Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f0ea2c-d27d-4ecf-ba25-1e08dfd235c7/1/WuQ0HiOjMV7URVpUXRpIzvKeeJM.mft
File: WuQ0HiOjMV7URVpUXRpIzvKeeJM.mft (raw, json)
Hash identifier: gdqTxpqrBGTBai2D7ep91hspNHOUhXBnEKh0Yaa1D4g=
Subject key identifier: 21:34:A1:FB:DC:77:C9:46:44:56:1E:4B:D9:12:DD:F6:67:86:A1:44
Authority key identifier: 5A:E4:34:1E:23:A3:31:5E:D4:45:5A:54:5D:1A:48:CE:F2:9E:78:93
Certificate issuer: /CN=5ae4341e23a3315ed4455a545d1a48cef29e7893
Certificate serial: 0194BD1809AC5F1CD912CA0563B62B262326
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WuQ0HiOjMV7URVpUXRpIzvKeeJM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f0ea2c-d27d-4ecf-ba25-1e08dfd235c7/1/WuQ0HiOjMV7URVpUXRpIzvKeeJM.mft
Manifest number: 1427
Signing time: Fri 31 Jan 2025 16:00:56 +0000
Manifest this update: Fri 31 Jan 2025 16:00:56 +0000
Manifest next update: Sat 01 Feb 2025 16:00:56 +0000
Files and hashes: 1: H-w2T99zCrrlKQYxLvTqjVHNtNs.roa (hash: 8/w5H9itBFo+zRfCIM8deFlqPQ7aIcS5e5Q1K2Dc7sw=)
2: WuQ0HiOjMV7URVpUXRpIzvKeeJM.crl (hash: 5QCFqdDiPY9sVJnBZWNl1IzZHMFShEVThhwkJO1lUvo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:18:09:ac:5f:1c:d9:12:ca:05:63:b6:2b:26:23:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ae4341e23a3315ed4455a545d1a48cef29e7893
Validity
Not Before: Jan 31 16:00:56 2025 GMT
Not After : Feb 1 16:00:56 2025 GMT
Subject: CN=2134a1fbdc77c94644561e4bd912ddf66786a144
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:d4:91:8b:b9:1d:e5:03:b7:16:1b:54:2d:ab:
45:a1:26:5f:d5:9f:f4:0b:7a:a8:3d:77:f2:b1:86:
52:09:85:5b:ad:da:d1:12:8f:5d:6d:42:70:40:53:
1b:ff:a8:dd:f6:d0:13:c5:90:6f:88:57:45:5b:ba:
7b:1f:6d:5c:44:69:91:46:c6:f2:66:df:37:55:05:
65:c9:cb:b2:9c:a6:f2:45:a8:c2:7f:31:f3:27:00:
db:8a:e7:67:03:43:2b:7d:4d:ef:3a:e3:48:d0:7d:
12:4c:d3:42:f8:d1:82:a0:c2:64:c5:11:3e:93:ce:
81:b7:45:80:f4:7b:84:7c:c0:9c:31:e6:58:f2:a4:
84:27:7b:d7:be:d8:05:79:1f:99:5b:0e:99:6a:c9:
0a:f8:eb:7b:ad:d9:55:50:76:c5:96:29:7e:d7:db:
aa:8f:86:18:22:5b:be:88:69:de:26:0c:a8:a4:75:
18:ac:d9:40:94:3e:c3:1c:54:35:2c:0c:6c:ce:8f:
92:62:b4:05:c5:f4:e6:0a:4e:cc:4e:11:86:74:5a:
a1:74:60:58:a3:a8:f3:39:88:cf:a2:c7:cf:22:ad:
bb:b7:82:fd:2e:0b:e2:2a:66:3e:c1:95:27:7c:b7:
14:0a:58:ac:a8:9f:84:d4:8d:1e:87:39:1f:f1:fd:
f4:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:34:A1:FB:DC:77:C9:46:44:56:1E:4B:D9:12:DD:F6:67:86:A1:44
X509v3 Authority Key Identifier:
keyid:5A:E4:34:1E:23:A3:31:5E:D4:45:5A:54:5D:1A:48:CE:F2:9E:78:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WuQ0HiOjMV7URVpUXRpIzvKeeJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f0ea2c-d27d-4ecf-ba25-1e08dfd235c7/1/WuQ0HiOjMV7URVpUXRpIzvKeeJM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f0ea2c-d27d-4ecf-ba25-1e08dfd235c7/1/WuQ0HiOjMV7URVpUXRpIzvKeeJM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:97:bb:51:eb:da:11:ec:33:f7:fd:9c:f4:f4:7c:0c:39:3b:
72:2e:7c:e8:a8:ab:e7:35:69:99:ab:e1:66:f7:f0:0b:15:7c:
0a:0d:03:d8:4d:e3:94:37:05:1c:ef:10:ee:1b:5e:a7:24:ff:
ea:fe:b4:79:03:e8:c2:c6:03:26:b7:42:5a:79:30:d3:e0:5f:
ba:f8:69:c0:da:84:22:90:d2:e0:20:06:ff:d0:f1:82:74:50:
8b:94:22:c6:26:c5:48:43:c3:75:6b:51:14:e6:3d:0b:c0:23:
17:00:ac:a5:7a:ac:51:68:c0:ee:cb:b4:8e:95:ac:0a:55:ff:
d8:65:07:90:a5:81:d2:6f:bc:dd:84:6e:73:45:41:1a:61:25:
f9:93:05:7e:c4:ac:fd:3a:6d:57:2e:0b:42:60:f1:81:9b:52:
33:52:73:8c:a4:fa:a3:92:16:ac:e9:d8:fa:1b:42:64:cd:e9:
98:c7:74:8a:7c:5d:7c:5d:ed:58:42:fa:43:f0:e0:92:48:e2:
e9:80:77:9b:e7:65:0d:6e:4e:19:07:aa:7a:d3:92:34:0f:8b:
9e:da:4a:c2:04:53:4a:4b:eb:5e:25:7e:50:91:c0:b9:3e:d7:
09:31:40:8a:fa:90:f3:a8:df:84:df:10:6b:8b:49:e8:d3:32:
fc:e9:ba:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:36 2025 by rpki-client