Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/625ed5-7e74-4427-9bdf-dd1d249017aa/1/Way0AidliYvk8GBQzTovkpHYM2c.mft
File: Way0AidliYvk8GBQzTovkpHYM2c.mft (raw, json)
Hash identifier: MXSvlPn5ptv7IWm4SD97WIVV3NCFJkEOEbLXNzeKFwI=
Subject key identifier: A4:66:EF:B6:D2:71:99:52:03:31:E6:65:EF:14:DC:79:A9:2B:07:AD
Authority key identifier: 59:AC:B4:02:27:65:89:8B:E4:F0:60:50:CD:3A:2F:92:91:D8:33:67
Certificate issuer: /CN=59acb4022765898be4f06050cd3a2f9291d83367
Certificate serial: 0194BC7337BC76F1099954DD9A578CD4E5ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Way0AidliYvk8GBQzTovkpHYM2c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/625ed5-7e74-4427-9bdf-dd1d249017aa/1/Way0AidliYvk8GBQzTovkpHYM2c.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 13:00:54 +0000
Manifest this update: Fri 31 Jan 2025 13:00:54 +0000
Manifest next update: Sat 01 Feb 2025 13:00:54 +0000
Files and hashes: 1: Way0AidliYvk8GBQzTovkpHYM2c.crl (hash: 2PUl8d7HO76KbAwDKTPj6i7cpNH2WwOABW1iIb1GVUs=)
2: ulpVz6oz9XYNKND7r8cyUHxYbf8.roa (hash: gFOodfsqdoFiAv0lVY3HgqujFbAqe9mhjL0SdVU2xyc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:37:bc:76:f1:09:99:54:dd:9a:57:8c:d4:e5:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59acb4022765898be4f06050cd3a2f9291d83367
Validity
Not Before: Jan 31 13:00:54 2025 GMT
Not After : Feb 1 13:00:54 2025 GMT
Subject: CN=a466efb6d27199520331e665ef14dc79a92b07ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:bd:b9:05:d2:cc:ef:32:5c:98:e7:37:9e:81:
c0:1a:80:5d:25:0a:da:a0:82:71:04:8a:b0:3a:3d:
a3:d5:9f:0b:6c:ac:0f:f8:0d:31:10:5e:a2:ae:84:
9c:76:29:81:f3:72:31:c8:e3:02:44:3a:f1:d8:0d:
4d:b9:75:8b:d5:3a:71:26:56:57:b1:d0:b4:00:26:
bb:17:eb:5e:de:db:19:7f:9f:51:48:f0:31:86:93:
71:c0:e7:ea:4a:cc:6d:87:3a:24:44:cd:c1:3d:fa:
9d:14:7f:65:78:6a:49:53:66:f1:7a:5c:0e:6e:f3:
ed:40:79:4a:51:b4:b0:14:75:ba:ec:de:ee:49:56:
4d:dd:05:11:46:66:83:86:46:75:58:c5:ac:dc:4b:
31:a4:1a:e7:35:66:14:de:3d:e1:2e:e1:00:9a:7b:
55:d6:ce:bf:97:b5:c0:c7:fb:ba:61:44:71:a9:ef:
07:5a:0a:a4:20:38:c7:a6:fc:e8:ff:ba:e7:bb:e7:
fb:a5:b1:55:22:59:03:f9:92:d5:ad:16:b5:37:88:
ec:c0:77:3d:20:b8:48:fd:48:6a:b8:25:34:25:80:
1a:ed:b3:2a:24:7f:bd:b7:85:05:d1:e9:2a:05:1b:
32:cc:29:a3:1e:19:f4:4d:c9:cb:33:09:63:f5:0d:
53:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:66:EF:B6:D2:71:99:52:03:31:E6:65:EF:14:DC:79:A9:2B:07:AD
X509v3 Authority Key Identifier:
keyid:59:AC:B4:02:27:65:89:8B:E4:F0:60:50:CD:3A:2F:92:91:D8:33:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Way0AidliYvk8GBQzTovkpHYM2c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/625ed5-7e74-4427-9bdf-dd1d249017aa/1/Way0AidliYvk8GBQzTovkpHYM2c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/625ed5-7e74-4427-9bdf-dd1d249017aa/1/Way0AidliYvk8GBQzTovkpHYM2c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:d6:0e:96:a6:22:9d:55:14:d2:d0:4f:6b:92:37:bd:65:5a:
e1:50:e0:27:51:2f:d0:43:76:0f:7c:72:3e:f8:86:4e:28:6b:
93:3c:1a:c7:ad:bd:39:d3:51:5d:5e:e2:07:ae:49:a7:da:4b:
bb:2f:61:fb:3b:6c:c2:e8:b0:ab:2e:b7:73:10:e3:5d:92:0e:
21:e6:e7:96:b2:e3:28:d3:47:3b:d0:5d:1e:a1:6a:f7:15:0c:
91:0e:b1:03:81:63:58:e0:21:22:43:c6:e9:20:81:70:20:20:
8f:2f:56:c2:b9:54:ed:fc:21:2a:67:e1:21:50:8f:03:a7:38:
0f:f3:38:b6:52:ad:01:20:2c:6d:73:44:2e:5f:ad:4c:01:34:
29:34:38:3e:d6:94:b1:79:52:2d:bf:23:ae:ef:e7:55:fd:9b:
c5:bb:1f:27:0f:56:56:da:49:10:30:f0:72:1d:6b:e0:58:10:
83:2f:fa:03:d1:48:31:5f:81:71:3e:58:0d:53:35:11:ff:19:
6a:60:1e:97:b8:c7:8c:10:cb:e9:53:5a:14:12:2a:72:2e:96:
0e:18:fd:87:92:88:cb:fe:96:a2:4a:85:5a:1f:80:c4:80:8c:
01:7c:9e:80:99:d5:fd:15:63:ca:7e:8c:9e:32:fa:23:e8:9d:
d2:21:1c:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:34:56 2025 by rpki-client