Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/c7b7dd-1f70-4bae-9d6c-2a79e5d22ae1/1/W_W9pYNlLgWH_vhBZrQfbNqPH3g.mft
File: W_W9pYNlLgWH_vhBZrQfbNqPH3g.mft (raw, json)
Hash identifier: clUiZmi4pE+7pRonc8xk9d57kztsp/ZWzfWQAmLRYWc=
Subject key identifier: 1C:D1:45:30:97:1F:62:62:68:AC:76:B1:4A:28:E4:F9:D0:B6:91:91
Authority key identifier: 5B:F5:BD:A5:83:65:2E:05:87:FE:F8:41:66:B4:1F:6C:DA:8F:1F:78
Certificate issuer: /CN=5bf5bda583652e0587fef84166b41f6cda8f1f78
Certificate serial: 0194BCAA125C1217287018A58CD10D493257
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W_W9pYNlLgWH_vhBZrQfbNqPH3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/c7b7dd-1f70-4bae-9d6c-2a79e5d22ae1/1/W_W9pYNlLgWH_vhBZrQfbNqPH3g.mft
Manifest number: 01D1
Signing time: Fri 31 Jan 2025 14:00:49 +0000
Manifest this update: Fri 31 Jan 2025 14:00:49 +0000
Manifest next update: Sat 01 Feb 2025 14:00:49 +0000
Files and hashes: 1: 4QLia7FxnBTzrBWh2rXszBzsZXE.roa (hash: 4aQTpbccaIcRf6qv6KWWXLl0AprwkUt0p/UTHHsG+TA=)
2: D11OUUhDT5UjGqOO2sYVKlSZfd0.roa (hash: 1HSM7rlxpcn34ZRTxOgco4d9oki6ca3htijNuPzC2SI=)
3: W_W9pYNlLgWH_vhBZrQfbNqPH3g.crl (hash: 9O60HkyQuAu7d4YRjwu6GOvyfB1CARy8HwZm37/xLm4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:12:5c:12:17:28:70:18:a5:8c:d1:0d:49:32:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5bf5bda583652e0587fef84166b41f6cda8f1f78
Validity
Not Before: Jan 31 14:00:49 2025 GMT
Not After : Feb 1 14:00:49 2025 GMT
Subject: CN=1cd14530971f626268ac76b14a28e4f9d0b69191
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:13:65:0a:09:ff:21:ba:6d:9d:d0:4a:a6:68:
5e:da:95:13:00:bc:b4:27:86:f1:84:f9:02:c4:b3:
a8:bc:3e:0f:c1:fe:9d:0f:dd:94:a9:8b:32:fb:2d:
eb:9e:b0:b7:9c:bb:f8:a5:72:72:90:31:98:4c:fc:
71:d3:40:67:6e:7b:95:9d:2b:59:10:f0:0a:b5:0b:
fb:5e:82:de:25:5f:f9:44:cf:0b:a7:32:82:96:96:
39:ea:21:f4:6b:1e:5b:83:7f:1d:f0:81:97:15:fb:
3d:4f:99:e8:48:18:03:8f:af:91:4d:c9:ba:64:70:
14:32:ac:3a:27:dc:e1:ef:56:bd:24:be:ab:30:48:
22:33:6c:17:76:77:02:1e:f9:58:56:3c:f9:a5:00:
bf:e6:6d:83:ce:53:8e:1f:17:38:4f:4b:83:e9:e5:
86:46:f6:00:25:50:3d:81:b5:3d:6d:75:50:e5:59:
c3:35:72:cb:45:89:aa:f7:54:fb:ad:1a:13:5d:5c:
8a:57:18:c6:17:43:76:3a:c3:55:c4:3f:a7:45:ce:
df:0e:73:47:c1:d1:c4:53:68:d9:f4:8e:92:78:7d:
03:9e:33:68:d0:3c:aa:bf:60:43:85:87:0b:13:9c:
65:e1:37:ab:90:0e:06:76:22:0c:7d:dd:4e:9b:d0:
d9:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:D1:45:30:97:1F:62:62:68:AC:76:B1:4A:28:E4:F9:D0:B6:91:91
X509v3 Authority Key Identifier:
keyid:5B:F5:BD:A5:83:65:2E:05:87:FE:F8:41:66:B4:1F:6C:DA:8F:1F:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W_W9pYNlLgWH_vhBZrQfbNqPH3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/c7b7dd-1f70-4bae-9d6c-2a79e5d22ae1/1/W_W9pYNlLgWH_vhBZrQfbNqPH3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/c7b7dd-1f70-4bae-9d6c-2a79e5d22ae1/1/W_W9pYNlLgWH_vhBZrQfbNqPH3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:f5:c7:77:73:89:fe:d0:b1:cd:22:42:b7:36:e8:15:6b:1a:
05:56:a6:4c:12:3a:b9:6f:f8:a0:75:6d:7d:4f:ba:2d:35:69:
1c:18:82:74:e6:14:a9:d0:33:a4:ce:fb:25:bb:a3:06:75:19:
4b:1e:5b:78:66:46:cd:ef:98:8b:f3:32:97:0c:33:45:ca:dc:
c0:6b:99:35:c5:15:5d:96:84:38:12:14:63:cb:06:67:d6:41:
b8:97:73:f2:e6:55:35:8a:ca:70:c0:02:97:da:96:5b:ce:bc:
39:66:88:f8:84:18:6d:ec:6f:5b:f7:5c:58:57:f2:65:6e:9b:
ae:5f:2c:f7:b8:d8:b6:7e:c8:f9:25:88:6b:a5:f6:8a:f1:a1:
b9:e6:68:9e:9d:39:fb:7a:c5:55:47:3c:b1:b8:15:6b:6f:95:
d4:19:59:5e:f8:fe:f9:6b:c7:60:20:65:dc:b7:c4:8b:d9:d0:
4c:0f:30:ef:5f:a4:ca:97:7a:0a:32:5c:6d:8b:30:88:ff:15:
37:2d:72:d4:6a:c1:6c:cd:01:3b:93:dc:2f:f9:ae:f2:86:05:
21:99:fa:73:42:56:f5:74:ad:0d:40:0e:74:10:fc:aa:75:74:
37:61:2f:49:17:8e:fe:fa:71:c1:9d:f9:36:32:20:62:15:a2:
94:96:34:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:47:05 2025 by rpki-client