Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/9da366-fb0a-43a7-83ba-c983b1fed79e/1/WOQIyFfH-CX_d7yR7Kf_ySGtTf8.mft
File: WOQIyFfH-CX_d7yR7Kf_ySGtTf8.mft (raw, json)
Hash identifier: fwM+jyjw6c1Hm2VKmE1SlQ1BjTVLsrQl9Qtks9gNXM4=
Subject key identifier: FB:01:1B:63:F0:BC:38:B2:C4:16:AD:EB:C3:28:FD:76:9A:EF:56:D1
Authority key identifier: 58:E4:08:C8:57:C7:F8:25:FF:77:BC:91:EC:A7:FF:C9:21:AD:4D:FF
Certificate issuer: /CN=58e408c857c7f825ff77bc91eca7ffc921ad4dff
Certificate serial: 0194BCA9914FC147FA2DE3079B96724F42E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WOQIyFfH-CX_d7yR7Kf_ySGtTf8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/9da366-fb0a-43a7-83ba-c983b1fed79e/1/WOQIyFfH-CX_d7yR7Kf_ySGtTf8.mft
Manifest number: 0840
Signing time: Fri 31 Jan 2025 14:00:16 +0000
Manifest this update: Fri 31 Jan 2025 14:00:16 +0000
Manifest next update: Sat 01 Feb 2025 14:00:16 +0000
Files and hashes: 1: WOQIyFfH-CX_d7yR7Kf_ySGtTf8.crl (hash: a9LMngNNNIy3CchJDWA3tj7k/SrZIkX+Hko27xsOExo=)
2: eAhR6KTFJDA3HMwbGsQPK0o1VK8.roa (hash: WcYp6g2h67uQd+b5ZXbElPdlPfBrcS5ukz/v0+o3wuI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:91:4f:c1:47:fa:2d:e3:07:9b:96:72:4f:42:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58e408c857c7f825ff77bc91eca7ffc921ad4dff
Validity
Not Before: Jan 31 14:00:16 2025 GMT
Not After : Feb 1 14:00:16 2025 GMT
Subject: CN=fb011b63f0bc38b2c416adebc328fd769aef56d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:86:bb:fa:37:6e:c9:cd:dd:10:ef:64:e2:bb:
f8:f2:57:33:98:af:ef:65:44:bb:04:c5:ee:8f:fe:
e1:ef:ff:f9:67:d2:dd:db:97:c9:42:5a:b8:20:b4:
bc:27:26:63:ee:0c:eb:fd:39:dd:7c:da:25:69:56:
d1:4e:56:1f:59:8a:11:9c:61:d3:a0:e6:ef:66:8c:
83:ac:3a:6c:29:70:ce:50:ab:78:80:8b:57:ba:62:
45:1a:99:94:99:19:7f:2b:37:8d:46:97:95:ff:d6:
38:86:a9:b3:72:e9:45:93:a8:7f:96:ac:7c:61:9a:
38:57:b8:66:3d:9c:fe:cd:39:09:7f:f0:41:93:72:
a4:d8:5f:1e:2b:ca:d2:ab:46:61:df:91:d4:a1:64:
ef:c0:7f:fb:05:33:7f:ac:e4:00:fd:25:0a:6a:9c:
20:15:b9:23:4d:d8:f1:46:2f:b9:67:06:72:31:c3:
f7:a2:80:07:15:49:44:da:f7:d0:e1:3e:4b:6c:4d:
95:f0:66:b7:c0:ae:0d:15:06:92:45:ca:52:c4:68:
90:c8:0e:89:6c:9e:08:54:5b:35:3a:e4:99:a0:17:
55:4f:87:47:f9:07:e4:f4:de:a8:eb:62:68:43:7d:
06:0c:68:ae:72:d8:b7:d7:12:fc:9c:c3:b0:21:7c:
54:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:01:1B:63:F0:BC:38:B2:C4:16:AD:EB:C3:28:FD:76:9A:EF:56:D1
X509v3 Authority Key Identifier:
keyid:58:E4:08:C8:57:C7:F8:25:FF:77:BC:91:EC:A7:FF:C9:21:AD:4D:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WOQIyFfH-CX_d7yR7Kf_ySGtTf8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/9da366-fb0a-43a7-83ba-c983b1fed79e/1/WOQIyFfH-CX_d7yR7Kf_ySGtTf8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/9da366-fb0a-43a7-83ba-c983b1fed79e/1/WOQIyFfH-CX_d7yR7Kf_ySGtTf8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:0d:d8:47:d7:18:53:08:d9:f6:d8:fc:ec:97:8f:7d:0b:eb:
f1:03:a1:15:cd:67:f0:47:7e:1b:33:c1:e5:f8:1b:d9:f8:10:
fc:9f:04:d2:4a:e6:36:e4:15:1d:1c:79:77:50:b9:c6:ca:15:
e8:5b:3c:17:e0:8e:41:fc:01:34:d7:99:83:6b:98:1d:f4:65:
2e:70:1d:5b:13:8a:89:98:c1:46:4e:bf:90:c8:c3:73:d4:6b:
66:bd:ef:09:99:37:c9:2b:6c:43:8a:f6:19:c7:c4:23:c7:6e:
87:35:38:83:49:48:1d:ee:3b:ac:3b:57:ce:d6:2d:53:ce:b2:
47:3b:12:f7:12:de:a4:49:a7:65:d2:55:bf:99:7e:63:19:01:
c4:bb:ac:94:e2:cc:39:b8:61:9b:4e:3c:d0:bc:6c:98:e1:2d:
5f:36:9e:14:a9:d1:5a:e6:b3:f8:a5:20:df:f5:ab:96:af:b5:
92:dc:fd:75:bd:b1:6d:5d:15:56:9e:c2:71:52:0a:86:65:07:
7f:50:be:0d:44:67:9f:b6:39:86:81:a5:6e:9b:d2:06:4e:df:
ff:43:be:1f:eb:48:4f:86:fd:6a:28:f7:ce:3c:5c:ca:21:dd:
b2:f0:47:98:ad:5b:70:06:a9:f2:b3:15:23:cf:54:be:a0:4d:
1e:2c:14:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:57:55 2025 by rpki-client