
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/a06407-a1f2-4b47-96c7-0a9e3cb4dc13/1/WH7X6fmKHxl17p-8sJXDrfoorsA.mft
File: WH7X6fmKHxl17p-8sJXDrfoorsA.mft (raw, json)
Hash identifier: jWOElAtPOmN+xidokkMmvFZpqp4OK8LapIcYlskowho=
Subject key identifier: 35:2A:E4:DC:6B:69:4D:C6:97:21:17:39:2A:4E:5A:60:70:64:38:D8
Authority key identifier: 58:7E:D7:E9:F9:8A:1F:19:75:EE:9F:BC:B0:95:C3:AD:FA:28:AE:C0
Certificate issuer: /CN=587ed7e9f98a1f1975ee9fbcb095c3adfa28aec0
Certificate serial: 0194BCA9AA5B66550BCDF295291452283261
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WH7X6fmKHxl17p-8sJXDrfoorsA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/a06407-a1f2-4b47-96c7-0a9e3cb4dc13/1/WH7X6fmKHxl17p-8sJXDrfoorsA.mft
Manifest number: 140B
Signing time: Fri 31 Jan 2025 14:00:23 +0000
Manifest this update: Fri 31 Jan 2025 14:00:23 +0000
Manifest next update: Sat 01 Feb 2025 14:00:23 +0000
Files and hashes: 1: 19CW3KILFYPXEhHk2Ol76tPUYYc.roa (hash: vdEeJmbxLIeIAD2w3zH+n6I7kJJZC/K9fF2eOSXSZV8=)
2: WH7X6fmKHxl17p-8sJXDrfoorsA.crl (hash: xT0g2F1gH+iAyw4fdey4UwgIDMynrY/+FU0FsggMIes=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:aa:5b:66:55:0b:cd:f2:95:29:14:52:28:32:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=587ed7e9f98a1f1975ee9fbcb095c3adfa28aec0
Validity
Not Before: Jan 31 14:00:23 2025 GMT
Not After : Feb 1 14:00:23 2025 GMT
Subject: CN=352ae4dc6b694dc6972117392a4e5a60706438d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:6c:6f:28:dc:80:55:ad:75:9d:32:55:90:43:
e2:f1:13:f8:8d:e7:1d:e6:cc:0a:c2:b6:75:9d:a7:
48:98:01:27:e5:0e:f4:2f:bf:af:9d:d0:1f:6f:8f:
4d:5d:94:f0:b8:fd:87:a8:a5:9e:42:56:ac:96:0d:
f6:ff:fe:d0:0a:3e:21:eb:d5:dd:71:0d:c9:dd:1c:
fc:af:08:2c:9a:43:eb:6a:98:53:99:c1:d1:90:8d:
99:02:3a:49:17:09:d3:5c:2a:06:5f:09:89:a1:5f:
27:32:6f:99:ee:9a:27:86:b2:e8:00:36:87:7e:c4:
d0:b5:9b:d8:a1:29:3d:5d:b1:50:32:b8:ee:86:31:
2e:0c:81:40:9e:16:b4:13:7d:9d:80:d2:e2:b5:7c:
c6:5b:05:b5:e4:26:01:21:6f:ce:8d:12:34:af:4d:
a0:fd:39:1c:cd:fe:82:4c:d6:58:2e:59:c3:31:13:
f5:4c:47:9e:4e:73:dd:e8:7b:46:ab:3c:0f:97:03:
55:dd:04:ba:8a:af:f9:89:dd:8c:90:d6:41:08:ea:
53:ad:ed:db:5b:5f:36:f8:16:7d:b8:49:bf:71:fa:
bf:0d:47:9e:a6:a6:67:ed:62:59:f0:06:09:15:2c:
07:0a:de:92:1b:1d:65:7c:98:e5:6f:fa:f0:b9:1f:
cf:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:2A:E4:DC:6B:69:4D:C6:97:21:17:39:2A:4E:5A:60:70:64:38:D8
X509v3 Authority Key Identifier:
keyid:58:7E:D7:E9:F9:8A:1F:19:75:EE:9F:BC:B0:95:C3:AD:FA:28:AE:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WH7X6fmKHxl17p-8sJXDrfoorsA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/a06407-a1f2-4b47-96c7-0a9e3cb4dc13/1/WH7X6fmKHxl17p-8sJXDrfoorsA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/a06407-a1f2-4b47-96c7-0a9e3cb4dc13/1/WH7X6fmKHxl17p-8sJXDrfoorsA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:7c:13:14:18:fc:b9:6f:66:4f:20:c2:8f:5b:68:6e:d4:94:
21:7a:70:d8:c1:58:15:aa:d2:db:92:35:c9:bb:fc:80:61:49:
8c:93:75:68:c5:51:13:0c:cc:11:de:ce:31:2d:63:b4:80:c0:
5a:8b:ba:33:6b:80:c2:a2:10:0e:57:a9:6a:2d:75:5f:7c:49:
0d:26:11:b3:90:bf:d3:0c:d3:4a:8b:56:9c:23:89:a0:5b:21:
71:78:62:0a:23:06:57:0a:13:3b:db:dd:b2:19:f7:bc:de:1b:
dd:14:b6:00:41:13:4f:34:25:d6:41:7c:59:47:4f:58:01:74:
e3:4e:96:35:7d:17:f4:50:ac:ce:b4:58:55:fb:4e:df:93:0a:
80:b6:92:d4:4e:ff:a8:e6:c1:46:25:47:7c:62:8b:94:80:12:
79:10:86:ac:09:ea:d5:7d:30:0e:08:6e:2a:8f:4e:dc:bb:28:
f9:c0:1a:e4:d5:0f:7e:21:42:4e:78:b4:47:6c:e4:7c:ca:76:
e1:64:ed:f0:ce:39:9e:c8:13:e5:33:87:0a:bf:1f:03:85:35:
29:e5:6d:7d:d3:c6:cb:a0:7b:55:45:e4:77:29:56:6d:74:76:
fe:e6:06:ef:d0:44:ba:e9:c4:6d:98:96:0a:12:34:e2:1a:ac:
56:7c:21:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:39:38 2025 by rpki-client