Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/485305-4c23-4f37-854b-a9d3eef06c67/1/WKJsK8UDp8aBKNKuGrTNN965kyU.mft
File: WKJsK8UDp8aBKNKuGrTNN965kyU.mft (raw, json)
Hash identifier: fA4QNJUchsUKCiNwZjXI4tm/Z0BoBigghjiEZV12XqQ=
Subject key identifier: 73:48:32:A0:65:1D:F3:A9:9C:B3:3F:0D:79:F7:1B:08:13:44:35:45
Authority key identifier: 58:A2:6C:2B:C5:03:A7:C6:81:28:D2:AE:1A:B4:CD:37:DE:B9:93:25
Certificate issuer: /CN=58a26c2bc503a7c68128d2ae1ab4cd37deb99325
Certificate serial: 0194BCE0D6A4247F45E6E779F0453CCAD2CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WKJsK8UDp8aBKNKuGrTNN965kyU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/485305-4c23-4f37-854b-a9d3eef06c67/1/WKJsK8UDp8aBKNKuGrTNN965kyU.mft
Manifest number: 0B4A
Signing time: Fri 31 Jan 2025 15:00:38 +0000
Manifest this update: Fri 31 Jan 2025 15:00:38 +0000
Manifest next update: Sat 01 Feb 2025 15:00:38 +0000
Files and hashes: 1: WKJsK8UDp8aBKNKuGrTNN965kyU.crl (hash: ZDZHgkWMR3Yz94O+leMN9QkxUt7mBwb8AeLzZ/SWhUQ=)
2: hNIAp98aMKo8_sMHQg1HRKY3DlY.roa (hash: rldqTVSbz4XdzrBIUsjcfeUfYNq78azu2krskuL3dgI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:d6:a4:24:7f:45:e6:e7:79:f0:45:3c:ca:d2:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58a26c2bc503a7c68128d2ae1ab4cd37deb99325
Validity
Not Before: Jan 31 15:00:38 2025 GMT
Not After : Feb 1 15:00:38 2025 GMT
Subject: CN=734832a0651df3a99cb33f0d79f71b0813443545
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:a7:e8:76:b3:db:45:f3:76:e7:32:95:f7:23:
dd:29:e5:b9:d6:8f:5a:de:6a:b3:63:8a:21:f3:fc:
f6:4a:07:17:a7:bb:9d:74:85:60:9b:42:64:45:81:
1c:45:af:13:f5:97:64:ca:ab:1c:3f:ec:95:4d:17:
02:62:96:f9:98:c8:d2:d6:32:ca:30:b7:c1:26:c5:
25:63:af:a6:1a:cf:5c:fb:6f:c4:74:63:21:6b:6a:
40:0b:99:af:22:01:b1:84:34:9b:f9:74:d4:eb:28:
46:8c:94:8d:3e:5c:67:dc:9e:aa:94:a4:42:fe:f4:
6c:14:19:38:29:21:fa:e4:4f:80:78:8b:f8:f0:84:
fa:c1:4b:7c:71:c6:a2:65:be:40:0f:7e:5a:1e:19:
1e:72:fc:ae:a6:84:c3:42:6a:7d:34:73:87:67:66:
39:87:86:45:41:b9:a8:69:e7:1b:ee:29:15:66:6e:
35:4a:b7:d5:31:df:2b:85:39:48:d9:8b:69:17:0a:
b4:50:74:16:90:47:4c:ec:e7:25:71:d8:80:62:8e:
67:6f:57:5e:c2:68:b3:2c:86:07:0f:b7:9f:88:fe:
62:08:a9:0b:bf:ca:b3:d2:95:90:ac:a8:15:b2:b2:
3a:75:3d:ce:89:02:f1:74:04:6b:18:88:c6:e2:b7:
7f:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:48:32:A0:65:1D:F3:A9:9C:B3:3F:0D:79:F7:1B:08:13:44:35:45
X509v3 Authority Key Identifier:
keyid:58:A2:6C:2B:C5:03:A7:C6:81:28:D2:AE:1A:B4:CD:37:DE:B9:93:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WKJsK8UDp8aBKNKuGrTNN965kyU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/485305-4c23-4f37-854b-a9d3eef06c67/1/WKJsK8UDp8aBKNKuGrTNN965kyU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/485305-4c23-4f37-854b-a9d3eef06c67/1/WKJsK8UDp8aBKNKuGrTNN965kyU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:55:86:21:72:e4:3d:0c:03:fd:98:19:e7:70:db:50:13:e6:
f0:4e:3c:de:2d:15:79:1f:f2:59:c1:8d:a4:a7:36:62:17:34:
47:8d:2d:d5:11:15:0a:ef:11:00:15:db:74:6a:49:bd:4a:54:
3b:24:14:06:0f:7f:78:70:ff:8f:6b:c0:78:a3:05:bb:33:e5:
0e:c5:67:89:8c:01:a7:eb:b6:05:e9:65:55:87:b6:ff:fe:59:
7c:93:77:f8:de:68:d5:91:3f:ce:bd:bb:5c:50:17:53:e3:7c:
84:ee:e9:12:c0:ea:58:a1:9c:4b:fa:d7:4a:06:e0:e3:7e:3a:
5c:62:7b:7a:bb:6b:39:ac:51:6f:45:32:14:c3:4e:5a:b5:74:
1c:ae:74:76:67:a5:79:56:5b:20:59:e7:59:07:23:80:1f:a3:
32:b1:4c:99:54:0f:ae:23:70:a7:2c:e7:0a:51:e1:18:0f:c2:
62:82:43:bc:7a:7d:5d:26:77:af:38:dd:61:ed:e6:71:71:90:
fc:da:b1:22:54:2d:fe:58:7c:8a:3e:d9:08:1f:2f:0b:5c:9c:
d5:d7:f0:af:86:69:a3:cc:09:e9:b9:91:e5:41:82:5a:81:56:
56:6f:8c:16:2d:83:aa:12:2e:1e:a3:9a:e9:2e:9b:19:32:f8:
a1:b1:28:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:47:38 2025 by rpki-client