Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/2b7576-2e0d-461c-9b89-0e4f0a394123/1/WtYwth0ucpL5zviTu21xJCpfS-0.mft
File: WtYwth0ucpL5zviTu21xJCpfS-0.mft (raw, json)
Hash identifier: ZC71GjX7CykS3qcR19VbDrLwMhu7x4LYOQx6qU24Ut0=
Subject key identifier: D8:9D:D8:51:38:99:94:36:75:4D:BB:6C:47:F9:80:4F:27:DA:BD:4D
Authority key identifier: 5A:D6:30:B6:1D:2E:72:92:F9:CE:F8:93:BB:6D:71:24:2A:5F:4B:ED
Certificate issuer: /CN=5ad630b61d2e7292f9cef893bb6d71242a5f4bed
Certificate serial: 0194BCA9DA9A1C92C743025070FD5F42B1A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WtYwth0ucpL5zviTu21xJCpfS-0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/2b7576-2e0d-461c-9b89-0e4f0a394123/1/WtYwth0ucpL5zviTu21xJCpfS-0.mft
Manifest number: 1137
Signing time: Fri 31 Jan 2025 14:00:35 +0000
Manifest this update: Fri 31 Jan 2025 14:00:35 +0000
Manifest next update: Sat 01 Feb 2025 14:00:35 +0000
Files and hashes: 1: WtYwth0ucpL5zviTu21xJCpfS-0.crl (hash: CIh3LhFcHzQtq3u2HVVPHW5K1IOW0KsyT+XWB2JqBvk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:da:9a:1c:92:c7:43:02:50:70:fd:5f:42:b1:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ad630b61d2e7292f9cef893bb6d71242a5f4bed
Validity
Not Before: Jan 31 14:00:35 2025 GMT
Not After : Feb 1 14:00:35 2025 GMT
Subject: CN=d89dd85138999436754dbb6c47f9804f27dabd4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d0:6f:42:db:8f:98:9a:a0:62:41:36:ff:8b:
f9:40:a8:a0:d0:ad:56:61:77:b8:6d:f1:24:db:33:
e4:6d:a6:05:d5:5f:77:03:fc:62:49:b1:34:dc:59:
8d:a5:96:4c:10:7b:39:fb:cd:8d:00:da:bb:5b:6e:
0a:82:25:a3:b0:70:74:15:48:3e:01:63:6c:69:87:
b9:b5:cc:f1:90:13:af:76:2c:56:e1:4a:5e:b6:d4:
37:44:e9:a9:c4:6b:b1:3d:a4:5c:4d:82:0e:85:8d:
14:91:b0:5f:6e:db:26:9e:2f:35:02:b4:30:2b:2b:
d0:25:8a:cd:e0:3b:dd:01:d5:4f:79:00:92:64:7c:
5f:ce:50:2a:59:0e:5f:04:b9:cc:0f:bd:35:73:c4:
69:69:82:92:0c:c8:af:7e:4e:af:6d:7f:10:c6:8c:
e3:f8:86:dc:c6:20:07:ad:ad:c1:d3:92:4f:84:b0:
a8:72:6d:c1:06:ac:dd:4b:18:4b:90:ae:78:df:ec:
e4:7a:e0:ee:c6:6c:46:d6:c3:54:9e:5e:72:5e:27:
f1:d2:da:6b:c9:4b:36:ee:25:e4:b4:84:35:79:4d:
10:38:1b:68:18:28:dd:61:b5:4d:ce:0a:80:c6:13:
91:e1:89:37:01:c1:a8:9e:4c:53:0a:f4:e3:8a:bc:
aa:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:9D:D8:51:38:99:94:36:75:4D:BB:6C:47:F9:80:4F:27:DA:BD:4D
X509v3 Authority Key Identifier:
keyid:5A:D6:30:B6:1D:2E:72:92:F9:CE:F8:93:BB:6D:71:24:2A:5F:4B:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WtYwth0ucpL5zviTu21xJCpfS-0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/2b7576-2e0d-461c-9b89-0e4f0a394123/1/WtYwth0ucpL5zviTu21xJCpfS-0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/2b7576-2e0d-461c-9b89-0e4f0a394123/1/WtYwth0ucpL5zviTu21xJCpfS-0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:fe:42:3e:08:c7:10:2b:ba:f7:63:7d:15:d3:e5:50:bc:6a:
68:f2:df:bb:ee:17:0f:f7:b9:92:be:17:32:5d:2d:cf:32:6b:
dd:e7:5d:bc:ca:73:6a:3b:3e:65:5a:88:7e:c2:40:14:24:34:
95:f0:6a:f8:78:86:08:d9:6e:88:ae:45:55:1f:a9:6d:b3:09:
a8:04:de:b5:29:c5:d3:70:a5:24:a7:d5:47:83:b9:d2:0e:b4:
c2:18:5c:8a:0d:36:c7:c0:8d:50:59:7c:26:26:f9:0d:be:26:
51:e2:89:2a:d6:b4:db:3e:84:5e:77:15:01:75:3c:59:a3:d2:
17:4e:76:6e:6c:0e:f8:4b:bb:d8:e8:5b:20:2f:8a:9a:50:1b:
2e:d1:f7:90:16:a5:59:6a:f1:d0:0e:98:84:34:93:34:66:4f:
d5:93:29:98:74:bd:0e:63:ee:56:62:4b:aa:00:3f:1b:f2:b6:
d2:ab:b8:77:53:cb:38:e2:4e:da:0d:ed:11:e6:b2:8a:e0:26:
55:7f:dc:e9:7c:d3:e9:a0:a4:9d:5e:66:da:8d:98:66:e8:ad:
61:c9:3e:b6:bd:44:d2:8a:52:43:f1:6f:69:1b:c8:54:07:82:
c7:dc:09:34:70:90:bf:dd:55:c7:6d:b4:2b:00:9e:00:0d:3e:
fb:b1:85:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:42 2025 by rpki-client