Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/e2b709-b843-4205-ba31-d5045c501707/1/_WjZ9SvHlS3fCn34GhHuFD8zJwo.mft
File: _WjZ9SvHlS3fCn34GhHuFD8zJwo.mft (raw, json)
Hash identifier: 6EpEY9gE01wUX0nBW1DBv4DC8v2IzTwrasSdmYDv4L8=
Subject key identifier: 07:F0:F4:36:CD:EA:F2:7E:70:CE:8D:AA:5F:7B:69:E9:FD:7E:48:37
Authority key identifier: FD:68:D9:F5:2B:C7:95:2D:DF:0A:7D:F8:1A:11:EE:14:3F:33:27:0A
Certificate issuer: /CN=fd68d9f52bc7952ddf0a7df81a11ee143f33270a
Certificate serial: 0194BD17E4A2F705FA9E5C4C9DFF3606A2CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_WjZ9SvHlS3fCn34GhHuFD8zJwo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/e2b709-b843-4205-ba31-d5045c501707/1/_WjZ9SvHlS3fCn34GhHuFD8zJwo.mft
Manifest number: 0A57
Signing time: Fri 31 Jan 2025 16:00:47 +0000
Manifest this update: Fri 31 Jan 2025 16:00:47 +0000
Manifest next update: Sat 01 Feb 2025 16:00:47 +0000
Files and hashes: 1: _WjZ9SvHlS3fCn34GhHuFD8zJwo.crl (hash: YfhmV0lyAosSqDqJfSLm404SPFUZSUbOMvHKSc+FK/Q=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:e4:a2:f7:05:fa:9e:5c:4c:9d:ff:36:06:a2:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd68d9f52bc7952ddf0a7df81a11ee143f33270a
Validity
Not Before: Jan 31 16:00:47 2025 GMT
Not After : Feb 1 16:00:47 2025 GMT
Subject: CN=07f0f436cdeaf27e70ce8daa5f7b69e9fd7e4837
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:0c:6f:cf:d4:c0:d3:b1:59:45:e9:b1:86:a5:
32:02:c0:0a:c4:b6:b3:69:1e:ad:58:77:e1:86:bb:
7a:98:4d:fe:12:94:74:2e:7f:0e:57:26:5c:c7:78:
90:05:50:d3:f3:56:23:79:51:ae:e7:94:c3:93:fe:
4f:7d:f7:80:c4:20:a4:fa:5e:ab:63:b2:b3:15:c4:
1b:ae:f8:d6:f8:04:54:a3:3d:8f:90:e9:58:ad:44:
54:01:fc:b2:ab:f0:2a:e9:45:2e:6a:99:c8:9c:09:
47:c7:9c:6a:b0:c9:48:1c:35:04:95:06:d5:ae:86:
a3:da:2e:2e:1f:df:65:4a:1b:65:16:f2:79:27:69:
b9:d6:a6:d6:dd:e3:6e:d5:53:ec:ef:4c:21:f3:07:
97:1c:58:c7:ba:75:49:5d:23:a3:c0:6e:dd:6a:ff:
7a:cc:53:e2:24:7e:bf:a8:fe:89:25:1f:a5:27:f6:
10:39:ad:bd:c4:ef:26:4e:a3:5b:f0:61:f5:5e:1e:
20:e3:9e:cf:8d:b7:6b:e0:fc:9a:36:03:60:0a:ee:
9d:80:1a:f5:70:cc:31:0e:74:da:d8:2b:9c:a4:af:
df:86:1f:d3:6f:fa:3c:5f:f2:20:aa:6c:70:dd:42:
ec:e7:83:d7:ba:f2:98:78:ab:fe:a4:06:c3:c8:80:
64:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:F0:F4:36:CD:EA:F2:7E:70:CE:8D:AA:5F:7B:69:E9:FD:7E:48:37
X509v3 Authority Key Identifier:
keyid:FD:68:D9:F5:2B:C7:95:2D:DF:0A:7D:F8:1A:11:EE:14:3F:33:27:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_WjZ9SvHlS3fCn34GhHuFD8zJwo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/e2b709-b843-4205-ba31-d5045c501707/1/_WjZ9SvHlS3fCn34GhHuFD8zJwo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/e2b709-b843-4205-ba31-d5045c501707/1/_WjZ9SvHlS3fCn34GhHuFD8zJwo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:b0:64:6f:ed:56:ba:53:de:31:c5:38:7a:f2:d7:fa:93:54:
a5:71:b5:26:6f:7e:92:43:5b:89:67:09:50:8e:70:84:31:d9:
aa:95:13:88:5a:a6:d9:66:c8:eb:0b:0c:fd:a4:d3:39:7f:22:
29:40:ed:7b:ed:45:56:e3:c6:60:ed:46:6c:e7:09:d7:fb:0c:
5b:f7:4b:2c:87:a5:03:96:22:22:c5:3a:b2:24:d3:f2:59:9b:
a0:33:e8:49:1e:4b:b1:22:0b:bb:d2:78:44:5b:a3:31:06:49:
7e:54:58:f5:c5:cd:91:ec:e3:d2:58:79:02:7f:fb:70:23:41:
4e:e2:75:96:0a:7f:78:79:23:f4:05:0a:d9:25:99:c9:03:98:
99:23:1c:a3:73:27:86:17:de:e4:2c:2f:db:eb:92:83:b4:bc:
57:3d:5c:7d:09:a1:bc:5e:e6:04:8a:78:1d:ec:1f:9e:b9:67:
19:e2:d9:07:75:ee:07:01:33:4c:a3:1d:ef:1c:de:c3:1e:82:
24:41:7f:b8:d7:93:38:5e:4c:00:0d:f5:ff:a8:bb:fb:aa:76:
2c:1f:94:78:38:9a:a4:e9:27:79:04:1e:27:b6:78:c7:7c:fc:
f1:62:74:b8:60:e8:15:36:3c:b0:8f:23:bd:12:60:7b:f6:bc:
e6:08:9b:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:54:02 2025 by rpki-client