:0C:C8:1D:36:3D:70:62:97:79:ED:2F:B5:28:5E
X509v3 Authority Key Identifier:
keyid:58:CF:57:66:4B:41:6B:E5:B2:48:B7:1D:04:3E:F1:B7:84:53:E0:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WM9XZktBa-WySLcdBD7xt4RT4F4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/abb3ad-5805-42c2-af2f-c576c5e717c8/1/WM9XZktBa-WySLcdBD7xt4RT4F4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/abb3ad-5805-42c2-af2f-c576c5e717c8/1/WM9XZktBa-WySLcdBD7xt4RT4F4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:3c:a5:82:13:60:e3:76:91:a5:af:1d:c2:71:ab:54:03:46:
ef:a5:5b:62:40:bb:cc:a2:28:b1:73:29:80:d1:7c:fb:b5:93:
76:be:21:11:64:cf:de:50:53:3b:0c:73:f1:59:21:a5:5b:71:
e8:b4:6a:93:93:f5:b7:bd:ef:97:d6:10:3b:3b:7a:5c:90:ed:
94:fb:e3:8d:23:c2:7b:6b:79:1f:71:9e:fd:be:0b:bb:34:c1:
40:fb:84:fd:09:9d:07:8b:3f:de:a8:f0:08:0d:75:f2:75:42:
56:e6:13:79:44:18:8f:5a:3b:2e:53:b0:f0:ee:88:72:f4:47:
81:dd:77:c0:15:4d:d3:44:c7:41:20:da:8e:a9:7f:bc:58:f4:
d8:d1:1a:b1:44:78:df:25:3a:a4:96:21:f9:98:97:c6:9d:1e:
82:f1:6d:8c:d7:fc:9d:2c:2e:71:ea:7b:27:62:41:70:32:ea:
44:d1:cf:dc:1e:4d:b5:28:ab:74:b6:2a:53:b9:63:b0:90:ce:
52:d8:04:f7:3a:2d:01:9b:6a:36:c9:2d:76:21:ad:8c:d9:90:
59:ed:ae:d5:47:aa:dc:2e:16:55:46:8a:52:cb:c2:d2:cf:7b:
7c:db:c3:0e:bf:cb:53:98:58:29:3e:bc:a8:4e:aa:10:33:9e:
5f:91:61:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:26:32 2025 by rpki-client