
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/bc2cd4-fd37-4c41-b5dc-9a803f736c4a/1/WIwyAnRlop-4Ty3QXz8L6AQnsMk.mft
File: WIwyAnRlop-4Ty3QXz8L6AQnsMk.mft (raw, json)
Hash identifier: ggX61b7aiiyXxasjgbxOB0rTFaf+Lufk+ATogGEyoYk=
Subject key identifier: FA:0B:71:73:A0:BB:11:F1:3E:C7:FE:02:B2:32:D7:B2:44:A7:EA:FA
Authority key identifier: 58:8C:32:02:74:65:A2:9F:B8:4F:2D:D0:5F:3F:0B:E8:04:27:B0:C9
Certificate issuer: /CN=588c32027465a29fb84f2dd05f3f0be80427b0c9
Certificate serial: 0194BC04E3539BED1F7C8F308C0A8E23FF56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIwyAnRlop-4Ty3QXz8L6AQnsMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/bc2cd4-fd37-4c41-b5dc-9a803f736c4a/1/WIwyAnRlop-4Ty3QXz8L6AQnsMk.mft
Manifest number: 07D3
Signing time: Fri 31 Jan 2025 11:00:24 +0000
Manifest this update: Fri 31 Jan 2025 11:00:24 +0000
Manifest next update: Sat 01 Feb 2025 11:00:24 +0000
Files and hashes: 1: FMK7dzHIihcujpL5ObD4eD7bFGc.roa (hash: whjlyHcxfeN5GejRh23Ja3qsSIlUZN/ORzvbW64Bfl8=)
2: WIwyAnRlop-4Ty3QXz8L6AQnsMk.crl (hash: /vZCCNpH4vtLoGs64MaN9AnrIpWMXPZJh4uqgtMWVzo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:e3:53:9b:ed:1f:7c:8f:30:8c:0a:8e:23:ff:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=588c32027465a29fb84f2dd05f3f0be80427b0c9
Validity
Not Before: Jan 31 11:00:24 2025 GMT
Not After : Feb 1 11:00:24 2025 GMT
Subject: CN=fa0b7173a0bb11f13ec7fe02b232d7b244a7eafa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ff:28:2b:9a:8c:d3:47:9f:c8:1a:5c:ef:54:
1b:63:57:22:c1:33:03:c0:90:af:f8:c3:43:4a:71:
3a:68:5d:f1:eb:7a:e3:c4:8b:ce:0a:68:47:77:01:
8d:0f:09:58:ca:b8:8e:14:e9:c8:3c:6a:ce:d5:c9:
87:c9:9d:79:7e:93:c3:17:08:8d:15:13:6c:02:29:
60:6f:37:50:e0:e5:d2:03:13:cd:46:f3:12:1c:98:
6c:e1:f9:7c:a3:48:d4:a0:7a:8e:a4:8f:4a:43:40:
44:67:e5:25:ab:46:9d:74:f6:75:c5:ef:b9:ca:eb:
4b:c5:34:b0:7a:69:e7:c3:11:f0:f5:80:9e:ab:4a:
e7:11:d8:95:a5:af:3c:03:9a:77:1a:d0:67:c8:94:
97:8a:71:43:ec:b1:d0:b0:b9:bd:a9:18:f8:3e:77:
32:94:2e:1a:31:dd:26:b9:0d:e6:dd:ec:30:42:ad:
1f:6b:16:26:74:4b:87:9f:4c:46:7f:7c:3e:30:1b:
9c:f3:47:bd:a0:74:a4:cf:cc:68:a7:fd:21:26:99:
8a:47:0d:36:28:9e:4a:2a:a7:0b:89:a6:32:46:f7:
86:78:d3:64:e3:f9:77:ac:35:06:56:45:c7:52:6f:
ab:cb:f9:2a:e1:69:ae:e9:f1:7e:24:56:b2:ff:c0:
18:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:0B:71:73:A0:BB:11:F1:3E:C7:FE:02:B2:32:D7:B2:44:A7:EA:FA
X509v3 Authority Key Identifier:
keyid:58:8C:32:02:74:65:A2:9F:B8:4F:2D:D0:5F:3F:0B:E8:04:27:B0:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIwyAnRlop-4Ty3QXz8L6AQnsMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/bc2cd4-fd37-4c41-b5dc-9a803f736c4a/1/WIwyAnRlop-4Ty3QXz8L6AQnsMk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/bc2cd4-fd37-4c41-b5dc-9a803f736c4a/1/WIwyAnRlop-4Ty3QXz8L6AQnsMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:25:7c:1c:e0:8b:f9:02:69:d6:6c:d1:a2:57:06:0c:73:2a:
ec:a4:5b:4a:36:37:9c:8b:f3:56:8e:0c:e8:89:8a:8a:2e:76:
0c:ec:35:25:05:8d:0d:f4:9c:eb:a4:77:64:93:2e:b8:7d:1e:
d0:9e:37:53:bc:b4:93:04:5b:1b:3c:c3:e3:2a:85:2d:64:7e:
70:83:31:19:4d:2e:72:22:2c:9c:84:88:9f:a4:3d:a1:a5:b4:
39:23:b5:dd:32:04:e1:58:dd:41:7a:dd:36:cd:72:b6:57:f2:
8c:2f:71:b3:0a:04:d3:0f:4c:51:54:8a:6d:38:18:e6:68:53:
73:87:19:0a:6f:a1:e6:cd:40:f4:31:e2:d7:c7:17:41:f7:d2:
23:50:01:86:32:00:a2:e1:38:86:b5:72:53:a4:23:80:87:c0:
d6:74:dc:4c:e2:91:4d:04:19:2b:3b:7d:56:b0:c1:ef:5f:9b:
ba:b3:a9:cf:b1:12:72:97:6a:89:ca:6e:22:6a:0a:76:a0:1c:
6c:b8:95:90:e4:3e:ab:9f:22:47:fb:96:54:b6:fd:bb:aa:1f:
84:8f:93:66:87:8d:ff:b4:f0:13:cd:70:6b:f5:8a:87:cc:73:
db:1a:97:7e:35:b3:37:95:e0:c6:3a:09:2e:c4:35:ec:bc:bf:
08:5d:81:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:42:25 2025 by rpki-client