Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/433b07-545a-4386-b07b-58961f518ebb/1/WQrh--tOt2hwRl3ryP0GXBb4vtE.mft
File: WQrh--tOt2hwRl3ryP0GXBb4vtE.mft (raw, json)
Hash identifier: E7Q23YmIc5AWzebpv6tbSOkoXVVp3Hx9eU+bx9pBNvs=
Subject key identifier: 4D:FC:C1:F2:34:71:13:CA:8B:A6:C4:D3:57:A2:4F:F0:06:4D:85:10
Authority key identifier: 59:0A:E1:FB:EB:4E:B7:68:70:46:5D:EB:C8:FD:06:5C:16:F8:BE:D1
Certificate issuer: /CN=590ae1fbeb4eb76870465debc8fd065c16f8bed1
Certificate serial: 0194BD852BD61775256A6F6A04B138370DCA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WQrh--tOt2hwRl3ryP0GXBb4vtE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/433b07-545a-4386-b07b-58961f518ebb/1/WQrh--tOt2hwRl3ryP0GXBb4vtE.mft
Manifest number: 01FC
Signing time: Fri 31 Jan 2025 18:00:08 +0000
Manifest this update: Fri 31 Jan 2025 18:00:08 +0000
Manifest next update: Sat 01 Feb 2025 18:00:08 +0000
Files and hashes: 1: WQrh--tOt2hwRl3ryP0GXBb4vtE.crl (hash: ABVxugVQ95ZRplTV7GTLvEJ7nC84ACoVAFW39Trn8qQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:2b:d6:17:75:25:6a:6f:6a:04:b1:38:37:0d:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=590ae1fbeb4eb76870465debc8fd065c16f8bed1
Validity
Not Before: Jan 31 18:00:08 2025 GMT
Not After : Feb 1 18:00:08 2025 GMT
Subject: CN=4dfcc1f2347113ca8ba6c4d357a24ff0064d8510
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:ea:34:54:a2:ec:84:fc:50:39:06:f7:a2:7f:
e4:25:82:48:19:37:fd:31:24:a0:96:81:f7:32:a7:
10:1b:23:db:34:76:78:60:80:5f:0c:b2:e4:e1:2c:
56:27:65:5f:7a:34:3c:5d:06:c7:c6:fa:f9:7f:93:
3b:f8:60:f1:0e:86:c6:6b:74:df:df:ca:d3:ae:e3:
70:d7:8f:84:d2:74:f8:e9:b9:1c:75:8f:66:91:47:
b9:43:4b:97:28:dd:f1:36:cb:e6:48:95:b1:b7:aa:
9a:89:4f:ae:20:51:a4:01:9d:69:e5:79:26:19:bb:
31:ae:2d:96:79:b2:b6:4d:5c:86:c1:d0:2b:2c:0c:
08:d8:55:30:0a:77:ea:56:1a:ca:b9:25:91:52:3c:
d9:c8:f0:b5:50:2f:fe:cd:2d:50:36:eb:05:6b:b1:
2d:00:ff:22:0a:04:06:67:e6:2c:1f:8d:43:29:fd:
47:bc:58:07:63:20:18:06:37:f7:ee:d8:9b:e8:de:
0c:b1:a3:40:c7:80:55:86:25:80:80:3f:a3:94:c0:
83:8c:2c:6e:93:a0:4e:21:83:7c:c1:52:26:e4:85:
d2:9d:3e:fd:68:df:60:50:37:df:88:0b:d0:e6:3b:
51:70:97:06:9a:52:93:25:72:b8:e9:77:1c:a5:ff:
21:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:FC:C1:F2:34:71:13:CA:8B:A6:C4:D3:57:A2:4F:F0:06:4D:85:10
X509v3 Authority Key Identifier:
keyid:59:0A:E1:FB:EB:4E:B7:68:70:46:5D:EB:C8:FD:06:5C:16:F8:BE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WQrh--tOt2hwRl3ryP0GXBb4vtE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/433b07-545a-4386-b07b-58961f518ebb/1/WQrh--tOt2hwRl3ryP0GXBb4vtE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/433b07-545a-4386-b07b-58961f518ebb/1/WQrh--tOt2hwRl3ryP0GXBb4vtE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:78:59:bb:cf:4b:06:26:ae:67:4d:a5:9c:ed:02:aa:ac:54:
28:51:32:e2:d0:7c:a6:53:94:bd:b1:67:4c:e5:07:71:b5:30:
e9:7f:e3:25:e4:2b:d8:f4:c7:57:45:95:be:bb:5e:44:e9:6c:
62:6d:f2:7d:79:3c:37:7a:a8:ea:4c:36:a8:be:bb:45:c8:06:
e1:f5:6f:b0:06:6b:bc:28:0c:c3:6a:67:9b:53:68:93:08:f1:
8e:06:94:fa:07:f2:f4:95:13:c2:73:b7:9c:fd:0a:70:99:24:
b1:20:42:96:d4:8c:41:fc:b1:74:a2:36:c2:d7:7e:c4:43:63:
d7:33:1c:15:00:0c:13:2e:bd:29:a5:54:59:ae:74:f7:88:e1:
01:a5:54:d8:95:f7:bc:bc:75:d1:70:5b:38:6f:5a:57:c2:34:
16:ad:f1:b1:c0:4f:b6:c9:da:ee:5b:65:62:9b:bb:0d:56:87:
ad:5c:62:62:a8:6f:6e:8f:d9:3b:bd:9e:cb:69:54:b3:e0:df:
a9:e4:5b:a5:6c:86:73:15:70:61:a4:a1:e5:c9:b3:3d:00:e1:
ba:68:1f:fe:e8:c4:24:df:19:15:23:fb:eb:d4:15:46:f3:43:
8c:f1:b4:ca:54:81:e5:b4:4b:9e:d1:a5:65:92:c6:7e:8b:f1:
16:b8:4b:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:24:24 2025 by rpki-client