
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/792372-3d2a-44fd-91a0-f4272eec280d/1/WzNYEQ2t8iTnGZFBYXMd9eVsQYg.mft
File: WzNYEQ2t8iTnGZFBYXMd9eVsQYg.mft (raw, json)
Hash identifier: SOSvdxIoPMqTcbXmhesY6jSnmQco7oRSB00etQh09w8=
Subject key identifier: 03:DF:F5:CB:2A:08:7B:E2:7F:63:1F:27:97:F5:6F:4A:29:9D:41:7E
Authority key identifier: 5B:33:58:11:0D:AD:F2:24:E7:19:91:41:61:73:1D:F5:E5:6C:41:88
Certificate issuer: /CN=5b3358110dadf224e719914161731df5e56c4188
Certificate serial: 0194BD4E820D2EF5C4E13237FB8A9C5FAFE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WzNYEQ2t8iTnGZFBYXMd9eVsQYg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/792372-3d2a-44fd-91a0-f4272eec280d/1/WzNYEQ2t8iTnGZFBYXMd9eVsQYg.mft
Manifest number: 1394
Signing time: Fri 31 Jan 2025 17:00:26 +0000
Manifest this update: Fri 31 Jan 2025 17:00:26 +0000
Manifest next update: Sat 01 Feb 2025 17:00:26 +0000
Files and hashes: 1: WzNYEQ2t8iTnGZFBYXMd9eVsQYg.crl (hash: VO14+p2guj5xmIZL4mKDil91n1ogznGxEReRJRkpTjA=)
2: ad0B85jvjdQ5awOY3wMvIUJWKS0.roa (hash: TTcNh3M53FShxBm0xKV5WZZn8GR6GuYGWd3G/MpA0dY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:82:0d:2e:f5:c4:e1:32:37:fb:8a:9c:5f:af:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b3358110dadf224e719914161731df5e56c4188
Validity
Not Before: Jan 31 17:00:26 2025 GMT
Not After : Feb 1 17:00:26 2025 GMT
Subject: CN=03dff5cb2a087be27f631f2797f56f4a299d417e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:db:d1:87:f3:e6:49:ea:d1:67:ec:65:8f:d8:
de:dd:56:34:39:c4:e0:44:24:59:36:d9:a9:07:fe:
c2:f5:5d:5d:e5:c3:5b:c9:2a:3d:74:37:d8:75:91:
34:6b:71:ca:08:fd:45:ba:08:11:27:ae:85:59:97:
b4:71:31:81:36:c3:46:de:26:4e:e0:3c:0e:26:6f:
f1:99:70:96:43:4f:19:c6:61:15:e3:cc:66:db:c7:
ad:b5:84:5c:be:c7:73:c3:01:7b:2e:4d:c3:6a:af:
a8:87:56:39:5e:19:0d:8a:35:6c:b9:17:83:ac:97:
e4:5a:81:03:3e:6f:75:b1:12:28:93:b3:91:2c:0f:
72:21:1e:0c:45:87:9d:ee:7f:37:5a:e3:7e:16:b6:
01:c7:20:0d:07:01:89:72:5c:f3:e1:b2:d6:ab:44:
c6:ac:27:b5:36:61:61:ed:8e:52:36:80:c2:92:dc:
24:93:e9:98:59:48:65:de:48:f9:53:b7:f1:eb:a2:
dd:4d:c1:30:35:57:50:e6:43:6d:18:4c:7b:e4:b4:
34:ed:5c:90:90:fc:f8:67:3c:e3:4b:13:8d:83:26:
ca:a1:24:44:55:80:e6:e2:70:aa:01:b5:cc:eb:76:
db:a9:bc:f4:02:89:fe:00:04:62:f1:2b:04:eb:0d:
92:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:DF:F5:CB:2A:08:7B:E2:7F:63:1F:27:97:F5:6F:4A:29:9D:41:7E
X509v3 Authority Key Identifier:
keyid:5B:33:58:11:0D:AD:F2:24:E7:19:91:41:61:73:1D:F5:E5:6C:41:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WzNYEQ2t8iTnGZFBYXMd9eVsQYg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/792372-3d2a-44fd-91a0-f4272eec280d/1/WzNYEQ2t8iTnGZFBYXMd9eVsQYg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/792372-3d2a-44fd-91a0-f4272eec280d/1/WzNYEQ2t8iTnGZFBYXMd9eVsQYg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:13:7c:77:9f:5e:30:b7:be:22:34:ab:e8:05:b2:ea:c4:ef:
f0:0a:95:2c:08:65:72:e7:6d:71:c4:a5:4a:1c:9c:4e:c9:ac:
19:4b:3b:79:e1:25:d0:2e:c5:c3:32:db:e3:42:26:11:80:7a:
5e:dd:4a:0b:35:50:f0:f5:65:11:b5:6c:7c:d2:b9:05:f6:93:
b0:8c:c8:b3:2d:28:02:64:97:b5:b2:df:bf:7b:42:c5:28:2a:
d4:70:1c:5b:91:49:d5:f1:17:70:9d:8c:70:4e:0d:d3:81:37:
d9:79:77:d6:c4:49:e5:88:14:74:50:77:6d:31:ba:b2:f8:a3:
5e:57:ca:03:76:1a:a2:fe:62:dd:34:c4:7d:c6:eb:1e:e9:d2:
14:96:65:c2:e7:ab:02:e0:23:26:d4:cd:87:3d:3c:98:1e:fc:
d9:0e:1b:cd:4e:49:5f:8d:a8:aa:bd:9e:a9:e7:1a:96:f3:07:
52:2f:d2:28:14:ab:5b:12:6b:e1:8c:0f:a6:12:f9:0c:c9:be:
e3:18:6c:46:f7:df:f1:87:59:a6:67:ae:86:03:28:95:36:dc:
11:a3:65:65:36:9a:8a:04:70:50:83:62:98:bf:94:a8:0b:5a:
0c:a4:ca:87:2c:26:1e:fa:79:f9:e1:5c:42:49:42:71:5b:66:
92:de:6b:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:14:07 2025 by rpki-client