Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/be863f-b33b-4334-bbd2-4094106786a9/1/WMv-CDT45mUS9VvXjMB1t-1W9Ak.mft
File: WMv-CDT45mUS9VvXjMB1t-1W9Ak.mft (raw, json)
Hash identifier: bnCMPv0m5u831D4+hHAC+dFW6NQixkxuo5tnpjv8mGA=
Subject key identifier: EE:3B:48:51:89:A3:FD:14:E3:26:51:89:65:16:27:C3:71:D7:90:2F
Authority key identifier: 58:CB:FE:08:34:F8:E6:65:12:F5:5B:D7:8C:C0:75:B7:ED:56:F4:09
Certificate issuer: /CN=58cbfe0834f8e66512f55bd78cc075b7ed56f409
Certificate serial: 0194BCE0C77D48EA6834DA2A8702C4B2BA67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WMv-CDT45mUS9VvXjMB1t-1W9Ak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/be863f-b33b-4334-bbd2-4094106786a9/1/WMv-CDT45mUS9VvXjMB1t-1W9Ak.mft
Manifest number: 02E1
Signing time: Fri 31 Jan 2025 15:00:35 +0000
Manifest this update: Fri 31 Jan 2025 15:00:35 +0000
Manifest next update: Sat 01 Feb 2025 15:00:35 +0000
Files and hashes: 1: WMv-CDT45mUS9VvXjMB1t-1W9Ak.crl (hash: a8SQlxc927R1Z1tH0UwcBf8wExfOFZXnon29bBTkpZU=)
2: sqav3aLxOo9EBvGXAVp2M2JUjLk.roa (hash: VEx9zb2RSoqX9zcmLVzEThMXW7bJA3NuZWVb7RztklM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:c7:7d:48:ea:68:34:da:2a:87:02:c4:b2:ba:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58cbfe0834f8e66512f55bd78cc075b7ed56f409
Validity
Not Before: Jan 31 15:00:35 2025 GMT
Not After : Feb 1 15:00:35 2025 GMT
Subject: CN=ee3b485189a3fd14e3265189651627c371d7902f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:34:21:4b:a7:a1:8d:2e:5d:c4:5c:79:5c:94:
11:37:41:af:ae:55:d3:ba:d2:7f:f3:0f:41:e7:99:
19:82:60:55:17:3c:ef:40:07:29:db:98:76:f0:54:
a7:d1:42:a0:ec:93:9d:df:a2:f2:86:01:4f:2c:8f:
c1:1c:2f:c0:f1:0c:3b:58:47:71:76:da:45:af:a9:
32:c0:72:4a:49:ed:39:f7:aa:52:0d:45:78:5a:b4:
11:ac:8c:15:9d:88:74:c3:95:be:8e:d0:4d:c3:55:
69:90:7e:88:bf:02:2c:58:7a:81:61:5c:31:93:e8:
fb:48:94:31:35:71:06:ea:a3:3f:f7:a4:a3:42:39:
88:3f:ff:c4:e0:84:98:63:77:90:30:6a:98:fa:35:
b4:02:b8:eb:9f:59:8a:06:c9:d0:72:d5:6f:8f:b5:
bc:c9:a4:ef:33:5a:1d:fb:9b:28:ab:d4:e4:d7:64:
7f:0a:ab:28:e4:de:91:ef:18:a3:cc:96:5a:c9:5c:
8d:0d:af:17:f1:58:32:c6:58:7b:09:32:72:7f:41:
b2:46:50:78:17:0e:f4:76:e2:3b:09:ec:fe:45:5d:
7f:0d:25:f6:7a:ea:1a:f8:7b:aa:92:6a:9b:2a:2e:
08:ba:a8:ff:d9:8a:a7:65:45:04:a6:61:15:f8:1f:
af:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:3B:48:51:89:A3:FD:14:E3:26:51:89:65:16:27:C3:71:D7:90:2F
X509v3 Authority Key Identifier:
keyid:58:CB:FE:08:34:F8:E6:65:12:F5:5B:D7:8C:C0:75:B7:ED:56:F4:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WMv-CDT45mUS9VvXjMB1t-1W9Ak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/be863f-b33b-4334-bbd2-4094106786a9/1/WMv-CDT45mUS9VvXjMB1t-1W9Ak.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/be863f-b33b-4334-bbd2-4094106786a9/1/WMv-CDT45mUS9VvXjMB1t-1W9Ak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:7b:87:58:01:72:b2:c8:80:25:67:0c:c2:9b:2c:ae:b5:a7:
94:5c:80:63:ed:92:85:59:b2:0e:a1:fc:a4:f8:f9:42:79:12:
50:f9:ad:15:7d:c6:36:12:5a:cb:21:ef:42:3a:c3:cf:01:00:
a6:cd:88:04:88:e8:4c:6f:d5:44:93:84:55:77:93:3d:94:a9:
0f:b6:94:62:e9:cb:2d:27:d1:f9:9b:72:0c:09:08:15:c1:d8:
af:d5:d3:68:bd:0c:29:b2:53:bc:a0:fb:a5:65:1a:77:77:b1:
69:9c:c4:e0:18:e0:f8:f3:20:eb:f2:b9:ee:50:21:bc:6d:4e:
fb:a3:6b:e9:e0:50:ff:4d:4c:d6:76:38:4d:10:a0:6f:ec:59:
d0:73:ca:6f:6b:f0:f1:ab:bd:fe:28:99:83:88:2e:a0:4e:f5:
a5:03:5c:90:8d:cc:52:22:20:39:b6:49:c4:72:15:d3:5b:d2:
36:ff:db:87:ce:1c:91:73:33:1d:f6:86:44:b3:28:9a:2f:49:
b3:70:f8:cd:bd:8f:55:04:d4:35:c0:6b:7e:51:0b:4d:be:26:
07:76:3e:e8:89:83:92:75:18:05:ff:ae:77:aa:25:54:99:71:
b8:22:62:cb:74:2d:8a:52:2f:55:d6:e0:4f:2f:f0:16:27:d8:
3c:50:12:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:41:44 2025 by rpki-client