Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/26cacb-9e91-4911-8456-5ded766a5506/1/Wx-lLx6fNRDCzSriRhVSoa0uPTo.mft
File: Wx-lLx6fNRDCzSriRhVSoa0uPTo.mft (raw, json)
Hash identifier: fr+q4BCSZR2NPSZk6xO/weW3H41lVeC8gBwWYcCgbSM=
Subject key identifier: C7:AA:7D:4A:00:D8:DF:85:16:0A:88:C6:A4:C8:77:F7:0A:34:CE:18
Authority key identifier: 5B:1F:A5:2F:1E:9F:35:10:C2:CD:2A:E2:46:15:52:A1:AD:2E:3D:3A
Certificate issuer: /CN=5b1fa52f1e9f3510c2cd2ae2461552a1ad2e3d3a
Certificate serial: 0194BBCF0374FAC4B17B647B3CF70E682D15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wx-lLx6fNRDCzSriRhVSoa0uPTo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/26cacb-9e91-4911-8456-5ded766a5506/1/Wx-lLx6fNRDCzSriRhVSoa0uPTo.mft
Manifest number: 0EAF
Signing time: Fri 31 Jan 2025 10:01:33 +0000
Manifest this update: Fri 31 Jan 2025 10:01:33 +0000
Manifest next update: Sat 01 Feb 2025 10:01:33 +0000
Files and hashes: 1: Wx-lLx6fNRDCzSriRhVSoa0uPTo.crl (hash: Oaw5RKUSGv1GPqgBhvKG7rEgPwLikZ8L1XYM65jaFjA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cf:03:74:fa:c4:b1:7b:64:7b:3c:f7:0e:68:2d:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b1fa52f1e9f3510c2cd2ae2461552a1ad2e3d3a
Validity
Not Before: Jan 31 10:01:33 2025 GMT
Not After : Feb 1 10:01:33 2025 GMT
Subject: CN=c7aa7d4a00d8df85160a88c6a4c877f70a34ce18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:19:fa:75:9a:a0:1f:b5:ab:24:e6:16:67:e8:
fc:01:6b:a6:3c:fc:79:c2:82:29:db:fb:be:b6:91:
c5:3a:d8:24:93:bf:5f:ad:47:07:6c:8f:e2:0f:af:
d6:ad:86:3a:18:f8:15:da:04:42:22:ea:fb:68:dd:
08:a6:16:a5:3c:95:84:39:6b:fa:97:55:77:05:ca:
34:4f:20:53:af:e1:50:50:b4:9c:64:86:05:64:7b:
54:35:09:ee:74:75:13:85:e9:59:a4:f6:ef:07:8c:
a0:2a:ae:45:08:77:90:3d:b4:26:94:32:cc:43:73:
73:44:0b:66:d0:79:97:5f:a2:37:ed:da:26:1a:fa:
73:c9:e4:ee:ed:be:1b:6d:51:b6:49:fa:cd:a7:4c:
52:9c:d5:ef:d6:d1:98:ff:21:d1:e2:53:e1:8f:a9:
da:5e:fd:5c:f4:34:b5:48:ce:31:1e:16:38:25:50:
40:b3:eb:91:ab:f4:61:ab:34:ac:51:bd:89:99:19:
25:03:f5:1f:c6:e5:6d:79:11:3d:5d:9c:b1:20:18:
5d:e6:4e:96:3a:fa:d4:11:f8:0a:10:82:4e:39:f9:
fd:da:24:22:4c:8b:bd:5a:fc:8f:f9:46:86:2c:85:
d2:2a:f6:3f:d2:06:93:af:e6:da:80:af:49:b5:f0:
14:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:AA:7D:4A:00:D8:DF:85:16:0A:88:C6:A4:C8:77:F7:0A:34:CE:18
X509v3 Authority Key Identifier:
keyid:5B:1F:A5:2F:1E:9F:35:10:C2:CD:2A:E2:46:15:52:A1:AD:2E:3D:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wx-lLx6fNRDCzSriRhVSoa0uPTo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/26cacb-9e91-4911-8456-5ded766a5506/1/Wx-lLx6fNRDCzSriRhVSoa0uPTo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/26cacb-9e91-4911-8456-5ded766a5506/1/Wx-lLx6fNRDCzSriRhVSoa0uPTo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
dc:0e:f9:95:4a:17:09:fb:91:ec:e0:67:39:2c:84:31:5a:b6:
a8:cb:d9:7d:e3:be:2c:b5:2c:7e:fc:88:f5:de:8c:2d:4a:7d:
95:f7:97:4c:21:9a:2a:7c:73:ce:6d:cd:f5:a7:77:eb:10:68:
0b:17:38:3c:ed:ee:a7:78:af:dc:e9:b3:43:27:11:64:92:52:
01:01:f3:96:1c:a6:f9:99:b3:93:20:da:f7:0b:c8:7c:ec:27:
50:c5:8b:f8:e1:b2:bb:06:9c:4d:b0:48:7f:50:c2:b9:2b:69:
d1:b0:17:01:52:fa:ab:09:3a:ac:af:f5:55:52:12:9c:c2:c6:
ef:92:08:bb:09:ef:a8:1e:b1:9e:df:7f:09:aa:f5:b7:76:43:
d2:2a:a5:93:2e:17:e4:84:9f:15:0d:49:ab:bd:8b:e3:06:35:
4d:2a:3d:73:5e:a6:bc:9d:0b:fc:05:b0:7c:7c:19:ab:1a:03:
1f:c4:12:7e:0d:75:96:0c:38:d8:e2:1b:5e:20:fa:35:cd:2e:
d1:77:a5:c9:e5:79:0b:c0:a4:93:5f:22:cd:1f:b1:6a:42:3b:
07:2d:c5:53:d3:b9:4b:42:31:2d:40:52:84:f3:a7:2f:c9:f8:
91:f9:23:63:d7:5f:99:3e:dc:0f:dc:5c:2c:57:0b:e3:b0:ff:
57:ff:b2:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:51:44 2025 by rpki-client