Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/9c4365-a98f-43fe-9950-a9b13c2800af/1/WKhqbHH7c0xwW15m50rBxWu5YF4.mft
File: WKhqbHH7c0xwW15m50rBxWu5YF4.mft (raw, json)
Hash identifier: Ici4LAIUk/5fltwuCQdrnK3DCxytVk59SRXeFpBqOT0=
Subject key identifier: 87:37:58:D8:9E:55:E2:5F:DA:A1:BF:A8:C3:3E:05:C1:0C:72:98:C6
Authority key identifier: 58:A8:6A:6C:71:FB:73:4C:70:5B:5E:66:E7:4A:C1:C5:6B:B9:60:5E
Certificate issuer: /CN=58a86a6c71fb734c705b5e66e74ac1c56bb9605e
Certificate serial: 0194BD859D5CA80C2F02EE3BB8B74152FD16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WKhqbHH7c0xwW15m50rBxWu5YF4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/9c4365-a98f-43fe-9950-a9b13c2800af/1/WKhqbHH7c0xwW15m50rBxWu5YF4.mft
Manifest number: 0A46
Signing time: Fri 31 Jan 2025 18:00:37 +0000
Manifest this update: Fri 31 Jan 2025 18:00:37 +0000
Manifest next update: Sat 01 Feb 2025 18:00:37 +0000
Files and hashes: 1: WKhqbHH7c0xwW15m50rBxWu5YF4.crl (hash: Qwx1pRR+1BToiiuz8UVKLdb8oWDFsc9NeTdpYP9V3IM=)
2: eTD5X7eUVxPbE-bCRH9QGxLRZDs.roa (hash: IG853MFkGaq1sWpTd3DWggMITF7We7r2IbsZKj9lAZU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:9d:5c:a8:0c:2f:02:ee:3b:b8:b7:41:52:fd:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58a86a6c71fb734c705b5e66e74ac1c56bb9605e
Validity
Not Before: Jan 31 18:00:37 2025 GMT
Not After : Feb 1 18:00:37 2025 GMT
Subject: CN=873758d89e55e25fdaa1bfa8c33e05c10c7298c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:42:16:53:e6:48:86:3e:be:30:dc:28:85:53:
10:06:4f:99:11:8f:8e:31:bb:21:5b:a1:d6:e0:a5:
b0:2e:4c:83:5f:60:c6:87:4e:7a:26:58:bb:31:05:
a7:fd:c4:62:82:22:91:25:c6:11:f0:03:eb:e0:b9:
0e:ce:48:b7:ae:0d:19:60:10:5c:ee:e9:d1:df:70:
f4:ec:ea:33:d4:4c:89:a9:70:9a:62:18:2a:da:91:
ef:04:56:17:c9:ca:8c:ff:f2:8e:0b:9d:2e:64:e0:
f2:2b:5c:8e:73:e7:06:06:fc:c8:ac:49:8d:1e:81:
cb:ca:c9:75:cb:8a:af:ce:13:10:22:69:1e:b1:5e:
07:6a:d2:93:ba:20:1f:0f:ea:de:4d:44:a5:36:0f:
b2:f5:82:8c:3a:58:d3:70:a3:3a:fb:17:4c:7d:d7:
de:0c:69:70:8b:1e:96:6e:bc:bc:4e:c9:56:b1:61:
12:e5:57:12:9f:b0:f8:ca:c8:69:f0:73:0d:23:1f:
ab:b2:99:54:91:1d:34:81:c3:5a:e2:0f:92:4d:17:
3c:7b:f4:5c:69:6d:ba:3f:26:55:2d:46:2e:f5:77:
af:ca:50:51:15:bb:aa:4f:a0:4e:b4:2a:ec:1d:e2:
41:90:50:01:41:4c:84:b1:3b:6d:94:5b:18:ab:77:
15:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:37:58:D8:9E:55:E2:5F:DA:A1:BF:A8:C3:3E:05:C1:0C:72:98:C6
X509v3 Authority Key Identifier:
keyid:58:A8:6A:6C:71:FB:73:4C:70:5B:5E:66:E7:4A:C1:C5:6B:B9:60:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WKhqbHH7c0xwW15m50rBxWu5YF4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/9c4365-a98f-43fe-9950-a9b13c2800af/1/WKhqbHH7c0xwW15m50rBxWu5YF4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/9c4365-a98f-43fe-9950-a9b13c2800af/1/WKhqbHH7c0xwW15m50rBxWu5YF4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:0b:0f:f9:6a:0c:44:93:49:dc:03:6c:e6:3c:d4:8d:a7:a1:
5e:f5:6b:65:85:47:8e:bf:5f:6a:f4:97:39:af:c8:5e:75:e9:
44:59:f4:97:1c:06:2c:3c:57:96:20:75:48:27:4e:70:69:d2:
2c:ed:c2:b5:5a:be:23:6d:85:81:ff:fc:53:68:64:34:85:81:
eb:b8:b3:e5:6b:23:64:23:ab:a9:08:06:c7:49:74:d0:82:e5:
3d:4b:88:95:2f:f7:9a:01:2c:4f:33:00:11:79:72:75:cc:53:
4b:b9:94:c0:7c:b7:68:49:d0:85:4b:5c:78:d3:26:7e:98:44:
18:83:48:cc:9b:d8:b5:07:44:1c:ee:6d:ab:39:9b:d2:99:56:
61:87:6f:28:cc:60:ed:e6:f8:9d:98:5a:90:43:ab:94:41:91:
85:fe:9e:99:42:53:77:f0:4a:c3:91:c6:9c:75:6f:3d:96:a4:
bd:b2:00:45:e4:83:c8:2c:d0:f8:69:ea:0f:2e:6b:82:e4:0b:
4c:62:bc:92:d9:40:d9:c7:07:d8:67:f6:c7:71:7a:0f:b1:11:
a8:1b:41:8a:f1:12:16:4d:2c:cf:28:7d:c9:64:84:e3:7e:f9:
ea:66:ce:47:bd:00:e3:e5:a1:17:cb:6b:86:f4:b4:75:85:ee:
e8:52:e1:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:42:11 2025 by rpki-client