Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/28fce4-81f1-4cd3-a8ed-ab94affb903a/1/P_WN_7pN9qw0vZ9IEZrhHP74p2w.mft
File: P_WN_7pN9qw0vZ9IEZrhHP74p2w.mft (raw, json)
Hash identifier: 6hbt35o+whFaGjAxbyGLwvmOsUBkKND80wDACGP/RAc=
Subject key identifier: 5C:60:4C:33:85:E2:46:A6:F8:E2:B3:10:55:8D:C9:1C:FD:1F:03:51
Authority key identifier: 3F:F5:8D:FF:BA:4D:F6:AC:34:BD:9F:48:11:9A:E1:1C:FE:F8:A7:6C
Certificate issuer: /CN=3ff58dffba4df6ac34bd9f48119ae11cfef8a76c
Certificate serial: 0194BD8558A08115A5AB414BEBB5ED20679F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P_WN_7pN9qw0vZ9IEZrhHP74p2w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/28fce4-81f1-4cd3-a8ed-ab94affb903a/1/P_WN_7pN9qw0vZ9IEZrhHP74p2w.mft
Manifest number: 11BC
Signing time: Fri 31 Jan 2025 18:00:20 +0000
Manifest this update: Fri 31 Jan 2025 18:00:20 +0000
Manifest next update: Sat 01 Feb 2025 18:00:20 +0000
Files and hashes: 1: P_WN_7pN9qw0vZ9IEZrhHP74p2w.crl (hash: SuX1M05VOd1LMxFjoIbS1ESqbqYPzPVtkoPlNscEitk=)
2: Q0NTavEWJ5qlzhM0Gok-q7D_kpE.roa (hash: 38GOGOOApNFSuUu3tueeEDSFag3IGEHi/vwKyUqguXY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:58:a0:81:15:a5:ab:41:4b:eb:b5:ed:20:67:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ff58dffba4df6ac34bd9f48119ae11cfef8a76c
Validity
Not Before: Jan 31 18:00:20 2025 GMT
Not After : Feb 1 18:00:20 2025 GMT
Subject: CN=5c604c3385e246a6f8e2b310558dc91cfd1f0351
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:6f:02:ca:3d:8d:5b:c5:8d:fe:e9:e4:1a:59:
7a:2d:ff:b5:02:7b:e6:9b:84:ca:94:ad:4b:7f:f5:
a9:1a:79:38:64:39:bc:6f:f6:a3:97:fa:20:b2:03:
63:f2:e8:2b:11:e0:7e:67:16:a6:07:0e:80:0a:c0:
ea:7f:89:dd:c4:df:fb:4b:ff:f8:ad:6a:c3:10:00:
55:55:94:89:1a:a9:b1:31:85:d1:e8:21:d1:78:d4:
87:76:1b:26:cd:22:ba:5e:a3:f1:2a:30:ef:86:a2:
14:f3:32:19:75:a6:f8:80:36:45:1c:4f:0c:3e:ff:
8e:36:69:95:a6:7f:e5:dd:0f:30:da:5d:eb:a8:cc:
8c:76:82:77:40:9a:f6:c5:f9:35:f6:57:4b:30:74:
c0:14:ce:d5:4b:0d:4e:f7:d3:b0:38:9f:bb:40:25:
6b:60:19:20:89:49:3d:d7:4a:96:55:6c:6b:ad:44:
be:dd:89:6f:a1:a5:64:e1:ec:36:ed:5f:e6:2d:3a:
cb:a0:84:06:e4:0a:12:79:90:c4:96:48:45:59:b0:
f4:95:c9:45:48:ff:df:90:38:ae:ba:c1:8e:0f:ea:
82:4a:46:3c:52:1c:d7:06:e3:4d:ed:7b:49:f7:c2:
82:2d:d2:d5:72:f0:8f:6c:f1:ed:6d:a9:c4:f0:36:
a8:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:60:4C:33:85:E2:46:A6:F8:E2:B3:10:55:8D:C9:1C:FD:1F:03:51
X509v3 Authority Key Identifier:
keyid:3F:F5:8D:FF:BA:4D:F6:AC:34:BD:9F:48:11:9A:E1:1C:FE:F8:A7:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P_WN_7pN9qw0vZ9IEZrhHP74p2w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/28fce4-81f1-4cd3-a8ed-ab94affb903a/1/P_WN_7pN9qw0vZ9IEZrhHP74p2w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/28fce4-81f1-4cd3-a8ed-ab94affb903a/1/P_WN_7pN9qw0vZ9IEZrhHP74p2w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:09:9d:32:5a:e6:4c:b3:c6:e9:c2:71:62:8f:0d:20:99:1d:
21:e8:87:ed:f3:6f:e7:3e:ae:a8:72:97:d2:c6:86:f2:e6:a9:
e8:fd:c4:20:de:fa:ce:a1:fd:64:38:5e:dd:15:74:67:99:d3:
7c:62:36:18:2b:6c:6b:1f:82:78:cd:86:5d:02:c7:f8:ba:0e:
ab:20:4b:8b:56:f3:61:53:c8:8b:ec:43:a4:3e:9b:0a:df:be:
40:68:9a:08:38:2f:db:71:f2:2e:0a:d1:d6:e0:55:8a:b3:65:
d9:0a:6d:08:c5:d1:fb:b3:83:ca:3d:df:64:fc:79:50:75:eb:
e6:1b:88:91:ed:3f:49:0a:32:d6:7e:da:e7:c4:0c:c5:01:5c:
fd:07:51:6c:3c:04:a1:62:08:ce:42:21:46:f6:82:26:60:a4:
7d:15:e4:ea:3d:30:58:99:40:cf:bc:e3:dc:3f:92:a7:a1:a8:
2f:ff:f3:07:74:58:95:bd:aa:d7:88:51:03:f2:96:f7:6b:5e:
30:41:f5:88:5c:2c:b7:63:fb:31:28:80:b5:2b:68:ba:d8:fe:
db:eb:99:e0:7f:fc:21:d2:46:0e:05:bc:a1:c7:7f:d4:17:6f:
b6:8c:58:f0:b2:6c:4a:b9:1c:84:f0:a1:e7:a2:3e:3f:19:74:
83:40:9b:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 08:10:06 2025 by rpki-client