Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/ea41e0-7b51-490f-8d1f-77d65ef305b0/1/WQSr6w7U_4ZsBl_jbCxihOJSC0I.mft
File: WQSr6w7U_4ZsBl_jbCxihOJSC0I.mft (raw, json)
Hash identifier: lrsbBUMVIVDHxqlZm/dofiJNI1y8uzFMHqEY7hEYHwg=
Subject key identifier: D6:FB:7F:9E:E3:29:DD:E9:A9:EF:93:A0:E3:3D:1C:BF:F5:5A:91:1D
Authority key identifier: 59:04:AB:EB:0E:D4:FF:86:6C:06:5F:E3:6C:2C:62:84:E2:52:0B:42
Certificate issuer: /CN=5904abeb0ed4ff866c065fe36c2c6284e2520b42
Certificate serial: 0194BCA9E0D50192BED3B55C44A738215548
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WQSr6w7U_4ZsBl_jbCxihOJSC0I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/ea41e0-7b51-490f-8d1f-77d65ef305b0/1/WQSr6w7U_4ZsBl_jbCxihOJSC0I.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 14:00:37 +0000
Manifest this update: Fri 31 Jan 2025 14:00:37 +0000
Manifest next update: Sat 01 Feb 2025 14:00:37 +0000
Files and hashes: 1: WQSr6w7U_4ZsBl_jbCxihOJSC0I.crl (hash: MecSPJVjSfY2+PLrMOfaSNjxKmthLdPis2xDB3t7TJo=)
2: p2E40VAywU1E-b5C3yq5INQnhfY.roa (hash: +wh8lIkPmW8LdXYFPZaG+wiXZeTnTUYIdRcRymup/Rw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:e0:d5:01:92:be:d3:b5:5c:44:a7:38:21:55:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5904abeb0ed4ff866c065fe36c2c6284e2520b42
Validity
Not Before: Jan 31 14:00:37 2025 GMT
Not After : Feb 1 14:00:37 2025 GMT
Subject: CN=d6fb7f9ee329dde9a9ef93a0e33d1cbff55a911d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:e7:13:85:e3:2a:f6:66:a4:9b:ca:70:56:9b:
ac:2a:0c:d8:74:41:33:4f:9b:25:bd:dd:93:d7:51:
82:50:af:9b:73:02:65:68:7d:a1:80:d5:73:6e:fa:
aa:70:0b:a9:f1:b4:05:51:64:af:bd:4f:06:d1:d3:
72:be:ab:c5:7e:d6:59:c3:25:1c:6c:60:c6:06:72:
d9:6a:e9:e8:8a:c0:a3:f7:58:20:d7:aa:68:41:99:
2c:cc:6b:6c:3e:c7:a3:3f:2c:bf:ba:27:93:da:42:
e4:aa:6e:62:cf:86:60:7b:e2:92:64:19:b3:81:c0:
c2:0e:c0:58:8c:6f:04:6f:28:0f:8a:d6:92:74:05:
04:13:3f:33:1f:29:ef:4c:33:fd:cf:1e:84:30:c7:
56:28:93:e7:98:88:5b:ea:c5:ad:53:23:31:45:8f:
e4:b3:d2:7f:6a:51:5c:69:11:26:12:81:72:13:2f:
a5:cd:54:a3:17:f1:7c:e0:2a:6b:e3:db:0b:62:6e:
a6:5e:d2:c6:e8:de:88:e5:56:38:0c:fc:d3:d4:a1:
42:31:e6:ca:21:6f:db:60:13:25:48:be:ee:43:4e:
af:2f:b1:4c:28:4c:d9:45:a0:8d:f0:9b:f1:5d:a1:
4f:54:22:0b:37:4b:22:78:71:43:c5:5f:1a:f4:ce:
80:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:FB:7F:9E:E3:29:DD:E9:A9:EF:93:A0:E3:3D:1C:BF:F5:5A:91:1D
X509v3 Authority Key Identifier:
keyid:59:04:AB:EB:0E:D4:FF:86:6C:06:5F:E3:6C:2C:62:84:E2:52:0B:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WQSr6w7U_4ZsBl_jbCxihOJSC0I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/ea41e0-7b51-490f-8d1f-77d65ef305b0/1/WQSr6w7U_4ZsBl_jbCxihOJSC0I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/ea41e0-7b51-490f-8d1f-77d65ef305b0/1/WQSr6w7U_4ZsBl_jbCxihOJSC0I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:cf:d6:0b:e9:30:95:af:0d:b6:54:df:e4:9a:93:3f:cd:33:
d8:f1:10:1f:ce:d3:67:85:8f:0b:f8:23:74:37:c9:f5:1d:99:
4d:68:de:20:f0:6f:25:89:b3:57:c6:53:2d:b4:2e:98:ee:bb:
60:62:7c:09:c8:bc:07:6b:82:fd:f8:09:3e:6b:f1:82:1c:af:
5a:97:cc:80:50:96:83:b9:06:00:38:12:43:e3:d9:3c:02:dc:
4e:90:4a:17:47:eb:d9:a2:e7:b7:47:52:8f:c4:b9:d5:c8:62:
c2:9a:b3:46:50:42:b9:11:c6:23:da:8a:4e:e2:92:cf:76:a8:
23:a3:b7:b2:da:20:b3:56:5c:03:c3:43:e3:38:f2:8d:e8:8f:
d4:ce:c0:2e:0e:49:0a:3b:8e:40:3a:b5:d6:84:df:57:84:89:
f3:fc:d0:d5:e4:f9:8b:65:01:d3:3a:4e:e3:41:d4:7c:48:e2:
b5:b3:b7:1c:9d:ca:94:b3:2c:d9:76:70:04:17:a9:90:be:24:
8e:63:66:68:8a:82:48:af:cf:cd:29:83:2e:52:e2:74:29:6c:
fc:7f:bb:9c:10:18:ee:dd:e7:39:38:56:a1:fa:bf:ac:2b:43:
6a:d5:22:a0:18:38:c3:59:23:2e:14:43:2a:35:5c:5f:e0:19:
2c:27:48:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:43:04 2025 by rpki-client