Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/822376-808a-465c-a87f-5ceae19f94f9/1/W7HFcFXCnWafKJqfaPOSgjlCEyo.mft
File: W7HFcFXCnWafKJqfaPOSgjlCEyo.mft (raw, json)
Hash identifier: FA0aECxB0ZBDnPiMYiAI/6B/HNlHZmDvmPAoI+UGpAI=
Subject key identifier: 5D:D3:7B:FF:D1:B9:F8:F8:EF:7A:41:9E:5B:A7:1F:84:7B:D7:34:D7
Authority key identifier: 5B:B1:C5:70:55:C2:9D:66:9F:28:9A:9F:68:F3:92:82:39:42:13:2A
Certificate issuer: /CN=5bb1c57055c29d669f289a9f68f392823942132a
Certificate serial: 0194BBCEF53644ED5847CB48B45B7E0AB8CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W7HFcFXCnWafKJqfaPOSgjlCEyo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/822376-808a-465c-a87f-5ceae19f94f9/1/W7HFcFXCnWafKJqfaPOSgjlCEyo.mft
Manifest number: 1037
Signing time: Fri 31 Jan 2025 10:01:30 +0000
Manifest this update: Fri 31 Jan 2025 10:01:30 +0000
Manifest next update: Sat 01 Feb 2025 10:01:30 +0000
Files and hashes: 1: W7HFcFXCnWafKJqfaPOSgjlCEyo.crl (hash: WZVxpkGDQRPIDnqYAlRWStDJJ/kNpMH/Q26aV+ndzQk=)
2: oLD0eFUFYxck4v3i6OymPCRtKqc.roa (hash: d9IQhkXi9el+adqbpk+yqo7QWqWaJxfrg/LT1tEGEMY=)
3: uB1fsTN5xt9prk3FmqA_vfOk3V8.roa (hash: Xbk+Y99PsH3Ea8NbCtaJ5KS35ZMdZP+5pz4Y3JKvU0M=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:f5:36:44:ed:58:47:cb:48:b4:5b:7e:0a:b8:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5bb1c57055c29d669f289a9f68f392823942132a
Validity
Not Before: Jan 31 10:01:30 2025 GMT
Not After : Feb 1 10:01:30 2025 GMT
Subject: CN=5dd37bffd1b9f8f8ef7a419e5ba71f847bd734d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:28:77:7c:e3:43:4b:f7:9b:65:78:44:cc:d0:
fd:85:4a:54:4f:98:cc:ee:9f:d6:c4:de:e3:de:4d:
47:f2:c6:21:0a:25:ca:80:37:9f:21:fd:e1:f1:5f:
b6:bf:fa:13:43:de:8e:80:e7:08:2a:8a:90:b3:b5:
79:fc:d5:96:a1:db:61:44:2f:8e:9a:de:cc:b8:03:
6e:ec:94:d6:1e:7b:93:8a:6c:b4:d6:9e:4b:11:fe:
f8:54:e2:28:bc:f4:f4:4d:75:47:3e:c4:fa:07:c8:
44:24:db:ce:0a:5e:93:b7:1b:31:31:57:1a:02:e1:
f8:5e:fa:c2:ef:87:24:28:1d:dc:16:b6:e7:2b:44:
f5:8f:4b:30:14:3e:9b:3d:1e:77:32:f6:c8:9d:f7:
a8:28:79:18:d3:00:02:42:2d:45:2c:3c:4d:fa:1e:
60:53:14:9c:84:ad:46:7d:38:c0:f9:e9:06:a3:2d:
40:81:96:ce:05:ae:bb:f7:ab:e6:23:3a:38:0f:f1:
a4:ef:f0:e9:41:a0:b2:8f:ef:09:1a:96:62:2e:98:
7b:67:ce:a3:f7:4f:dc:b5:10:11:84:11:4d:68:21:
95:61:9e:4f:77:34:67:f4:8d:b5:c2:f9:a6:c0:55:
34:d5:c9:11:e7:e5:86:e0:21:67:d3:da:02:7f:52:
4b:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:D3:7B:FF:D1:B9:F8:F8:EF:7A:41:9E:5B:A7:1F:84:7B:D7:34:D7
X509v3 Authority Key Identifier:
keyid:5B:B1:C5:70:55:C2:9D:66:9F:28:9A:9F:68:F3:92:82:39:42:13:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W7HFcFXCnWafKJqfaPOSgjlCEyo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/822376-808a-465c-a87f-5ceae19f94f9/1/W7HFcFXCnWafKJqfaPOSgjlCEyo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/822376-808a-465c-a87f-5ceae19f94f9/1/W7HFcFXCnWafKJqfaPOSgjlCEyo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:df:bd:49:06:a7:87:11:56:c9:f6:46:ac:66:8f:89:25:dd:
c3:4e:fc:cb:c4:c9:5b:b1:b5:d8:39:4b:3d:6a:33:a7:eb:27:
6f:cc:26:48:7c:94:05:4f:a7:a0:ae:cf:b8:9b:6d:15:50:e9:
27:2f:28:18:c1:8f:2c:a0:08:c1:7c:46:9d:5b:4d:4f:d3:c0:
10:38:3a:98:b9:6f:a6:16:ba:73:bf:b4:d8:b8:b8:b1:68:57:
a8:4d:32:ee:07:98:df:f7:1b:98:d5:d8:62:bb:96:47:68:2c:
7e:bf:11:4f:68:23:8e:ae:cc:79:e8:9c:f0:0d:36:36:7b:5d:
10:8f:03:db:c3:de:58:26:da:16:5c:bf:a2:11:a3:d1:98:cf:
8c:a7:83:e2:8c:3a:a0:dd:c8:1b:9c:fd:b1:2a:9d:a7:43:ee:
e7:ec:46:30:92:99:68:eb:9b:ac:ed:52:14:83:94:42:a3:9b:
9c:b6:20:89:be:6e:05:93:91:2d:a8:11:f9:54:93:ce:da:bd:
0c:b2:6a:c4:c2:88:8a:db:f3:b8:9a:b7:ad:8d:50:57:43:49:
fd:84:ed:14:2d:a3:18:55:bf:6c:74:b3:50:8c:d4:01:25:99:
87:e2:14:38:9d:e0:c2:e6:e7:7c:2a:fe:85:50:93:2c:06:d0:
bb:0e:7a:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:01:12 2025 by rpki-client