Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/1bc0cb-dfa4-4151-a61b-335a7e4384b1/1/WtDEH96ZZRsTKQb_BgK0e1YHpb4.mft
File: WtDEH96ZZRsTKQb_BgK0e1YHpb4.mft (raw, json)
Hash identifier: 0M01pTrp3vtYYhXgCrvv4caCBywVpNfND532oybLjp4=
Subject key identifier: 8B:26:BE:43:05:4F:3C:27:05:39:2A:49:06:39:B9:53:74:2B:34:2F
Authority key identifier: 5A:D0:C4:1F:DE:99:65:1B:13:29:06:FF:06:02:B4:7B:56:07:A5:BE
Certificate issuer: /CN=5ad0c41fde99651b132906ff0602b47b5607a5be
Certificate serial: 0194BC3C6C6AD6FE361236014C16E5E2E8A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WtDEH96ZZRsTKQb_BgK0e1YHpb4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/1bc0cb-dfa4-4151-a61b-335a7e4384b1/1/WtDEH96ZZRsTKQb_BgK0e1YHpb4.mft
Manifest number: 0C4A
Signing time: Fri 31 Jan 2025 12:01:03 +0000
Manifest this update: Fri 31 Jan 2025 12:01:03 +0000
Manifest next update: Sat 01 Feb 2025 12:01:03 +0000
Files and hashes: 1: CyjhjoDiSo7WFimizlr7VkadJR8.roa (hash: cM6TG/2qfvLGo5XP6sM8MTNGlbdx/5vkQ91bz6yRUQw=)
2: WtDEH96ZZRsTKQb_BgK0e1YHpb4.crl (hash: U9rDX0tHVmNOd/1BkSp4aSgs38iAwBTfas6wc+Du8Dc=)
3: hWPfJRigBwQrXXI_iYiIoMMdvMI.roa (hash: wsY9wU/Uh/qwSah/fwLqo3Fci0fOUVaJuSLnsVDw8zk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:6c:6a:d6:fe:36:12:36:01:4c:16:e5:e2:e8:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ad0c41fde99651b132906ff0602b47b5607a5be
Validity
Not Before: Jan 31 12:01:03 2025 GMT
Not After : Feb 1 12:01:03 2025 GMT
Subject: CN=8b26be43054f3c2705392a490639b953742b342f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:21:68:73:7c:45:dd:33:77:8e:d7:e4:70:4d:
95:2f:a0:5e:fc:ca:b1:f1:46:12:0a:02:4d:7a:8e:
03:45:9c:b8:5f:96:95:7d:e4:7a:20:31:9d:d6:e8:
db:ea:c8:61:f1:98:2a:82:a2:2c:63:95:a3:04:cc:
4d:be:47:80:e9:ec:43:34:03:33:eb:3a:52:21:a3:
30:e3:15:0a:1c:aa:78:dc:d3:11:fe:35:2c:84:51:
1a:8c:a2:cb:cb:e7:0f:0a:41:45:26:96:dc:09:74:
b9:96:e1:d5:50:f2:fd:b7:86:51:87:15:9f:86:70:
cc:28:e1:2b:26:4a:11:2b:d0:b4:64:87:d7:e3:24:
50:d4:41:68:f2:0a:54:a6:b1:4b:98:05:75:44:51:
2d:4f:62:1e:3a:1c:ce:2d:9b:d2:36:5c:78:72:27:
70:a0:09:9b:31:bc:40:30:4e:97:b0:29:88:cc:92:
04:e5:59:2e:6b:64:57:ca:6a:af:e7:0f:38:8b:fa:
9e:22:67:e0:42:ef:63:6c:01:b7:3f:2f:58:18:f7:
72:a9:c8:b9:f2:47:14:bb:b3:7e:0d:dd:0f:a0:9d:
fb:4e:d2:a7:f7:e2:f5:87:e0:dd:57:4f:82:1f:b1:
8a:66:f7:ed:f0:82:78:a8:c8:da:78:4c:9e:e8:16:
1e:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:26:BE:43:05:4F:3C:27:05:39:2A:49:06:39:B9:53:74:2B:34:2F
X509v3 Authority Key Identifier:
keyid:5A:D0:C4:1F:DE:99:65:1B:13:29:06:FF:06:02:B4:7B:56:07:A5:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WtDEH96ZZRsTKQb_BgK0e1YHpb4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/1bc0cb-dfa4-4151-a61b-335a7e4384b1/1/WtDEH96ZZRsTKQb_BgK0e1YHpb4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/1bc0cb-dfa4-4151-a61b-335a7e4384b1/1/WtDEH96ZZRsTKQb_BgK0e1YHpb4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:d5:7f:ab:a6:4e:71:91:0b:f1:3c:cc:88:e8:55:4a:5f:ba:
99:fc:e0:97:fa:8f:21:32:3d:ae:a0:81:56:f2:be:16:b7:f6:
6e:e5:55:fd:f4:d2:5d:da:c4:9c:d1:42:83:7b:9e:68:7f:9e:
28:12:24:d4:5a:f8:3a:54:2c:01:55:69:75:45:6c:31:49:4b:
14:ea:f4:73:99:1c:87:d9:7d:fc:59:83:61:6f:6b:77:de:27:
9e:cb:3d:60:f8:4e:55:eb:2b:b6:32:08:1e:5f:e4:34:fb:a0:
97:b4:1d:a0:db:6c:2d:b1:d8:8d:de:94:53:e6:4b:6f:10:8b:
1f:2c:97:56:74:69:90:7d:d0:b9:f8:63:44:d0:5a:5a:a8:d1:
d6:65:83:61:43:36:7b:49:19:cb:86:84:8e:ca:5e:03:4e:80:
63:0c:70:18:78:c6:e7:f1:92:d5:10:57:66:ae:b5:95:4f:3b:
6a:2b:c6:84:a4:30:24:be:cc:4d:41:c4:de:1d:6d:11:7e:33:
68:42:7b:43:c6:e3:3b:52:0c:da:1a:bf:b0:38:18:54:63:1d:
b4:b7:e3:44:58:e2:6f:e7:0f:c4:1c:3b:37:3a:04:55:5a:71:
6a:d6:87:64:43:d5:20:74:f3:ff:5f:4f:4f:58:f1:d3:eb:76:
f7:f9:57:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:41:39 2025 by rpki-client