
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/6555e3-82f6-46ca-a170-48f77ee85ab9/1/W8mmyFynpWV7noroCGXRLvgWagM.mft
File: W8mmyFynpWV7noroCGXRLvgWagM.mft (raw, json)
Hash identifier: OXQIql7BiWz871DzjCWW5tPRMDCQvIWjX4JaXA3XxpA=
Subject key identifier: 3F:FC:2F:6A:B2:01:4C:EB:05:F9:E8:17:9E:B3:BA:3E:9C:76:00:14
Authority key identifier: 5B:C9:A6:C8:5C:A7:A5:65:7B:9E:8A:E8:08:65:D1:2E:F8:16:6A:03
Certificate issuer: /CN=5bc9a6c85ca7a5657b9e8ae80865d12ef8166a03
Certificate serial: 0194BD852E4CEA6C17E1F0CEA9CC433BC44A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W8mmyFynpWV7noroCGXRLvgWagM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/6555e3-82f6-46ca-a170-48f77ee85ab9/1/W8mmyFynpWV7noroCGXRLvgWagM.mft
Manifest number: 0A71
Signing time: Fri 31 Jan 2025 18:00:09 +0000
Manifest this update: Fri 31 Jan 2025 18:00:09 +0000
Manifest next update: Sat 01 Feb 2025 18:00:09 +0000
Files and hashes: 1: W8mmyFynpWV7noroCGXRLvgWagM.crl (hash: I4VQgEIduOdeUBJQbQiJelRA+8NGIswXceUUqcRVsz0=)
2: vKD1X-jgf5rIJA4G6pwqMojuRV4.roa (hash: fbvMQmePhdG/UIKJYTYnfCavdJk6hZaz9OK7R4QEjQM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:2e:4c:ea:6c:17:e1:f0:ce:a9:cc:43:3b:c4:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5bc9a6c85ca7a5657b9e8ae80865d12ef8166a03
Validity
Not Before: Jan 31 18:00:09 2025 GMT
Not After : Feb 1 18:00:09 2025 GMT
Subject: CN=3ffc2f6ab2014ceb05f9e8179eb3ba3e9c760014
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:6e:48:60:bd:8b:ce:c2:ad:39:ae:1c:7b:83:
7b:44:28:3e:3d:fc:91:78:16:a5:b1:f2:01:9d:fb:
04:8b:d7:d7:45:e5:69:1c:22:34:07:2a:80:90:8f:
41:ac:cb:60:ec:6e:cf:15:91:51:6a:5c:01:46:40:
cb:ec:ad:32:56:d6:eb:47:b4:41:cd:7e:11:df:4b:
7c:35:4e:f8:21:64:64:e7:e6:41:ab:42:e3:a7:14:
c2:d1:eb:0e:09:ef:d1:c1:62:11:1f:0b:ce:cc:93:
e0:46:4b:6a:d4:20:1b:ad:d7:c6:99:d9:98:5e:dd:
f4:82:df:ba:3a:82:d1:47:a5:57:35:ca:63:ef:c9:
0a:ac:99:2c:0e:d3:2d:25:42:3f:48:1f:1a:b0:3a:
8e:c6:d9:47:d2:22:ec:c9:89:cb:a8:57:7b:a6:4e:
40:45:c8:0f:57:34:07:2b:f7:1c:c4:29:5d:74:aa:
0c:32:88:34:5c:f1:35:f2:90:ca:f8:ca:f2:f2:cb:
f6:6c:26:82:f0:0e:57:e1:43:e0:d3:e3:4c:63:0f:
d0:e9:35:b1:2e:6c:ea:10:e7:b5:b3:b3:a8:62:26:
72:ae:b8:c7:a0:da:de:15:81:d0:7e:86:b8:55:d1:
23:af:b9:16:9b:34:ad:ca:8a:9d:a6:49:06:e1:b1:
b0:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:FC:2F:6A:B2:01:4C:EB:05:F9:E8:17:9E:B3:BA:3E:9C:76:00:14
X509v3 Authority Key Identifier:
keyid:5B:C9:A6:C8:5C:A7:A5:65:7B:9E:8A:E8:08:65:D1:2E:F8:16:6A:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W8mmyFynpWV7noroCGXRLvgWagM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/6555e3-82f6-46ca-a170-48f77ee85ab9/1/W8mmyFynpWV7noroCGXRLvgWagM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/6555e3-82f6-46ca-a170-48f77ee85ab9/1/W8mmyFynpWV7noroCGXRLvgWagM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:f2:f5:08:f2:9f:c9:cd:ca:44:24:9a:95:d6:e6:6e:ac:f9:
05:57:da:46:27:5e:68:ca:8f:67:d3:4c:1d:fd:a5:7f:6d:bb:
30:38:01:15:9a:6c:93:6b:e2:05:d9:5e:8d:01:dd:ea:ab:29:
a5:c1:65:bb:c2:d9:5b:08:81:30:1b:0d:e2:74:38:20:bf:d0:
17:82:88:db:a1:a1:2e:39:55:de:ea:fd:87:2e:a1:9e:96:17:
7c:71:84:f9:07:dc:b4:7b:75:94:02:04:14:87:36:6f:4d:28:
d8:fe:92:27:80:ba:29:c9:28:13:50:64:23:d4:3b:13:a4:ba:
41:5b:a9:22:50:44:60:16:ab:6c:94:13:6d:9b:d5:9a:92:31:
31:00:07:75:12:8c:24:8e:5b:b3:45:d6:ae:39:88:e5:a2:4f:
7c:57:6f:63:84:41:c6:0e:d6:a5:e2:48:bf:4c:a0:4e:99:57:
73:db:63:c0:41:23:06:a1:07:df:0f:0d:e4:58:ba:57:32:29:
14:56:c8:97:0a:e7:2f:80:5c:d6:07:73:10:44:4a:12:25:b8:
8b:27:24:57:55:9b:d2:df:56:fa:33:ff:74:45:79:5f:c3:1f:
ed:d5:9b:db:bd:81:0f:98:3d:2f:fb:2d:65:e4:71:f7:ee:1e:
f5:e1:6b:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 15:05:00 2025 by rpki-client