Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/722bd6-bcef-434f-b011-948d86913538/1/WwrDjepqcErbq6k4HB3AI1bTqpA.mft
File: WwrDjepqcErbq6k4HB3AI1bTqpA.mft (raw, json)
Hash identifier: 63VWQRRWKacWWztjMhRqSSdD/xMaAwjV5HRGrvA1ygY=
Subject key identifier: 70:22:1A:76:11:19:5F:14:5A:39:4D:3E:35:CF:FB:E2:8B:36:28:E7
Authority key identifier: 5B:0A:C3:8D:EA:6A:70:4A:DB:AB:A9:38:1C:1D:C0:23:56:D3:AA:90
Certificate issuer: /CN=5b0ac38dea6a704adbaba9381c1dc02356d3aa90
Certificate serial: 0194BC3C48D4B03482950648BB76338A126C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WwrDjepqcErbq6k4HB3AI1bTqpA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/722bd6-bcef-434f-b011-948d86913538/1/WwrDjepqcErbq6k4HB3AI1bTqpA.mft
Manifest number: 0786
Signing time: Fri 31 Jan 2025 12:00:54 +0000
Manifest this update: Fri 31 Jan 2025 12:00:54 +0000
Manifest next update: Sat 01 Feb 2025 12:00:54 +0000
Files and hashes: 1: WwrDjepqcErbq6k4HB3AI1bTqpA.crl (hash: NsWlkXMxX0opbyDZ6JecjeavldalvYzFz4TOPpqaBSM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:48:d4:b0:34:82:95:06:48:bb:76:33:8a:12:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b0ac38dea6a704adbaba9381c1dc02356d3aa90
Validity
Not Before: Jan 31 12:00:54 2025 GMT
Not After : Feb 1 12:00:54 2025 GMT
Subject: CN=70221a7611195f145a394d3e35cffbe28b3628e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:2d:d4:e2:4f:f9:bd:16:c2:71:00:8d:89:2a:
38:4a:4d:64:fe:ba:bf:57:cb:95:e3:35:45:4c:c9:
ef:33:60:9d:6f:5f:cc:e6:b3:f1:dd:88:e2:9f:d1:
52:23:71:23:30:f1:79:87:64:e3:6f:01:e3:21:b9:
03:bd:8b:1e:69:52:5d:16:8a:2d:32:df:2e:ed:18:
1a:47:82:14:96:f9:57:bd:08:63:71:1d:0e:60:9a:
ab:cd:a9:8c:28:b1:1b:bd:17:1b:9a:cc:1c:53:66:
19:68:d3:cc:5d:d4:71:15:2d:48:76:e7:c5:23:99:
52:11:c0:db:51:8f:42:32:6a:18:6e:94:ec:98:d0:
af:d4:a4:5e:5c:1f:ee:2d:d3:37:db:ab:04:dd:2b:
e1:f9:c9:0d:e2:0e:e1:85:b1:fb:f6:ba:be:f5:b8:
cd:a7:cd:08:b1:44:1e:30:be:f0:2a:1a:db:3f:3e:
63:d6:d6:9d:f0:df:2d:d3:cd:b4:9b:de:9a:fa:80:
ef:4b:4e:74:75:73:ab:79:9b:66:24:65:9b:88:23:
ca:a2:b3:c7:25:d4:32:21:95:cb:20:f5:94:e0:2f:
29:5a:c0:a5:33:a8:1a:8b:2a:15:67:00:2c:04:0f:
ad:04:24:5e:bb:c2:fc:86:b9:e5:e8:6e:f1:bc:64:
a1:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:22:1A:76:11:19:5F:14:5A:39:4D:3E:35:CF:FB:E2:8B:36:28:E7
X509v3 Authority Key Identifier:
keyid:5B:0A:C3:8D:EA:6A:70:4A:DB:AB:A9:38:1C:1D:C0:23:56:D3:AA:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WwrDjepqcErbq6k4HB3AI1bTqpA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/722bd6-bcef-434f-b011-948d86913538/1/WwrDjepqcErbq6k4HB3AI1bTqpA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/722bd6-bcef-434f-b011-948d86913538/1/WwrDjepqcErbq6k4HB3AI1bTqpA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:ab:d3:fc:de:4d:ff:58:ac:97:20:81:51:66:a1:56:e5:54:
e6:e5:e1:a1:81:2f:df:ae:96:53:5a:02:bf:f6:ff:31:a4:f0:
bf:b5:c3:1c:9f:34:48:05:fe:31:96:2c:83:88:f9:20:d7:5d:
a0:2d:de:8c:07:4c:de:a9:ed:48:5c:3d:09:0a:b0:9d:70:1c:
2f:fc:ae:ea:51:ba:91:4e:44:2a:6f:53:77:08:45:fd:a7:9d:
f0:bf:d9:e9:b9:4b:e2:24:d2:ae:78:0b:73:a1:03:b1:ae:b9:
ef:29:81:fc:81:2e:05:a5:2a:a6:f8:e3:63:1b:24:d1:ce:e6:
64:49:d3:63:a5:0e:6e:3b:1a:6a:d8:6c:3a:42:69:d5:85:e4:
89:12:e0:07:53:62:11:34:07:d8:e3:cc:96:10:20:3e:57:ab:
e9:e4:12:37:ca:6f:77:1f:9e:1f:a8:70:89:1a:78:5f:cb:ed:
42:6b:28:69:47:87:2b:7a:ad:cc:e2:42:96:a3:8c:80:f3:cc:
b5:ce:e2:2d:8a:7f:8d:7c:b6:27:2a:1e:1c:50:bc:3a:e8:2d:
f1:d9:e8:fb:13:b6:bd:8e:d7:ad:76:d6:60:cb:ca:f6:33:46:
e6:a3:28:e8:a8:1e:6f:97:c8:24:19:57:2c:53:9d:fc:73:e6:
05:11:5f:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:42:21 2025 by rpki-client