Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/168f4a-12b4-4737-8e27-c30664aeec14/1/WAbICbdgX21c4Se9LYt2dDULixE.mft
File: WAbICbdgX21c4Se9LYt2dDULixE.mft (raw, json)
Hash identifier: TfTX/UQSVtTHhnubfYUsDhZSz5/xCJGJX6MmyGIQWFY=
Subject key identifier: 65:0D:11:2D:D9:67:32:B5:AF:92:24:0A:A8:D7:20:42:17:E0:02:D3
Authority key identifier: 58:06:C8:09:B7:60:5F:6D:5C:E1:27:BD:2D:8B:76:74:35:0B:8B:11
Certificate issuer: /CN=5806c809b7605f6d5ce127bd2d8b7674350b8b11
Certificate serial: 0194BBCE329FFD46423A8F1AA7AFAA2E3B47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WAbICbdgX21c4Se9LYt2dDULixE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/168f4a-12b4-4737-8e27-c30664aeec14/1/WAbICbdgX21c4Se9LYt2dDULixE.mft
Manifest number: 033C
Signing time: Fri 31 Jan 2025 10:00:40 +0000
Manifest this update: Fri 31 Jan 2025 10:00:40 +0000
Manifest next update: Sat 01 Feb 2025 10:00:40 +0000
Files and hashes: 1: NWoXdf60qAqmSr6FbuL52Si_7kM.roa (hash: t2UKYAGI3HyRjneErifjXt9lNGLGftAOePJsseePFFE=)
2: WAbICbdgX21c4Se9LYt2dDULixE.crl (hash: +d0lqvtCpj4XO/SgjgKCc8RuhupVqo9K/umE/VDhVas=)
3: WCa02rex0sd9sPiC2XX_JjOTVXw.roa (hash: A7EWT3mURBDpeD/IQOh3v6v33IvqR3HU4O/X883nOww=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:32:9f:fd:46:42:3a:8f:1a:a7:af:aa:2e:3b:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5806c809b7605f6d5ce127bd2d8b7674350b8b11
Validity
Not Before: Jan 31 10:00:40 2025 GMT
Not After : Feb 1 10:00:40 2025 GMT
Subject: CN=650d112dd96732b5af92240aa8d7204217e002d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f0:c8:2e:6d:44:bf:e4:77:3a:37:a4:61:42:
77:0a:60:b9:75:37:95:75:8e:31:9b:56:06:43:cf:
46:f2:91:a6:10:90:b5:93:1c:7a:3a:ca:2f:ca:b4:
e6:a0:18:23:3d:b7:72:06:7f:e8:49:2d:e3:e8:b3:
24:f3:64:79:47:de:49:96:e0:39:48:df:cd:d1:23:
a7:c2:15:64:e2:90:6f:04:55:1f:cb:94:11:3e:a4:
f1:e6:9e:77:46:44:ac:ae:fe:90:ba:66:9d:c0:c8:
f8:df:fb:89:65:85:04:b4:d2:48:17:ce:e6:b7:55:
c9:19:74:73:dd:38:f4:c2:25:de:8e:90:4d:63:fe:
31:c6:e1:fc:fc:5d:70:c9:8c:73:2b:67:ac:4a:79:
1d:40:67:a1:79:d3:e6:62:c2:ee:60:97:8c:72:c6:
f5:21:1f:51:bd:88:32:b5:b6:d3:b5:29:a0:d3:c0:
2c:34:5f:06:2e:65:de:cf:a5:5a:91:35:90:61:0a:
d2:95:0b:aa:17:eb:a1:ad:e5:d6:60:73:04:e7:f0:
c8:5b:72:ab:0e:2d:e8:4c:80:2b:64:b0:0b:f4:ec:
67:11:93:1b:80:0d:9e:9e:6e:f3:25:77:d6:c7:ae:
84:51:7e:09:b7:7f:05:17:ce:1f:69:62:30:53:e6:
2e:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:0D:11:2D:D9:67:32:B5:AF:92:24:0A:A8:D7:20:42:17:E0:02:D3
X509v3 Authority Key Identifier:
keyid:58:06:C8:09:B7:60:5F:6D:5C:E1:27:BD:2D:8B:76:74:35:0B:8B:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WAbICbdgX21c4Se9LYt2dDULixE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/168f4a-12b4-4737-8e27-c30664aeec14/1/WAbICbdgX21c4Se9LYt2dDULixE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/168f4a-12b4-4737-8e27-c30664aeec14/1/WAbICbdgX21c4Se9LYt2dDULixE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:41:c6:d8:96:05:b4:08:eb:f2:f8:df:62:9f:9e:9b:96:6b:
61:7d:87:5c:41:94:aa:68:a3:bf:7c:34:dc:f7:80:d0:2e:0f:
0a:44:4d:a6:4a:71:8f:85:38:84:34:10:9a:68:b3:f8:f1:30:
f7:00:1d:8c:e1:26:fb:3e:f6:f7:c4:be:c2:14:43:63:85:2a:
e9:04:36:44:b5:45:28:22:51:83:86:a1:b7:24:ac:26:82:06:
d6:08:19:f0:f1:c9:c2:18:c9:42:f1:c5:7e:aa:fb:85:c5:25:
f4:14:1f:5e:b8:d1:2e:c8:d0:13:1d:bd:69:22:7d:b2:62:e9:
01:37:49:df:ea:2e:1c:08:a5:09:d9:b6:a8:1f:18:d6:2b:04:
f4:90:30:c9:b6:74:62:33:6d:96:1d:05:43:22:0a:37:24:85:
fa:0e:c5:6d:45:fc:e0:5d:6c:bc:be:6e:ed:10:7e:67:d4:fa:
47:20:5b:fb:70:6c:99:3e:b6:9e:34:6a:3b:db:1d:d1:14:0c:
38:06:c6:61:f0:b3:1c:15:a3:06:ce:41:cc:f8:ed:fc:77:98:
7c:b3:9b:40:ef:7a:12:4f:80:d7:ff:a6:44:78:25:b8:ca:cf:
c6:1a:00:c0:8d:34:34:92:58:2d:98:c4:b7:75:1e:79:63:aa:
55:55:2c:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:40:11 2025 by rpki-client