Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/a46349-1bc0-4a0b-b67f-b217a68ceaf4/1/WQYyXjRBilfOVm78DD6LOKDvpds.mft
File: WQYyXjRBilfOVm78DD6LOKDvpds.mft (raw, json)
Hash identifier: wObtqgDsPnkOgFnDVf9VHeBx124EZeKHa72LwrcCeiY=
Subject key identifier: 92:4E:18:A6:73:40:72:B6:7D:85:F0:EC:34:2F:BA:E6:9A:EF:14:A2
Authority key identifier: 59:06:32:5E:34:41:8A:57:CE:56:6E:FC:0C:3E:8B:38:A0:EF:A5:DB
Certificate issuer: /CN=5906325e34418a57ce566efc0c3e8b38a0efa5db
Certificate serial: 0194BCA97C9F3F13F14306240D01546F9B45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WQYyXjRBilfOVm78DD6LOKDvpds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/a46349-1bc0-4a0b-b67f-b217a68ceaf4/1/WQYyXjRBilfOVm78DD6LOKDvpds.mft
Manifest number: 040B
Signing time: Fri 31 Jan 2025 14:00:11 +0000
Manifest this update: Fri 31 Jan 2025 14:00:11 +0000
Manifest next update: Sat 01 Feb 2025 14:00:11 +0000
Files and hashes: 1: CHolCMPV9MDfWslO2iJddWWgMxU.roa (hash: xbO5/GWIWdRSiMSxSxvQxXxVcngA8nyNGqLLz8U68pk=)
2: WQYyXjRBilfOVm78DD6LOKDvpds.crl (hash: 6PE0JY0bfvS4NIncB1zJ+O3FMC3CxULTkJTNCkHoEi4=)
3: lJbRiLiZGOi-fCWDGGzZN5ma7W8.roa (hash: BxDOajJXMhzwiCUKNNyd1p9JlNupPH3KBSPrVsuMQCs=)
4: xyGqaFm8wV6in1t_6bj0_LRGfV0.roa (hash: m0Saw+cLOstpLd2stdgUm+hFFozHrcVyidN3zuOottg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:7c:9f:3f:13:f1:43:06:24:0d:01:54:6f:9b:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5906325e34418a57ce566efc0c3e8b38a0efa5db
Validity
Not Before: Jan 31 14:00:11 2025 GMT
Not After : Feb 1 14:00:11 2025 GMT
Subject: CN=924e18a6734072b67d85f0ec342fbae69aef14a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:7f:55:3c:cf:02:b7:61:79:7e:ac:ab:74:33:
49:77:ec:9d:c3:65:0f:3c:59:90:eb:1c:7c:24:8f:
0b:2f:e4:02:a5:f3:de:a2:ec:4f:0b:f6:b7:22:a5:
3a:7e:73:61:7a:cc:3e:27:5e:50:0d:43:e8:e6:3f:
8a:cb:97:53:f7:f8:eb:82:94:a8:c9:8f:77:66:53:
f5:34:75:bc:cc:e1:0d:43:cd:fb:27:e9:32:05:4f:
0e:c3:69:7b:6c:f9:d3:5d:0b:fd:39:ca:10:ae:73:
1b:71:85:a0:d6:28:9f:8d:0e:d4:a0:63:1c:4d:46:
ca:d3:ad:d4:b2:7c:42:e8:d7:95:c8:ad:55:a9:52:
92:1e:b0:ab:9d:05:c6:fb:3f:c9:d9:43:04:65:cc:
3d:1c:12:91:df:81:88:f1:5c:6e:6f:2e:d9:5d:91:
01:ab:d0:aa:66:ba:87:08:19:13:55:a8:db:93:fd:
70:c5:1e:a2:ec:0f:ce:60:7c:24:de:a9:52:c2:a6:
33:dd:00:53:47:cf:58:10:2f:1f:17:18:44:ee:af:
94:51:37:df:21:39:16:67:df:f1:67:94:56:8e:f6:
46:1a:3a:ca:8f:3e:f6:2d:a9:d6:c3:d7:d2:24:05:
60:22:41:75:45:ab:08:34:98:41:a8:6a:6b:4d:26:
cb:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:4E:18:A6:73:40:72:B6:7D:85:F0:EC:34:2F:BA:E6:9A:EF:14:A2
X509v3 Authority Key Identifier:
keyid:59:06:32:5E:34:41:8A:57:CE:56:6E:FC:0C:3E:8B:38:A0:EF:A5:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WQYyXjRBilfOVm78DD6LOKDvpds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/a46349-1bc0-4a0b-b67f-b217a68ceaf4/1/WQYyXjRBilfOVm78DD6LOKDvpds.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/a46349-1bc0-4a0b-b67f-b217a68ceaf4/1/WQYyXjRBilfOVm78DD6LOKDvpds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:94:2d:41:8f:21:d2:ba:0b:ee:f3:55:4a:f3:2f:0c:ad:a4:
ae:d6:e4:6a:54:dd:a5:98:83:2d:4d:0c:d0:a5:fc:fa:84:e3:
07:35:2a:c9:99:5f:77:4d:0c:3e:30:9a:e6:83:c4:ed:dd:58:
ee:93:b1:a5:4d:d7:79:5f:1e:db:bd:6a:66:b6:ea:c0:0f:8b:
e3:ef:12:98:bc:8d:0e:a1:60:5e:4f:1f:63:19:c9:22:74:63:
05:4a:b7:cd:2f:b9:6a:56:e8:d8:63:15:c0:38:b7:94:06:27:
3a:3c:62:d8:b0:a3:00:b4:1c:30:ec:f9:87:84:0c:e7:b5:19:
69:76:17:22:e9:a7:19:48:36:4b:40:f2:b8:c6:3b:b2:77:74:
dd:b8:9a:d9:60:9a:95:2a:57:9e:02:10:72:a9:6e:43:39:94:
ef:a7:69:f4:7e:8c:41:49:a2:85:cd:35:d2:b7:bb:f9:d5:48:
d8:1e:19:3c:0e:85:54:81:b4:21:1c:1f:4e:96:bf:b1:fc:c7:
06:cc:5e:f2:e0:97:8d:f6:98:dc:a6:c3:f5:e4:57:4c:06:a0:
84:60:1f:59:83:de:61:d2:41:75:64:b8:a6:b3:ca:b2:e2:1f:
dc:12:41:fa:ab:0c:9a:1c:16:8e:5b:61:ee:a9:0b:8d:94:1e:
7a:4e:d6:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:49:40 2025 by rpki-client