Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/0a030f-abb5-4e37-96a3-b4f120122922/1/WqKpJUebz8vBloipUqJDAfTnaDk.mft
File: WqKpJUebz8vBloipUqJDAfTnaDk.mft (raw, json)
Hash identifier: LZndPN4T//0lTMUPI9Xvm0RQp3CvIvkcjmneQjwcgRQ=
Subject key identifier: 12:21:2C:AD:9F:BC:96:9B:16:A7:55:04:E3:C8:2B:F4:91:3A:4F:60
Authority key identifier: 5A:A2:A9:25:47:9B:CF:CB:C1:96:88:A9:52:A2:43:01:F4:E7:68:39
Certificate issuer: /CN=5aa2a925479bcfcbc19688a952a24301f4e76839
Certificate serial: 0194BD4E8229159A75A2D0C488050669EB70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WqKpJUebz8vBloipUqJDAfTnaDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/0a030f-abb5-4e37-96a3-b4f120122922/1/WqKpJUebz8vBloipUqJDAfTnaDk.mft
Manifest number: 0582
Signing time: Fri 31 Jan 2025 17:00:26 +0000
Manifest this update: Fri 31 Jan 2025 17:00:26 +0000
Manifest next update: Sat 01 Feb 2025 17:00:26 +0000
Files and hashes: 1: WqKpJUebz8vBloipUqJDAfTnaDk.crl (hash: nNpXVsLmwzEMPQl6HVn/Bg8fLD01AvnUSA+JV9rNUUU=)
2: jYQY-U25B3NSBy3Axt-DvgoJjdQ.roa (hash: zP4WnXpWxsW1++MaE9e5/n5ALBQb36qRJjvWEAaaUiU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:82:29:15:9a:75:a2:d0:c4:88:05:06:69:eb:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5aa2a925479bcfcbc19688a952a24301f4e76839
Validity
Not Before: Jan 31 17:00:26 2025 GMT
Not After : Feb 1 17:00:26 2025 GMT
Subject: CN=12212cad9fbc969b16a75504e3c82bf4913a4f60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:07:25:56:40:33:59:d1:6f:ef:6d:de:49:98:
cd:a5:60:41:95:88:72:08:44:73:af:08:1f:21:75:
3d:39:ab:20:1a:ab:4f:d9:c6:99:87:44:42:04:c9:
cb:df:92:cf:ad:1c:72:d1:6b:52:ea:70:67:f7:ab:
57:8d:35:f8:31:1e:34:f9:db:05:c0:70:a8:38:30:
25:07:41:4a:98:53:21:79:69:32:1d:82:d2:fc:af:
c5:61:71:76:30:90:cc:66:4f:59:e7:24:69:91:9f:
7a:9f:cc:9c:6c:19:86:28:5b:d7:7a:ab:7d:06:c8:
f5:c8:cd:c6:5f:38:3c:4f:ed:c3:b7:e9:b4:93:d8:
10:2b:a2:7a:14:f8:10:ff:df:01:ed:41:6c:c7:4e:
27:69:78:d5:5e:27:aa:4a:f4:60:0c:cd:63:b0:61:
df:c2:06:4f:9c:33:25:38:f3:97:ba:fd:5a:d0:19:
13:29:ea:7e:4e:35:9c:99:c6:7b:52:c1:b9:b9:17:
30:fa:b8:a0:9c:b7:31:fa:1e:fa:87:49:6f:e2:c0:
2f:77:68:bb:52:67:74:12:a1:a9:a7:da:31:79:34:
1a:24:5e:c1:76:5c:63:85:19:57:f1:2a:18:67:68:
74:e5:be:d5:3c:bc:ce:db:da:50:5b:0c:99:d9:2c:
de:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:21:2C:AD:9F:BC:96:9B:16:A7:55:04:E3:C8:2B:F4:91:3A:4F:60
X509v3 Authority Key Identifier:
keyid:5A:A2:A9:25:47:9B:CF:CB:C1:96:88:A9:52:A2:43:01:F4:E7:68:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WqKpJUebz8vBloipUqJDAfTnaDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/0a030f-abb5-4e37-96a3-b4f120122922/1/WqKpJUebz8vBloipUqJDAfTnaDk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/0a030f-abb5-4e37-96a3-b4f120122922/1/WqKpJUebz8vBloipUqJDAfTnaDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:ca:61:f6:b2:6b:8b:4a:18:c9:a5:98:15:49:59:f8:fd:3a:
fb:4a:9f:cc:9c:9c:cf:92:e4:7b:6b:ef:ef:af:36:db:82:06:
b3:2e:b0:50:00:4f:32:2e:b6:9f:3a:c2:41:50:ae:da:95:f6:
cc:a6:c5:bb:3e:d1:9e:e8:42:95:79:77:d7:ec:32:09:e7:49:
a7:01:b6:5a:54:e8:c5:e4:e2:97:d9:33:cb:36:21:9e:2a:7b:
54:02:d1:0e:d8:18:33:d2:f9:30:30:73:ab:f0:17:6f:90:ca:
73:44:2b:be:ce:09:10:bb:53:32:6a:68:66:0d:9a:2d:cb:c6:
8e:11:d8:7c:d4:6e:99:41:21:8a:2b:a2:a6:c9:1c:2d:eb:52:
4a:79:d0:bb:5d:90:ee:86:c6:f4:2c:65:aa:ed:b9:0a:bc:15:
28:e1:1c:78:a5:1b:48:09:91:dc:12:19:3a:36:59:d1:c1:b0:
d6:33:e9:51:d4:1e:fa:da:ea:f7:08:2b:48:5f:7f:3a:a2:94:
b3:f4:cd:90:8c:95:69:88:24:7a:8b:e9:8b:cf:8d:01:41:f2:
74:f3:6e:e1:5b:61:22:cb:ed:cb:4c:b7:4b:15:c0:44:c8:55:
76:66:72:c3:9e:58:f8:30:bf:5d:4d:d4:76:e7:b7:ff:1e:b7:
1e:6d:93:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:07:18 2025 by rpki-client