Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/791c33-a10e-43a9-ac29-e0d13230b9d5/1/WdCj-cNDB7Cls20ubRiZrv57vrQ.mft
File: WdCj-cNDB7Cls20ubRiZrv57vrQ.mft (raw, json)
Hash identifier: u3VhMN4nS2yfC5okDL3VZJanmCkzJkxzWbet/GYJVVs=
Subject key identifier: D8:3B:EB:F5:4B:9B:AA:49:B4:5F:0A:E9:5C:29:96:C4:D5:CB:A6:59
Authority key identifier: 59:D0:A3:F9:C3:43:07:B0:A5:B3:6D:2E:6D:18:99:AE:FE:7B:BE:B4
Certificate issuer: /CN=59d0a3f9c34307b0a5b36d2e6d1899aefe7bbeb4
Certificate serial: 0194BC72D74C3F75998177AD8C144336494C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WdCj-cNDB7Cls20ubRiZrv57vrQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/791c33-a10e-43a9-ac29-e0d13230b9d5/1/WdCj-cNDB7Cls20ubRiZrv57vrQ.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 13:00:30 +0000
Manifest this update: Fri 31 Jan 2025 13:00:30 +0000
Manifest next update: Sat 01 Feb 2025 13:00:30 +0000
Files and hashes: 1: WdCj-cNDB7Cls20ubRiZrv57vrQ.crl (hash: yAoe9zWfyPZRmAsSP7NoUXttJvMhu/Nxdrmn1ehVtrY=)
2: qnyT4xJfydWnP5jn7MY2v2jL3y4.roa (hash: OVzltJuTj7ZgLCXEnxygFrh+27k2M7PI7mlew2jPilY=)
3: rGsU2ZkcNAPfnTYcJ0xOGkEFav8.roa (hash: pob5Gk3ii6Z8pPugpFKGScd6y3cYxp1AE5yYcUpWbig=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:d7:4c:3f:75:99:81:77:ad:8c:14:43:36:49:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59d0a3f9c34307b0a5b36d2e6d1899aefe7bbeb4
Validity
Not Before: Jan 31 13:00:30 2025 GMT
Not After : Feb 1 13:00:30 2025 GMT
Subject: CN=d83bebf54b9baa49b45f0ae95c2996c4d5cba659
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:6e:dd:ea:63:cb:5a:f3:d3:18:7d:e6:81:58:
b9:8b:27:96:30:75:e9:13:3e:04:08:72:5e:a0:02:
57:ff:72:22:d9:9f:4c:6e:71:31:82:d8:cc:b5:82:
d6:47:f4:9e:90:8d:a4:0e:27:2c:75:98:e4:cc:6b:
03:da:6a:7e:2a:9b:36:82:21:cb:bd:35:66:06:dd:
54:b9:2d:ab:1a:25:6f:fd:63:0b:34:7b:1b:cb:8b:
bc:28:b3:4d:66:98:ec:fb:b4:50:9a:73:31:65:86:
bc:60:e9:6e:6f:92:c2:c5:55:ae:93:e8:ee:9d:1b:
68:3b:b8:1b:08:4a:55:5c:d2:e3:fb:59:ec:b7:e2:
2f:65:23:0b:92:3b:6f:f0:96:8a:5e:e0:77:9a:2e:
2b:b0:42:13:98:9b:13:1e:33:fd:47:47:a7:15:97:
6c:0f:9a:4b:18:43:a6:a7:da:e5:e2:1c:e5:0c:96:
40:f0:e3:23:47:40:8b:2d:7c:72:93:52:4e:9b:bb:
cf:5e:17:ed:83:bb:fe:45:8f:45:71:e5:fd:95:86:
d3:55:60:d6:6a:e9:46:88:8b:60:fe:9e:41:34:27:
97:4f:ca:87:5e:4b:94:00:b0:58:90:a9:f7:6e:dc:
a0:8a:b0:57:bf:bc:e4:e9:cb:26:4a:be:be:e2:c2:
94:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:3B:EB:F5:4B:9B:AA:49:B4:5F:0A:E9:5C:29:96:C4:D5:CB:A6:59
X509v3 Authority Key Identifier:
keyid:59:D0:A3:F9:C3:43:07:B0:A5:B3:6D:2E:6D:18:99:AE:FE:7B:BE:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WdCj-cNDB7Cls20ubRiZrv57vrQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/791c33-a10e-43a9-ac29-e0d13230b9d5/1/WdCj-cNDB7Cls20ubRiZrv57vrQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/791c33-a10e-43a9-ac29-e0d13230b9d5/1/WdCj-cNDB7Cls20ubRiZrv57vrQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:d2:d7:ae:c9:6a:0d:12:95:00:88:4d:36:7c:37:85:77:d3:
2f:ce:f1:3b:80:6a:5b:10:f9:f2:23:79:f6:bf:e1:b0:e2:17:
cf:0b:5d:0b:27:e3:97:cb:10:12:91:94:ca:43:d8:b8:61:ae:
df:15:bd:56:3d:07:b3:93:9c:d1:6f:83:4f:6e:d0:6a:b7:24:
33:7d:c6:dd:a2:d2:74:8d:5a:eb:7c:d5:0f:a2:61:97:fb:00:
fe:85:d6:a4:57:01:db:3b:02:2e:4b:af:0e:61:00:b2:7a:05:
a6:e8:3d:a3:1c:7e:c1:0a:d7:61:ee:24:5c:32:da:11:a2:12:
71:e1:67:c9:38:01:76:fd:13:dd:cf:64:9a:5a:ae:cd:0e:54:
a0:90:8a:77:c6:bc:03:72:a9:77:8d:94:54:00:13:00:13:30:
f7:91:01:9d:5b:88:37:82:6f:dd:fa:a4:8d:53:1a:f5:e6:d1:
d2:0a:07:7b:52:11:16:42:a3:56:03:6f:25:94:c5:53:1b:fb:
e3:1f:08:0f:5f:32:b6:76:a9:63:de:55:ed:e4:9c:29:85:cd:
ac:99:ca:55:51:81:a9:9a:52:5b:20:8f:c6:ac:44:62:47:5f:
66:10:18:0b:ab:72:73:3e:0f:8f:1b:92:fc:e1:c5:ed:80:42:
20:c9:a2:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:13:47 2025 by rpki-client