Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/9d16a9-2757-42b1-8654-aa958788eebf/1/WN5QRO2Dh1x-nujsuH3W0x3VxK4.mft
File: WN5QRO2Dh1x-nujsuH3W0x3VxK4.mft (raw, json)
Hash identifier: x05iwGh+aI/+oiIVm9ZwvRdrO17GXW4KiImYKaK9s80=
Subject key identifier: 45:A3:AD:16:CB:32:D0:59:E7:B2:1A:EB:6E:D1:07:1A:7A:C4:59:05
Authority key identifier: 58:DE:50:44:ED:83:87:5C:7E:9E:E8:EC:B8:7D:D6:D3:1D:D5:C4:AE
Certificate issuer: /CN=58de5044ed83875c7e9ee8ecb87dd6d31dd5c4ae
Certificate serial: 0194BCA993B628D07C1A29561738A7E6C1DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WN5QRO2Dh1x-nujsuH3W0x3VxK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/9d16a9-2757-42b1-8654-aa958788eebf/1/WN5QRO2Dh1x-nujsuH3W0x3VxK4.mft
Manifest number: 0364
Signing time: Fri 31 Jan 2025 14:00:17 +0000
Manifest this update: Fri 31 Jan 2025 14:00:17 +0000
Manifest next update: Sat 01 Feb 2025 14:00:17 +0000
Files and hashes: 1: PIXJy1lwlibwbVRJMDgxK7qX3n8.roa (hash: G+nFG8M3t0bz2vOGqdbaOSNmLf0qzMF1t7uKbdGXy6c=)
2: WN5QRO2Dh1x-nujsuH3W0x3VxK4.crl (hash: C5y9kISUl0mxVMzV9mfnLKFE9EeyQaQ48ZB2PpDJUmo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:93:b6:28:d0:7c:1a:29:56:17:38:a7:e6:c1:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58de5044ed83875c7e9ee8ecb87dd6d31dd5c4ae
Validity
Not Before: Jan 31 14:00:17 2025 GMT
Not After : Feb 1 14:00:17 2025 GMT
Subject: CN=45a3ad16cb32d059e7b21aeb6ed1071a7ac45905
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:2c:a2:75:75:9f:d0:65:c4:4e:e5:98:9f:80:
db:6b:a0:d3:c2:4d:c7:a4:24:9c:cc:6b:8d:2f:37:
e3:3c:2f:1a:9c:d1:d3:c1:d7:3c:b3:4c:f2:d6:c0:
b5:5a:2a:b3:a5:9c:42:0e:30:b5:dc:a1:28:37:44:
7c:d5:a1:56:93:dd:ec:27:2d:fe:71:e7:41:32:ea:
ac:ea:6e:f2:d3:23:28:1e:45:d7:21:ce:bf:eb:cd:
b9:dd:69:8c:44:22:23:de:5d:42:b4:a5:10:dd:e1:
48:06:c7:1c:53:20:b8:b0:9a:5b:8b:fe:e6:0c:b1:
1c:8f:ea:73:41:59:c4:9b:23:94:f6:85:ab:a7:4c:
68:ba:b1:9f:d3:4b:a3:4e:a6:24:bd:01:a3:70:ee:
49:ba:89:5b:c9:f4:d8:50:89:7b:5d:2a:4a:d7:95:
91:33:2f:24:25:68:44:07:a6:fe:9f:b1:f9:9a:0f:
f7:7e:34:73:6e:94:38:ca:ac:59:f2:ca:2e:ad:25:
d5:be:72:ba:00:d7:fb:d7:db:a9:5e:1a:ae:50:6a:
30:ad:f8:90:f3:94:d6:19:84:d4:36:db:c2:82:a9:
3d:74:3d:42:83:8f:61:15:fc:90:f3:ab:a9:d0:5f:
76:e1:43:90:8f:f3:d5:45:0c:0c:96:58:db:ea:dd:
72:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:A3:AD:16:CB:32:D0:59:E7:B2:1A:EB:6E:D1:07:1A:7A:C4:59:05
X509v3 Authority Key Identifier:
keyid:58:DE:50:44:ED:83:87:5C:7E:9E:E8:EC:B8:7D:D6:D3:1D:D5:C4:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WN5QRO2Dh1x-nujsuH3W0x3VxK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/9d16a9-2757-42b1-8654-aa958788eebf/1/WN5QRO2Dh1x-nujsuH3W0x3VxK4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/9d16a9-2757-42b1-8654-aa958788eebf/1/WN5QRO2Dh1x-nujsuH3W0x3VxK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:b0:cb:af:c7:11:f8:f9:0a:35:1e:9c:45:64:c7:bd:d9:38:
28:64:37:66:c6:6f:d9:4f:29:c7:06:ac:30:06:8c:e1:5a:77:
aa:dc:5d:2f:60:0a:7e:d5:c2:08:43:fa:56:8e:9c:34:f2:bd:
22:6b:20:16:7c:37:94:ba:a9:cc:52:b4:8f:9a:bf:2c:2f:a0:
16:97:a1:8b:ca:d5:00:dc:6c:67:6b:cb:3f:ff:55:41:bd:0a:
5e:39:d2:de:89:ea:fa:ba:c4:21:26:42:61:5b:2f:22:eb:3f:
35:79:cf:8c:f5:fb:f9:6b:ae:05:45:98:e6:70:31:0d:f0:9e:
9e:b2:08:bd:53:b0:9f:6f:1a:38:7e:40:75:28:c6:6a:f2:5b:
52:80:8b:28:22:10:d8:c5:91:bb:38:3f:1c:05:c3:2a:02:6a:
a3:90:1c:34:76:fb:6d:91:d0:d4:0d:41:4e:63:65:6d:e2:a3:
fb:6c:c1:b9:23:77:c8:a4:9c:c2:f6:80:8f:fb:93:7f:e3:03:
2f:db:ac:59:c6:39:0b:24:c3:23:05:b8:9b:81:d1:a2:43:f8:
a6:56:82:9a:f4:4f:02:20:bc:a0:c3:fa:1c:f6:a2:17:16:78:
10:2e:a6:23:44:a5:0a:e0:27:a0:28:a3:72:67:b3:6a:f9:95:
59:5b:25:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:25:23 2025 by rpki-client