Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/5e7141-9103-48eb-8dcd-ad5868825c36/1/wsFAyCGJcO9g5ok1Txa2OvSQCtU.mft
File: wsFAyCGJcO9g5ok1Txa2OvSQCtU.mft (raw, json)
Hash identifier: o6ljOXIB2ozWGtQODTe2B+4xwe2FhcsELJpbdgxO6nk=
Subject key identifier: 54:EB:18:CF:65:B8:CA:C5:99:3F:7D:0A:55:E2:2D:FA:F6:99:58:0A
Authority key identifier: C2:C1:40:C8:21:89:70:EF:60:E6:89:35:4F:16:B6:3A:F4:90:0A:D5
Certificate issuer: /CN=c2c140c8218970ef60e689354f16b63af4900ad5
Certificate serial: 0194BC3C1958A21194192A5D82578A0B5062
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wsFAyCGJcO9g5ok1Txa2OvSQCtU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/5e7141-9103-48eb-8dcd-ad5868825c36/1/wsFAyCGJcO9g5ok1Txa2OvSQCtU.mft
Manifest number: 08A9
Signing time: Fri 31 Jan 2025 12:00:42 +0000
Manifest this update: Fri 31 Jan 2025 12:00:42 +0000
Manifest next update: Sat 01 Feb 2025 12:00:42 +0000
Files and hashes: 1: wsFAyCGJcO9g5ok1Txa2OvSQCtU.crl (hash: O2kuUU0N9w2pnRwk4jXiQhQfs81rugLwIU/R/+sIZHY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:19:58:a2:11:94:19:2a:5d:82:57:8a:0b:50:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2c140c8218970ef60e689354f16b63af4900ad5
Validity
Not Before: Jan 31 12:00:42 2025 GMT
Not After : Feb 1 12:00:42 2025 GMT
Subject: CN=54eb18cf65b8cac5993f7d0a55e22dfaf699580a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f4:eb:e6:61:b9:69:28:2d:0e:71:ea:ab:4d:
69:3f:32:1c:59:47:ee:96:8e:b6:04:42:75:c8:e8:
89:27:6b:be:d4:f4:35:b3:ae:9b:e1:9b:22:85:b5:
08:a3:30:91:16:4e:58:e6:8c:fb:0c:04:4d:26:62:
70:ce:99:f6:81:ac:55:e5:eb:32:02:17:ee:d9:ef:
e1:4f:6d:aa:0a:50:67:63:0e:c6:2b:c6:73:9e:0e:
3c:54:24:8c:ef:8d:dd:a6:f7:1d:ae:17:fb:d4:dd:
17:ac:24:b4:05:fb:7a:02:f2:10:c9:ce:cd:85:ac:
cb:f3:13:ba:54:e6:fa:47:8a:3f:84:1a:ee:01:82:
87:4c:a7:27:1d:5a:c2:38:73:59:c6:37:ef:d9:01:
f9:2d:e5:e6:39:ac:57:59:ce:cd:25:5a:46:6c:85:
e9:66:99:b3:db:dd:73:d9:e1:9d:91:3f:78:d8:75:
0d:9e:8b:7b:cb:7f:8d:7b:86:97:4a:c6:c9:ca:74:
1a:90:c1:49:c9:3b:d0:c4:0d:39:1b:a0:3c:41:e1:
21:4d:15:51:6d:08:3e:14:ac:c1:e0:ad:89:9c:d3:
7e:98:d7:ff:1d:38:1f:1a:bb:4b:80:a3:a1:57:f7:
7b:eb:19:9e:d0:d4:69:4a:c8:7d:6c:9e:ac:fe:c9:
53:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:EB:18:CF:65:B8:CA:C5:99:3F:7D:0A:55:E2:2D:FA:F6:99:58:0A
X509v3 Authority Key Identifier:
keyid:C2:C1:40:C8:21:89:70:EF:60:E6:89:35:4F:16:B6:3A:F4:90:0A:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wsFAyCGJcO9g5ok1Txa2OvSQCtU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/5e7141-9103-48eb-8dcd-ad5868825c36/1/wsFAyCGJcO9g5ok1Txa2OvSQCtU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/5e7141-9103-48eb-8dcd-ad5868825c36/1/wsFAyCGJcO9g5ok1Txa2OvSQCtU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:33:71:ec:ae:0a:86:e8:1b:a4:42:49:5c:4b:b9:b9:ba:01:
4a:77:98:66:4d:b6:c4:2f:8c:d0:01:80:27:1d:73:30:c9:5e:
0b:c8:3d:03:57:d7:55:b1:59:7b:bc:86:8a:6c:09:de:a0:0e:
b1:07:5e:3a:9f:82:1f:77:24:a9:07:62:35:68:b5:8f:f6:0e:
d3:b1:70:ab:89:87:2e:8b:05:2f:8d:12:d0:ae:de:ac:43:34:
32:e1:14:5b:9b:3b:d4:f4:8b:d4:4d:2e:8e:10:80:33:9f:f9:
c5:ca:a9:9f:c5:31:8a:8a:66:c0:af:7b:29:6b:45:d6:d4:6d:
23:b2:f1:58:54:34:36:cb:7d:e5:f5:79:9a:cf:ec:2f:ce:18:
1e:ee:3a:5c:7d:ea:c5:78:e4:71:64:ac:c6:42:3a:6f:04:e6:
ce:4d:6e:ff:1c:6a:fa:fc:bc:91:ef:f0:e2:14:4f:9d:44:7c:
ff:1b:4b:17:e9:d9:20:8b:fe:a8:86:d9:74:44:2f:81:ac:36:
71:70:5d:6b:bb:76:ad:01:eb:51:3b:a5:89:03:43:66:17:65:
d2:47:77:bb:4b:9b:0d:a5:e6:db:59:12:e1:90:2f:21:aa:2d:
cc:1a:ee:d8:50:3c:65:5e:97:60:b0:d3:27:10:d7:c4:2e:97:
d0:5f:59:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:06:50 2025 by rpki-client