Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/be9a00-e0b1-4541-9c0f-13858da85f53/1/WpVcpFhGjFd2uNmTbf6bCyZocxw.mft
File: WpVcpFhGjFd2uNmTbf6bCyZocxw.mft (raw, json)
Hash identifier: 0/KWI6SntMyCvjQMZTSYiGJE9EGKuxMMoORR4D4JlPs=
Subject key identifier: A4:A6:A5:BA:CD:C9:E6:FF:BE:16:05:03:64:08:E2:B4:08:3B:6C:14
Authority key identifier: 5A:95:5C:A4:58:46:8C:57:76:B8:D9:93:6D:FE:9B:0B:26:68:73:1C
Certificate issuer: /CN=5a955ca458468c5776b8d9936dfe9b0b2668731c
Certificate serial: 0194BD4EB5BD6455D091B3CE587E3369F362
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WpVcpFhGjFd2uNmTbf6bCyZocxw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/be9a00-e0b1-4541-9c0f-13858da85f53/1/WpVcpFhGjFd2uNmTbf6bCyZocxw.mft
Manifest number: 0E95
Signing time: Fri 31 Jan 2025 17:00:39 +0000
Manifest this update: Fri 31 Jan 2025 17:00:39 +0000
Manifest next update: Sat 01 Feb 2025 17:00:39 +0000
Files and hashes: 1: WpVcpFhGjFd2uNmTbf6bCyZocxw.crl (hash: A8jM5E2P3sjFUFJ74xiTYminH+5F3oy7ImPBjKPYRfg=)
2: pYvKtWHjQL1axAyemHXasjizsXI.roa (hash: +saRg/F7RlIOLGe+6CACF+gl/0HmxqxN1SsKDNk6n+M=)
3: qBYlovJkfJHkvUcB5hy59ysLvBI.roa (hash: rhUQ7eemuasO/N/vCeryMqfVlnZzFbMH9k0Lde5p9sY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:b5:bd:64:55:d0:91:b3:ce:58:7e:33:69:f3:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a955ca458468c5776b8d9936dfe9b0b2668731c
Validity
Not Before: Jan 31 17:00:39 2025 GMT
Not After : Feb 1 17:00:39 2025 GMT
Subject: CN=a4a6a5bacdc9e6ffbe1605036408e2b4083b6c14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:95:c7:6f:23:c4:3e:01:de:ce:0d:6f:c4:a2:
93:83:8e:b3:6d:b2:9a:87:16:a8:a4:de:64:cd:56:
c8:f3:4c:cb:18:ed:fe:9f:55:b0:a7:22:da:84:4e:
db:bb:0e:73:4d:eb:7c:a8:16:d4:3f:2f:69:06:77:
51:dc:87:01:91:5c:44:b7:eb:33:5f:dc:61:12:71:
75:de:9f:87:e6:5f:ea:2c:2f:00:cb:b3:72:50:0f:
7e:c8:c2:0e:c3:fe:a8:2e:de:d0:f3:24:cf:e3:c5:
8b:9e:3c:57:c5:6a:18:3d:fd:50:3f:2d:22:87:c5:
f9:82:df:11:39:43:6e:c1:5f:04:7f:18:aa:e9:f1:
1a:72:e5:cb:99:49:66:27:86:e8:46:e6:19:00:00:
6e:6d:e4:51:40:02:fa:c8:95:7a:c6:cb:61:ef:98:
f5:f8:4b:db:86:e7:c0:af:c7:27:3f:52:6e:d9:74:
1a:5f:55:8f:3f:ab:2c:37:6a:e6:07:b4:11:ec:fd:
2e:ed:44:be:a5:ec:c2:62:ad:b4:6f:67:20:bb:c3:
16:63:af:5c:26:95:d0:e2:d8:3b:fe:ec:94:21:72:
eb:ba:22:82:86:7d:3d:35:3c:18:3b:62:80:f6:3f:
c1:ae:35:46:ed:5c:67:52:56:05:d4:a9:0e:49:ab:
d8:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:A6:A5:BA:CD:C9:E6:FF:BE:16:05:03:64:08:E2:B4:08:3B:6C:14
X509v3 Authority Key Identifier:
keyid:5A:95:5C:A4:58:46:8C:57:76:B8:D9:93:6D:FE:9B:0B:26:68:73:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WpVcpFhGjFd2uNmTbf6bCyZocxw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/be9a00-e0b1-4541-9c0f-13858da85f53/1/WpVcpFhGjFd2uNmTbf6bCyZocxw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/be9a00-e0b1-4541-9c0f-13858da85f53/1/WpVcpFhGjFd2uNmTbf6bCyZocxw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:05:d1:e5:fc:62:2e:89:cd:81:a5:40:b6:ae:a1:d3:2e:d0:
e3:06:77:e5:7c:2a:24:90:0d:2a:75:d9:41:19:77:1a:ab:50:
66:45:67:38:c6:ae:e3:b8:62:b7:9f:d8:35:98:11:a6:33:88:
81:1b:e2:22:8f:b3:33:b4:d3:d4:0b:6c:eb:cd:49:59:c5:1c:
5f:67:3c:3b:13:7a:fe:22:c4:97:e0:b7:12:55:b1:02:12:35:
67:ac:36:51:dd:79:43:25:f1:a6:85:e5:e8:1c:d0:97:c7:a6:
c5:d9:c4:66:24:25:b2:27:99:27:48:5b:e7:7d:e4:58:4e:58:
ef:a7:c5:6e:df:37:6f:80:d8:0b:0f:b1:5f:f7:04:f0:e8:cc:
a7:98:52:fe:41:af:b1:d6:de:32:73:3f:76:60:71:43:f7:ab:
b0:f5:b7:3b:43:41:c4:01:bc:08:e2:37:34:8b:ee:3c:ec:1a:
2f:87:99:fc:39:46:e6:7b:4e:11:24:3a:e6:ad:3c:9c:b8:64:
33:05:f3:bb:86:3c:cc:48:b2:f8:bc:56:c2:c4:4f:b4:bc:76:
0e:71:0a:84:d0:af:11:89:29:23:26:82:df:47:ea:e2:f7:b1:
86:3f:79:0a:c9:1e:f2:73:d7:90:94:05:65:4a:b9:db:04:5f:
2b:42:bc:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:47:08 2025 by rpki-client