Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/52b481-f303-4a96-97dd-7370fd80df6c/1/WGsBghBbsnsMi88oQr08GoUWS9E.mft
File: WGsBghBbsnsMi88oQr08GoUWS9E.mft (raw, json)
Hash identifier: W0x8d7eQvjXViYYC4Sfz1bhvO8P41fth008ld7pKO0E=
Subject key identifier: AD:70:2D:8E:D6:7F:0E:64:84:A4:EB:D6:02:40:79:CE:AB:AA:27:1D
Authority key identifier: 58:6B:01:82:10:5B:B2:7B:0C:8B:CF:28:42:BD:3C:1A:85:16:4B:D1
Certificate issuer: /CN=586b0182105bb27b0c8bcf2842bd3c1a85164bd1
Certificate serial: 0194BC04B221F121F2E19CC4FAEC91D35C50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WGsBghBbsnsMi88oQr08GoUWS9E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/52b481-f303-4a96-97dd-7370fd80df6c/1/WGsBghBbsnsMi88oQr08GoUWS9E.mft
Manifest number: 142F
Signing time: Fri 31 Jan 2025 11:00:11 +0000
Manifest this update: Fri 31 Jan 2025 11:00:11 +0000
Manifest next update: Sat 01 Feb 2025 11:00:11 +0000
Files and hashes: 1: WGsBghBbsnsMi88oQr08GoUWS9E.crl (hash: sIIHSmWgOJS4U1VGl6tx0ieSY3HT/emYBtHj8fZZpEM=)
2: a0heAr5Tdh28am-YWZ2LDUI1i-I.roa (hash: 4Riercylxh3jedSptQ6f+cc+w6P5hj4cNLgG2FwgmtI=)
3: gw7B96UShjsyHnq6pn1ZB8lO3nw.roa (hash: weKIf0S7rCXr80VHrw+niMSn5bWUOaoN4oVmKk0/npM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:b2:21:f1:21:f2:e1:9c:c4:fa:ec:91:d3:5c:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=586b0182105bb27b0c8bcf2842bd3c1a85164bd1
Validity
Not Before: Jan 31 11:00:11 2025 GMT
Not After : Feb 1 11:00:11 2025 GMT
Subject: CN=ad702d8ed67f0e6484a4ebd6024079ceabaa271d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:85:5d:2d:41:aa:19:1d:ba:ea:2b:0e:fb:93:
e8:fb:6c:c1:8a:4c:c2:f5:27:8a:fc:4d:e1:53:fb:
58:7b:61:05:37:63:b1:02:43:d2:36:68:66:b3:11:
3c:f1:a8:90:ce:b9:fa:eb:63:b8:f5:f9:b6:0e:bd:
3c:75:33:d1:19:e0:20:52:56:4f:30:cf:bd:66:8f:
93:9e:e7:5d:c9:be:fc:30:fc:37:b8:5c:2a:a4:ba:
6d:14:35:8f:49:c9:86:8e:69:f7:0f:b7:9a:48:2f:
83:b8:87:ba:e1:1d:e2:14:c4:49:7c:48:01:63:5d:
1b:77:6e:0b:30:f3:36:7e:a4:db:44:5e:0b:dd:7e:
90:1e:4f:86:07:7b:b7:b0:6c:c6:4d:38:7e:07:6c:
74:ba:06:ab:04:f4:b6:cf:11:68:40:a2:e9:8f:a9:
54:f0:46:84:14:08:71:5b:1d:fa:1b:33:13:c8:a6:
84:b0:46:06:fb:5d:47:84:79:8f:dc:f9:57:74:a4:
5e:d2:13:21:e3:af:ee:17:29:92:f6:34:ae:7d:91:
23:ae:aa:39:31:af:71:16:af:47:34:b3:a0:3b:01:
33:c5:d9:5d:c6:2c:d6:18:ec:f9:8b:dd:29:3b:7c:
50:fd:f0:26:1e:b2:71:e0:fc:68:f1:03:54:8b:e4:
e4:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:70:2D:8E:D6:7F:0E:64:84:A4:EB:D6:02:40:79:CE:AB:AA:27:1D
X509v3 Authority Key Identifier:
keyid:58:6B:01:82:10:5B:B2:7B:0C:8B:CF:28:42:BD:3C:1A:85:16:4B:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WGsBghBbsnsMi88oQr08GoUWS9E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/52b481-f303-4a96-97dd-7370fd80df6c/1/WGsBghBbsnsMi88oQr08GoUWS9E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/52b481-f303-4a96-97dd-7370fd80df6c/1/WGsBghBbsnsMi88oQr08GoUWS9E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:c7:c2:65:8d:c6:b0:99:a5:58:12:e5:3a:d8:d8:33:d8:8c:
18:63:e5:c0:2e:fe:2a:a6:80:46:22:bb:6b:88:9e:db:54:12:
f2:e9:47:7d:15:4d:46:61:98:55:58:5d:a0:12:73:11:87:65:
46:24:39:19:02:b2:a3:ba:38:d3:21:a9:d5:f5:72:b8:6d:f7:
de:8e:8f:29:61:ea:bf:7a:82:ef:fc:a1:77:7a:79:3b:0f:60:
19:d5:64:70:75:88:43:00:ac:ee:6b:32:47:fb:50:9b:a9:ab:
a9:8b:5c:5e:4f:3d:09:d6:bc:4c:48:98:78:47:ae:7a:f1:e1:
44:f6:db:23:9d:5f:df:7a:b1:f2:16:bd:e8:c5:23:ea:35:88:
02:d6:36:6a:4d:9c:30:98:5e:be:f0:9f:87:fa:3b:1e:f1:bf:
b6:ce:bb:64:87:c4:98:41:67:37:ce:69:f5:05:3f:6e:dc:83:
f1:21:5d:b2:5b:1e:48:ab:34:59:b3:1c:51:b4:22:ba:9e:65:
13:ed:f4:06:11:fd:7b:5f:98:8f:34:c8:99:85:ae:36:3e:c9:
e4:73:8e:71:9f:c3:39:60:76:3d:27:b0:b4:4f:eb:f6:01:84:
34:f1:79:e1:2f:ac:64:7e:26:07:9c:1e:1a:35:16:5d:96:40:
a8:92:9e:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:45 2025 by rpki-client