
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/0b45e9-3f4a-4bd8-bab9-fb9081a16139/1/85-Wwg4Q928D7UeBW3pqXv2-A9U.mft
File: 85-Wwg4Q928D7UeBW3pqXv2-A9U.mft (raw, json)
Hash identifier: 3AVD0+K6eCnMHJgvLpoU5nyt3bMaZt+bjzFU65YIZ+E=
Subject key identifier: 45:CF:21:77:8B:63:8F:B6:9C:21:D9:97:3E:B1:C8:57:04:BD:71:9F
Authority key identifier: F3:9F:96:C2:0E:10:F7:6F:03:ED:47:81:5B:7A:6A:5E:FD:BE:03:D5
Certificate issuer: /CN=f39f96c20e10f76f03ed47815b7a6a5efdbe03d5
Certificate serial: 0194BC3C7EBC0874A7E0D13236AF8F72839D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/85-Wwg4Q928D7UeBW3pqXv2-A9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/0b45e9-3f4a-4bd8-bab9-fb9081a16139/1/85-Wwg4Q928D7UeBW3pqXv2-A9U.mft
Manifest number: 0F54
Signing time: Fri 31 Jan 2025 12:01:08 +0000
Manifest this update: Fri 31 Jan 2025 12:01:08 +0000
Manifest next update: Sat 01 Feb 2025 12:01:08 +0000
Files and hashes: 1: 85-Wwg4Q928D7UeBW3pqXv2-A9U.crl (hash: YFOypxyQMEfVj1kRQPAFcHITZ9oIxXvy7DTbWA5MQ/s=)
2: mG96Y715wDIwvEKSq5Z-71rWs6M.roa (hash: Y3E3/3Utv7uEbR1MqLWFqsWoMU44kmtfUjplzEpgK2w=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:7e:bc:08:74:a7:e0:d1:32:36:af:8f:72:83:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f39f96c20e10f76f03ed47815b7a6a5efdbe03d5
Validity
Not Before: Jan 31 12:01:08 2025 GMT
Not After : Feb 1 12:01:08 2025 GMT
Subject: CN=45cf21778b638fb69c21d9973eb1c85704bd719f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:47:64:c6:49:1d:0f:12:b8:8b:76:18:a1:72:
db:cf:93:36:01:60:71:46:61:fd:6d:97:77:24:e0:
37:2a:18:5c:e0:b1:22:7e:27:eb:b5:4d:11:e5:11:
58:c7:67:86:a8:54:a1:01:fc:71:59:d7:48:c1:ca:
10:a4:c0:8c:72:4f:0e:8d:41:56:42:c6:ac:5b:5f:
62:4d:04:fc:94:b8:fd:c0:5f:73:7e:b0:ec:57:ab:
46:fb:12:b1:40:1e:63:9d:ff:4c:ef:0e:d2:df:57:
ea:f5:12:13:e8:66:c7:33:6b:56:18:e9:94:9c:83:
58:f2:ac:fc:fb:3d:b4:5c:f9:2e:3e:24:c1:c1:57:
a0:1a:40:9f:bd:25:05:3d:3a:a5:51:df:96:a6:63:
b6:6e:a8:f0:b4:fd:f0:5a:94:bf:40:65:ee:eb:b2:
73:fd:df:77:b5:1a:9b:ba:4e:ce:f9:be:6f:3a:67:
b8:dd:ba:e0:37:b6:b3:e6:42:bf:84:67:f0:70:f7:
60:6d:db:a6:7a:b6:31:96:d9:f3:e8:c4:9b:83:2b:
b6:82:8d:7b:62:4b:cc:33:90:cf:97:20:bf:fd:98:
bf:e9:27:fc:4d:1c:45:50:b3:16:15:88:30:f0:b6:
4c:0a:ce:f5:7d:04:d4:2b:69:14:72:0b:03:30:c0:
14:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:CF:21:77:8B:63:8F:B6:9C:21:D9:97:3E:B1:C8:57:04:BD:71:9F
X509v3 Authority Key Identifier:
keyid:F3:9F:96:C2:0E:10:F7:6F:03:ED:47:81:5B:7A:6A:5E:FD:BE:03:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/85-Wwg4Q928D7UeBW3pqXv2-A9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/0b45e9-3f4a-4bd8-bab9-fb9081a16139/1/85-Wwg4Q928D7UeBW3pqXv2-A9U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/0b45e9-3f4a-4bd8-bab9-fb9081a16139/1/85-Wwg4Q928D7UeBW3pqXv2-A9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:c2:6c:d5:e4:e2:ba:42:bc:8c:23:b7:59:ab:28:98:89:f2:
6a:92:14:67:b4:5d:04:67:bd:99:21:c4:87:89:db:26:57:c5:
56:ea:0b:e5:8b:c5:c0:d3:fc:15:31:fd:40:ef:38:0d:4e:96:
bd:89:7f:dc:9a:ab:b1:75:d1:df:45:6b:0d:fe:81:64:dc:f0:
6d:84:e6:db:68:f5:69:c8:c4:e0:1f:0e:29:98:f7:3e:a1:69:
5d:56:32:76:7e:8e:a0:e9:e4:e6:5e:bd:64:d2:e6:09:d8:3e:
d8:04:b4:0c:ea:6d:30:6f:19:f5:57:fd:19:00:7b:7b:5a:31:
40:4a:1e:05:35:f1:5b:3d:8e:d8:33:5d:6f:cb:86:17:62:28:
1c:c3:6c:12:87:f2:d2:0c:6f:b2:d7:00:99:db:16:ba:02:94:
35:5d:db:8e:43:09:fc:e0:95:01:dd:0e:79:1a:f3:98:1c:01:
c7:92:6d:f7:05:c3:ef:03:7c:29:e7:df:7d:c7:03:ae:72:c0:
47:a5:00:31:28:32:7c:28:8f:ce:56:b0:f1:12:3a:d5:30:c6:
ba:de:ce:01:80:47:2f:a2:0d:17:7b:83:30:14:f7:7c:ca:9f:
fe:0f:e2:ed:c7:4c:6a:8b:4a:78:9a:b2:68:ee:50:48:16:f7:
c4:21:af:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:05:33 2025 by rpki-client