Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/3c2676-9245-4b3c-bb7f-8a29120750bf/1/WueVPpRZ3AlIbw3cWfKkBbVmklA.mft
File: WueVPpRZ3AlIbw3cWfKkBbVmklA.mft (raw, json)
Hash identifier: dkB17yzCvFlX7pUn6jzN3mdU0lf9sOaZncFqee/llLQ=
Subject key identifier: 9A:35:28:69:63:F2:61:BC:A0:49:C0:34:CF:A8:2B:92:3E:D9:8C:0A
Authority key identifier: 5A:E7:95:3E:94:59:DC:09:48:6F:0D:DC:59:F2:A4:05:B5:66:92:50
Certificate issuer: /CN=5ae7953e9459dc09486f0ddc59f2a405b5669250
Certificate serial: 0194BC3C040ACE661E0912B22271F58386FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WueVPpRZ3AlIbw3cWfKkBbVmklA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/3c2676-9245-4b3c-bb7f-8a29120750bf/1/WueVPpRZ3AlIbw3cWfKkBbVmklA.mft
Manifest number: 1391
Signing time: Fri 31 Jan 2025 12:00:37 +0000
Manifest this update: Fri 31 Jan 2025 12:00:37 +0000
Manifest next update: Sat 01 Feb 2025 12:00:37 +0000
Files and hashes: 1: DBk26ni3rWAWrcHCnCAPZ2xkK4Q.roa (hash: Qk/2nxHHAgzzRwHK2tRfQQjLdz8MwTUa/j75IBrERBE=)
2: WueVPpRZ3AlIbw3cWfKkBbVmklA.crl (hash: DIpQrkekhOZnJU3/hMvMZ6kaZ6TNnUJpPsOa31hUN2E=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:04:0a:ce:66:1e:09:12:b2:22:71:f5:83:86:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ae7953e9459dc09486f0ddc59f2a405b5669250
Validity
Not Before: Jan 31 12:00:37 2025 GMT
Not After : Feb 1 12:00:37 2025 GMT
Subject: CN=9a35286963f261bca049c034cfa82b923ed98c0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:8e:13:f6:2f:fe:75:85:f9:68:93:b1:b6:f0:
32:33:12:7a:b1:69:3b:ef:af:f4:a1:c6:c7:cd:fb:
f5:2a:75:b0:bd:36:56:60:62:5d:1c:2e:25:9f:c1:
75:f9:62:ff:4f:b1:8e:4e:af:15:70:39:f3:33:73:
a8:ea:93:40:c0:88:b7:09:d7:fb:ed:8c:a5:6c:77:
f0:e1:fb:54:cc:37:b5:45:2e:09:94:1c:4f:12:f0:
ae:24:58:61:63:45:19:78:71:ea:55:33:f3:14:c4:
fc:7a:4d:50:1b:7d:1e:6f:5f:24:47:79:de:8b:1e:
56:1d:9c:6b:39:89:1c:57:ed:40:ce:40:32:bb:1b:
24:1d:a8:5f:b8:81:c7:cf:74:1d:15:d4:7a:f3:43:
ae:b9:6a:53:84:7d:8a:da:c5:32:d0:40:5c:7a:2a:
ee:09:50:bd:ad:b5:68:16:58:84:09:0a:87:1f:f2:
aa:59:7b:c1:58:3f:49:66:bf:3a:21:2f:ce:d4:1c:
db:c0:08:d4:b6:99:c0:2c:4b:e7:36:88:64:08:29:
7f:e9:31:7e:f1:3b:d4:df:8f:79:51:53:2b:c1:f4:
d8:a0:49:d8:dd:f8:65:8d:78:1b:8d:19:9a:53:b7:
75:7f:93:e5:34:6f:80:6f:19:df:77:2e:b3:e2:b5:
da:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:35:28:69:63:F2:61:BC:A0:49:C0:34:CF:A8:2B:92:3E:D9:8C:0A
X509v3 Authority Key Identifier:
keyid:5A:E7:95:3E:94:59:DC:09:48:6F:0D:DC:59:F2:A4:05:B5:66:92:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WueVPpRZ3AlIbw3cWfKkBbVmklA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/3c2676-9245-4b3c-bb7f-8a29120750bf/1/WueVPpRZ3AlIbw3cWfKkBbVmklA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/3c2676-9245-4b3c-bb7f-8a29120750bf/1/WueVPpRZ3AlIbw3cWfKkBbVmklA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:2a:f2:03:7c:68:35:f6:8d:ef:43:f6:0b:30:16:59:d0:da:
d2:e6:91:d4:ce:ec:d8:d0:ea:04:13:63:51:8b:38:1f:64:81:
3c:a0:b5:08:7a:1e:6a:c2:cd:10:9f:22:1c:f0:b2:34:31:2c:
0e:84:f8:54:c2:97:ef:ff:4f:63:e4:b9:c5:cc:c5:ae:57:76:
03:e7:7b:d0:15:09:11:fb:63:87:7c:2b:af:97:7c:40:ac:ca:
df:f0:41:b1:6e:0f:8e:ea:04:39:da:64:cc:0f:bf:b7:5e:cf:
52:23:6d:5f:f8:e8:d0:d1:c1:19:7f:80:bc:bb:3a:2f:d1:1d:
97:ec:cd:03:70:76:ed:ec:dd:bd:4f:00:32:b9:5a:44:b8:bd:
9e:b5:51:9c:a0:67:82:bb:21:a0:ee:2b:9e:4f:04:8e:ea:88:
a7:2a:de:e9:a0:ea:b7:9f:2f:2c:5a:32:95:07:83:f4:57:53:
65:10:80:d9:13:67:3e:07:ae:8c:2d:6d:9c:f2:0d:12:cd:40:
0f:c4:01:d4:d9:12:5f:95:2d:9e:01:16:33:bd:f9:03:b0:41:
4b:80:74:1e:c2:1e:7a:37:f3:97:cb:5f:dc:3b:e7:97:de:79:
53:e7:b5:5e:95:61:e4:52:7c:79:ae:70:50:3a:3e:eb:91:0f:
f7:85:e6:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:37:36 2025 by rpki-client