Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/b27a3b-acf8-4668-989f-83cf46689375/1/WujsvmlVEtpODwK23A572pYNwzo.mft
File: WujsvmlVEtpODwK23A572pYNwzo.mft (raw, json)
Hash identifier: A1fzkqNVaQAR0NSgjBpD6RHMFN4RCknEXApOnljvarg=
Subject key identifier: 12:EF:CB:85:31:22:97:F2:10:E0:8E:29:2F:EA:C4:B3:DA:FC:31:51
Authority key identifier: 5A:E8:EC:BE:69:55:12:DA:4E:0F:02:B6:DC:0E:7B:DA:96:0D:C3:3A
Certificate issuer: /CN=5ae8ecbe695512da4e0f02b6dc0e7bda960dc33a
Certificate serial: 0194BBCE4DF8CA99A1F9E97ECCB10246E5B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WujsvmlVEtpODwK23A572pYNwzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/b27a3b-acf8-4668-989f-83cf46689375/1/WujsvmlVEtpODwK23A572pYNwzo.mft
Manifest number: 0522
Signing time: Fri 31 Jan 2025 10:00:47 +0000
Manifest this update: Fri 31 Jan 2025 10:00:47 +0000
Manifest next update: Sat 01 Feb 2025 10:00:47 +0000
Files and hashes: 1: WujsvmlVEtpODwK23A572pYNwzo.crl (hash: ARLvuNtlaH+VDHQoY6nUlrpEvr/Qmw3TnQgPh6npm4k=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:4d:f8:ca:99:a1:f9:e9:7e:cc:b1:02:46:e5:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ae8ecbe695512da4e0f02b6dc0e7bda960dc33a
Validity
Not Before: Jan 31 10:00:47 2025 GMT
Not After : Feb 1 10:00:47 2025 GMT
Subject: CN=12efcb85312297f210e08e292feac4b3dafc3151
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:05:78:56:94:e5:c8:32:11:d4:a3:34:bd:04:
ff:21:7e:9d:a1:4c:56:54:cd:ee:b4:2b:c9:28:36:
12:62:a8:b1:d4:3d:d5:b2:e1:d2:20:3e:cc:08:7b:
8d:4c:3d:2d:1e:fb:49:99:11:47:0c:fd:c3:51:63:
55:84:57:8a:20:3f:c4:33:f4:20:23:1a:18:84:bd:
00:b9:a7:0c:bc:50:e1:26:fd:de:ab:6b:06:be:0e:
b9:ba:89:12:51:4e:38:fb:28:36:b9:dc:88:4a:c2:
3a:14:6f:5a:d4:48:cb:a6:13:2f:51:70:13:b0:54:
f2:36:03:fd:9c:e2:6d:35:17:e4:09:53:b9:9c:f8:
fe:e0:54:27:64:a8:54:c9:e0:9c:79:85:64:0e:ec:
05:3f:bb:f7:9e:74:ba:d7:e9:37:fd:53:a5:55:21:
72:68:7f:68:11:a4:ae:18:a1:da:4c:dc:1f:b7:74:
5c:e9:14:74:1e:9a:00:e9:62:8a:2c:52:81:fb:b7:
87:e1:34:b7:5c:e1:c8:0b:89:5b:0b:66:22:78:74:
5b:cf:dd:d1:14:13:f8:f9:00:40:42:5c:ea:f3:da:
c2:9d:61:c9:46:05:69:76:66:e2:00:2e:3f:aa:ca:
9f:26:5c:22:68:08:67:9a:6f:a2:84:27:27:65:65:
3f:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:EF:CB:85:31:22:97:F2:10:E0:8E:29:2F:EA:C4:B3:DA:FC:31:51
X509v3 Authority Key Identifier:
keyid:5A:E8:EC:BE:69:55:12:DA:4E:0F:02:B6:DC:0E:7B:DA:96:0D:C3:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WujsvmlVEtpODwK23A572pYNwzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/b27a3b-acf8-4668-989f-83cf46689375/1/WujsvmlVEtpODwK23A572pYNwzo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/b27a3b-acf8-4668-989f-83cf46689375/1/WujsvmlVEtpODwK23A572pYNwzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:e7:55:e9:c2:19:5e:d3:49:a9:7c:84:83:bf:df:39:0c:97:
04:c5:77:c0:0e:18:66:9c:0a:21:3c:a2:03:2e:fa:c4:38:a9:
f6:65:3c:d3:15:96:8a:61:97:5c:d6:9b:86:07:60:42:ba:c7:
33:bf:c0:35:be:fb:90:b8:b1:9b:02:ce:2b:2f:88:53:93:ac:
65:79:f1:77:7a:84:e0:61:22:e1:3b:6b:6e:6a:5a:7e:bf:95:
a8:7d:bc:6a:db:30:7d:0e:4e:d5:0e:fa:d7:b2:16:92:21:98:
be:5d:18:57:6a:12:dc:a8:9a:f1:fe:7e:89:e3:dd:d1:10:fb:
be:46:12:85:bf:de:7d:9f:6e:d9:c7:89:ce:d7:06:25:2e:1b:
46:82:9a:c3:c0:4e:1c:5b:a4:3d:45:00:e7:fc:14:54:1e:71:
24:fc:de:7e:bd:a9:48:37:db:a6:8c:1f:01:8e:a7:d1:0c:cd:
65:21:7f:87:6c:04:70:d4:c0:98:20:c0:db:a3:3c:e3:7d:96:
dc:5f:f1:47:9b:0b:6f:1a:40:98:f2:d3:fb:48:83:28:f4:9d:
b1:be:89:79:ff:f8:82:19:27:95:29:06:75:1b:f5:d7:88:5f:
ce:5c:45:1d:0b:78:e4:a0:4f:b7:8e:74:b4:51:f6:70:0c:d4:
e1:a0:13:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:07:01 2025 by rpki-client