Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/ec5842-6559-48af-80e0-e0a045075984/1/WSgL6bNNnGabgCDlTdakheMX1y8.mft
File: WSgL6bNNnGabgCDlTdakheMX1y8.mft (raw, json)
Hash identifier: 9OLqL1MPYISIGyrjvWbZRcqkLsWmjWdZXNfk1h+BOwk=
Subject key identifier: 11:4E:72:FA:9C:82:C0:00:E1:FB:A5:75:0F:51:AD:A5:2D:0C:7C:5B
Authority key identifier: 59:28:0B:E9:B3:4D:9C:66:9B:80:20:E5:4D:D6:A4:85:E3:17:D7:2F
Certificate issuer: /CN=59280be9b34d9c669b8020e54dd6a485e317d72f
Certificate serial: 0194BD8559B4EC53767563FEBF8FA6108395
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WSgL6bNNnGabgCDlTdakheMX1y8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/ec5842-6559-48af-80e0-e0a045075984/1/WSgL6bNNnGabgCDlTdakheMX1y8.mft
Manifest number: 1D
Signing time: Fri 31 Jan 2025 18:00:20 +0000
Manifest this update: Fri 31 Jan 2025 18:00:20 +0000
Manifest next update: Sat 01 Feb 2025 18:00:20 +0000
Files and hashes: 1: WSgL6bNNnGabgCDlTdakheMX1y8.crl (hash: YjMG3vwmEUwgdXUtSPfc2+H4fFdsCu83bBTsXxmPB1A=)
2: z-jEZ2GeDlqh8l0l3lIAlNgwWk4.roa (hash: J1d9uUMaCClXsN8LZbNyKK5FGLxWIxUYNiRDjBx501g=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:59:b4:ec:53:76:75:63:fe:bf:8f:a6:10:83:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59280be9b34d9c669b8020e54dd6a485e317d72f
Validity
Not Before: Jan 31 18:00:20 2025 GMT
Not After : Feb 1 18:00:20 2025 GMT
Subject: CN=114e72fa9c82c000e1fba5750f51ada52d0c7c5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:5b:44:96:dd:38:98:e9:1d:c2:cc:24:34:ea:
bf:fa:da:29:5c:1e:1d:7e:ec:1d:5a:af:da:85:14:
00:89:0a:a6:80:ee:31:d8:55:ae:d8:f3:7c:ac:dd:
76:74:3e:8a:ad:f0:57:86:d1:b3:b4:34:af:e1:25:
17:aa:c8:27:d1:af:a6:6d:0b:a2:34:0f:ef:3a:7f:
82:8e:2f:3a:74:27:80:89:74:0c:a3:a4:50:c3:37:
1e:1a:dc:cc:ac:a4:ad:bb:e6:02:bd:25:d3:5e:70:
1c:6d:81:dc:a1:cb:19:a5:f0:f1:de:47:09:ff:7c:
9f:8e:37:ee:9e:ba:7b:be:ff:8c:f7:e9:2c:85:61:
1a:13:9a:c5:9b:78:b9:ee:23:b0:98:e6:19:f3:30:
de:2e:da:dd:f0:f0:12:ae:e3:c0:30:69:22:20:62:
15:70:d0:d6:49:18:40:d6:3b:07:14:1c:b9:28:a2:
60:48:16:29:44:ff:5b:9f:e5:7d:54:7b:d2:72:e2:
84:d2:60:92:21:75:0f:2a:a0:5e:b3:92:5a:c2:60:
90:0e:32:fb:b5:97:6c:1f:4f:e2:7b:97:dc:20:28:
a5:70:8f:31:cf:b4:d8:c0:b4:69:54:b2:14:3b:cf:
ea:de:3f:3c:38:5b:f5:74:50:89:de:fd:ea:a7:4e:
78:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:4E:72:FA:9C:82:C0:00:E1:FB:A5:75:0F:51:AD:A5:2D:0C:7C:5B
X509v3 Authority Key Identifier:
keyid:59:28:0B:E9:B3:4D:9C:66:9B:80:20:E5:4D:D6:A4:85:E3:17:D7:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WSgL6bNNnGabgCDlTdakheMX1y8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/ec5842-6559-48af-80e0-e0a045075984/1/WSgL6bNNnGabgCDlTdakheMX1y8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/ec5842-6559-48af-80e0-e0a045075984/1/WSgL6bNNnGabgCDlTdakheMX1y8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:17:62:c2:df:2a:fd:ad:45:db:99:93:08:7b:d2:e0:41:d4:
86:3d:af:b4:6a:3c:18:85:3b:5d:ef:07:f9:20:57:6b:7c:ab:
c1:5b:03:9f:a7:97:1e:56:9e:7b:63:c3:ea:e5:6e:1e:9a:d3:
5e:fd:e8:fd:c7:1a:da:15:60:09:b1:47:9c:de:c4:6a:4f:b9:
68:e2:e8:78:d5:80:ff:b7:f2:cb:b9:23:51:41:fa:ae:7c:ff:
dc:0a:a4:96:90:17:28:16:f1:9c:c9:a5:6f:d5:af:cd:4b:db:
88:c7:41:d5:00:4e:bf:68:42:ce:5f:cb:96:a1:a8:61:38:ea:
d7:cf:3d:0c:c8:8f:ed:f7:9b:c3:1a:ff:21:4b:2f:ff:f6:95:
ae:8c:2c:79:5d:ff:d6:c2:34:10:33:da:a0:bf:d6:d6:12:dd:
b8:64:b2:ca:a4:75:1b:e6:92:5d:ec:8a:e0:61:ba:8d:97:90:
eb:ac:34:47:50:c8:b3:09:5c:25:e3:ab:be:f7:a6:31:74:30:
bb:82:ac:f3:5d:54:17:9d:5e:d8:3d:9a:e9:c2:99:73:51:ef:
08:bb:ba:66:cd:a4:f8:a2:3f:19:c1:df:e2:41:01:c4:59:b2:
ac:a1:68:41:dc:2c:05:85:52:92:02:5f:c4:c4:54:29:df:f4:
b4:85:9a:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 19:05:57 2025 by rpki-client