Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/6f6b7c-c0a9-4953-9865-de4bdaa37203/1/WWpf7pNF_NSAEDSId7eFOvzMZHQ.mft
File: WWpf7pNF_NSAEDSId7eFOvzMZHQ.mft (raw, json)
Hash identifier: OBpme/mfDzqoS13IeaQBCoj+OvjzdLrlf94HMY76u5s=
Subject key identifier: 79:7C:05:5C:F0:BB:CF:F7:FF:C7:2A:D2:3B:32:37:C0:3C:6E:5A:7C
Authority key identifier: 59:6A:5F:EE:93:45:FC:D4:80:10:34:88:77:B7:85:3A:FC:CC:64:74
Certificate issuer: /CN=596a5fee9345fcd48010348877b7853afccc6474
Certificate serial: 0194BC04FE1FCBB9F0B029EFF781EE0A5E5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WWpf7pNF_NSAEDSId7eFOvzMZHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/6f6b7c-c0a9-4953-9865-de4bdaa37203/1/WWpf7pNF_NSAEDSId7eFOvzMZHQ.mft
Manifest number: 02D5
Signing time: Fri 31 Jan 2025 11:00:31 +0000
Manifest this update: Fri 31 Jan 2025 11:00:31 +0000
Manifest next update: Sat 01 Feb 2025 11:00:31 +0000
Files and hashes: 1: WWpf7pNF_NSAEDSId7eFOvzMZHQ.crl (hash: tIEQDZgJsc1mkbmXYwd5DCUzqIghxJPc1edA4Z5DvRo=)
2: _dX4f78r8ar055s65dZPENw-y4Y.roa (hash: YAHCWNUUSCjGUaMNs/qPZDcoPmc5Fkj8HR1jTR9dAy4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:fe:1f:cb:b9:f0:b0:29:ef:f7:81:ee:0a:5e:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=596a5fee9345fcd48010348877b7853afccc6474
Validity
Not Before: Jan 31 11:00:31 2025 GMT
Not After : Feb 1 11:00:31 2025 GMT
Subject: CN=797c055cf0bbcff7ffc72ad23b3237c03c6e5a7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:81:dc:02:b3:08:48:49:97:c9:3a:04:35:5b:
d9:b1:98:e6:65:30:fb:52:7d:8a:5a:06:be:98:cb:
77:6e:8d:59:66:87:37:d8:76:9b:60:e8:fc:5f:8e:
80:2b:7a:c2:f6:65:c5:8c:99:88:df:a3:aa:05:a7:
6d:94:cb:b2:d3:d0:7e:36:3c:2b:8e:5b:9c:48:00:
47:c8:3f:89:31:49:4b:63:3e:1d:f7:19:16:51:16:
bd:1e:04:91:e3:0c:44:ae:46:a6:a5:e2:a8:75:dc:
9e:1e:c8:07:7d:e6:c0:63:60:fb:0f:78:71:5b:fd:
a2:29:a4:12:de:49:dc:59:83:bf:6d:9b:ca:08:02:
52:d1:f0:bf:82:be:b6:d7:e6:2b:02:33:18:ef:32:
63:fd:72:a5:c9:60:a3:55:52:ab:be:c9:e8:bb:18:
b9:dd:64:41:9b:7c:1a:ad:ff:57:24:79:4a:ae:92:
1c:8e:37:c6:d2:32:9e:56:63:ac:e9:0b:13:43:61:
fe:92:ce:b7:9b:2b:86:b0:a7:8c:ba:c2:db:ed:a0:
6d:99:0b:79:5a:65:ec:bd:b3:3a:ce:3a:de:24:00:
7a:96:3e:b8:b3:2b:20:20:5d:6f:c7:06:34:5d:1a:
50:1b:3e:c6:d6:48:b6:a1:a7:51:25:ae:78:71:e7:
25:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:7C:05:5C:F0:BB:CF:F7:FF:C7:2A:D2:3B:32:37:C0:3C:6E:5A:7C
X509v3 Authority Key Identifier:
keyid:59:6A:5F:EE:93:45:FC:D4:80:10:34:88:77:B7:85:3A:FC:CC:64:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WWpf7pNF_NSAEDSId7eFOvzMZHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/6f6b7c-c0a9-4953-9865-de4bdaa37203/1/WWpf7pNF_NSAEDSId7eFOvzMZHQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/6f6b7c-c0a9-4953-9865-de4bdaa37203/1/WWpf7pNF_NSAEDSId7eFOvzMZHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
db:75:7a:5d:f0:19:76:dc:ee:8b:b7:20:7e:bf:21:d2:6c:f8:
b8:cf:c5:5e:2a:b5:52:bb:0f:da:24:27:87:b0:4f:e0:8b:aa:
e6:eb:d6:40:96:93:a1:c9:d5:98:01:be:9b:67:d8:f3:71:18:
7a:be:d6:00:a7:0c:fb:6d:ca:1a:1e:bd:fd:fb:d8:47:9f:06:
9e:89:e2:8b:66:01:fe:e6:31:2c:68:cb:ef:b9:e3:c2:76:a7:
bf:be:85:f1:a8:ee:6f:a4:66:33:5e:f5:d2:8a:f7:6d:b8:a5:
0e:84:98:fb:11:d0:bb:aa:12:6f:b0:80:bc:e9:f0:bd:9f:09:
80:1f:de:de:fe:5d:b9:05:29:43:92:a9:f8:5d:50:3b:68:77:
f6:c8:90:6e:31:c5:20:b9:91:83:34:ea:5b:9d:45:8d:c2:d1:
9a:c7:94:22:b2:3a:c5:18:bc:eb:a0:ea:91:cb:e6:3a:9d:19:
6f:4c:16:f4:f8:58:56:01:05:81:9f:a5:28:2c:fa:8f:5c:5c:
25:79:0a:89:9c:31:db:74:77:22:8c:7f:46:ea:7f:4e:a2:03:
6f:8a:ad:0a:58:fa:6f:b9:9e:ff:c1:85:79:c4:0c:98:53:54:
7b:bd:eb:71:32:6f:2d:ce:63:1b:9e:73:77:06:36:4f:36:bd:
b5:5e:6c:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:37:48 2025 by rpki-client