Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/d74420-6425-4272-93a2-3586164a7f44/1/WBMej5pIUEDZ_K5xZ6QouKEvSeo.mft
File: WBMej5pIUEDZ_K5xZ6QouKEvSeo.mft (raw, json)
Hash identifier: VKt6NR+7M6IdLkOwYHDDKU04UPdu48imWY+mvOApzpg=
Subject key identifier: F7:9A:F4:92:2D:2C:8A:34:68:E1:03:80:F2:D8:36:2D:E4:41:B4:3A
Authority key identifier: 58:13:1E:8F:9A:48:50:40:D9:FC:AE:71:67:A4:28:B8:A1:2F:49:EA
Certificate issuer: /CN=58131e8f9a485040d9fcae7167a428b8a12f49ea
Certificate serial: 0194BCA9823E639DED1090B76644FCD5A7A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WBMej5pIUEDZ_K5xZ6QouKEvSeo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/d74420-6425-4272-93a2-3586164a7f44/1/WBMej5pIUEDZ_K5xZ6QouKEvSeo.mft
Manifest number: 06EE
Signing time: Fri 31 Jan 2025 14:00:13 +0000
Manifest this update: Fri 31 Jan 2025 14:00:13 +0000
Manifest next update: Sat 01 Feb 2025 14:00:13 +0000
Files and hashes: 1: WBMej5pIUEDZ_K5xZ6QouKEvSeo.crl (hash: 3zxmPNbv/YF0bXHn38I+8ECGmnQ8xiyt4D95mrRkcJc=)
2: vdHTEb2gTWFnAUlb8EFFzZFOAyk.roa (hash: 7sUvaXCmkwC5CKTFltnkxSzQliSsm8MxQWVCiowpXtQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:82:3e:63:9d:ed:10:90:b7:66:44:fc:d5:a7:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58131e8f9a485040d9fcae7167a428b8a12f49ea
Validity
Not Before: Jan 31 14:00:13 2025 GMT
Not After : Feb 1 14:00:13 2025 GMT
Subject: CN=f79af4922d2c8a3468e10380f2d8362de441b43a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:2f:9a:02:97:80:45:6d:00:ea:2a:2f:a2:d5:
94:24:66:e5:84:7d:54:33:09:01:5f:74:05:52:b0:
67:67:56:d6:17:34:c4:be:be:05:48:ed:fa:5c:8c:
c8:bd:e6:de:41:54:70:bc:87:93:0b:f7:4e:16:d6:
98:b6:15:b1:68:8a:84:2c:95:d3:01:31:5f:40:1d:
00:5d:d5:d1:e2:0f:be:b2:14:ad:55:78:79:47:76:
e4:a6:18:a4:2d:50:82:3c:15:6f:6c:3c:e9:ad:e8:
8e:0b:b1:97:e8:61:b1:1c:03:44:eb:ef:1f:03:28:
b6:70:f0:0f:27:ef:4a:40:7d:b6:43:91:94:9b:8d:
e1:07:98:a9:82:a7:4a:bd:dc:b3:23:69:58:11:5e:
19:c1:46:cf:bb:9d:6a:fe:e7:12:5d:10:f1:ec:f4:
8d:6d:d8:72:57:8b:35:3f:4c:92:85:b5:ad:20:74:
96:bb:41:93:2a:5d:ff:f7:a4:1a:cc:b7:79:0a:eb:
76:fd:f0:ac:98:f1:22:35:1d:3e:82:d8:22:84:71:
51:4d:1e:0f:57:e2:50:ea:22:5d:40:bc:de:a9:e9:
19:1f:48:ed:21:e6:21:9e:19:f1:8c:fe:f3:f6:c3:
b1:91:cd:5f:06:1b:b2:66:f4:88:32:b4:ce:05:7f:
d0:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:9A:F4:92:2D:2C:8A:34:68:E1:03:80:F2:D8:36:2D:E4:41:B4:3A
X509v3 Authority Key Identifier:
keyid:58:13:1E:8F:9A:48:50:40:D9:FC:AE:71:67:A4:28:B8:A1:2F:49:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WBMej5pIUEDZ_K5xZ6QouKEvSeo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/d74420-6425-4272-93a2-3586164a7f44/1/WBMej5pIUEDZ_K5xZ6QouKEvSeo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/d74420-6425-4272-93a2-3586164a7f44/1/WBMej5pIUEDZ_K5xZ6QouKEvSeo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:47:db:90:be:2a:66:23:e2:e0:75:b9:19:42:aa:7a:78:5d:
d7:c9:a6:cf:c8:aa:35:53:c5:01:78:b9:3b:df:9e:e3:7a:d6:
99:21:58:58:73:14:1f:47:44:6e:99:77:e5:fb:a3:68:02:9d:
f7:35:c3:5a:73:4c:b5:06:8e:e3:96:63:70:58:1e:75:4b:5f:
9c:09:a8:e3:63:70:04:c4:96:5d:bb:c0:8a:54:1d:b3:d4:b1:
a4:6f:0e:7d:bc:98:6c:43:d7:a8:12:a0:c5:ee:62:e3:5f:73:
65:86:ec:15:2c:4b:44:fd:97:eb:da:54:7a:be:27:bc:fa:d2:
1b:45:1e:5e:8d:9f:88:a5:4a:71:0e:d8:af:8d:60:bb:9d:b2:
75:c7:5a:a4:86:2c:50:94:31:7c:25:64:86:7e:0a:5d:23:32:
20:23:5e:7a:c1:3b:68:3a:88:5e:df:e3:14:81:b3:1e:ae:c3:
4a:26:af:3a:46:1b:45:b5:6a:27:02:d2:fb:dc:6e:c3:69:58:
10:8a:36:7b:8d:87:64:14:37:f2:c9:99:0a:f9:c9:9e:9d:03:
53:89:a1:18:cd:b4:0c:46:7e:27:1c:d3:5e:55:97:ce:44:65:
79:3d:5d:64:a7:c2:0f:47:6d:e5:8c:dd:b0:b6:5a:ba:eb:29:
02:1e:aa:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:25:18 2025 by rpki-client