Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/f491a0-b666-4e9f-b0f9-6eed52968b1c/1/WgqpaCxoOpwblc6WdtUbINOf0q4.mft
File: WgqpaCxoOpwblc6WdtUbINOf0q4.mft (raw, json)
Hash identifier: bDCpjR4aC8SkwG2Rg9eBrNb3Gis5YuzqFnhlkhbriuY=
Subject key identifier: 64:4C:11:F6:C5:C1:C0:0A:76:40:69:69:A5:89:5C:BE:1E:70:70:F9
Authority key identifier: 5A:0A:A9:68:2C:68:3A:9C:1B:95:CE:96:76:D5:1B:20:D3:9F:D2:AE
Certificate issuer: /CN=5a0aa9682c683a9c1b95ce9676d51b20d39fd2ae
Certificate serial: 0194BCAA027A7A9D757F1A508DE22F0246CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WgqpaCxoOpwblc6WdtUbINOf0q4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/f491a0-b666-4e9f-b0f9-6eed52968b1c/1/WgqpaCxoOpwblc6WdtUbINOf0q4.mft
Manifest number: 0C99
Signing time: Fri 31 Jan 2025 14:00:45 +0000
Manifest this update: Fri 31 Jan 2025 14:00:45 +0000
Manifest next update: Sat 01 Feb 2025 14:00:45 +0000
Files and hashes: 1: D9VtpqQ5QcOE8_3AAGv6AbSncPk.roa (hash: 45VJpPEdefwyDmmpbMXwZdBXiJtpSM2szrEhn6hGnnw=)
2: WgqpaCxoOpwblc6WdtUbINOf0q4.crl (hash: 6xxaGEMFg2lltNdfH6bSOMqQEEhpLk7ABssgbKmzvkU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:02:7a:7a:9d:75:7f:1a:50:8d:e2:2f:02:46:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a0aa9682c683a9c1b95ce9676d51b20d39fd2ae
Validity
Not Before: Jan 31 14:00:45 2025 GMT
Not After : Feb 1 14:00:45 2025 GMT
Subject: CN=644c11f6c5c1c00a76406969a5895cbe1e7070f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:21:0c:a7:43:3f:cf:c0:54:76:2d:7f:5b:57:
89:ca:34:fe:8a:ab:2a:d4:da:78:b8:85:13:97:91:
c9:2f:66:1d:5e:ca:0d:14:cc:8c:48:44:89:7f:1a:
3f:9d:f6:51:9f:10:c7:a7:a4:0a:18:d5:fb:82:06:
52:83:55:c7:1d:ec:dc:c6:c8:57:9c:89:e4:b8:92:
29:e0:f2:b8:01:ff:7e:fc:cf:44:b5:30:6e:26:83:
07:f7:2a:df:e8:bc:61:c4:0e:e6:9f:55:33:09:bc:
21:02:6d:a1:2b:7c:9b:2a:4c:71:f5:c8:20:b3:ff:
20:fa:db:21:88:aa:44:34:20:61:76:e0:1b:99:a7:
c6:1f:f4:e3:11:09:98:a0:c8:f5:f5:78:f9:41:5c:
08:99:04:82:4a:02:4c:b0:f1:30:49:08:ca:95:c6:
97:ef:ba:3f:48:03:ba:b7:64:1e:51:c8:14:58:30:
b2:e9:ed:4c:f7:7f:c7:0f:9c:ca:52:6b:ba:44:93:
20:5d:da:3f:ce:32:73:45:c4:34:f6:f3:ca:81:da:
31:a3:99:c6:b1:c7:9e:31:63:bb:96:ab:13:06:e3:
7a:bc:bc:c7:8c:05:68:e0:c5:cd:dc:80:99:84:02:
70:f2:a1:04:e8:fa:2c:47:3e:6f:12:f9:af:7f:1d:
24:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:4C:11:F6:C5:C1:C0:0A:76:40:69:69:A5:89:5C:BE:1E:70:70:F9
X509v3 Authority Key Identifier:
keyid:5A:0A:A9:68:2C:68:3A:9C:1B:95:CE:96:76:D5:1B:20:D3:9F:D2:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WgqpaCxoOpwblc6WdtUbINOf0q4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f491a0-b666-4e9f-b0f9-6eed52968b1c/1/WgqpaCxoOpwblc6WdtUbINOf0q4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f491a0-b666-4e9f-b0f9-6eed52968b1c/1/WgqpaCxoOpwblc6WdtUbINOf0q4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:a8:3f:01:45:3e:0b:3e:52:b0:16:20:86:ec:f6:2e:07:3d:
c6:08:e0:5e:a7:18:a9:9d:66:ba:5c:fe:14:f6:41:f6:c9:d9:
6f:cf:99:eb:18:c4:ce:61:ea:88:02:93:53:77:68:49:ae:15:
be:a4:fa:16:79:52:40:01:46:cf:31:7a:ab:dd:25:53:a7:4c:
cb:19:2d:31:0c:3d:4d:19:3a:e2:89:aa:ef:1a:a3:56:f6:65:
b0:39:e2:58:1d:86:a1:46:d3:08:93:d5:4a:6d:b8:2e:62:af:
bb:ef:f5:28:74:9e:68:85:56:e7:64:7e:8e:e7:f4:41:f0:35:
c0:41:02:1d:35:6a:05:90:10:97:db:c9:27:50:99:d9:01:65:
73:27:fa:0c:55:f2:50:88:35:2d:ef:48:33:eb:c1:c3:d1:fe:
77:50:e4:1e:fb:8d:45:d5:e1:e6:81:dc:06:e1:eb:2d:dd:7b:
70:03:fe:40:e7:8e:35:06:f5:b3:63:35:d9:81:e4:24:2a:38:
af:d0:ab:a2:cf:5d:c7:f7:aa:2f:09:a8:fc:7b:60:9d:bd:32:
05:a2:01:58:0d:41:0a:4a:36:c5:46:13:d7:ac:62:1a:bd:59:
a6:1b:2d:2f:a4:79:fa:ad:38:5e:5e:c1:d4:99:12:fe:ea:29:
03:b1:8a:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:47:05 2025 by rpki-client