Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/9eed05-1477-4f05-8ae3-618e89b12c41/1/Wx0ii2rL0YA8_1YPpLQvgy0oMk8.mft
File: Wx0ii2rL0YA8_1YPpLQvgy0oMk8.mft (raw, json)
Hash identifier: S0+advCPg7yjs2AlLjwhWb+VKri62IUhT5UM/gj8J9c=
Subject key identifier: 37:6A:4F:A3:32:6D:55:AF:31:DB:01:A9:E7:98:EA:A5:27:AB:9C:65
Authority key identifier: 5B:1D:22:8B:6A:CB:D1:80:3C:FF:56:0F:A4:B4:2F:83:2D:28:32:4F
Certificate issuer: /CN=5b1d228b6acbd1803cff560fa4b42f832d28324f
Certificate serial: 0194BCA9D0BA894BB9D30D1100F338516A86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wx0ii2rL0YA8_1YPpLQvgy0oMk8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/9eed05-1477-4f05-8ae3-618e89b12c41/1/Wx0ii2rL0YA8_1YPpLQvgy0oMk8.mft
Manifest number: 13BD
Signing time: Fri 31 Jan 2025 14:00:33 +0000
Manifest this update: Fri 31 Jan 2025 14:00:33 +0000
Manifest next update: Sat 01 Feb 2025 14:00:33 +0000
Files and hashes: 1: Hf8Mb8qM5ZB0G161UkFqR0v7uDk.roa (hash: 86/LxqP4QHUXPHN7MeYEfv+SmJ6UpcunDO36GSPvIQQ=)
2: Wx0ii2rL0YA8_1YPpLQvgy0oMk8.crl (hash: cDUzyn5NPcE6PF6WgJjxAh5DdtxyJSjdyRMOSWI5L24=)
3: rdMKkMaHfdWNXSGH8FsWUlQ7D6Q.roa (hash: lGvKyGfhIjanaigrkcQySpZWBGRsLu6frqamWcC0ZCs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:d0:ba:89:4b:b9:d3:0d:11:00:f3:38:51:6a:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b1d228b6acbd1803cff560fa4b42f832d28324f
Validity
Not Before: Jan 31 14:00:33 2025 GMT
Not After : Feb 1 14:00:33 2025 GMT
Subject: CN=376a4fa3326d55af31db01a9e798eaa527ab9c65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e6:e0:c6:6a:2a:d8:fc:a7:73:e1:c0:a8:b2:
e2:34:b1:3f:6e:4a:55:26:ef:55:db:c8:4c:e8:48:
09:46:f6:69:44:69:4a:f8:2a:2a:91:ed:ef:d1:da:
28:b5:b7:c1:df:da:7b:61:fd:f5:d0:4e:63:08:a1:
ef:14:63:4b:6c:21:91:26:2a:a2:bb:b8:e7:1c:5b:
bc:cc:d4:bc:45:03:3d:23:2b:4d:d7:6e:11:d9:c7:
93:87:1b:72:36:c6:d3:98:91:d3:a8:74:83:52:54:
79:d7:1d:51:82:01:f8:d1:b6:7b:38:f8:af:d1:f1:
61:c6:d6:7b:81:8b:00:cd:47:f1:37:a0:0e:19:f1:
4c:a1:93:8b:c0:f4:f9:b0:ce:37:67:da:99:fd:1e:
01:48:58:c1:6e:3f:52:04:ed:f0:bd:0a:ae:59:78:
f9:cf:a1:f4:b2:5f:85:c0:cd:a1:f2:07:47:12:e6:
9d:29:03:8e:1e:5e:2b:3b:92:54:28:23:27:55:d8:
e8:ad:57:7f:1b:ed:7b:49:0d:43:c5:4f:c7:3b:e3:
db:66:c2:b0:d9:f4:f4:95:ba:59:81:11:d9:f1:c5:
23:60:2d:75:95:a1:fe:ed:80:48:0b:72:ef:86:7a:
4f:1d:56:c7:c3:7f:1b:d4:e0:f9:9b:9a:f4:87:dc:
51:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:6A:4F:A3:32:6D:55:AF:31:DB:01:A9:E7:98:EA:A5:27:AB:9C:65
X509v3 Authority Key Identifier:
keyid:5B:1D:22:8B:6A:CB:D1:80:3C:FF:56:0F:A4:B4:2F:83:2D:28:32:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wx0ii2rL0YA8_1YPpLQvgy0oMk8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/9eed05-1477-4f05-8ae3-618e89b12c41/1/Wx0ii2rL0YA8_1YPpLQvgy0oMk8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/9eed05-1477-4f05-8ae3-618e89b12c41/1/Wx0ii2rL0YA8_1YPpLQvgy0oMk8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:19:14:09:7b:0f:0c:6b:63:fa:af:a7:a0:b2:9f:c1:41:76:
a1:a1:c5:e3:50:8a:62:29:84:38:9a:ad:c8:ce:c5:2d:5d:86:
b3:32:16:cb:a5:02:e2:fb:bc:94:ec:87:3f:0d:d5:ab:81:e6:
b7:01:c7:82:dc:05:58:60:8c:4c:ea:7e:95:71:14:44:9c:ee:
30:58:a5:24:1a:7a:be:d6:c0:fb:0a:7b:7e:69:6c:ba:44:c2:
00:f2:36:94:33:98:8f:46:7b:dc:40:a9:8a:31:28:07:f8:ab:
39:42:c4:a9:6c:2d:77:1d:ee:66:c5:10:a4:13:84:dd:76:27:
15:62:53:bf:75:aa:cc:11:56:b7:a3:3e:3e:94:2d:e1:85:27:
af:2f:92:82:0c:5f:59:50:f9:e4:b4:80:7e:f0:63:b9:7f:27:
f7:c5:35:e7:9c:4c:97:82:e8:ad:d2:4f:41:a1:05:78:e0:b5:
4d:61:8b:36:19:7e:d3:4c:9b:bd:be:a8:d0:03:33:55:c5:48:
ec:2e:cd:f4:f1:d9:e9:84:8e:11:25:66:4c:0b:b7:b1:d5:f0:
0c:c3:a4:63:1f:1d:c2:ab:76:ca:f5:7c:1b:99:ec:48:09:a9:
8d:76:7a:64:ed:18:e4:48:a2:71:a0:a6:c3:e3:e1:1b:aa:27:
4d:75:75:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 11:28:22 2025 by rpki-client