Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/839925-1555-4ff6-bc46-7feab48eee61/1/W5WpStrToolscgdNZnwbYgdZWMs.mft
File: W5WpStrToolscgdNZnwbYgdZWMs.mft (raw, json)
Hash identifier: 8cixWtDw5O2BDSickVqKzIQdhVWfhNJ9/Zu5uVO41sk=
Subject key identifier: AB:F0:9F:D9:6C:FA:67:ED:C7:BD:0D:CC:19:CC:4F:E5:22:16:82:5E
Authority key identifier: 5B:95:A9:4A:DA:D3:A2:89:6C:72:07:4D:66:7C:1B:62:07:59:58:CB
Certificate issuer: /CN=5b95a94adad3a2896c72074d667c1b62075958cb
Certificate serial: 0194BBCE2295735E7C1223DB95BCBA33A30A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W5WpStrToolscgdNZnwbYgdZWMs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/839925-1555-4ff6-bc46-7feab48eee61/1/W5WpStrToolscgdNZnwbYgdZWMs.mft
Manifest number: 0CEE
Signing time: Fri 31 Jan 2025 10:00:36 +0000
Manifest this update: Fri 31 Jan 2025 10:00:36 +0000
Manifest next update: Sat 01 Feb 2025 10:00:36 +0000
Files and hashes: 1: STQhTVEdoeGn3LGRCtz_IFAHWdM.roa (hash: lJA+P3xzpJoE/23kp+QFPprWwo01m1U/nvmFZ+Rh2tE=)
2: W5WpStrToolscgdNZnwbYgdZWMs.crl (hash: vYAgf9h3xCB7ciTrM2x1Me8axQvZCenxQZ4Xr7AidkU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:22:95:73:5e:7c:12:23:db:95:bc:ba:33:a3:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b95a94adad3a2896c72074d667c1b62075958cb
Validity
Not Before: Jan 31 10:00:36 2025 GMT
Not After : Feb 1 10:00:36 2025 GMT
Subject: CN=abf09fd96cfa67edc7bd0dcc19cc4fe52216825e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:e4:3c:0d:a5:31:66:3c:f5:d6:1d:c3:c5:c1:
67:50:ff:52:5d:8e:2b:70:ec:ff:62:9e:c0:c0:c1:
fc:ec:d4:39:29:75:68:23:8f:bc:c9:a1:0c:86:c6:
0f:7e:2c:3b:5a:1d:ee:50:ef:f7:04:e9:ea:91:a7:
75:78:14:d1:d9:8c:c8:f4:56:7b:6d:32:72:6d:09:
fd:c9:de:2b:89:01:9b:96:e2:2a:f4:4d:7c:26:94:
6b:cf:5f:40:9b:9c:1c:2a:13:7f:58:2c:ca:23:92:
cf:7b:60:84:f0:9f:2d:ad:9f:3e:4d:0d:63:b0:25:
75:36:ca:9c:79:86:d7:45:ea:53:6c:b4:55:c6:4c:
86:48:41:cd:e6:e3:ca:40:45:9c:ad:88:5d:f8:83:
9e:4d:d0:17:74:51:01:ce:3c:a4:f9:24:b5:63:2e:
4d:86:40:c0:d4:bd:03:26:3a:95:2e:5e:87:9f:fb:
66:ce:88:62:99:75:57:ec:ac:2e:99:41:7b:5b:59:
7f:05:aa:b5:b2:48:ca:f4:48:56:60:9a:5a:91:9b:
88:7b:18:c6:54:99:e2:f4:0b:52:86:73:ff:34:15:
a2:55:29:fe:4b:f9:8f:53:86:e4:e1:6e:ea:10:53:
28:94:8c:82:c2:89:c4:8a:92:d3:65:b3:09:2d:59:
eb:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:F0:9F:D9:6C:FA:67:ED:C7:BD:0D:CC:19:CC:4F:E5:22:16:82:5E
X509v3 Authority Key Identifier:
keyid:5B:95:A9:4A:DA:D3:A2:89:6C:72:07:4D:66:7C:1B:62:07:59:58:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W5WpStrToolscgdNZnwbYgdZWMs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/839925-1555-4ff6-bc46-7feab48eee61/1/W5WpStrToolscgdNZnwbYgdZWMs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/839925-1555-4ff6-bc46-7feab48eee61/1/W5WpStrToolscgdNZnwbYgdZWMs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:12:4c:eb:97:34:59:5b:ee:46:af:9d:b0:7d:cd:99:5e:fa:
89:d1:bf:a2:7c:0d:e1:2b:c7:c7:f3:bc:e5:77:ed:4c:f9:2c:
3d:b6:fb:5b:8b:96:3a:b1:08:ba:6b:5b:9b:99:71:7f:6f:4d:
d7:28:76:ee:c8:9b:64:df:b5:2c:0c:c6:72:35:7b:9e:20:df:
56:91:07:e5:7c:ab:5d:ab:51:93:c7:3d:83:dd:12:13:81:dc:
12:3b:1e:90:5b:08:a1:6d:00:bd:4e:9f:94:e4:ad:cb:b8:9e:
e6:7d:92:c4:c0:bc:84:07:1a:59:03:a4:22:54:58:1a:92:b0:
e0:41:0b:6c:f2:ff:ec:df:26:d6:0e:79:22:96:1a:fa:ac:83:
40:4c:bd:a7:86:34:e1:dd:19:eb:4a:1e:06:40:52:7e:9c:c8:
07:99:23:8a:6a:df:31:bf:d1:cb:bf:63:b4:22:82:7a:14:a6:
35:16:dc:94:a8:a5:c5:dc:68:3b:79:e4:c3:57:1b:8f:29:f0:
dc:93:e7:1e:0c:3f:ba:58:72:d5:db:17:39:4c:b2:9c:60:cd:
ca:f0:1e:92:d9:80:6d:22:52:fa:66:ad:9b:73:dd:72:63:27:
46:ea:61:b3:33:3a:f0:28:d7:52:26:8a:2c:ae:4b:72:9f:be:
ad:c2:a9:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 08:20:46 2025 by rpki-client