Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/834875-aafb-45b4-ab58-519368b77c5d/1/WRgezM-jp4ELruDwW_Oge7j3jWY.mft
File: WRgezM-jp4ELruDwW_Oge7j3jWY.mft (raw, json)
Hash identifier: +270OY8oqcsnDnWrIuiXFAKAC6XdZ+QiGDXeoggvYWg=
Subject key identifier: 60:1A:96:8E:DE:2D:93:31:75:00:A1:1F:70:4F:A9:CF:63:57:DA:E6
Authority key identifier: 59:18:1E:CC:CF:A3:A7:81:0B:AE:E0:F0:5B:F3:A0:7B:B8:F7:8D:66
Certificate issuer: /CN=59181ecccfa3a7810baee0f05bf3a07bb8f78d66
Certificate serial: 0194BCA9D349ABC2CDF1F64FABF7060EF01A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WRgezM-jp4ELruDwW_Oge7j3jWY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/834875-aafb-45b4-ab58-519368b77c5d/1/WRgezM-jp4ELruDwW_Oge7j3jWY.mft
Manifest number: 0CB9
Signing time: Fri 31 Jan 2025 14:00:33 +0000
Manifest this update: Fri 31 Jan 2025 14:00:33 +0000
Manifest next update: Sat 01 Feb 2025 14:00:33 +0000
Files and hashes: 1: WRgezM-jp4ELruDwW_Oge7j3jWY.crl (hash: H4+v6hVSsg0c8K/d5RwzRCJWftOEYQGjkCJCd/ffMtM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:d3:49:ab:c2:cd:f1:f6:4f:ab:f7:06:0e:f0:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59181ecccfa3a7810baee0f05bf3a07bb8f78d66
Validity
Not Before: Jan 31 14:00:33 2025 GMT
Not After : Feb 1 14:00:33 2025 GMT
Subject: CN=601a968ede2d93317500a11f704fa9cf6357dae6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:1c:1c:eb:92:75:0f:84:d3:47:d3:28:1d:a5:
1a:c6:9a:d9:30:17:dd:b2:fd:ca:29:f0:22:53:c5:
d5:e4:a9:52:22:a2:e8:d1:ab:94:bb:16:ed:9f:a3:
8a:25:63:63:ed:3e:7b:58:3e:f5:51:40:f7:b3:33:
e0:c1:4f:fb:15:39:a6:f1:a7:e3:1b:72:dc:aa:fe:
f3:55:b0:a6:0e:7d:e2:f7:86:ed:bd:e8:e3:14:cc:
2a:2a:8f:4e:ad:bf:02:0a:af:02:21:8f:d1:5e:66:
82:c3:37:fe:04:2e:a0:b4:a4:7b:ce:f4:ff:be:36:
36:df:c2:17:75:39:f5:e6:d7:69:e3:e6:0b:ee:f7:
f2:02:bd:d5:c5:98:9a:b4:8e:66:2a:a7:2f:9b:22:
63:89:1c:01:26:58:bd:94:d8:b6:a7:13:87:ac:45:
d3:1a:ff:76:57:87:8a:53:f7:3f:a9:89:23:78:b9:
32:78:d6:99:25:1b:d3:1b:2c:4f:38:06:b0:9a:c1:
37:1b:39:0f:e0:94:be:61:ea:6e:37:db:b8:cf:7a:
34:18:a2:49:47:81:92:d6:e8:d7:2d:c2:d1:44:af:
c1:e3:f1:19:fc:9e:10:ac:11:85:e9:69:9b:12:94:
c9:a9:76:e6:e9:af:6b:cb:eb:a7:f3:13:8a:d6:a8:
82:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:1A:96:8E:DE:2D:93:31:75:00:A1:1F:70:4F:A9:CF:63:57:DA:E6
X509v3 Authority Key Identifier:
keyid:59:18:1E:CC:CF:A3:A7:81:0B:AE:E0:F0:5B:F3:A0:7B:B8:F7:8D:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WRgezM-jp4ELruDwW_Oge7j3jWY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/834875-aafb-45b4-ab58-519368b77c5d/1/WRgezM-jp4ELruDwW_Oge7j3jWY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/834875-aafb-45b4-ab58-519368b77c5d/1/WRgezM-jp4ELruDwW_Oge7j3jWY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:23:1b:0b:d3:3e:6d:2b:1b:48:87:11:e1:96:e3:4c:e5:a9:
42:02:b4:ff:85:c0:c5:47:cf:bc:b1:58:35:ae:45:67:4f:ec:
c7:bc:b5:e8:0d:8a:39:90:e3:85:6b:f7:bc:13:23:68:09:11:
62:b1:90:c3:91:0f:47:97:c6:17:39:fa:6e:9f:18:a8:1d:b4:
4e:b8:b6:36:3f:5f:c2:64:a0:a2:2b:ab:33:42:ce:83:40:52:
dc:ff:f8:ac:34:69:81:aa:ab:37:5b:c6:94:55:47:cd:ec:d0:
40:46:b0:96:bd:f3:45:34:2f:e1:d3:3a:e1:3e:f9:b7:33:e1:
06:94:4f:ff:10:fb:06:7d:3e:89:ac:1d:43:38:56:74:48:b9:
70:7b:48:b2:6d:2d:1d:f9:72:83:51:8b:59:ee:69:65:cb:92:
a1:6c:c1:65:78:f3:a3:7f:c9:79:83:42:dd:4f:19:bc:ae:21:
21:83:f4:8b:60:50:dc:02:4d:33:71:46:58:50:74:88:9d:4d:
2e:e0:59:d4:99:1d:61:0a:04:27:4f:52:c6:f6:25:73:34:7d:
62:40:2f:0f:90:c2:ea:10:0f:e3:61:1e:e2:42:f2:8a:8b:24:
06:cf:84:7f:25:bf:2f:7c:01:77:21:26:39:5c:ce:95:d5:55:
22:2b:f6:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:01:42 2025 by rpki-client