Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/9d8187-2b54-4203-a023-8a92109989ef/1/WkxPlqpaAsrag9S4jUnmpzq9JfA.mft
File: WkxPlqpaAsrag9S4jUnmpzq9JfA.mft (raw, json)
Hash identifier: qKOPL/xG0q+iNqaI6XatEMcsufRVYRcE3Y+JXn3zMpc=
Subject key identifier: 59:6B:B2:32:67:00:FE:F3:26:47:82:30:62:6D:59:F4:D1:15:37:1B
Authority key identifier: 5A:4C:4F:96:AA:5A:02:CA:DA:83:D4:B8:8D:49:E6:A7:3A:BD:25:F0
Certificate issuer: /CN=5a4c4f96aa5a02cada83d4b88d49e6a73abd25f0
Certificate serial: 0194BD4E6F5AF8054A384692874C8D9795D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WkxPlqpaAsrag9S4jUnmpzq9JfA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/9d8187-2b54-4203-a023-8a92109989ef/1/WkxPlqpaAsrag9S4jUnmpzq9JfA.mft
Manifest number: 0BCA
Signing time: Fri 31 Jan 2025 17:00:21 +0000
Manifest this update: Fri 31 Jan 2025 17:00:21 +0000
Manifest next update: Sat 01 Feb 2025 17:00:21 +0000
Files and hashes: 1: Qlh9bFiBiZDJ7E4bJ6Qm7U8cfpk.roa (hash: 6OpDkd4to1irtWv8vpsm2jxisQw9dR70exo6gT09Ccs=)
2: WkxPlqpaAsrag9S4jUnmpzq9JfA.crl (hash: bXUdeJ8MQPQwDKtz108wphyBEimL0KlcQWdVVJBihv4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:6f:5a:f8:05:4a:38:46:92:87:4c:8d:97:95:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a4c4f96aa5a02cada83d4b88d49e6a73abd25f0
Validity
Not Before: Jan 31 17:00:21 2025 GMT
Not After : Feb 1 17:00:21 2025 GMT
Subject: CN=596bb2326700fef326478230626d59f4d115371b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:81:26:a4:bc:1b:5b:3f:ad:7d:d0:ff:92:07:
34:50:0f:47:50:7b:b2:d0:32:ab:dd:94:4e:6b:11:
17:4d:f6:d0:48:5a:f1:9e:e7:85:49:dc:aa:4c:07:
69:09:6f:16:bb:9f:98:86:5a:9b:28:90:e8:a4:19:
d4:13:f3:24:59:69:96:98:23:03:97:b9:5c:4a:7b:
f9:af:90:db:14:57:95:f9:65:fb:2e:95:92:9b:d2:
5b:f2:6e:91:b1:35:fe:75:1e:fd:d3:1b:18:a3:a2:
fb:7d:c9:1b:ea:74:4b:87:25:fd:3b:52:f5:41:f4:
c9:6b:75:0d:9b:4e:95:38:88:bc:74:67:e2:03:1d:
1e:e9:5f:aa:d7:6d:e7:5f:1d:1a:97:ad:34:26:f4:
17:5a:74:23:b2:ec:63:93:8d:83:c5:9c:0f:42:f8:
b8:1d:ed:1c:04:6d:db:da:57:52:88:2b:94:37:32:
8a:19:67:2f:b0:02:8d:9b:0d:6d:6b:b9:75:ef:7c:
26:19:58:d8:b6:e1:d4:ee:1b:85:f4:29:dc:dc:34:
cf:c7:cd:73:ae:d9:bf:44:73:73:8f:b7:d4:97:a9:
61:6f:6e:93:6c:a1:b9:31:a2:b9:e0:50:a9:bd:78:
34:cd:77:36:10:f1:89:c1:40:c9:b3:ca:bc:4f:c0:
88:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:6B:B2:32:67:00:FE:F3:26:47:82:30:62:6D:59:F4:D1:15:37:1B
X509v3 Authority Key Identifier:
keyid:5A:4C:4F:96:AA:5A:02:CA:DA:83:D4:B8:8D:49:E6:A7:3A:BD:25:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WkxPlqpaAsrag9S4jUnmpzq9JfA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9d8187-2b54-4203-a023-8a92109989ef/1/WkxPlqpaAsrag9S4jUnmpzq9JfA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9d8187-2b54-4203-a023-8a92109989ef/1/WkxPlqpaAsrag9S4jUnmpzq9JfA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:a3:3f:16:97:69:7c:b3:ae:82:cb:23:d2:45:42:6e:ff:68:
a2:69:bf:3a:69:d2:25:ea:df:5d:42:bf:1b:99:68:ee:a4:e9:
ee:6b:f4:db:96:3f:8f:32:42:4a:4d:69:1a:87:78:fd:cb:c1:
e8:bd:aa:af:f7:8a:95:68:5c:fd:c5:3e:fb:c9:88:00:56:99:
91:d2:1d:40:6a:13:b6:f9:11:f5:a8:a4:5f:55:60:ac:0c:31:
18:c7:3f:a0:6c:48:30:6a:fb:33:39:87:55:e4:23:03:b9:87:
a8:b0:fc:9a:64:ea:51:b7:2e:e7:67:d7:38:a6:23:51:21:65:
f8:d3:02:1c:04:e5:de:a0:b8:a9:b0:ba:8c:d0:65:e6:7e:a5:
dd:db:c2:c3:9c:bb:b1:49:bb:a2:6a:f2:5d:a7:86:47:c3:33:
49:48:c9:8f:c4:1e:46:51:dc:62:e5:7d:8f:d2:8d:10:c0:fe:
19:d4:5a:95:f3:fd:2f:46:3c:8d:3c:73:c4:13:76:c2:da:d2:
32:60:b3:00:54:7d:df:e7:db:f1:88:c7:6d:4e:32:d4:fa:8b:
c5:8b:36:03:9e:2d:2a:07:12:e8:76:e5:bd:8d:04:e9:c8:b5:
57:1a:a7:d3:f9:9a:53:ce:74:d6:04:85:4c:59:d9:92:32:ed:
bb:a2:1e:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:39:39 2025 by rpki-client