Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/1adf3c-ba33-435b-a6d5-957aabbc8483/1/WpXS40Wh9Nqk7f58Bc5d92tZrPA.mft
File: WpXS40Wh9Nqk7f58Bc5d92tZrPA.mft (raw, json)
Hash identifier: qfybYgWcVU27gTMJpuJEnei7LFJ5H5O9GMrK2fhsz8w=
Subject key identifier: 9B:85:16:0F:93:CF:33:81:52:6E:D0:D6:A4:EF:20:34:94:FB:1E:B2
Authority key identifier: 5A:95:D2:E3:45:A1:F4:DA:A4:ED:FE:7C:05:CE:5D:F7:6B:59:AC:F0
Certificate issuer: /CN=5a95d2e345a1f4daa4edfe7c05ce5df76b59acf0
Certificate serial: 0194BD4E81E606FE83E44251EA99916C65B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WpXS40Wh9Nqk7f58Bc5d92tZrPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/1adf3c-ba33-435b-a6d5-957aabbc8483/1/WpXS40Wh9Nqk7f58Bc5d92tZrPA.mft
Manifest number: 075A
Signing time: Fri 31 Jan 2025 17:00:26 +0000
Manifest this update: Fri 31 Jan 2025 17:00:26 +0000
Manifest next update: Sat 01 Feb 2025 17:00:26 +0000
Files and hashes: 1: 13RrS0RVMNZjnoNzLeY0leATSKM.roa (hash: 5Kd668wao4EqEPYlsHp9hU5bq0vk1PZWy+Au8TDKmnI=)
2: WpXS40Wh9Nqk7f58Bc5d92tZrPA.crl (hash: Fs/awUOwIBMkO3w7QyQsD2RIusMn933JTwSR3TNKT/A=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:81:e6:06:fe:83:e4:42:51:ea:99:91:6c:65:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a95d2e345a1f4daa4edfe7c05ce5df76b59acf0
Validity
Not Before: Jan 31 17:00:26 2025 GMT
Not After : Feb 1 17:00:26 2025 GMT
Subject: CN=9b85160f93cf3381526ed0d6a4ef203494fb1eb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:55:d1:39:6e:16:9c:32:0c:00:98:67:d8:3c:
9e:f1:ff:ef:fe:a8:cf:f7:3a:e5:e0:89:99:5d:d0:
82:af:51:5d:bb:6b:4d:3b:16:44:3f:ae:ef:e1:fb:
04:29:9d:2c:a6:7a:8f:a5:dd:08:ea:b6:9f:e1:4d:
83:ba:94:15:7b:89:f9:a8:74:71:55:3b:84:08:f6:
6e:fd:8f:4f:3c:37:c1:e1:da:d9:b2:52:d0:15:d1:
84:6b:a7:8f:95:17:f6:3c:6d:7f:2c:67:e5:2c:93:
cb:9c:26:17:4f:da:9b:f8:85:2e:96:5c:ea:13:77:
2c:d5:7f:c0:2b:f9:58:d5:b4:da:92:0f:43:83:59:
e2:21:25:5b:a5:71:ea:9f:40:9d:56:fd:8b:8a:a8:
c8:bd:2a:2b:b6:e2:1e:87:0c:1a:02:ab:be:5a:c6:
ae:a2:d3:44:33:59:2d:61:25:52:80:fa:08:d1:5b:
f4:19:19:a5:11:dc:c8:d1:ec:50:3e:38:5b:6f:1b:
54:91:c3:97:4c:1b:0d:20:22:a6:06:bf:ba:ec:5c:
c0:e5:cb:0b:7c:4a:05:48:5c:d0:e3:9d:d8:09:a9:
07:8c:6c:8d:70:4e:5c:43:8e:0b:5b:6f:6c:c5:60:
6a:80:2b:a4:8e:41:e4:58:a4:4c:ee:cd:43:34:53:
7a:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:85:16:0F:93:CF:33:81:52:6E:D0:D6:A4:EF:20:34:94:FB:1E:B2
X509v3 Authority Key Identifier:
keyid:5A:95:D2:E3:45:A1:F4:DA:A4:ED:FE:7C:05:CE:5D:F7:6B:59:AC:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WpXS40Wh9Nqk7f58Bc5d92tZrPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/1adf3c-ba33-435b-a6d5-957aabbc8483/1/WpXS40Wh9Nqk7f58Bc5d92tZrPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/1adf3c-ba33-435b-a6d5-957aabbc8483/1/WpXS40Wh9Nqk7f58Bc5d92tZrPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:07:62:f7:b7:2c:d7:d7:96:3a:ca:3f:b3:1f:37:fe:d4:53:
92:e9:de:39:e4:f6:71:3b:07:39:e5:51:37:cd:70:df:61:46:
45:5a:af:39:03:ce:d4:b2:0e:4c:ff:02:01:1b:f4:84:88:56:
41:97:72:03:34:02:49:49:c6:3a:8f:c9:ae:82:80:02:db:31:
22:e9:97:be:67:3a:1d:72:4a:3a:b5:28:dd:19:13:0a:35:da:
af:f6:03:4d:3e:62:32:bd:9f:c5:eb:87:22:f4:e0:1d:b8:60:
05:fe:20:cb:3d:94:98:25:11:1c:69:2f:1e:ad:bd:a7:38:94:
63:a1:44:ea:d7:45:4b:f2:4d:79:b1:e3:d7:b6:6f:d1:ee:65:
f1:98:73:dd:25:74:08:01:00:4d:ea:00:c3:4f:a0:e3:73:3c:
0e:e5:77:cd:89:3e:3e:cd:14:23:e0:c1:00:e5:e6:17:c6:d3:
2f:4d:9e:b9:16:9c:95:8d:33:56:78:e8:80:af:a5:f8:d7:76:
ec:9e:11:a4:21:98:5e:7c:76:ae:cc:ba:7b:c0:ee:40:de:63:
86:05:43:50:49:5e:97:bb:de:80:81:4d:02:44:47:64:71:be:
fd:70:ab:b7:ef:7e:ef:ee:27:44:8a:08:d3:f1:15:fd:f7:47:
a4:c0:dc:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 11:25:50 2025 by rpki-client